[PATCH RESEND] nl80211: Pass AKM to GTK rekey offload

Jouni Malinen j at w1.fi
Fri Oct 2 06:55:31 PDT 2026


On Sat, Sep 05, 2026 at 07:57:13PM -0400, Brent W wrote:
> NL80211_REKEY_DATA_AKM is part of the GTK rekey data API and cfg80211
> forwards it to drivers. wpa_supplicant currently provides the KEK, KCK,
> and replay counter when configuring GTK rekey offload, but does not
> provide the selected AKM.
> 
> This leaves drivers or firmware that require the AKM for rekey offload
> without enough information to configure the offload correctly. This is
> observable with Intel iwlwifi WoWLAN on WPA3-SAE.
> 
> Pass the selected AKM from wpa_supplicant through set_rekey_info() and
> include NL80211_REKEY_DATA_AKM in the nl80211 rekey data.
> 
> This was validated with an Intel AX200 using WPA3-SAE and PMF. With the
> AP GTK rekey interval reduced to 60 seconds, passing the SAE suite
> selector (00-0f-ac:08) kept the system in deep suspend for 600 seconds
> through multiple GTK rotations while preserving Magic Packet wake.

Thanks, applied with some cleanup.

-- 
Jouni Malinen                                            PGP id EFC895FA



More information about the Hostap mailing list