ComPass: Proximity Aware Common Passphrase Agreement Protocol for Wi-Fi devices Using Physical Layer SecurityApril 28th, 2021
FiledApril 28th, 2021Abstract Secure and scalable device provisioning is a notorious challenge in Wi-Fi. WPA2/WPA3 solutions take user interaction and a strong passphrase for granted. However, the often weak passphrases are subject to guessing attacks. Notably, there has been a significant rise of cyberattacks on Wi-Fi home or small office net- works during the COVID-19 pandemic. This paper addresses the device provision- ing problem in Wi-Fi (personal mode) and proposes ComPass protocol to supple- ment WPA2/WPA3. ComPass replaces the pre-installed or user-selected passphrases with automatically generated ones. For this, ComPass employs Physical Layer Se- curity and extracts credentials from common random physical layer parameters be- tween devices. Two major features make ComPass unique and superior compared to previous proposals: First, it employs phase information (rather than amplitude or signal strength) to generate the passphrase so that it is robust, scaleable, and im- possible to guess. Our analysi