Implement WPA3

[kallisti5]

wpa_supplicant 2.10 now supports wpa3 used for Wifi 6(e)

Here's a sample configuration from someone setting up wpa_supplicant for a Wifi 6:

pmf=2
sae_pwe=1
network={
   scan_ssid=1
   ssid=”Fill the Wi-Fi SSID here”
   key_mgmt=SAE
   proto=RSN
   ieee80211w=2
   sae_password=”Fill the Wi-Fi password here”
   pairwise=CCMP
   group=CCMP
}

Our network kit needs code additions to properly support WPA3

More information on WPA3: ​https://en.wikipedia.org/wiki/Wi-Fi_Protected_Access

Overview of changes:

• WPA3 uses SAE exchange instead of PSK exchange
• I think that's it? Still uses CCMP-128 from WPA2

[waddlesplash]

This needs driver support, too. Until FreeBSD or OpenBSD makes the necessary modifications, it's pointless to change our own headers.

[nephele]

Our network kit needs code additions to properly support WPA3

It does? Iirc only wpa_supplicant needs to be changed.

waddlesplash: what kind of driver support is needed?

[nephele]

as a side note: wpa_supplicant now also supports OWE

[waddlesplash]

A lot of driver support is needed. The net80211 layer and also individual drivers need to handle different key types, flags, etc.

[kallisti5]

FreeBSD does seem to "support" the AX210, and even call it out as WIFI 6 / WIFI 6E ​https://wiki.freebsd.org/WiFi/Iwlwifi#Support-Matrix

[waddlesplash]

FreeBSD does seem to "support" the AX210

By a Linux driver through the compatibility layer; and I don't think they even support Wi-Fi 6 at all with it. We support the AX210 through OpenBSD's driver, which doesn't support WPA3 yet.

[nephele]

Maybe we can ask openbsd how far off that is? Perhaps we can even colaborate on the development if you are inclined to do that :)

[kallisti5]

By a Linux driver through the compatibility layer; and I don't think they even support Wi-Fi 6 at all with it. We support the AX210 through OpenBSD's driver, which doesn't support WPA3 yet.

Hm. I tested Linux on my Framework laptop. It's connecting from my Wifi 6e compatible AX210 to my Wifi 6e compatible hotspot via Wifi 5 according to UniFi :-|

kernel 6.2.1 / wpa_supplicant 2.10

However, Gnome shows WPA3... so it's partially there. In the terms of this ticket, WPA3 is definitely supported by Linux at least.