War Never Changes: Attacks Against WPA3’s “Enhanced Open” — Part 1: How We Got Here

This Part I blog post presents background and motivation for research into Opportunistic Wireless Encryption (OWE), concluding that OWE does not authenticate access point identity and is therefore susceptible to rogue access point (Evil Twin) attacks; the authors implemented multiple proof-of-concept attacks (Open Evil Twin, OWE Evil Twin, and OWE Transition mode) and discuss implications such as the role of Protected Management Frames (PMF) and changes to containment strategies.