On Wed, 2017-10-25 at 14:49 +0530, Vidyullatha Kanchanapally wrote: > With support for new AKM suites (example FILS-SHA256), the KEK length > can now be more than NL80211_KEK_LEN and the KCK length can be zero. > Add changes in cfg80211 to specify the length of KEK, and make KCK > optional. Make NL80211_REKEY_DATA_KEK as NLA_BINARY to enforce a maximum > length check. It seems to me that some sort of feature negotiation would be required here, since you can't just assume all (existing) drivers will understand this? johannes
