Re: hardware WEP encryption in 1.4.9


From: Jacques Caron (Jacques.Caron_at_IPsector.com)
Date: 2002-09-15 17:35:21 UTC



Hi,

Just wondering if card-based WEP encryption might be broken in hostap mode because they added provisions for per-client keys? Also, I guess that unless that is indeed the case (and somebody finds out how it works...), per-client keys would still require host-based encryption?

Just my EUR 0.02...

Jacques.

At 19:08 15/09/2002, Jouni Malinen wrote:
>On Sun, Sep 01, 2002 at 05:16:52PM +0300, Vladimir Ivaschenko wrote:
>
> > Did anyone check if hardware WEP encryption in HostAP mode started to work
> > in 1.4.9 firmware?
>
>Quick test seems to indicate that card-based WEP encryption does indeed
>work with station firmware version 1.4.9. I also tested this with 1.4.2
>(by first upgrading the f/w to 1.4.9 to get the assocation done and then
>downgrading on the fly by reseting the card) and it did not work without
>host-based encryption. So, it seems that something got fixed between
>1.4.2 and 1.4.9.
>
>It might be time to remove the forced host_encrypt from Master mode.
>Since I have seen this working only with STA f/w 1.4.9, I think I will
>make a check that will set host_encrypt=1 whenever Master mode is
>initiated with any STA f/w before 1.4.9 and leave it to whatever value
>it was, if STA f/w is 1.4.9 or newer. This would make it configurable so
>it will be easy to test whether any specific firmware version works and
>then make the default selection more correct if some other firmware
>versions are reported working with WEP encryption in Host AP mode.
>
>--
>Jouni Malinen PGP id EFC895FA



This archive was generated by hypermail 2.1.4.