Page MenuHomeFreeBSD

net80211: fix CCMP/GCMP AAD for MFP frames
ClosedPublic

Authored by adrian on Jun 24 2026, 4:18 AM.
Referenced Files
F174821293: D57799.id181132.diff
Tue, Oct 6, 5:32 AM
F174745966: D57799.id180496.diff
Mon, Oct 5, 5:01 PM
Unknown Object (File)
Mon, Oct 5, 12:51 AM
Unknown Object (File)
Fri, Oct 2, 8:26 AM
Unknown Object (File)
Thu, Oct 1, 9:12 AM
Unknown Object (File)
Thu, Sep 24, 6:21 PM
Unknown Object (File)
Thu, Sep 24, 4:36 PM
Unknown Object (File)
Thu, Sep 24, 3:05 PM

Details

Summary

Update ieee80211_crypto_init_aad() to do what 802.11-2020 says -
only mask fc[0] bits 4-6 on data frames, not on management frames.
This (with other diffs to actually negotiate MFP and configure
ath(4) for MFP + software keys) allows the CCMP path to decrypt
CCMP MFP frames in the software path.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable