Re: [RFC] cfg80211 and nl80211

[Johannes Berg <johannes@sipsolutions.net>]

Let me try to summarise this... probably wrong :)

> 1.5 KB sounds like a small scan result set to me.. I'm hitting 100+
> BSSes at work (well, not really your normal environment ;-), and 50 at
> home.. These go way beyond 1.5 KB; closer to 32 KB at times, I'd guess.

Ok this is easy, we need huge results and thus can't reasonably push
them out on each change... Maybe some sequence number thingie could be
used? I'd like to have a .dumpit call with genl to actually dump all the
scan results to userspace, maybe that message could be multicast to
interested stations if someone requests one? No idea... Thomas?

As for the auth/crypto/key mgmt issue... It looks like these three are
basically orthogonal. If I understand correctly, you need to be able to
 * set a key including algorithm for the possible
     - key indexes 0,1,2,3
     - a STA identified by MAC address
     (and the key is identified by these uniquely)
   This includes
     - algorithm (none to clear, wep, tkip, ccmp, ...)
     - key material
     - TSC/SN (only valid for some algorithms)
     (key material length is used to decide between wep types, and some
     attributes may be left off, e.g. to change the tsc/sn without
     changing the key material or algorithm)
 * set transmit key index (STA only?)
 * set multicast/broadcast key index
 * dot11ExcludeUnecrypted (default true)
 * authentication mode, including
     - allowed algorithms (open, shared-key, ...)
     - key index of key to use
     - preference of use? That would make the allowed algorithms a list
       instead of a bitfield
 * set IE(s) (only some cards)
 * set allowed cipher suites for RSN/WPA IE generation (only some cards)
   [do we need to be able to distinguish between these or is it fine to
   just try both and get an error for one?]
 * a way to get the device's capabilities (per-net_device)
    - crypto algorithms
    - auth algorithms
    - ...?

Does that sound right? (throw in get versions for most of these, of
course)

Open issues:
 * associating a key index with a mac address for unicast wep key?

Hmm. That's at least 8 operations that WE sticks into 3. No wonder no
one understands it...

johannes