Page MenuHomeFreeBSD

net80211: fix CCMP/GCMP AAD for MFP frames
ClosedPublic

Authored by adrian on Jun 24 2026, 4:18 AM.
Referenced Files
Unknown Object (File)
Thu, Sep 24, 6:21 PM
Unknown Object (File)
Thu, Sep 24, 4:36 PM
Unknown Object (File)
Thu, Sep 24, 3:05 PM
Unknown Object (File)
Wed, Sep 23, 10:51 PM
Unknown Object (File)
Sat, Sep 19, 6:09 PM
Unknown Object (File)
Tue, Sep 15, 5:32 AM
Unknown Object (File)
Thu, Sep 10, 8:38 PM
Unknown Object (File)
Thu, Sep 10, 9:07 AM

Details

Summary

Update ieee80211_crypto_init_aad() to do what 802.11-2020 says -
only mask fc[0] bits 4-6 on data frames, not on management frames.
This (with other diffs to actually negotiate MFP and configure
ath(4) for MFP + software keys) allows the CCMP path to decrypt
CCMP MFP frames in the software path.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 74181
Build 71064: arc lint + arc unit