A retail company is upgrading its corporate wireless infrastructure. The security architect wants to eliminate the risk of an attacker capturing the wireless handshake and later performing an offline dictionary attack to recover the pre-shared key. Employees will continue to use a shared passphrase rather than per-user 802.1X certificates. Which wireless security standard should the architect select to best mitigate this specific threat?