Received-SPF: pass (google.com: domain of linux-wireless+bounces-8781-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.48.161 as permitted sender) client-ip=147.75.48.161;
From: "Sperling, Tobias" <Tobias.Sperling@Softing.com>
To: Kalle Valo <kvalo@kernel.org>
CC: "linux-wireless@vger.kernel.org" <linux-wireless@vger.kernel.org>, "Le
 Suire, Michael" <Michael.Suire@Softing.com>, "pkshih@realtek.com"
	<pkshih@realtek.com>, "johannes@sipsolutions.net" <johannes@sipsolutions.net>
Subject: Re: wifi: mac80211: unencrypted message in 4-way handshake
Thread-Topic: wifi: mac80211: unencrypted message in 4-way handshake
Thread-Index: Adq7OqrIXwNmhc6ZT92PlJydhITGNgAAMsqAAAhs0lUAHeOR4A==
Date: Tue, 11 Jun 2024 07:55:25 +0000
Message-ID:
 <BE1P281MB2420928438977DCED644AFBAEFC72@BE1P281MB2420.DEUP281.PROD.OUTLOOK.COM>
References:
 <BE1P281MB24208AB02DAEACAE9AF4B5C5EFC62@BE1P281MB2420.DEUP281.PROD.OUTLOOK.COM>
	<BE1P281MB2420DA2C6AFF94E525306302EFC62@BE1P281MB2420.DEUP281.PROD.OUTLOOK.COM>
 <87le3clmsz.fsf@kernel.org>
In-Reply-To: <87le3clmsz.fsf@kernel.org>
Accept-Language: de-DE, en-US
Content-Language: de-DE
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
 =?us-ascii?Q?0SsO2R1KRS2bXccLWg0I6EOsp0qfQ3RAjjbZz7cQ5sy1rBCiuEkaCsY3avW1?=
 =?us-ascii?Q?jhDLrL7B5xYtJHdA77HBEKGTYYYT6mnpKBme5UNc56ckCo1F3TfmCLo6SlXQ?=
 =?us-ascii?Q?Fr0E7pjisu+WfaSDMdWKwKcAZBJG/5gySrWa8Kp0B6remVUfykiPMvwDb6Mx?=
 =?us-ascii?Q?5l2cRWw69O3mDdDGn4BWN5saDSp/G89P6H2Seuh10nIf6UZ2arn3j8f07OHz?=
 =?us-ascii?Q?iPFv7WmTR4+L1aH1/Mwmyjz+P3Pbr6tC6BLWpVdgsfdufPH2t/Qn7tQXCmK0?=
 =?us-ascii?Q?g56PW32pACV9VJ9Q87kmLzTwkZDHwPrVrkCREAAH6Q6UOmKQj9y9o47aaUCb?=
 =?us-ascii?Q?AGXh2yABTyxNRAYpahnW6RN+qKwghS38TsrLHyPfQodFneTF5jyKlRCu9F/h?=
 =?us-ascii?Q?yD3g+8kUGrBWTvNfdxstz5PoOycZE9o1NXZICzvV/WDnsqlL6aWYozWoSjTz?=
 =?us-ascii?Q?GZLe1kmyERrCO188D+XkSg+d0C9cg9U8YDxQt6WZFWzGRW7Lwe82rphQVpaB?=
 =?us-ascii?Q?ERvBby5QVX6GRecfQQtvAtjxjWD5JvLNG7pz6PhxnHztoRth8RfrHz05PBTC?=
 =?us-ascii?Q?Q2SVFqj8GdMB3A+OuiNOYhTBZPmPzSvX0YKHArGg2/4xHYN+2bRq+B6KRlx+?=
 =?us-ascii?Q?mKjjBCFP+WGOGlEJtzlrFWojEie5n7+UxWZ6CKg23BfEiZxZyCO/tvB6YbvM?=
 =?us-ascii?Q?82+JFf5xHFlodGZ8ektTA22Tks0vNB2cJjb1J+Q0lgdx+Law3G5jjns/TUsS?=
 =?us-ascii?Q?R03MX77I4F11QtnJojJe9Iv45gTrjIfOXz3tAheKSCNMBuCIAGnCRp1VBq2M?=
 =?us-ascii?Q?fhDvoFl0a91xGha4b7ZbVCA59K/8seyEDweyBYcTdqO8jJjdKHkO2+07E6O5?=
 =?us-ascii?Q?c+5+rOnIl7SkC3TZb2+IglO/1CQwlsVKsaitzN89TAzNC3Dkd8fk2aAGPPHb?=
 =?us-ascii?Q?1/qaLd4nZQ45DXtqD+yQ2fmov4dLk7hkAonj/a+x69HosCwfktRyDr3eeBVY?=
 =?us-ascii?Q?w+YjedjzhGkLa+LlWX9MhPuKSclG/Ax48MbJTq9lyD8j8nOzDRluJ5dh82aU?=
 =?us-ascii?Q?xxotHVBzqDUBh5gBE09caYh1O+WAYGjizFBP1tOBPIzevctcuJO4L2mEhBqO?=
 =?us-ascii?Q?j2GCOAKvGtHTyqt8SvWxxPEfmWO9MXXgzVgaPiq99IgR/uReHs0q/katYl+M?=
 =?us-ascii?Q?x9AAglgzKSU1bYawi7c3ZuEbfaLp8gJ1KgzqBi8xPZX8uBvPO8cO873TS1Vp?=
 =?us-ascii?Q?WStTUSH8ETFfmZjQKgUNq4hlQoinXKaHviNfs1/NTrSiaADkk9YN7Yvjda23?=
 =?us-ascii?Q?jTu7821pPGX2gEyRULdwDLbgYg4EPlN6ivsNQkQwBhAgaTObIWfjVRN0cqf7?=
 =?us-ascii?Q?xwd8zKGKIwt9wl1XsnzQRrhf3lzWlpUdTI0mVaFv3EPI83DmZptDfeePJtOb?=
 =?us-ascii?Q?l8DTVXnTaaxglTy9KLQuSzUk165g3ldxpzASF41vO0WmDZSXH1iRpTlLtDMt?=
 =?us-ascii?Q?R3m/+BLHjRVMSx4fg14PfGAjLjiv+e95JWRcAkmTA4kW2lzwujR6WWUUd8Mj?=
 =?us-ascii?Q?eJJsEKQcxN/5f0/7ks2UzGiareZspiFZaJb51y+9z6RSHVih4zi4EFOrGLmY?=
 =?us-ascii?Q?GQ=3D=3D?=
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Precedence: bulk
X-Mailing-List: linux-wireless@vger.kernel.org
List-Id: <linux-wireless.vger.kernel.org>
List-Subscribe: <mailto:linux-wireless+subscribe@vger.kernel.org>
List-Unsubscribe: <mailto:linux-wireless+unsubscribe@vger.kernel.org>
MIME-Version: 1.0
X-OriginatorOrg: softing.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BE1P281MB2420.DEUP281.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 2d451329-8c5a-4e3c-b177-08dc89ebda9a
X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Jun 2024 07:55:25.7153
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: fe3606fa-d397-4238-9997-68dcd7851f64
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: qEB/Ljs03V5DWCMUCgsLjd1hISOF1kz8rnlMOmpOA/WQ5Q7V+9bh8fYCvAFlCTu6t7Xe7s2Z8ZnT/UjotjzlD/SQG6M7H74xAzz6esiyY/8=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: FR4P281MB4302

> > Hello,
> >
> > recently we moved from a 4.9 kernel to 5.4 kernel and observed the
> > following issue. To rule out that the issue was already fixed we then
> > tried it with a 6.6 kernel and observed the same issue there, too. To
> > sum it up, the following issue can be observed with kernel 5.4 and 6.6
> > but not with 4.9.
> >
> > We are using a Cisco AP with EWC (C9210) and EAP-PEAP as
> > authentication method. Additionally, a session timeout is configured
> > in the AP (300 s) after which a rekeying is taking place. So every 5
> > minutes a new four-way handshake is taking place which usually is
> > completely encrypted. However, while sniffing with an external device
> > we saw that the fourth packet of the four-way handshake is send
> > unencrypted by our clients, when it comes to EAP-PEAP. The first three
> > packets are encrypted as expected. In case of the Cisco AP the attempt
> > is then rejected with a 4WAY_HANDSHAKE_TIMEOUT leading to a
> completely
> > new authentication.
> >
> > On our clients we are using wpa_supplicant 2.10 with the same config
> > on all kernels and therefore would rule out an issue in the
> > supplicant, as it is working with the same supplicant in kernel 4.9.
> > As driver we are using ath9k for QCA2066 (starting at kernel 4.9) and
>=20
> QCA2066 with ath9k? ath9k is a driver for 802.11n hardware and QCA2066
> is 802.11ax generation, how would that work?

Right, somehow I collected the wrong info for the ath9k driven device. Sorr=
y
about that. It's an AR958x adapter for the ath9k driver.