Does Open System Authentication uses random WEP keys?

Question

I couldn't find a source explaining detailed how open system authentication works.

Does open system authentication automatically generates random keys for each session?

Why it's safer than shared key?

Answer 1

The reason is that Open System does not have any authentication step, but setting up WEP with no authentication still leaves the client with a unuseable Connection unless the client knows the WEP key, since the WEP key is required to encrypt the packets.

The reason the Open System is safer, is that with the authentication step, any eavesdropper gets a good cipher/plain pair, that they can crack.

However, Open System would still allow a unauthorized client to associate (connect), but not Exchange any data, in some cases this might be undesired, if for example any authorative actions is performed by mere connecting to the network.

This is only valid for WEP. Also, since you use no authentication step, the client will Think the network is public, and try to associate to it without a password. You will have to set the network details manually (like you would do with a hidden network) to use a OA WEP network.

If you use WPA/WPA2, you should use a authentication step.

"Open System" is NOT to be confused with the setting "No encryption" or similiar, "Open System" is a setting that is part of wep. Sometimes, router manufacturers use "Open System" as "No encryption" setting, so only way is to test out if the network work for a unauthenticated client, eg connect and then try to surf the internet.

Answer 2

Open System Authentication does not provide Authentication it provides identification using the wireless Adapter's MAC address.

It provides identification using the wireless adapter's MAC address. Open system authentication is used when no authentication is required. It is the default authentication algorithm.

Source : https://msdn.microsoft.com/en-us/library/aa916736.aspx

Source : http://documentation.netgear.com/reference/nld/wireless/WirelessNetworkingBasics-3-08.html