]> git.ipfire.org Git - thirdparty/openwrt.git/commit
wifi-scripts: ucode: advertise SAE-EXT-KEY AKM alongside SAE
authorHauke Mehrtens <hauke@hauke-m.de>
Sun, 19 Apr 2026 18:28:28 +0000 (20:28 +0200)
committerHauke Mehrtens <hauke@hauke-m.de>
Sat, 2 May 2026 18:34:21 +0000 (20:34 +0200)
commita12cec9ea3c8224d6dad7d3b7339e92266f90ef8
tree5f7a0b3f6770e84a15b5290417a2170d1a54a3f5
parent1f86f4e471f81038a9b69a4f121a55637634c7cf
wifi-scripts: ucode: advertise SAE-EXT-KEY AKM alongside SAE

WPA3 Specification v3.5 ยง2.5.4 mandates that an AP's BSS Configuration
enables AKM suite selector 00-0F-AC:24 (SAE-EXT-KEY, SAE with a
group-dependent hash) whenever EHT or MLO is enabled. The WPA3 and
Wi-Fi Enhanced Open Deployment Guide v1.1 also recommends it on
non-EHT APs (Tables 3, 5, 6, 8).

Add a new sae_ext_key UCI option (enabled by default) that advertises
SAE-EXT-KEY, and FT-SAE-EXT-KEY when 802.11r is enabled, alongside
plain SAE/FT-SAE for the sae and psk-sae encryption modes.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Link: https://github.com/openwrt/openwrt/pull/23009
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
package/network/config/wifi-scripts/files-ucode/usr/share/schema/wireless.wifi-iface.json
package/network/config/wifi-scripts/files-ucode/usr/share/ucode/wifi/iface.uc