Opened 21 months ago

Last modified 21 months ago

#18287 new enhancement

Implement WPA3 — at Version 6

Reported by: kallisti5 Owned by: nobody
Priority: high Milestone: Unscheduled
Component: Kits/Network Kit Version: R1/Development
Keywords: wpa3 wifi6 Cc:
Blocked By: Blocking:
Platform: All

Description (last modified by kallisti5)

wpa_supplicant 2.10 now supports wpa3 used for Wifi 6(e)

Here's a sample configuration from someone setting up wpa_supplicant for a Wifi 6:

pmf=2
sae_pwe=1
network={
   scan_ssid=1
   ssid=”Fill the Wi-Fi SSID here”
   key_mgmt=SAE
   proto=RSN
   ieee80211w=2
   sae_password=”Fill the Wi-Fi password here”
   pairwise=CCMP
   group=CCMP
}

Our network kit needs code additions to properly support WPA3

More information on WPA3: https://en.wikipedia.org/wiki/Wi-Fi_Protected_Access

Overview of changes:

  • WPA3 uses SAE exchange instead of PSK exchange
  • I think that's it? Still uses CCMP-128 from WPA2

Change History (6)

comment:1 by waddlesplash, 21 months ago

This needs driver support, too. Until FreeBSD or OpenBSD makes the necessary modifications, it's pointless to change our own headers.

comment:2 by nephele, 21 months ago

Our network kit needs code additions to properly support WPA3

It does? Iirc only wpa_supplicant needs to be changed.

waddlesplash: what kind of driver support is needed?

comment:3 by nephele, 21 months ago

as a side note: wpa_supplicant now also supports OWE

comment:4 by waddlesplash, 21 months ago

A lot of driver support is needed. The net80211 layer and also individual drivers need to handle different key types, flags, etc.

comment:5 by kallisti5, 21 months ago

FreeBSD does seem to "support" the AX210, and even call it out as WIFI 6 / WIFI 6E https://wiki.freebsd.org/WiFi/Iwlwifi#Support-Matrix

comment:6 by kallisti5, 21 months ago

Description: modified (diff)
Note: See TracTickets for help on using tickets.