CVSROOT: /cvs Module name: src Changes by: patr...@cvs.openbsd.org 2017/10/21 14:43:03
Modified files: sys/dev/ic : bwfm.c Log message: Even though letting the firmware handle the handshake is nice from a user perspective, it's rather horrible from a security perspective. Especially since there has not only been the KRACK attack, but also exploited wireless firmware. Thus this commit changes the way that bwfm(4) is integrated into our network stack. Instead of making it an Ethernet controller with some WiFi capability, deeply integrate it into the net80211 stack. This way we can do the WPA handshake in software and we don't have to reimplement or copy too much code from the net80211 stack. Some code taken from NetBSD where Jared McNeill committed bwfm(4) with net80211 integration as well. Discussed with and "looks good" stsp@