CCMP encryption is more secure than TKIP encryption because of which of the following?

Question

Options

• AA longer IV is used
• BAdded a key distribution mechanism and no longer use a single key
• CA more complex encryption algorithm is used
• DAdded message integrity check mechanism

• A
  6% (4)
• B
  16% (10)
• C
  74% (46)
• D
  3% (2)

Explanation

CCMP uses AES (Advanced Encryption Standard) as its underlying cipher, which is vastly more cryptographically robust than the RC4 cipher that TKIP relies on. AES operates on full 128-bit blocks with complex key schedules and multiple transformation rounds, making it resistant to the statistical attacks that can compromise RC4-based systems.

Option A is incorrect because both TKIP and CCMP use a 48-bit IV/packet number -- the longer IV was TKIP's improvement over WEP, not CCMP's improvement over TKIP. Option B is incorrect because dynamic key distribution was introduced with TKIP (via per-packet key mixing), not CCMP. Option D is incorrect because message integrity checking (the Michael MIC) was also a TKIP feature -- CCMP replaced it with a stronger CBC-MAC mechanism, but the concept of MIC itself did not originate with CCMP.

Memory tip: The "C" in CCMP stands for Counter Mode with CBC-MAC, built on AES -- remember that CCMP upgraded the core Cipher (the algorithm), while TKIP's improvements were largely procedural patches layered on top of the weaker RC4.

No community discussion yet for this question.