WAPI Support in wpa_supplicant

[Jouni Malinen]

On Fri, Feb 05, 2016 at 01:05:29PM +0000, Shanbhag, Sandeep wrote:
> I read the very old mailing lists (2009) about lack of WAPI support in wpa_supplicant.
> I would like to know if there has been any change since then and what is the official status of WAPI support in wpa_supplicant.

Not much has changed in this area.

> Basically I would like to know if the latest version of wpa_supplicant supports WAPI Supplicant and WAPI Authenticator functionalities?

There is no such functionality in the current open source project.

> I could see only few WAPI related macros in wpa_supplicant and some very minimal logic using these macros.
> What is the purpose of this?

There are number of proprietary WAPI implementations based on the open
source wpa_supplicant. These macros make it easier to integrate such
off-tree implementations on top of different wpa_supplicant versions.

> What I understood after some digging up is that if the chip supports SMS4 encryption engine and the driver supports WAPI changes then wpa_supplicant can be used to carry out the security handshake and derive encryption keys.
> Can somebody on the list who has tried this point to any documentation explaining how nl80211, cfg80211, driver and wpa_supplicant together be configured to support WAPI Supplicant and Authenticator functionalities?

Such functionality seems to be available only in proprietary
implementations from various Wi-Fi vendors. So far, I have not seen much
interest in someone contributing such an implementation into the open
source project.

As far as nl80211/cfg80211 is concerned, there is sufficient interface
functionality to support WAPI. There are even couple of upstream Linux
drivers that seem to advertise support for this.


PS.

The old mailing list is not available anymore, so I replaced cc with the
new list.

-- 
Jouni Malinen                                            PGP id EFC895FA