Re: IWD 1.27 with brcmfmac not working for roaming

[James Prestwood <prestwoj@gmail.com>]

Hi Martin,

On 10/21/24 3:10 PM, Martin Petzold wrote:
> Hi Arend,
>
> Am 22.10.24 um 00:01 schrieb KeithG:
>> Arend,
>>
>> If there is a patch for brcmfmac to use CMD_EXTERNAL_AUTH, I am
>> interested in testing. The last time we tried, it errored out and did
>> not work as expected.
>
> Support with our current chip for WPA3 and also OWE by offloading SAE 
> etc. to IWD. That is possible?! This would be great!

Have you also checked with the vendor (Solid Run?) if SAE/OWE are 
supported by the hardware/kernel they ship with (even with wpa_supplicant)?

Thanks,

James

>
> Thanks,
>
> Martin
>
>>
>> If the patch can be applied to the current, RPi 6.6.x kernel, I can
>> test it on my Pis.
>>
>> Keith
>>
>> On Mon, Oct 21, 2024 at 1:26 PM Arend van Spriel
>> <arend.vanspriel@broadcom.com> wrote:
>>> On 10/21/2024 7:40 PM, Denis Kenzior wrote:
>>>> Hi Arend,
>>>>
>>>>> I have not seen patches for OWE in brcmfmac. Looking at the supported
>>>>> ciphers:
>>>> OWE is an AKM.  It still uses CCMP/CMAC underneath.
>>> My bad. Always confused by those concepts.
>>>
>>>>> Supported Ciphers:
>>>>>    * WEP40 (00-0f-ac:1)
>>>>>    * WEP104 (00-0f-ac:5)
>>>>>    * TKIP (00-0f-ac:2)
>>>>>    * CCMP-128 (00-0f-ac:4)
>>>>>    * CMAC (00-0f-ac:6)
>>>>>
>>>>> The error message seems to match with the above.
>>>> I've never seen support for OWE in brcmfmac mentioned.  OWE requires
>>>> CMD_AUTHENTICATE / CMD_ASSOCIATE (or CMD_EXTERNAL_AUTH) to derive the
>>>> PMK, so iwd can't support it on FullMAC.
>>> I have never seen any mention of OWE either. Regarding 
>>> CMD_EXTERNAL_AUTH
>>> support I recently posted patches on linux-wireless list as RFT. There
>>> has been zero feedback and so I assume also zero interest. In order to
>>> use CMD_EXTERNAL_AUTH the firmware needs to advertise "sae_ext" in 
>>> fwcap
>>> debugfs file. So if Martin can check that, ie:
>>>
>>> $ grep sae_ext /sys/kernel/debug/ieee80211/phy0/fwcap
>>>
>>> Regards,
>>> Arend
>>>