thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Wireless & Mobility · Intermediate

Four-Way Handshake

The EAPOL-Key exchange that confirms the PMK and derives the PTK and delivers the GTK.

Definition

Message 1 carries the AP's ANonce; message 2 carries the client's SNonce and a MIC; message 3 delivers the encrypted GTK and MIC; message 4 confirms installation. Both sides derive the PTK from the PMK, both nonces, and both MAC addresses. It occurs after 802.1X/EAP, PSK, or SAE.

Exam tip

Messages 1 and 2 are enough for an offline dictionary attack on WPA2-PSK.

Related terms