CVS: cvs.openbsd.org: src

CVSROOT:	/cvs
Module name:	src
Changes by:	[email protected]	2026/07/15 03:47:51

Modified files:
	sys/net80211   : ieee80211_crypto_tkip.c 

Log message:
Fix an inversed if-condition in ieee80211_michael_mic_failure()

Make the check for 60 seconds since the most recent previous MIC failure
work as intended. The code was enabling TKIP countermeasures if 60 seconds
have passed since the previous MIC failure. The intention is to enable
countermeasures only if less than 60 seconds have passed.

LLMS got very excited about this, even though nobody is expected to be
running an access point with WPA1 enabled in 2026.
TKIP is disabled by default. We keep it around just in case we need to
connect to the world via a forgotten 802.11g era AP out in a desert.