broadcast data encryption

[Johannes Berg]

> I see when wpa_supplicant finishes the 4-way-HS successfully the DHCP
> request gets an ack from the server, and the the station gets an IP
> assigned.
> 
> The DHCP request is a broadcast frame, so does it get encrypted by GTK
> while leaving the station?
> 
> OR it is still encrypted with pairwise TK ?

On the wireless level it's a unicast frame since it's sent to the AP.
STAs never send broadcast frames in a BSS, only the AP does.

johannes
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 828 bytes
Desc: This is a digitally signed message part
Url : http://lists.shmoo.com/pipermail/hostap/attachments/20080506/1f920a5b/attachment-0001.pgp