
Roaming Securely in 802.11
the PMK is derivable from the static WPA-PSK passphrase at any time because both the STA
and the access point are statically configured with that passphrase.
One of the advantages of WPA-PSK mode is that after frame 64 is received, the process of
securing the wireless link for unicast traffic is complete. As one can see in Figure 7.4, all
data frames following frame 64 appear as “WEP data” in the sniffer traces because the sniffer
does not know how to decrypt them. Since our example is for WPA-PSK, the GTK two-
way exchange actually follows the four-way exchange and is thus part of the “WEP data.”
In WPA2, the GTK exchange