Re: Issues with IBSS/WPA being created unsecured IBSS

[Nicolas Cavallari <Nicolas.Cavallari@lri.fr>]

On 16/03/2012 21:23, Mathieu Trudel-Lapierre wrote:
>
> Hi,
>
> I'm trying to figure out how to fix WPA-secured IBSS; which appears
> to be silently falling back to creating unsecured IBSS networks at
> the kernel level (or IBSS/RSN really, if need be, as it seems to
> react pretty much just the same, although I understand it's not
> supported by all devices).

If you are talking about WPA-none, it's been broken for a loooong time
(2009?).
First, wpasupplicant tries to set the key just after requesting an ibss
join without
waiting for the driver to actually join the IBSS. With current kernels,
you cannot
set keys until joined, so that fails. But even if
wpasupplicant did it right, it would still break, because, among other
things, the
kernel will just refuse to decrypt unicast frames with anything else
than pairwise keys.


If wpasupplicant supports IBSS RSN (which is disabled in ubuntu, IIRC),
at least mac80211 based drivers will not send/accept plaintext frames,
whether IBSS RSN is supported by the driver or not.