Hello, My variant of ath10k uses the normal 'native-wifi' tx path for management frames. Internally in the firmware, it seems that the management TID is flagged to expect raw frames, and I think that is why I see Action frames on-air that are not actually encrypted but which have some space added to their packet that should be filled in by the hw-crypt engine. Is there a way to get mac80211 to software-crypt just management-tid PMF frames? So far, I have not been able to find the correct place in the tx logic of mac80211... Thanks, Ben -- Ben Greear <greearb@xxxxxxxxxxxxxxx> Candela Technologies Inc http://www.candelatech.com