Index | Thread | Search

From:
Stefan Sperling <stsp@stsp.name>
Subject:
Re: add WPA3 support
To:
Avraham Hollander <anhollander516@gmail.com>
Cc:
tech@openbsd.org
Date:
Wed, 16 Sep 2026 11:28:49 +0200

Download raw body.

Thread
  • Avraham Hollander:

    add WPA3 support

    • Stefan Sperling:

      add WPA3 support

On Tue, Sep 15, 2026 at 08:38:01PM -0400, Avraham Hollander wrote:
> Hi. I hope I am replying to this correctly.
> 
> It's been about a month since the last reply on this thread.
> 
> Is there still a chance of this being merged for 8.0? Or is it too
> late in the release cycle? If it is, that is totally understandable.

Functionally, everything seems to be working as expected so far, but there
is still some work left to do before the result can be committed.

There is an on-going security audit which is mandatory for all projects
funded by NGI zero. This audit is testing for things like downgrade attacks,
which AFAIK nobody else has been doing. I do not want to commit anything
before this audit has completed.

Aside from NGI zero audit, I have received off-list review comments from
other OpenBSD developers which I will need to address as well.

I would rather see this feature go in during an early phase of the release
cycle and have some runway left for fixing issues before the feature is
shipped in a release. We are trying to keep things simple but there is
still a lot of room for making mistakes.

> Are you waiting for more testing feedback? I have an assortment of
> cards, various Intel, Realtek, Qualcomm, and I think still have an
> MT7921. I am willing to test at least some of them and see how they
> fare.

The main criteria for WPA3 support is whether our driver supports PMF (i.e.
Protected Management Frames).
All drivers which support PMF currently have already been tested with WPA3.
If you need WPA3 in additional drivers, adding PMF support to those drivers
(patches welcome) will allow WPA3 to work as well.