2019-01-28 23:12:43

by Raul Siles

[permalink] [raw]
Subject: Wi-Fi drivers/chipsets supporting 802.11w / PMF / MFP

Hello,
I already published the following message in the
hostapd/wpa_supplicant mailing list two weeks ago without any success.

Is there any resource publicly available with the list of Wi-Fi
drivers/chipsets providing support for Protected Management Frames
(802.11w / PMF / FMP)?

Based on my testing, PMF (a requirement for WPA3) works with the
Atheros chipset and the ath9k driver.

However, looking around for compatibility with other Wi-Fi cards, I
have only been able to find the following references (aside from spare
patches for other drivers, sometimes mentioned in this mailing list):

https://wireless.wiki.kernel.org/welcome?do=search&id=11w
ath9k: https://wireless.wiki.kernel.org/en/users/drivers/ath9k?s[]=11w
p54: https://wireless.wiki.kernel.org/en/users/drivers/p54?s[]=11w
carl9170: https://wireless.wiki.kernel.org/en/users/drivers/carl9170?s[]=11w
https://wireless.wiki.kernel.org/welcome?do=search&id=mfp
ath10k: https://wireless.wiki.kernel.org/en/users/drivers/ath10k/mesh?s[]=mfp

What other Wi-Fi drivers/chipsets (or specific Wi-Fi cards) provide
support for 802.11w / PMF / MFP?

Thanks!
--
Raul Siles


2019-01-29 00:21:22

by Rosen Penev

[permalink] [raw]
Subject: Re: Wi-Fi drivers/chipsets supporting 802.11w / PMF / MFP

On Mon, Jan 28, 2019 at 3:15 PM Raul Siles <[email protected]> wrote:
>
> Hello,
> I already published the following message in the
> hostapd/wpa_supplicant mailing list two weeks ago without any success.
>
> Is there any resource publicly available with the list of Wi-Fi
> drivers/chipsets providing support for Protected Management Frames
> (802.11w / PMF / FMP)?
>
> Based on my testing, PMF (a requirement for WPA3) works with the
> Atheros chipset and the ath9k driver.
>
> However, looking around for compatibility with other Wi-Fi cards, I
> have only been able to find the following references (aside from spare
> patches for other drivers, sometimes mentioned in this mailing list):
>
> https://wireless.wiki.kernel.org/welcome?do=search&id=11w
> ath9k: https://wireless.wiki.kernel.org/en/users/drivers/ath9k?s[]=11w
> p54: https://wireless.wiki.kernel.org/en/users/drivers/p54?s[]=11w
> carl9170: https://wireless.wiki.kernel.org/en/users/drivers/carl9170?s[]=11w
> https://wireless.wiki.kernel.org/welcome?do=search&id=mfp
> ath10k: https://wireless.wiki.kernel.org/en/users/drivers/ath10k/mesh?s[]=mfp
>
> What other Wi-Fi drivers/chipsets (or specific Wi-Fi cards) provide
> support for 802.11w / PMF / MFP?
https://elixir.bootlin.com/linux/v5.0-rc4/ident/MFP_CAPABLE
>
> Thanks!
> --
> Raul Siles

2019-01-29 17:31:33

by Raul Siles

[permalink] [raw]
Subject: Re: Wi-Fi drivers/chipsets supporting 802.11w / PMF / MFP

Hi Rosen,
Thanks for the reference! It is, indeed, a great and accurate way of
keeping track of Linux drivers that are MFP_CAPABLE (Wi-Fi PMF, MFP,
802.11w).

In fact, it is the same driver list as the one in the latest stable
Linux kernel version (v4.20.5):
https://elixir.bootlin.com/linux/latest/ident/MFP_CAPABLE

Cheers,
--
Raul Siles

On Tue, Jan 29, 2019 at 1:21 AM Rosen Penev <[email protected]> wrote:
>
> On Mon, Jan 28, 2019 at 3:15 PM Raul Siles <[email protected]> wrote:
> >
> > Hello,
> > I already published the following message in the
> > hostapd/wpa_supplicant mailing list two weeks ago without any success.
> >
> > Is there any resource publicly available with the list of Wi-Fi
> > drivers/chipsets providing support for Protected Management Frames
> > (802.11w / PMF / FMP)?
> >
> > Based on my testing, PMF (a requirement for WPA3) works with the
> > Atheros chipset and the ath9k driver.
> >
> > However, looking around for compatibility with other Wi-Fi cards, I
> > have only been able to find the following references (aside from spare
> > patches for other drivers, sometimes mentioned in this mailing list):
> >
> > https://wireless.wiki.kernel.org/welcome?do=search&id=11w
> > ath9k: https://wireless.wiki.kernel.org/en/users/drivers/ath9k?s[]=11w
> > p54: https://wireless.wiki.kernel.org/en/users/drivers/p54?s[]=11w
> > carl9170: https://wireless.wiki.kernel.org/en/users/drivers/carl9170?s[]=11w
> > https://wireless.wiki.kernel.org/welcome?do=search&id=mfp
> > ath10k: https://wireless.wiki.kernel.org/en/users/drivers/ath10k/mesh?s[]=mfp
> >
> > What other Wi-Fi drivers/chipsets (or specific Wi-Fi cards) provide
> > support for 802.11w / PMF / MFP?
> https://elixir.bootlin.com/linux/v5.0-rc4/ident/MFP_CAPABLE
> >
> > Thanks!
> > --
> > Raul Siles

2019-01-31 19:29:26

by Johannes Berg

[permalink] [raw]
Subject: Re: Wi-Fi drivers/chipsets supporting 802.11w / PMF / MFP

On Tue, 2019-01-29 at 18:31 +0100, Raul Siles wrote:
> Hi Rosen,
> Thanks for the reference! It is, indeed, a great and accurate way of
> keeping track of Linux drivers that are MFP_CAPABLE (Wi-Fi PMF, MFP,
> 802.11w).

Note that this is only true for mac80211-based drivers.

For the others, you'll want to check if their cipher list mentions
WLAN_CIPHER_SUITE_AES_CMAC.

johannes


2019-03-22 14:21:03

by Raul Siles

[permalink] [raw]
Subject: Re: Wi-Fi drivers/chipsets supporting 802.11w / PMF / MFP

Trying to sum up what has been shared (a few weeks ago) in both the
linux-wireless kernel mailing-list and the hostapd mailing-list, a way
to find Linux drivers with support for 802.11w / PMF / MFP (required
for WPA3), including both mac80211-based drivers and cfg80211-based,
aka fullmac, drivers, is:

https://elixir.bootlin.com/linux/latest/ident/MFP_CAPABLE
https://elixir.bootlin.com/linux/latest/ident/WLAN_CIPHER_SUITE_AES_CMAC

Cheers,
--
Raul Siles

On Thu, Jan 31, 2019 at 8:29 PM Johannes Berg <[email protected]> wrote:
>
> On Tue, 2019-01-29 at 18:31 +0100, Raul Siles wrote:
> > Hi Rosen,
> > Thanks for the reference! It is, indeed, a great and accurate way of
> > keeping track of Linux drivers that are MFP_CAPABLE (Wi-Fi PMF, MFP,
> > 802.11w).
>
> Note that this is only true for mac80211-based drivers.
>
> For the others, you'll want to check if their cipher list mentions
> WLAN_CIPHER_SUITE_AES_CMAC.
>
> johannes
>