Re: [ath5k-devel] [PATCH] ath5k: add support of HW encryption in management frames

2012-09-05 Thread Jouni Malinen
On Wed, Sep 05, 2012 at 03:31:08PM +0800, Yeoh Chun-Yeow wrote: > I am based on the authsae source code for secured mesh setup which can > be found at: > https://github.com/cozybit/authsae/blob/master/linux/meshd-nl80211.c It looks like this particular implementation is hardcoded to use MFP.. > >

Re: [ath5k-devel] [PATCH] ath5k: add support of HW encryption in management frames

2012-09-05 Thread Yeoh Chun-Yeow
Hi, Jouni > Could you please describe what exactly you mean with "current secured > mesh requires the AES CMAC to be enabled" and what is that claim based > on? I am based on the authsae source code for secured mesh setup which can be found at: https://github.com/cozybit/authsae/blob/master/linux/

Re: [ath5k-devel] [PATCH] ath5k: add support of HW encryption in management frames

2012-09-05 Thread Jouni Malinen
On Wed, Sep 05, 2012 at 12:41:16AM +0800, Yeoh Chun-Yeow wrote: > By the way, current secured mesh requires the AES CMAC to be enabled. > But without enabling IEEE80211_HW_MFP_CAPABLE, the key cannot be added > since this cipher suite is considered not supported. But actually AES > CMAC can be done

Re: [ath5k-devel] [PATCH] ath5k: add support of HW encryption in management frames

2012-09-05 Thread Jouni Malinen
On Tue, Sep 04, 2012 at 01:35:21PM +0200, Johannes Berg wrote: > I would guess that hardware *decryption* is faulty, maybe only one > action frame needs to be correct and so if one of them is nohwcrypt=1 it > still works? Yes, I was assuming that receiving robust unicast management frames would fa