SAE handshake
E453436
Wi‑Fi security protocol component
authenticated key exchange protocol
cryptographic protocol
password-authenticated key exchange protocol
SAE handshake is a password-based authenticated key exchange protocol used in modern Wi‑Fi security (notably WPA3) to securely establish encryption keys while resisting offline dictionary attacks.
All labels observed (1)
| Label | Occurrences |
|---|---|
| SAE handshake canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T4567043 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: SAE handshake Context triple: [Simultaneous Authentication of Equals, alsoKnownAs, SAE handshake]
-
A.
Secure Authentication Version 5
Secure Authentication Version 5 is a security enhancement for the DNP3 protocol that provides robust authentication and protection against unauthorized control and cyber attacks in industrial control systems.
-
B.
SAE
SAE is the commonly used abbreviation for the Society for the Anthropology of Europe, a scholarly organization focused on the anthropological study of European societies and cultures.
-
C.
Diffie–Hellman key exchange
Diffie–Hellman key exchange is a foundational cryptographic protocol that enables two parties to securely establish a shared secret over an insecure communication channel.
-
D.
SASL
SASL (Simple Authentication and Security Layer) is a framework for adding modular authentication and optional data security services to connection-based network protocols.
-
E.
SecAg
SecAg is the commonly used abbreviation for the United States Secretary of Agriculture, the Cabinet official who oversees federal agricultural policy and the Department of Agriculture.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: SAE handshake Target entity description: SAE handshake is a password-based authenticated key exchange protocol used in modern Wi‑Fi security (notably WPA3) to securely establish encryption keys while resisting offline dictionary attacks.
-
A.
Secure Authentication Version 5
Secure Authentication Version 5 is a security enhancement for the DNP3 protocol that provides robust authentication and protection against unauthorized control and cyber attacks in industrial control systems.
-
B.
SAE
SAE is the commonly used abbreviation for the Society for the Anthropology of Europe, a scholarly organization focused on the anthropological study of European societies and cultures.
-
C.
Diffie–Hellman key exchange
Diffie–Hellman key exchange is a foundational cryptographic protocol that enables two parties to securely establish a shared secret over an insecure communication channel.
-
D.
SASL
SASL (Simple Authentication and Security Layer) is a framework for adding modular authentication and optional data security services to connection-based network protocols.
-
E.
SecAg
SecAg is the commonly used abbreviation for the United States Secretary of Agriculture, the Cabinet official who oversees federal agricultural policy and the Department of Agriculture.
- F. None of above. chosen
Statements (47)
| Predicate | Object |
|---|---|
| instanceOf |
Wi‑Fi security protocol component
ⓘ
authenticated key exchange protocol ⓘ cryptographic protocol ⓘ password-authenticated key exchange protocol ⓘ |
| alsoKnownAs |
SAE
ⓘ
Simultaneous Authentication of Equals ⓘ |
| basedOn | Dragonfly key exchange ⓘ |
| definedBy |
Wi‑Fi Alliance WPA3 specifications
ⓘ
linked to:
Wi‑Fi CERTIFIED WPA3
|
| designedToMitigate |
offline dictionary attacks on Wi‑Fi passwords
ⓘ
password guessing from captured handshakes ⓘ |
| hasProperty |
forward secrecy
ⓘ
mutual authentication ⓘ password-based ⓘ resistance to key compromise impersonation (KCI) ⓘ resistance to offline brute-force attacks ⓘ resistance to passive eavesdropping ⓘ |
| hasPurpose |
provide mutual authentication between Wi‑Fi stations
ⓘ
resist offline dictionary attacks ⓘ securely establish encryption keys between peers ⓘ |
| hasStep |
commit exchange
ⓘ
confirm exchange ⓘ |
| operatesBetween |
Wi‑Fi station and access point
ⓘ
two peers with a shared password ⓘ |
| precedes | 4-way handshake in WPA3 ⓘ |
| prevents | deriving password from a single captured handshake ⓘ |
| produces |
pairwise master key (PMK)
ⓘ
shared session key ⓘ |
| relatedTo |
4-way handshake
ⓘ
WPA2-Personal ⓘ Wi‑Fi Protected Access ⓘ |
| replaces | PSK-based 4-way handshake in WPA2-Personal ⓘ |
| requires | both parties to know the same password ⓘ |
| securityGoal |
confidentiality of session keys
ⓘ
integrity of authentication process ⓘ mutual entity authentication ⓘ |
| standardizedIn |
IEEE 802.11-2016 amendment
ⓘ
linked to:
IEEE 802.11
IEEE 802.11ax-related security specifications ⓘ
linked to:
IEEE 802.11
|
| supports |
protection against active man-in-the-middle attacks (under assumptions of PAKE security)
ⓘ
protection against passive attackers ⓘ |
| usedFor |
Wi‑Fi network access control
ⓘ
establishing secure data encryption keys on Wi‑Fi links ⓘ |
| usedIn |
WPA3-Personal
ⓘ
linked to:
Wi‑Fi CERTIFIED WPA3
Wi‑Fi Protected Access 3 ⓘ
linked to:
Wi‑Fi CERTIFIED WPA3
modern Wi‑Fi security ⓘ |
| usesInput |
finite cyclic group parameters
ⓘ
random nonces ⓘ shared password ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: SAE handshake Description of subject: SAE handshake is a password-based authenticated key exchange protocol used in modern Wi‑Fi security (notably WPA3) to securely establish encryption keys while resisting offline dictionary attacks.
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.