[PATCH v4 00/13] MLD STA: Add support for four-way handshake and SAE external authentication

Jouni Malinen j at w1.fi
Sun Nov 6 15:04:57 PST 2022


On Thu, Nov 03, 2022 at 01:38:43PM +0530, Veerendranath Jakkam wrote:
> This patch series has changes to support MLO connection EAPOL
> Four-Way, group rekey handshake and SAE external authentication support.
> 
> Note:
> PATCH 0011 - ("MLD STA: Add support for SAE external authentication")
> dependent on the below kernel changes which are still under review.
> - https://patchwork.kernel.org/project/linux-wireless/list/?series=678187&state=*
> 
> Rohan Dutta (4):
>   MLD STA: Use AP MLD address to derive pairwise keys
>   MLD STA: Configure pairwise keys using AP MLD address
>   MLD STA: Use AP MLD address as destination for 4WHS EAPOL frames
>   MLD STA: Add support for group rekeying
> 
> Veerendranath Jakkam (9):
>   nl80211: Get all requested MLO links information from (re)association
>     events
>   MLD STA: set MLO connection info to wpa_sm
>   MLD STA: Add MLO KDEs for 2/4 and 4/4 EAPOL frames
>   MLD STA: Add support to configure keys with MLO link ID
>   MLD STA: Add support for processing EAPOL 3/4 frame
>   MLD STA: Add support for validating MLO KDEs for 4WHS EAPOL frames
>   MLD STA: Add support for SAE external authentication
>   MLD STA: Add PMKSA entries with both AP MLD address and AP link
>     addresses
>   MLD STA: Indicate supplicant MLO support to driver's SME

Thanks, applied patch 1..10. Patch 11/13 waits for the kernel change to
get accepted first and I don't want to apply 13/13 either to enable this
before everything else has been completed and tested.

I ended up doing quite a bit of cleanup for these. In particular, I did
not want to introduce the new wpa_supplicant_process_mlo_3_of_4()
function in patch 7/13 as a separate variant for the non-MLO case since
that seemed to bring in way too much risk of missing some changes. This
version was already removing some items like DPP and OCV without any
kind of description of that in the commit message.

Since there are technical differences in the commits I applied, please
go through the exact version that ended up in hostap.git and it would
also be good if that would be tested to be in working condition (which
the remaining three patches added on top of the current snapshot).

-- 
Jouni Malinen                                            PGP id EFC895FA



More information about the Hostap mailing list