What is WPA3-SAE and why is it significant?

• A. Simple Password Authentication Encryption; uses static keys.
• B. Simultaneous Authentication of Equals; password-based mutual authentication providing stronger protection against offline dictionary attacks.
• C. Secure Public Access Encryption; isolates guest networks.
• D. Standard Protocol for Access Encryption; replaces all prior security.

Answer: (B)

WPA3-SAE focuses on how a wireless device proves it knows a password without revealing that password, and how both ends establish a shared key securely. This method, called Simultaneous Authentication of Equals, is a password-authenticated key exchange. The crucial idea is mutual authentication with a password-based handshake, so both the client and the access point participate and agree on a fresh, shared session key for each connection.

Because the password is never transmitted and the handshake requires active participation from both sides, an attacker who captures the handshake cannot perform offline dictionary attacks in the same way as with a simple pre-shared key. Trying guesses would not easily yield the correct key without engaging with the network and would be computationally costly, making password guessing far less practical. This is a significant improvement over older WPA2-PSK security, where weak passwords could be tested offline against captured handshakes.

In addition, SAE derives a new session key for each connection, so the security of past connections isn’t jeopardized by a password guess on a future attempt. This combination of mutual authentication, password-based protection against offline guesses, and per-session keys is what makes WPA3-SAE notably stronger.

The other options describe concepts that don’t match this mechanism: it isn’t a simple static-key scheme, it isn’t primarily about isolating guest networks, and it doesn’t claim to replace all prior security in the broadest sense.