TKIP can be broken in like, 15 minutes now. I'm pretty sure AES is what they recommend now. TKIP was temporary so they could make a standard one, which I'm guessing is the method involving AES. At least, that's what I remember when reading up on a vulnerability for TKIP.