From: Mark Patruck <mark@wrapped.cx>
Subject: Re: wifi protected management frame (PMF) support
To: Stefan Sperling <stsp@stsp.name>
Cc: tech@openbsd.org
Date: Mon, 24 Nov 2025 13:09:53 +0100

On 22.11.2025 22:45, Stefan Sperling wrote:
>This patch adds protected management frame support to iwm, iwx, and qwx.
>Support for PMF is a prerequisite for WPA3.
>
>I am sending this as one giant patch for testing. I do have incremental
>changes with individual commit messages which make review a bit easier.
>If you would like to review these diffs individually, please ask me to
>send them to you.
>
>Tested by me on:
>iwm 7265, 9265	(offloads unicast PMF, multicast is done in software)
>iwx AX200	(offloads both unicast and multicast PMF)
>qwx QCNFA765	(offloads unicast PMF, multicast is done in software)

Successfully tested against Aruba AP505 APs. With your diff and MFP
enabled/required it shows for both clients 1/1 = capable/negotiated,
before 0/0 (# sh ap debug client-table).

qwx0 at pci2 dev 0 function 0 "Qualcomm QCNFA765" rev 0x01: msi
qwx0: wcn6855 hw2.1 fw 0x11088c35 address 10:e1:8e:47:f1:2b
                                    
and

iwx0 at pci3 dev 0 function 0 "Intel Wi-Fi 6 AX200" rev 0x1a, msix
iwx0: hw rev 0x340, fw 77.a20fb07d.0, address 78:2b:46:9f:7f:a2

Thanks,

	-Mark

--
Mark Patruck ( mark at wrapped.cx )
GPG key 0xF2865E51 / 187F F6D3 EE04 1DCE 1C74  F644 0D3C F66F F286 5E51
  
https://www.wrapped.cx