Page MenuHomeFreeBSD

net80211: fix CCMP/GCMP AAD for MFP frames
ClosedPublic

Authored by adrian on Jun 24 2026, 4:18 AM.
Referenced Files
F165528303: D57799.diff
Sat, Aug 8, 1:50 PM
F165432182: D57799.diff
Sat, Aug 8, 4:29 AM
Unknown Object (File)
Sun, Aug 2, 1:40 PM
Unknown Object (File)
Sun, Aug 2, 6:20 AM
Unknown Object (File)
Sun, Aug 2, 5:56 AM
Unknown Object (File)
Sat, Aug 1, 7:04 AM
Unknown Object (File)
Fri, Jul 31, 6:10 AM
Unknown Object (File)
Thu, Jul 23, 10:24 PM

Details

Summary

Update ieee80211_crypto_init_aad() to do what 802.11-2020 says -
only mask fc[0] bits 4-6 on data frames, not on management frames.
This (with other diffs to actually negotiate MFP and configure
ath(4) for MFP + software keys) allows the CCMP path to decrypt
CCMP MFP frames in the software path.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable