Wi-Fi drivers/chipsets supporting 802.11w / PMF / MFP

Wi-Fi drivers/chipsets supporting 802.11w / PMF / MFP

[Raul Siles]

Hello,
I already published the following message in the
hostapd/wpa_supplicant mailing list two weeks ago without any success.

Is there any resource publicly available with the list of Wi-Fi
drivers/chipsets providing support for Protected Management Frames
(802.11w / PMF / FMP)?

Based on my testing, PMF (a requirement for WPA3) works with the
Atheros chipset and the ath9k driver.

However, looking around for compatibility with other Wi-Fi cards, I
have only been able to find the following references (aside from spare
patches for other drivers, sometimes mentioned in this mailing list):

https://wireless.wiki.kernel.org/welcome?do=search&id=11w
    ath9k: https://wireless.wiki.kernel.org/en/users/drivers/ath9k?s[]=11w
    p54: https://wireless.wiki.kernel.org/en/users/drivers/p54?s[]=11w
    carl9170: https://wireless.wiki.kernel.org/en/users/drivers/carl9170?s[]=11w
https://wireless.wiki.kernel.org/welcome?do=search&id=mfp
    ath10k: https://wireless.wiki.kernel.org/en/users/drivers/ath10k/mesh?s[]=mfp

What other Wi-Fi drivers/chipsets (or specific Wi-Fi cards) provide
support for 802.11w / PMF / MFP?

Thanks!
--
Raul Siles

Re: Wi-Fi drivers/chipsets supporting 802.11w / PMF / MFP

[Rosen Penev]

On Mon, Jan 28, 2019 at 3:15 PM Raul Siles <raul.siles@gmail.com> wrote:
>
> Hello,
> I already published the following message in the
> hostapd/wpa_supplicant mailing list two weeks ago without any success.
>
> Is there any resource publicly available with the list of Wi-Fi
> drivers/chipsets providing support for Protected Management Frames
> (802.11w / PMF / FMP)?
>
> Based on my testing, PMF (a requirement for WPA3) works with the
> Atheros chipset and the ath9k driver.
>
> However, looking around for compatibility with other Wi-Fi cards, I
> have only been able to find the following references (aside from spare
> patches for other drivers, sometimes mentioned in this mailing list):
>
> https://wireless.wiki.kernel.org/welcome?do=search&id=11w
>     ath9k: https://wireless.wiki.kernel.org/en/users/drivers/ath9k?s[]=11w
>     p54: https://wireless.wiki.kernel.org/en/users/drivers/p54?s[]=11w
>     carl9170: https://wireless.wiki.kernel.org/en/users/drivers/carl9170?s[]=11w
> https://wireless.wiki.kernel.org/welcome?do=search&id=mfp
>     ath10k: https://wireless.wiki.kernel.org/en/users/drivers/ath10k/mesh?s[]=mfp
>
> What other Wi-Fi drivers/chipsets (or specific Wi-Fi cards) provide
> support for 802.11w / PMF / MFP?
https://elixir.bootlin.com/linux/v5.0-rc4/ident/MFP_CAPABLE
>
> Thanks!
> --
> Raul Siles

Re: Wi-Fi drivers/chipsets supporting 802.11w / PMF / MFP

[Raul Siles]

Hi Rosen,
Thanks for the reference! It is, indeed, a great and accurate way of
keeping track of Linux drivers that are MFP_CAPABLE (Wi-Fi PMF, MFP,
802.11w).

In fact, it is the same driver list as the one in the latest stable
Linux kernel version (v4.20.5):
https://elixir.bootlin.com/linux/latest/ident/MFP_CAPABLE

Cheers,
--
Raul Siles

On Tue, Jan 29, 2019 at 1:21 AM Rosen Penev <rosenp@gmail.com> wrote:
>
> On Mon, Jan 28, 2019 at 3:15 PM Raul Siles <raul.siles@gmail.com> wrote:
> >
> > Hello,
> > I already published the following message in the
> > hostapd/wpa_supplicant mailing list two weeks ago without any success.
> >
> > Is there any resource publicly available with the list of Wi-Fi
> > drivers/chipsets providing support for Protected Management Frames
> > (802.11w / PMF / FMP)?
> >
> > Based on my testing, PMF (a requirement for WPA3) works with the
> > Atheros chipset and the ath9k driver.
> >
> > However, looking around for compatibility with other Wi-Fi cards, I
> > have only been able to find the following references (aside from spare
> > patches for other drivers, sometimes mentioned in this mailing list):
> >
> > https://wireless.wiki.kernel.org/welcome?do=search&id=11w
> >     ath9k: https://wireless.wiki.kernel.org/en/users/drivers/ath9k?s[]=11w
> >     p54: https://wireless.wiki.kernel.org/en/users/drivers/p54?s[]=11w
> >     carl9170: https://wireless.wiki.kernel.org/en/users/drivers/carl9170?s[]=11w
> > https://wireless.wiki.kernel.org/welcome?do=search&id=mfp
> >     ath10k: https://wireless.wiki.kernel.org/en/users/drivers/ath10k/mesh?s[]=mfp
> >
> > What other Wi-Fi drivers/chipsets (or specific Wi-Fi cards) provide
> > support for 802.11w / PMF / MFP?
> https://elixir.bootlin.com/linux/v5.0-rc4/ident/MFP_CAPABLE
> >
> > Thanks!
> > --
> > Raul Siles

Re: Wi-Fi drivers/chipsets supporting 802.11w / PMF / MFP

[Johannes Berg]

On Tue, 2019-01-29 at 18:31 +0100, Raul Siles wrote:
> Hi Rosen,
> Thanks for the reference! It is, indeed, a great and accurate way of
> keeping track of Linux drivers that are MFP_CAPABLE (Wi-Fi PMF, MFP,
> 802.11w).

Note that this is only true for mac80211-based drivers.

For the others, you'll want to check if their cipher list mentions
WLAN_CIPHER_SUITE_AES_CMAC.

johannes

Re: Wi-Fi drivers/chipsets supporting 802.11w / PMF / MFP

[Raul Siles]

Trying to sum up what has been shared (a few weeks ago) in both the
linux-wireless kernel mailing-list and the hostapd mailing-list, a way
to find Linux drivers with support for 802.11w / PMF / MFP (required
for WPA3), including both mac80211-based drivers and cfg80211-based,
aka fullmac, drivers, is:

https://elixir.bootlin.com/linux/latest/ident/MFP_CAPABLE
https://elixir.bootlin.com/linux/latest/ident/WLAN_CIPHER_SUITE_AES_CMAC

Cheers,
--
Raul Siles

On Thu, Jan 31, 2019 at 8:29 PM Johannes Berg <johannes@sipsolutions.net> wrote:
>
> On Tue, 2019-01-29 at 18:31 +0100, Raul Siles wrote:
> > Hi Rosen,
> > Thanks for the reference! It is, indeed, a great and accurate way of
> > keeping track of Linux drivers that are MFP_CAPABLE (Wi-Fi PMF, MFP,
> > 802.11w).
>
> Note that this is only true for mac80211-based drivers.
>
> For the others, you'll want to check if their cipher list mentions
> WLAN_CIPHER_SUITE_AES_CMAC.
>
> johannes
>