Encrypted Key Data

The Key Data field is wrapped rather than plaintext.

Reading a capture

Set in message 3, where Key Data carries the group key. That key is the same for every station in the BSS, so it cannot be sent in the clear — and by message 3 there is finally a pairwise key to wrap it with.

Where it sits

EAPOL-Key > Key Information > Encrypted Key Data

• Open in the explorer — Four-way handshake message 1
• Open in the explorer — Four-way handshake message 2
• Open in the explorer — Four-way handshake message 3
• Open in the explorer — Four-way handshake message 4

Accuracy

Clause

802.11-2024 §12.7.2

Verified

Not verified against the standard. Treat this as a claim, not a fact.