To: Elroy Jetson who wrote (18454 ) 3/11/2004 1:29:55 PM From: fatty Read Replies (3) | Respond to of 306849 Some say the 802.11 standard is not good enough and China simply wants a better one.eetimes.com Deconstructing China's WAPI By Loring Wirbel EE Times January 12, 2004 (11:25 a.m. ET) At least three interpretations exist for China's decision to implement a proprietary encryption scheme in its version of 802.11 Wi-Fi. The most paranoid assumes involvement by China's security ministries in the Chinese group that defined the Wired Authentication and Privacy Infrastructure (WAPI) standard last month. If the U.S. National Security Agency fiddled with the Data Encryption Standard to create encryption "backdoors," the argument goes, why expect Chinese intelligence agencies to be any different? The nationalist argument assumes that China defined WAPI for the sake of uniqueness, thereby implying that international standards bodies fall too much under the sway of U.S. companies and government agencies. The pragmatic argument is that China wanted to be different simply because too many existing encryption standards are seen as suboptimal (cryptography expert Bruce Schneier calls existing .11 standards downright crappy). There are elements of truth in all three explanations, and they all say something about China's emerging position on technology fronts. To bolster the paranoid mind-set, it's logical to assume that China's information security directorate had some say-so in encryption strategies. In fact, it would be foolish to assume that any nation's spooks wouldn't get involved in such activity. National pride probably plays a big role, too. If the World Trade Organization, which China joined last year, self-immolates in 2004, China will have to become its own center of gravity if it wants to be a driver of world trade. That means pumping up OEMs like Huawei Technologies and ZTE as global players, and it means being a technical standards setter when necessary. Pragmatism has the most to say about future relations between the United States and China. China threw down the gauntlet with WAPI encryption, implying that fixed-key WEP and the Advanced Encryption Standard were inadequate for good Wi-Fi security. By turning to elliptical crypto systems, China was hinting to organizations like the ISO and IEEE that adopting standards along the lines of what U.S. sources see as optimal is not good enough. It may be that China, India and other Asian nations will one day be the ones setting the rules for international manufacturers, with U.S. influence relegated to the sidelines. Loring Wirbel is Communications editorial director for EE Times and its network publications. eet.com