The original WEP protocol design was published in 1997 even though weaknesses in the concept were discussed in 1995, and demonstrations of the seriousness of the problems occurred in 2001. Thus, there were hypothetical concerns about the protocol at the time it was published, and after protocol-conforming devices appeared, actual demonstrations confirmed those concerns. In 1997 there would have been several options: (a) withhold the security aspects of the protocol, permitting the design and sale of devices with no security, (b) establish the protocol as a standard and hope that nobody would discover the security weaknesses, (c) hold all wireless protocol suite work (not just the security aspects) until a stronger security component could be designed, (d) ignore various nations limits on export of products employing cryptography, and mandate encryption stronger than RC4 with a 40-bit key, even if that meant products manufactured in one country could not be exported to others (even though strong cryptography would reduce but not eliminate security weaknesses in the protocol), (e) give protocol developers a short amount of time, for example, three months, to redesign the security aspects of the protocol suite. This list is not intended to be exhaustive. Pick an option (from the suggestions or of your own thinking) and prepare an analysis of its effect, strengths, weaknesses, impact on manufacturers and users, and political ramifications.

(Computer Security II)