Index | Thread | Search

From:
Lucas Raab <tuftedocelot@fastmail.fm>
Subject:
Re: wifi protected management frame (PMF) support
To:
Stefan Sperling <stsp@stsp.name>
Cc:
tech@openbsd.org
Date:
Tue, 25 Nov 2025 02:46:21 +0000

Download raw body.

Thread
On Sat, Nov 22, 2025 at 10:45:08PM +0100, Stefan Sperling wrote:
> This patch adds protected management frame support to iwm, iwx, and qwx.
> Support for PMF is a prerequisite for WPA3.
> 
> I am sending this as one giant patch for testing. I do have incremental
> changes with individual commit messages which make review a bit easier.
> If you would like to review these diffs individually, please ask me to
> send them to you.
> 
> Tested by me on:
> iwm 7265, 9265	(offloads unicast PMF, multicast is done in software)
> iwx AX200	(offloads both unicast and multicast PMF)
> qwx QCNFA765	(offloads unicast PMF, multicast is done in software)
> 
> Use of PMF is controlled by the access point, so there is nothing to
> configure with ifconfig. Please check if your access point offers settings
> related to management frame protection related when testing this.
> Tests in any combination of PMF disabled/optional/required across a range
> of access points would be welcome.

Works here with a Ubiquiti U7 Pro version 8.2.17 and PMF set to optional as
well as required. This is also in their WPA2/3 combo mode.

iwx0 at pci6 dev 0 function 0 "Intel Wi-Fi 6 AX210" rev 0x1a, msix
iwx0: hw rev 0x420, fw 77.f92b5fed.0, pnvm ce1a5094, address 04:cf:4b:21:77:a3

Similar to Landry, I see changes in the rsncap from 0x8c when optional and
0xcc to required.