[PATCH 00/20] Add IEEE 802.11bn Security Profile support

[Peer, Ilan]

Hi Jouni,

> -----Original Message-----
> From: Hostap <hostap-bounces at lists.infradead.org> On Behalf Of Jouni
> Malinen
> Sent: Tuesday, September 1, 2026 9:36 PM
> To: Otcheretianski, Andrei <andrei.otcheretianski at intel.com>
> Cc: hostap at lists.infradead.org
> Subject: Re: [PATCH 00/20] Add IEEE 802.11bn Security Profile support
> 
> On Wed, Jun 10, 2026 at 04:11:53PM +0300, Andrei Otcheretianski wrote:
> > This series adds support for the IEEE 802.11bn Security Profile
> > element to both hostapd and wpa_supplicant as defined in section 37.32
> > of Draft
> > IEEE802.11bn/D1.4
> > Add testing coverage for Security Profile flows across SAE, OWE,
> > EPPKE, and IEEE 802.1X authentication.
> 
> As I noted earlier, there was another contribution that adds this same
> functionality. It took a while to go through all the details, but my conclusion
> is that the contributions were quite similar, but the other set felt more
> complete especially on the AP side functionality needed for product
> purposes.
> 

Sure. Understood. As I also noted, the initial series had some bugs, so I
guess the current version is better.

> I ended up applying the other patchset for security profile support. I did
> apply a couple of patches from the set you sent since they were on
> independent items that were not really directly related to security profiles.
> The patches 15 and 16 might be in that category as well, but they had some
> dependencies that ended up with somewhat inconvenient merge conflicts
> without those changes, so I did not apply them now. If you think they are
> applicable, a rebased version would be appreciated.
> 

I'll have a look and update if needed.

> I tried to go through the details on the patches that are specific to security
> profiles and compare them to the functionality that is now in hostap.git. I
> did not identify any significant missing capabilities, but if you think I've
> missed something, any new patch on top of the current hostap.git snapshot
> to extend or fix security profile functionality would be welcome.
> 

Would you be interested in the Draft P802.11bt D3.0 implementation? I've done
it on top of our security profile support, but I can port it on top of main branch.

Regards,

Ilan.