ibss mode with wpa2 encryption?

[Janusz Dziedzic]

On 18 December 2014 at 16:08, Ben Greear <greearb at candelatech.com> wrote:
> On 12/17/2014 10:05 PM, Janusz Dziedzic wrote:
>>
>> On 29 November 2014 at 10:51, Jouni Malinen <j at w1.fi> wrote:
>>>
>>> On Tue, Nov 25, 2014 at 04:20:03PM -0800, Ben Greear wrote:
>>>>
>>>> I am seeing auth timeouts in supplicant logs when I try to bring up two
>>>> stations like this on ath9k.  (It fails on ath10k too, but not sure if
>>>> that is a separate issue or not.)
>>>
>>>
>>>> network={
>>>>      ssid="ben-138"
>>>>      mode=1
>>>>      frequency=2462
>>>>      proto=RSN
>>>>      key_mgmt=WPA-PSK
>>>>
>>>> psk=fb926ec0b8c1467c29553d3241b03af31360b5c2a16d1640b2c151d12b70dc76
>>>>      pairwise=CCMP
>>>>      group=CCMP
>>>
>>>
>>> Yes, that should work fine. This works with mac80211_hwsim (the ibss_rsn
>>> test case in tests/hwsim).
>>>
>> Yes, I tested this, ath9k <-> ath9k. Works correctly - seems ath9k
>> using SW crypt.
>
>
> Were you disabling hw crypt with the ath9k module option, or you just
> noticed
> that it used sw crypt anyway?
>
Check ath9k_set_key():
        if ((vif->type == NL80211_IFTYPE_ADHOC ||
             vif->type == NL80211_IFTYPE_MESH_POINT) &&
            (key->cipher == WLAN_CIPHER_SUITE_TKIP ||
             key->cipher == WLAN_CIPHER_SUITE_CCMP) &&
            !(key->flags & IEEE80211_KEY_FLAG_PAIRWISE)) {
                /*
                 * For now, disable hw crypto for the RSN IBSS group keys. This
                 * could be optimized in the future to use a modified key cache
                 * design to support per-STA RX GTK, but until that gets
                 * implemented, use of software crypto for group addressed
                 * frames is a acceptable to allow RSN IBSS to be used.
                 */
                return -EOPNOTSUPP;
        }

> What kernel were you using?
>
3.18.0-rc3-wl+

>> Here is a TC log: http://pastebin.com/w5CVw6bm
>>
>> Seems ath10k have still problems here.
>
>
> I never did figure out how to make the ath10k firmware send sw-crypted
> packets,
> but if that is what is required, I can make another try at that...
>
nohwcrypt option for ath10k would be great

BR
Janusz