Support for IBSS WPA-None TKIP - can it be implemented?

[Jouni Malinen]

On Fri, Dec 31, 2004 at 11:31:24PM +0200, Igor Bozhko wrote:

> Adding support of this method would be very nice.

WPA does not really support IBSS networks.. Yes, a simple mechanism with
hardcoded keys is described, but it is not really supported or tested for
interoperability. Because of the security limitations, I do not consider
this to be a very good operation mode. Anyway, yes, it probably could be
implemented from the technical view point. It might even work by just
configuring the hardcoded TKIP/CCMP keys (hostap_crypt_conf), but there
would be some issues with the sequence numbers and replay protection.

Full IEEE 802.11i support for IBSS networks would be somewhat better,
but it would require quite a bit more work and it is unclear whether
anyone will really start supporting this.. It would require some support
from the driver to generate events about new connection and quite a bit
more code for wpa_supplicant to handle authenticator part of WPA
negotiation (i.e., parts from hostapd functionality).

-- 
Jouni Malinen                                            PGP id EFC895FA