[RFC 21/30] SMD: Install target AP MLD TK before ST execution

Ilan Peer ilan.peer at intel.com
Wed Oct 21 06:43:39 PDT 2026


The ST Execute exchange with the target AP MLD must be protected
with the newly derived per-AP MLD PTK, so install it to the driver
before requesting ST execution.

Signed-off-by: Ilan Peer <ilan.peer at intel.com>
---
 wpa_supplicant/smd.c | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/wpa_supplicant/smd.c b/wpa_supplicant/smd.c
index c3e6e7d1743f..f80b5ff94cc8 100644
--- a/wpa_supplicant/smd.c
+++ b/wpa_supplicant/smd.c
@@ -217,6 +217,18 @@ static int wpas_smd_st_execute(struct wpa_supplicant *wpa_s)
 	if (wpa_s->smd.smd_per_ap_mld_ptk_mode) {
 		int ret;
 
+		/*
+		 * The ST Execute exchange with the target AP MLD must be
+		 * protected with the newly derived per-AP MLD PTK, so install
+		 * it to the driver before requesting ST execution.
+		 */
+		if (wpa_sm_smd_install_tptk(wpa_s->wpa, wpa_s->ap_mld_addr)) {
+			wpa_printf(MSG_DEBUG,
+				   "SMD: Failed to install per-AP MLD PTK");
+			wpas_smd_deinit(wpa_s);
+			return -1;
+		}
+
 		ret = wpa_sm_smd_calc_mic(wpa_s->wpa,
 					  wpa_s->ap_mld_addr,
 					  wpa_s->smd.snonce,
-- 
2.55.0




More information about the Hostap mailing list