From: Jouni Malinen <jouni.malinen@atheros.com>
To: "John W. Linville" <linville@tuxdriver.com>,
Johannes Berg <johannes@sipsolutions.net>
Cc: linux-wireless@vger.kernel.org
Subject: [PATCH 0/4] nl80211/mac80211: Fix station mode key setup issues
Date: Mon, 11 May 2009 21:57:54 +0300 [thread overview]
Message-ID: <20090511185754.653711567@atheros.com> (raw)
When using nl80211, we cannot currently set drop_unencrypted flag that
was used with WEXT to avoid need for IEEE 802.1X port control in station
mode. Because of this, we cannot currently set the keys in a secure way.
In addition, we do not support setting the expected RSC for keys either
with WEXT or nl80211 which is needed to avoid leaving a window for
replaying broadcast frames.
This set of patches addresses these issues and allows nl80211 to
securely set up keys in station mode. This is on top of the pending
MFP patches, RX-drop-unencrypted-based-on-key-setup, and WEXT key
handling to cfg80211 patches (from Johannes).
--
Jouni Malinen PGP id EFC895FA
next reply other threads:[~2009-05-11 18:58 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2009-05-11 18:57 Jouni Malinen [this message]
2009-05-11 18:57 ` [PATCH 1/4] nl80211: Validate MFP flag type when parsing STA flags Jouni Malinen
2009-05-11 18:57 ` [PATCH 2/4] nl80211: improve station flags handling Jouni Malinen
2009-05-11 18:57 ` [PATCH 3/4] nl80211: Add IEEE 802.1X PAE control for station mode Jouni Malinen
2009-05-11 18:57 ` [PATCH 4/4] nl80211: Add RSC configuration for new keys Jouni Malinen
2009-05-13 23:38 ` Johannes Berg
2009-05-11 19:26 ` [PATCH 0/4] nl80211/mac80211: Fix station mode key setup issues Johannes Berg
2009-05-11 19:38 ` Jouni Malinen
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20090511185754.653711567@atheros.com \
--to=jouni.malinen@atheros.com \
--cc=johannes@sipsolutions.net \
--cc=linux-wireless@vger.kernel.org \
--cc=linville@tuxdriver.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).