Meraki Wireless AES-256 Key Encryption

[MattSec]

I'm trying to ascertain if it's possible to encrypt a wireless key with AES-256 using Meraki wireless.

This Meraki HIPPA document seems to indicate that is possible, but i can't find anything else which documents how to do this: https://meraki.cisco.com/product-collateral/hipaa-compliance-whitepaper/?file

I know that for the MR devices from version 27.X it should support WPA3, but as far as i understand this only mandates AES-192.

If anyone can help clarify this would be appreciated - thank you.

[KarstenI]

First, there are no keys that are encrypted with AES256. The material that is used for the cryptographic functions are negotiated.

For the difference 192 and 256: For WPA3 Enterprise there is a 192Bit-mode. I assume that it's what you are reffering to. This mode provides a 192Bit security-level, but uses AES-256 for the encryption. Encryption is not all that is done in a cryptographic system. There are other functions that are "only" on a 192 Bit level which is the reason it's named "192 Bit mode". The encryption is used with 256 Bit to make it resistant against coming (sooner or later) attacks with quantum computers.