Page MenuHomeFreeBSD

net80211: fix CCMP/GCMP AAD for MFP frames
ClosedPublic

Authored by adrian on Jun 24 2026, 4:18 AM.
Referenced Files
F169086377: D57799.id180496.diff
Mon, Aug 31, 9:14 AM
F169043140: D57799.id180496.diff
Mon, Aug 31, 5:37 AM
F168984691: D57799.id181132.diff
Mon, Aug 31, 1:34 AM
F168949258: D57799.id.diff
Sun, Aug 30, 10:13 PM
F168947808: D57799.id180496.diff
Sun, Aug 30, 10:01 PM
Unknown Object (File)
Sun, Aug 30, 5:46 AM
Unknown Object (File)
Sun, Aug 23, 12:57 AM
Unknown Object (File)
Fri, Aug 21, 4:25 PM

Details

Summary

Update ieee80211_crypto_init_aad() to do what 802.11-2020 says -
only mask fc[0] bits 4-6 on data frames, not on management frames.
This (with other diffs to actually negotiate MFP and configure
ath(4) for MFP + software keys) allows the CCMP path to decrypt
CCMP MFP frames in the software path.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable