Re: [Madwifi-users] [PATCH] madwifi+hostapd groupkey problematic

[Alfred A. <al...@cc...>]

Hi,

>WPA Group Key packets are expected to be
>encrypted with the pairwise keys set during the preceding 4-Way
>Handshake.

...unless the AP doesn't support pairwise keys at all, then the group key
handshake packets aren't encrypted either, but the key data field that
contains the group key itself is still encrypted with the KEK.  APs that
don't support pairwise keys are however quite rare (the only one I've seen
was a Hermes 1-based one), so in practice the group key material gets
encrypted twice (once by the KEK, and together with the whole packet with
the pairwise AES/TKIP key)...just nitpicking 8-)

Best regards

Alfred Arnold