Index | Thread | Search

From:
Kirill A. Korinsky <kirill@korins.ky>
Subject:
Re: wifi protected management frame (PMF) support
To:
tech@openbsd.org
Date:
Sun, 23 Nov 2025 16:44:39 +0100

Download raw body.

Thread
On Sat, 22 Nov 2025 22:45:08 +0100,
Stefan Sperling <stsp@stsp.name> wrote:
> 
> This patch adds protected management frame support to iwm, iwx, and qwx.
> Support for PMF is a prerequisite for WPA3.
> 
> I am sending this as one giant patch for testing. I do have incremental
> changes with individual commit messages which make review a bit easier.
> If you would like to review these diffs individually, please ask me to
> send them to you.
> 
> Tested by me on:
> iwm 7265, 9265	(offloads unicast PMF, multicast is done in software)
> iwx AX200	(offloads both unicast and multicast PMF)
> qwx QCNFA765	(offloads unicast PMF, multicast is done in software)
> 
> Use of PMF is controlled by the access point, so there is nothing to
> configure with ifconfig. Please check if your access point offers settings
> related to management frame protection related when testing this.
> Tests in any combination of PMF disabled/optional/required across a range
> of access points would be welcome.
> 
> In particular, I don't have any iwx "MA" devices to test with. There
> could still be unexpected problems such as firmware crashes on these.
> If you enable 'ifconfig iwx0 debug' then the driver should display the
> name of its firmware file in dmesg. If this name begins with "iwx-ma-"
> then you are using an MA device.
>

Tested on:

iwx0 at pci0 dev 20 function 3 "Intel Wi-Fi 6 AX201" rev 0x00, msix
iwx0: hw rev 0x350, fw 77.a20fb07d.0, address 98:8d:46:21:2b:6d

against both optional and required PMF on network based on Unifi Nano HD
version 6.7.31

-- 
wbr, Kirill