RFC IEEE 802.11w / management frame protection
Get series with b4
b4 am 20080617154008.883383150@localhostVersions newest first
- v1 RFC Latest7 patches 30 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/7 | 802.11w: STA flag for MFPinclude/ include/ net/ +4 more | +20 | 0 replies | |
| 2/7 | 802.11w: CCMP for management framesnet/ net/ | +36 | 0 replies | |
| 3/7 | 802.11w: Add BIP (AES-128-CMAC)include/ net/ net/ +4 more | +309 | 7 replies | |
| 4/7 | 802.11w: Use BIP (AES-128-CMAC)include/ include/ include/ +10 more | +321 | 4 replies | |
| 5/7 | 802.11w: WEXT parameter for setting mgmt cipherinclude/ net/ | +5 | 0 replies | |
| 6/7 | 802.11w: WEXT configuration for IGTKinclude/ net/ | +49 | 0 replies | |
| 7/7 | 802.11w: Configuration of MFP disabled/optional/requiredinclude/ net/ net/ | +18 | 3 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [RFC PATCH 0/7] IEEE 802.11w / management frame protection
This is the first and still quite preliminary version of changes to introduce IEEE 802.11w (management frame protection) support into mac80211. As such, I'm mainly looking for comments on the current design to help me in finalizing and cleaning up the patches.
Please note that couple of small additions to hostapd and wpa_supplicant are required to actually configure MFP and those are not yet included in the hostap git repository. Consequently, this is not yet available for real testing. Or well, if you really want to test this now, I can send an experimental patch to hostapd/wpa_supplicant to enable MFP support.
The current version is relatively complete for mac80211, but there are still couple of known missing functions and I've done only very limited testing so far. I was able to send and receive both CCMP and BIP protected deauthentication frames and based on a sniffer log, the frames looked correct. All this is with mac80211_hwsim and software crypto. It is unclear whether this can be used as-is with devices that use hwaccel for crypto at least before the low-level drivers and/or firmware have been modified to cope with the possibility of CCMP being used with management frames.
This patch set does not address the issues found in configuring default keys for monitor interfaces, i.e., this still needs a workaround in hostapd to set IGTK for both wlan# and mon.wlan#. In addition, the debugfs directory is left behind when the monitor interface is removed.
Since IEEE 802.11w draft is still in progress and open to changes, it is also unclear whether we would actually like to introduce IEEE 802.11w support as-is into mac80211 in main line kernels at this point. Then again, IEEE 802.11w draft is quite a bit further in the standardization process than IEEE 802.11s draft and we already have some pre-standard mesh support in mac80211 at least in wireless-testing.
Signature · 1 line
Jouni Malinen PGP id EFC895FA