A municipal utilities yard is moving IoT gateways to WPA3-Personal. A technician claims SAE is “the encryption cipher that scrambles every data frame.” How should the security designer correct that statement?
Select an answer to reveal the explanation.
Short Explanation
SAE is the handshake that proves you know the yard’s Wi-Fi password without handing crackers an easy offline win—it is not the paint that covers every data frame. After authentication, CCMP or GCMP still do the confidentiality work. Mixing those layers up leads to bad design choices.
Full Explanation
Simultaneous Authentication of Equals (SAE) is WPA3-Personal’s authentication and key-management method for password-based networks. It establishes trust and contributes to keying material but is not itself the data-frame encryption protocol. Confidentiality of MSDUs continues to rely on ciphers such as CCMP or GCMP using AES. Treating SAE as a replacement for those encryption protocols misplaces AKM versus data protection responsibilities.