linux-kernel - Re: [PATCH] wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <ac9f0cb4-ba12-44f1-b32f-d17e24fe426a@app.fastmail.com>
Date: Sun, 04 Aug 2024 13:37:13 +0200
From: "Janne Grunau" <j@...nau.net>
To: "arend.vanspriel@...adcom.com" <arend.vanspriel@...adcom.com>,
 "Aditya Garg" <gargaditya08@...e.com>,
 "devnull+j.jannau.net@...nel.org" <devnull+j.jannau.net@...nel.org>
Cc: asahi@...ts.linux.dev,
 "brcm80211-dev-list.pdl@...adcom.com" <brcm80211-dev-list.pdl@...adcom.com>,
 "brcm80211@...ts.linux.dev" <brcm80211@...ts.linux.dev>,
 "kvalo@...nel.org" <kvalo@...nel.org>,
 "linus.walleij@...aro.org" <linus.walleij@...aro.org>,
 LKML <linux-kernel@...r.kernel.org>,
 "linux-wireless@...r.kernel.org" <linux-wireless@...r.kernel.org>,
 "Hector Martin" <marcan@...can.st>,
 "stable@...r.kernel.org" <stable@...r.kernel.org>
Subject: Re: [PATCH] wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion

Hej,

On Sun, Aug 4, 2024, at 13:04, Arend Van Spriel wrote:
> On August 4, 2024 8:27:04 AM Aditya Garg <gargaditya08@...e.com> wrote:
>
>> Hi
>>
>> WPA3 is broken on T2 Macs (atleast on 4364) for a long time. I was under 
>> the impression brcmfmac doesn't support it.
>>
>> Anyways, I've asked a fedora user to compile a kernel with CONFIG_BRCMDBG.
>>
>> If you want logs without it, look over here:
>> https://pastebin.com/fnhH30JA
>
> Not sure what to make of this. The interface comes up without any obvious 
> error and then another interface is created by another driver:

I've bisected the authentication timeouts for WPA2-PSK and WPA3-SAE (and
probably every other authentication method) down to

https://w1.fi/cgit/hostap/commit/?id=41638606054a09867fe3f9a2b5523aa4678cbfa5

With that commit reverted on top of wpa_supplicant 2.11 both WPA2 and WPA3
work. Looks after cursory inspection if brcmfmac fails to notify wpa_supplicant
that it is authenticated.

best regards,
Janne