capwap-3----Page:16
1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17 

Certificate Based Security
Join request (WTP-Cert, SID)
Join Response (AC-Cert, SID, cipher-text)
AC Creates session keys (KeyMaterial)
Data = E-wtp{Kpub, PKCS1(KeyMaterial)}
Cipher-text = E-ac{Kpriv, SID|Data}
WTP
AC
Data = D-ac{Kpub, Cipher-text}
PKCS1(KeyMaterial) = D-ac{Kpriv , data}
AES-CCM Encrypted Control Channel
PPT Version