Breaking Wi-Fi Easy Connect - A Security Analysis of DPP

Explore a comprehensive security analysis of Wi-Fi Easy Connect (DPP version 3.0) in this DEF CON 33 conference talk that examines the protocol designed to replace Wi-Fi Protected Setup (WPS). Discover how the Wi-Fi Alliance's attempt to simplify device provisioning through QR codes, NFC, and Bluetooth introduces unexpected security vulnerabilities that may actually expand the attack surface compared to its predecessor. Learn about the specific design flaws uncovered through rigorous testing, including how user-friendly features can inadvertently compromise network security. Understand the critical tension between usability and security in modern protocol design, and examine real-world implications of prioritizing convenience over robust security guarantees. Gain insights into the responsible disclosure process with the Wi-Fi Alliance and their responses to the identified vulnerabilities, while exploring broader lessons about the challenges of balancing accessibility with cybersecurity in wireless networking protocols.