AES‑CCMP

E171100

AES‑CCMP is a Wi‑Fi security protocol based on the AES block cipher that provides strong encryption and data integrity for modern WPA2 wireless networks.

All labels observed (1)

Label Occurrences
AES‑CCMP canonical 3

How this entity was disambiguated

Statements (47)

Predicate Object
instanceOf Wi-Fi security protocol
link-layer security protocol
abbreviationFor AES-CCM
surface form: Advanced Encryption Standard - Counter Mode with Cipher Block Chaining Message Authentication Code Protocol
authenticationMode CBC-MAC
blockCipherBlockSize 128 bits
category authenticated encryption scheme
symmetric-key cryptography
definedInStandard IEEE 802.11i
designedFor Wi-Fi networks
designedTo prevent eavesdropping on Wi-Fi traffic
prevent packet forgery
encryptionAlgorithm AES in counter mode
encryptionMode counter mode
introducedToAddress weaknesses of TKIP
weaknesses of WEP
isMandatoryFor WPA2-certified devices (for robust security network association)
keySize 128 bits
MACAlgorithm CBC-MAC over AES
moreSecureThan TKIP
Wired Equivalent Privacy
surface form: WEP
notCompatibleWith legacy WEP-only hardware
operatesIn data link layer
protectsField 802.11 data payload
selected 802.11 header fields
providesProperty confidentiality
data integrity
origin authentication
replaces TKIP in WPA2
requires 802.1X or PSK key management in WPA2
requiresUnique packet number per key-stream
specifiedAs mandatory cipher suite in RSN (Robust Security Network) for WPA2
standardizedBy Institute of Electrical and Electronics Engineers
surface form: IEEE
usedIn Wi‑Fi CERTIFIED WPA2
surface form: WPA2

WPA3 (transition modes and compatibility contexts)
usedWith IEEE 802.11
surface form: 802.11a

802.11ac
802.11ax
802.11b
802.11g
IEEE 802.11
surface form: 802.11n
usesAlgorithm Advanced Encryption Standard
surface form: AES-128
usesCipher Advanced Encryption Standard
usesCounterLength 48-bit counter
usesHeaderField Additional Authenticated Data (AAD)
usesNonce 48-bit packet number (PN)
usesTagLength 128-bit authentication tag
vulnerableTo key reinstallation attacks when used with flawed WPA2 implementations (e.g., KRACK)

How these facts were elicited

Referenced by (3)

Full triples — surface form annotated when it differs from this entity's canonical label.