SAE

SAE is the password-authenticated key exchange used by WPA3 to replace WPA2's four-way handshake, based on the Dragonfly protocol. Its key advantage is resistance to offline dictionary attacks: capturing the handshake no longer lets an attacker guess the Wi-Fi password at leisure, and it provides forward secrecy for past sessions. Early implementations had side-channel flaws known as Dragonblood, showing that even strong designs need careful implementation.