Re: IWD 1.27 with brcmfmac not working for roaming

[Arend van Spriel <arend.vanspriel@broadcom.com>]

On 10/21/2024 7:40 PM, Denis Kenzior wrote:
> Hi Arend,
> 
>>
>> I have not seen patches for OWE in brcmfmac. Looking at the supported 
>> ciphers:
> 
> OWE is an AKM.  It still uses CCMP/CMAC underneath.

My bad. Always confused by those concepts.

>>
>> Supported Ciphers:
>>   * WEP40 (00-0f-ac:1)
>>   * WEP104 (00-0f-ac:5)
>>   * TKIP (00-0f-ac:2)
>>   * CCMP-128 (00-0f-ac:4)
>>   * CMAC (00-0f-ac:6)
>>
>> The error message seems to match with the above.
> 
> I've never seen support for OWE in brcmfmac mentioned.  OWE requires 
> CMD_AUTHENTICATE / CMD_ASSOCIATE (or CMD_EXTERNAL_AUTH) to derive the 
> PMK, so iwd can't support it on FullMAC.

I have never seen any mention of OWE either. Regarding CMD_EXTERNAL_AUTH 
support I recently posted patches on linux-wireless list as RFT. There 
has been zero feedback and so I assume also zero interest. In order to 
use CMD_EXTERNAL_AUTH the firmware needs to advertise "sae_ext" in fwcap 
debugfs file. So if Martin can check that, ie:

$ grep sae_ext /sys/kernel/debug/ieee80211/phy0/fwcap

Regards,
Arend