Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

luci-mod-network: Cipher option is not required for WPA3 Enterprise security mode #6962

Open
morse-sophronia opened this issue Mar 4, 2024 · 4 comments

Comments

@morse-sophronia
Copy link

Cipher option is not required for WPA3 Enterprise security mode, as Openwrt only supports CCMP cipher for wpa3.
image

Steps to reproduce:

image

Actual behavior:

These options for Cipher is not required and it can default to CCMP

Expected behavior:

if encryption is wpa3, default cipher to CCMP

morse-sophronia added a commit to morse-sophronia/luci that referenced this issue Mar 4, 2024
… Enterprise security mode

Signed-off-by: morse-sophronia <160552744+morse-sophronia@users.noreply.github.com>
@morse-sophronia
Copy link
Author

#6963

@systemcrash
Copy link
Contributor

I agree with this observation, but there may be newer ciphers in the future which could appear there. So the choice field should remain.

@brada4
Copy link

brada4 commented Mar 4, 2024

It should be AES and AES192, certainly no TKIP.
https://www.wi-fi.org/system/files/Wi-Fi_Alliance_Technical_Note_TKIP_v1.0.pdf

@Neustradamus
Copy link

I confirm no TKIP for WPA3:

  • WPA3 Personal -> Simultaneous Authentication of Equals (SAE) with forward secrecy (FS/PFS) -> GCMP - AES
  • WPA3 Enterprise -> 802.1X/EAP -> GCMP - AES

It must be solved.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants