Which personal authentication method was introduced with WPA3 to address vulnerabilities in WPA-PSK?

Which personal authentication method was introduced with WPA3 to address vulnerabilities in WPA-PSK?

• A. WPS
• B. Simultaneous Authentication of Equals (SAE)
• C. PSK
• D. EAP-TLS

Answer: (B)

SAE, or Simultaneous Authentication of Equals, is the password-based handshake used in WPA3 for personal networks. It replaces the static pre-shared key approach of WPA-PSK with a mutual authentication method that never exposes the password and derives a fresh session key for each connection. This design makes offline password guesses much harder: an attacker capturing handshakes cannot simply try guesses against a stored key, because the handshake involves ephemeral values and a Dragonfly-style exchange that requires interactive participation from both sides. The result is mutual authentication and forward secrecy, so even if a password is weak, past sessions aren’t compromised if the password or keys are later exposed. WPS is a setup convenience feature with known vulnerabilities, not the authentication method introduced with WPA3. PSK refers to the older static pre-shared key approach used in WPA/WPA2-PSK, which is precisely what SAE was designed to improve upon. EAP-TLS is an enterprise authentication method using certificates, not the WPA3 personal mechanism.

SAE, or Simultaneous Authentication of Equals, is the password-based handshake used in WPA3 for personal networks. It replaces the static pre-shared key approach of WPA-PSK with a mutual authentication method that never exposes the password and derives a fresh session key for each connection. This design makes offline password guesses much harder: an attacker capturing handshakes cannot simply try guesses against a stored key, because the handshake involves ephemeral values and a Dragonfly-style exchange that requires interactive participation from both sides. The result is mutual authentication and forward secrecy, so even if a password is weak, past sessions aren’t compromised if the password or keys are later exposed.

WPS is a setup convenience feature with known vulnerabilities, not the authentication method introduced with WPA3. PSK refers to the older static pre-shared key approach used in WPA/WPA2-PSK, which is precisely what SAE was designed to improve upon. EAP-TLS is an enterprise authentication method using certificates, not the WPA3 personal mechanism.