Re: SAE lists, PSK lists and WPA3 transition mode

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Feb 21, 2020 at 10:39:37PM -0600, Teunis Peters wrote:
> Is there some special combination to getting PSK lists working with
> SAE lists for WPA3/Personal Transition mode?
> 
> I've had some luck with either one or the other, but never both ...
> ... although what I want is sae lists to work - when passwords are
> short enough - in transition mode for WPA2 as well.
> However WPA2 PSKs are stored differently than SAE lists.   Not really
> sure how to approach this either.

You can configure WPA-PSK passphrases and SAE passwords separately. If
you want the same string to be used both with WPA-PSK and SAE, you'll
need to configure it separately for each in this type of case where
more than a single passphrase/password is used. One thing to note is
that while it is possible to configure multiple wildcard WPA-PSK
passphrases that same design is not possible with SAE passwords. In
other words, you'll need to identify the SAE passwords either by using
unique MAC addresses or by using SAE Password Identifiers.

As an example, you could have following:

wpa_key_mgmt=SAE WPA-PSK
sae_password=password0|mac=02:00:00:00:00:00
sae_password=password1|mac=02:00:00:00:00:01
wpa_psk_file=hostapd.wpa_psk

and hostapd.wpa_psk would have following:

02:00:00:00:00:00 password0
02:00:00:00:00:01 password1

-- 
Jouni Malinen                                            PGP id EFC895FA

_______________________________________________
Hostap mailing list
Hostap@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/hostap



[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]

  Powered by Linux