Certain aspects of the present disclosure relate to wireless communications. According to certain aspects, a method that may be performed by an access point (AP) includes outputting, for transmission to an access point (AP), a request to associate with the AP, wherein the request is encrypted with a first set of one or more keys; obtaining, from the AP, a response to the request; decrypting the response, based on the first set of keys, to obtain a second set of one or more keys; and using the second set of keys for secure data exchange with the AP.