> So yes, if you want to enable support for MFP, you cannot do it unless > the driver is able to handle both CCMP and BIP protection for robust > management frames. In case of ath5k, I would assume there are two > options: > - only enable MFP if software encryption is used for all frames (i.e., > no hwaccel even for data frames) > - implement workaround to re-encrypt(incorrectly) received robust > unicast management frames if hwaccel for CCMP was configured for the > transmitting STA (this is to undo the incorrect decryption done by the > hardware) and then pass the encrypted frame to mac80211 for software > decryption; with this option, you could advertise MFP support even > with CCMP hwaccel enabled
No luck and still cannot work out how to re-encrypt the received robust unicast management frames if hwaccel for CCMP was configured. Need to stick with first option then. --- Chun-Yeow _______________________________________________ ath5k-devel mailing list ath5k-devel@lists.ath5k.org https://lists.ath5k.org/mailman/listinfo/ath5k-devel
