Subject: wep encryption problem
To: None <tech-net@NetBSD.org>
From: Konstantin KABASSANOV <Konstantin.Kabassanov@lip6.fr>
List: tech-net
Date: 08/01/2004 19:00:29
This is a multi-part message in MIME format.

------=_NextPart_000_0052_01C477F9.CE859700
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hi,

As I told you a several days ago, I observed a strange behavior with an
ath interface in hostap mode. I tested more and observed the following:

- If I make a tast from a similar host (same kernel and hardware except
that it is not in hostap mode...) everything seems to be correct. I can
ping the "aphost" host without any problem even if wep keys are different
:))). So I'm wondering if wep keys are really used for encryption...

- If I try to connect from another host, it fails, but I can see over the
interface of my hostap:

18:48:06.479116 0:9:5b:a3:22:b4 ff:ff:ff:ff:ff:ff 0150 350: sap 0e > sap
0a rr (r=90,R) len=332
                         0a0f 11b4 8181 a168 86e7 1000 c8a5 2005
                         0b02 12ad 80ca 5e82 0efb 765a ab5b df98
                         9e5d 79d4 0ec6 f44e 2ec4 8753 84e7 f49d
                         bdd6 40df 581b e0ab d51c 9c1f 81ca a3a2
                         11fb fd29 4fb7 42a6 0650 4bd3 9960 57d3
                         eafa 6d82 890e 5540 341c 1041 0f4a a1f6
                         d0e0 8b68 39f4 b362 757b 5340 af98 3463
                         9d73 a73a 32bd ba12 7e6e 051a bee9 6590
                         373e 0476 0e7d 0c23 931a 1840 90cf ac89
                         97b5 557a 0edb 2668 31bf e487 1b1d 3661
                         a972 f87b a6f7 fc4a 89b7 dafc efac 5c44
                         8690 e379 0772 e04b 4adc a990 e21f 635c
                         c475 2fdb ad1e f857 981f 55c9 72a5 554f
                         d1b6 af0f 5994 23b9 2281 9139 f0bf 74f0
                         75c5 baff 9612 9072 95c9 5652 1c6b 6a82
                         8003 4e3b 098b abc6 fb87 a145 8ce6 d378
                         0e39 e4c3 25b3 b9c2 a92f 2aa9 6c0b 5900
                         4eab 3985 e130 0aaf a779 ae58 4635 08b6
                         47b1 4649 5d7b 19c5 b088 ff24 b047 d300
                         bb24 519e ddb7 7645 f308 6ac3 4fcb a57b
                         c1c3 b9b7 c955 bcd5 75d8 0732 012a 215e 

So I really think that encryption/decryption might be bypassed
somewhere...

Konstantin

P.S. David, I'm also using the patches you proposed and succeeded in
crashing the kernel. That happened when a foreign host disconnected
brutally since the ap was pinging it... I'll try to reproduce it and to
send you the trace...

_________________________________

Konstantin K. KABASSANOV 

LIP6/CNRS
8, rue du Capitaine Scott
75015 Paris, France

Phone: +33 (0) 1 44 27 71 26
Fax:   +33 (0) 1 44 27 74 95

E-mail: konstantin@kabassanov.com
Web: http://www.kabassanov.com
_________________________________


IMPORTANT! If you have tried to reply to this mail and you received a
stupid message, announcing that the mail had been rejected as spam,
please, resend your reply to the address above.   


------=_NextPart_000_0052_01C477F9.CE859700
Content-Type: application/x-pkcs7-signature;
	name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
	filename="smime.p7s"
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------=_NextPart_000_0052_01C477F9.CE859700--