|
|
Cisco LEAP
Lightweight Extensible Authentication Protocol (easy to install, configure and support)
LEAP specification is only opened to business partners under NDA
Proprietary EAP method because of its requirement to use a Cisco AP
Provides an authentication (uses a modified MS-CHAPv2 challenge/response/in clear, mutual authentication to mitigate MITM attacks, short-lived WEP keys to encrypt data, prevents usage of weak IV's from the AP)
Still vulnerable to passive dictionary attacks (MS-CHAPv2 and LEAP client-AP Challenge/Response weaknesses)
|