Countermeasures What would we need to do to change WEP to fix these problems? We need both: Long IV's which never repeat for the lifetime of the shared secret (and are never duplicated across machines sharing the same secret) A strong Message Authentication Code (instead of the CRC) which depends on the key and IV This will also fix the problem with the authentication protocol Just doing one of these doesn't fix the problems.