Received-SPF: pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Message-ID: <ce7eadda8c1fe68d23f67315e31d6249b36c7563.camel@sipsolutions.net>
Subject: Re: PRO/Wireless 2200BG Intel WPA3 SSID connection problem #1
From:   Johannes Berg <johannes@sipsolutions.net>
To:     Ioannis Barkas <jnyb.de@gmail.com>, linux-wireless@vger.kernel.org
Date:   Fri, 25 Nov 2022 10:35:28 +0100
In-Reply-To: <CADUzMVbL0ujvdRDCcQS0uBxruVYW3XV335wAz27AA80x5q9kOQ@mail.gmail.com>
References: <CADUzMVbL0ujvdRDCcQS0uBxruVYW3XV335wAz27AA80x5q9kOQ@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
User-Agent: Evolution 3.44.4 (3.44.4-2.fc36) 
MIME-Version: 1.0
Precedence: bulk

Hi,

> This period I have been dealing with WLANs as I have added a new WPA3
> SSID and fell on some trouble and limitations(more messages will
> follow on this).
>=20

Well, keep in mind that WPA3 requires all kinds of new things, and the
*most recent* NIC you tried is already ~11 years old afaict.

> Long story short, some WLAN cards do not work and
> some Android based mobile phones do not work(like my Android 12 based
> SAMSUNG M31 which is not detecting such SSIDs at all!). On one hand,
> vendors like Atheros have done a good job. As a result, all cards were
> able to connect successfully at SSID using the WPA3 encryption. This
> includes miniPCI, PCI, miniPCIe, Cardbus and USB adapters.
>=20

This probably means they use SW crypto for everything.

> On the
> other hand vendors like Intel haven't done a really good job. miniPCI
> cards from Intel are out of question due to legacy driver and custom
> 802.11 implementation. Initial miniPCIe cards like 4965 series do not
> support it similar to many iwlwifi cards. I believe that all iwlwifi
> supported cards should be able to use WPA3.

What makes you believe that?

> My 2006 Atheros cards
> connect successfully so I expect the same for intel cards launched a
> decade after the old Atheros cards otherwise we should blacklist such
> devices to save lots of noise from bug reports about undetected
> networks.=C2=A0

Umm, no? Why would we break NICs that work well with most existing
networks, just not WPA3 ones?

> Hopefully the Intel team will fix everything so that noone
> will not need to switch cards on laptops.=C2=A0
>=20

Unlikely. The newest Intel NIC in your list was 6205, which was released
in 2011.

Without wpa_supplicant logs I'm not even sure why it's broken, but
likely the reason is that it doesn't advertise management frame
protection support since the firmware handles certain management frames,
and there was no hardware offload for those at the time.

(This might be a difference to Atheros NICs.)
>=20

> It can't connect to WPA3 2,4GHz SSID and I got no logs.

Well, you should look at wpa_supplicant logs.


johannes