802.11w PMF

[Peer, Ilan]

Hi,

> -----Original Message-----
> From: Hostap [mailto:hostap-bounces at lists.infradead.org] On Behalf Of John
> Doe
> Sent: Wednesday, March 14, 2018 10:06
> To: hostap at lists.infradead.org
> Subject: 802.11w PMF
> 
> Hello guys,
> 
> 
> Can I enquire about 802.11w specific behavior?
> 
> 
> I have configured hostapd with ieee80211w set to 2 (PMF required), and
> seems like that those management frames that should be encrypted are
> encrypted indeed (flag "protected" is set and seen in Wireshark), however,
> when I use hostapd_cli and trigger "disassociate"/"deauthenticate"  my
> phone/tablet MAC addresses, both frames are unencrypted. Should it be
> considered as a proper behavior?
> I'm using 2.6 version.
> 

This would depend on disassociate/deauthentication address. If a broadcast/multicast address was used, then the frame is not encrypted, but should include the MMIE that should contain a MIC to authenticate the frame.

Regards,

Ilan.