Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WPA-EAP-SHA256 + ieee80211w reported as WPA2 rather than WPA3 #8

Open
wryun opened this issue Mar 17, 2024 · 1 comment
Open

WPA-EAP-SHA256 + ieee80211w reported as WPA2 rather than WPA3 #8

wryun opened this issue Mar 17, 2024 · 1 comment

Comments

@wryun
Copy link

wryun commented Mar 17, 2024

According to Section 3 of:
https://www.wi-fi.org/system/files/WPA3%20Specification%20v3.1.pdf

    wpa_key_mgmt=WPA-EAP WPA-EAP-SHA256
    ieee80211w=1
    => WPA3-Enterprise transition mode
    
    wpa_key_mgmt=WPA-EAP-SHA256
    ieee80211w=2
    => WPA3-Enterprise only mode

Also: openwrt/openwrt@b63df6c

However, iwinfo when looking at the hostapd conf file doesn't seem to think something is WPA3 until it gets to WPA-EAP-SHA384 (and doesn't consider the value of ieee80211w at all):

static const struct {
    const char *match;
    int version;
    int suite;
} wpa_key_mgmt_strings[] = {
    { "IEEE 802.1X/EAP", 0, IWINFO_KMGMT_8021x },
    { "EAP-SUITE-B-192", 4, IWINFO_KMGMT_8021x },
    { "EAP-SUITE-B",     4, IWINFO_KMGMT_8021x },
    { "EAP-SHA384",      4, IWINFO_KMGMT_8021x },
    { "EAP-SHA256",      0, IWINFO_KMGMT_8021x },
    { "PSK-SHA256",      0, IWINFO_KMGMT_PSK },
    { "NONE",            0, IWINFO_KMGMT_NONE },
    { "None",            0, IWINFO_KMGMT_NONE },
    { "PSK",             0, IWINFO_KMGMT_PSK },
    { "EAP",             0, IWINFO_KMGMT_8021x },
    { "SAE",             4, IWINFO_KMGMT_SAE },
    { "OWE",             4, IWINFO_KMGMT_OWE }
};

I'm also a bit surprised that iwinfo is even looking at the conf file rather than querying hostapd direclty (as it does with wpa_supplicant); not possible for some reason?

@wryun wryun changed the title WPA-EAP-SHA256 reported as WPA2 WPA-EAP-SHA256 reported as WPA2 rather than WPA3 Mar 17, 2024
@wryun wryun changed the title WPA-EAP-SHA256 reported as WPA2 rather than WPA3 WPA-EAP-SHA256 + ieee80211w reported as WPA2 rather than WPA3 Mar 18, 2024
wryun added a commit to wryun/iwinfo that referenced this issue Mar 18, 2024
wryun added a commit to wryun/iwinfo that referenced this issue Mar 19, 2024
wryun added a commit to wryun/iwinfo that referenced this issue Mar 20, 2024
@nasbdh9
Copy link
Contributor

nasbdh9 commented Jul 18, 2024

I have the same issue, when setting option encryption 'wpa3+ccmp' iwinfo does not check sae and wpa_key_mgmt related options, still reports as wpa2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants