set_ptk_after_assoc SM flag in hostapd

nenhard nenhard at gmail.com
Mon Aug 15 02:39:51 PDT 2016


Hi,

There is set_ptk_after_assoc SM flag in wpa_supplicant but not hostapd.

qca-peregrine binary distribution module has issue with double key
installation via wpa_ft_install_ptk() call.
Two copies of key will create two TSC replay counters.
TX packets will have CCMP Ext. Initialization Vector which will repeat +0
and then jump +2 in subsequent packages instead +1.
Client will drop those packets.
There should not be "FT: Retry PTK configuration after association" for
qca-peregrine.
PTK configuration should be attempted only once and after association for
this device.



More information about the Hostap mailing list