Stateless Re-Association in WPA3 Using Paired Token

Round 1

Reviewer 1 Report

Interesting subject, but in my opinion too succinctly treated in the article. Both the described methods and the final conclusions from the Analysis section (4) should be described in much more detail. It would be advisable to carry out simulation experiments that confirm the conclusions contained in the Security Analyzes section (4.1). The description of the research and analytical part should be significantly extended.

Author Response

We appreciate the helpful review comments by two reviewers. Considering the review comments we have updated the paper in many places. Original submission was 10 pages, but now it is 13 pages. Minor corrections and polishing were done throughout the whole paper. Sections with major change were denoted as a shade.

* Comments by reviewer 1

Interesting subject, but in my opinion too succinctly treated in the article. Both the described methods and the final conclusions from the Analysis section (4) should be described in much more detail. It would be advisable to carry out simulation experiments that confirm the conclusions contained in the Security Analyzes section (4.1). The description of the research and analytical part should be significantly extended.

*** Updates

We have updated the paper in many places to describe everything in more detail. Comparison of features is moved to section 4.1 with updated description. section 4.4 and 4.5 are newly added to provide more discussion on weakness and further research direction.

For the comment on simulation experiment we are sorry that currently we are not prepared for simulation experiment. This paper is our first proposal of idea. We will continue this work to make it better including simulation experiment with more collaborators.

 

Reviewer 2 Report

This is a very interesting and important research to today's wireless communication. The author has used a very clever stateless re-association concept to fill the gap of contemporary WPA3 method. However, this is assumed to be a scientific research and the author has mentioned that this is the first draft of the whole idea. The author should also mention the weaknesses of this new method. As far as I know, 'stateless' is not equal to panacea because stateless connection also has its weaknesses although using stateless concept is much better than current WPA3. I suggest the author creates a paragraph showing the weakness of the new method and also showing some future primitive ideas in improving this new method. It is sensible that new ideas may be stolen by other unethical researchers but it also depends on how well this researcher will have done compared with other researchers.

 

Author Response

We appreciate the helpful review comments by two reviewers. Considering the review comments we have updated the paper in many places. Original submission was 10 pages, but now it is 13 pages. Minor corrections and polishing were done throughout the whole paper. Sections with major change were denoted as a shade.

* Comments by reviewer 2

This is a very interesting and important research to today's wireless communication. The author has used a very clever stateless re-association concept to fill the gap of contemporary WPA3 method. However, this is assumed to be a scientific research and the author has mentioned that this is the first draft of the whole idea. The author should also mention the weaknesses of this new method. As far as I know, 'stateless' is not equal to panacea because stateless connection also has its weaknesses although using stateless concept is much better than current WPA3. I suggest the author creates a paragraph showing the weakness of the new method and also showing some future primitive ideas in improving this new method. It is sensible that new ideas may be stolen by other unethical researchers but it also depends on how well this researcher will have done compared with other researchers.

*** Updates

We appreciate your interest and good comments on the research idea. We have added new sections 4.4 and 4.5 to provide more discussion on weaknesses, implementation issues, and further research direction.

Since PT is intended to be used for longer period of time, we think the prime concern will be the system security of client. It was added in section 4.4. Stateless services is generally advantageous in performance and scalability, but we could not catch your worry about weakness of stateless service. If we can hear your comment on this, we would like to update it in the final version.

This paper is a first proposal of new idea to the Wi-Fi security community. We welcome more comments, improvement idea and collaboration with experts in the community.

Round 2

Reviewer 1 Report

I consider the changes introduced by the authors to be sufficient and propose to publish the article in its current form