Re: add WPA3 support

[email protected] Mon, 20 Jul 2026 18:09:12 +0200
Newsgroups gmane.os.openbsd.tech
Message-ID <[email protected]>
Le Sat, Jul 18, 2026 at 01:40:08PM +0200, Stefan Sperling a écrit :
> The patch below adds support for WPA3 to the net80211 subsystem.
> 
> This effort is supported by the NLnet Foundation's NGI0 Commons Fund.
> Without such support, I would not have been able to invest the time
> required to work on this. I am very grateful to be given this opportunity.
> 
> More review will be needed to ensure that this implementation of WPA3
> is free of bugs. Please keep this in mind while running this patch.
> NLnet will arrange an independent security audit once we consider our
> part of this work complete.
> 
> All drivers which support PMF can use WPA3, which are: iwm, iwx, and qwx
> So far, I have tested this patch on iwx AX200 only. I will roll out
> this patch to more of my devices now. Help with testing is welcome.

seems to be working fine against my old MSM430 APi (which i really doubt
supports wpa3) and on a somewhat more modern 'Freebox POP' with the qwx
in the arm64 omnibook X.

qwx0 at pci3 dev 0 function 0 "Qualcomm QCNFA765" rev 0x01: msi
qwx0: wcn6855 hw2.1 fw 0x11088c35

ifconfig does list wpa3 and sae:

ieee80211: join Gruiik chan 60 bssid xxxx -69dBm wpakey wpaprotos wpa2,wpa3 wpaakms psk,sha256-psk,sae wpaciphers ccmp wpagroupcipher ccmp

though im not sure it actually uses wpa3 or fallbacks to wpa2.
'ifconfig qwx0 wpaprotos wpa3' doesnt seem to remove wpa2 from
wpaprotos, so what should be done to ensure wpa3 is used ?
configure an ssid with only wpa3 ?

Landry