Acer Chromebook Spin 713 Convertible WiFi WPA2 Support?

gsw
gsw Member Posts: 4 New User
edited October 2023 in Chromebooks
Hi, a question I am hoping someone may know the answer?

I have just purchased a Acer Chromebook Spin 713 Convertible. My first Chromebook! 

Everything is working until I noticed some errors from my Router complaining about WiFi Tokens from my new Chromebook.  Specifically, the tokens and the issue I am experiencing is the Chromebook appears to only support WPA.  No WPA2 or WPA3??

I know WPA has been broken for years, and not really supported, and now WP3 is coming along, WiFI standards are gradually switching to the later. So why is a modern, brand new Chromebook, based on latest technology, including WiFi 6, still using WPA???

I am actually not even sure how the laptop is connecting as my WiFi is set as a minimum to support WP2.

If I try and change the encryption the option is greyed out and I am unable to change.

If I try to manually join a WiFi Network, under encryption I have no WPA2 or WPA3 option??

Anyone have any ideas?

Answers

  • Easwar
    Easwar Member Posts: 6,727 Guru
    Hi gsw,

    Is your Wi-Fi name listing on the screen when you try to connect network.
  • gsw
    gsw Member Posts: 4 New User
    I am connected to the WiFi :) 

    The Question is - If my WiFi is set to WPA2 Personal, how can the chromebook connect with only WPA-PSK?  Both standards have to match for WiFi to work, so both must be set to WPA2 Personal! The Chromebook will not let me change the encryption type. I am struggling to understand why a modern Chromebook does not support WPA2 or WPA3??
  • Leostat
    Leostat ACE Posts: 3,043 Pathfinder
    edited March 2021
    WPA-PSK isnt WPA1/2/3 :) its the auth method rather than the protocol. PSK = passkey (Aka Personal mode as its not an enterprise authenitcation method), then you also have others like EAP, EAPLEAP EAPTLS WPA-SIM  and so on. If iyt didnt support it it woudnt connect as you said!

    Gennerally TKIP can (wrongly) be considered WPA1 but its in WPA2 as well so you cant really use that to go off if its 1 or 2, in the router you may be able to enforce the WPA version and then the clients would just negotiate what they are able to support

    Whats the error in the router?
  • gsw
    gsw Member Posts: 4 New User
    Thanks very much for your reply.  I was aware that PSK can be used on WPA2, even though as a standard it was superseded WPA2-AES. The reason is PSK has been broken and hackable for over 10 years.

    My WiFi Mesh is set to WPA2/WPA3 - 'AES'. I do not even have WPA2-PSK Enabled. Whilst the Chromebook connects on my WiFi 6 SSID, when connected it generates a ton of errors in my Router log regarding wrong token and incorrect token exchange because the Chromebook is using the incorrect encryption method.

    I know this is not specifically ACER's problem. Chrome OS is Googles baby, but I cannot understand why a modern Operating system cannot support the current WiFi Encryption standard, WPA2 or preferably WPA3.  My Pixel 5 Supports WPA3, why doesn't this chromebook with chromeOS? If I am correct they both run Android 11 in the background!! 
  • Leostat
    Leostat ACE Posts: 3,043 Pathfinder
    edited March 2021
    Ehhhhh ish, So some OS's report WPA2-AES but thats wrong its WPA-PSK key exhange, protected by AES-CCMP with DH. But to make it more user freindly some vendors use the WPA2-PSK nomiker to make it so you can look at the options and go ok this one is WPA (Most likley using TKIP), and this one is WPA2 (using TKIP or AES). I mean who wants to configure around 10 options on every single device, if you can select one option and have it do everything? If you dont have PSK enabled how are you logging in, radius?

    When connecting to a wirless access point there is much more going on rather than just one protocol, first you have the overall wpa protocol,this is more what options / crypto is valid to support (1/2/3), next its key exchange, if you check out the documentation for Hostapd You can see that WPA-PSK is for both WPA1/2
    # WPA-PSK = WPA-Personal / WPA2-Personal
    
    Next is the style of crypto, each version of the spec supports differnt things, with 2.0 adding CCMP.  AKA AES where the IV is a counter with Block chaining and Message authentication (nothing to do with blockchain haha)

    # CCMP = AES in Counter mode with CBC-MAC (CCMP-128)
    # TKIP = Temporal Key Integrity Protocol
    # CCMP-256 = AES in Counter mode with CBC-MAC with 256-bit key
    # GCMP = Galois/counter mode protocol (GCMP-128)
    # GCMP-256 = Galois/counter mode protocol with 256-bit key

    Then key echange crypto primatives WPA and msot importantly RSN, if you have RSN then it *has* to be WPA2
    # Pairwise cipher for RSN/WPA2 (default: use wpa_pairwise value)
    https://w1.fi/cgit/hostap/plain/hostapd/hostapd.conf

    support for WPA1/2/3 is protocol support which came in android 10 for WPA 3 and WPA2 back in Android 2!

    if you wanted to "prove"that it didnt support WPA2 or above you could use Hostapd to set up a AP and force the Crypto settings. This can easily be done with a PI4 with the following mini config:

    wpa=2
    wpa_key_mgmt=WPA-PSK
    wpa_pairwise=CCMP
    rsn_pairwise=CCMP
    wpa_passphrase=WhateverYouwant
    interface=wlan0
    hw_mode=g
    ssid=SSIDGoezEre
    channel=6

    Annoyingly you cant get access to the specs as they are not open like RFC's :(

    The reason the two isnt in there is that WAP-1 was only TKIP and had no support for AES (many of the chips didnt have the bits needed to make the crypto quick enough), It 100% does support WPA2 even if it doesnt look like it

    Do you have the full log lines for what its complaining about? 

  • gsw
    gsw Member Posts: 4 New User
    To be honest your explanation is excellent, and explains why I am seeing WPA-ESN on the Chromebook when looking at the WiFi settings.

    I wish the WiFi Connectivity on the Chromebook, was correct and stated exactly how it was connected. My Pixel does, I don't see why Chrome OS shouldn't.

    It would have provided me with the correct information and would not have sent me to this forum thinking the device only supports WPA and not WPA2 :)

    I will look through the logs and post here, when I get a chance today, as working from home (Like most are) due to CoVID. 

    Thanks for your detailed reply, and taking the time to help and provide assistance!
This discussion has been closed.