git: 077108d94ae1 - main - rtwn: add support for AES-GCM-128 in the supported software cipher set

From: Adrian Chadd <adrian_at_FreeBSD.org>
Date: Thu, 27 Mar 2025 01:28:50 UTC
The branch main has been updated by adrian:

URL: https://cgit.FreeBSD.org/src/commit/?id=077108d94ae1928cdeed5e63d87a8b53a9dc0382

commit 077108d94ae1928cdeed5e63d87a8b53a9dc0382
Author:     Adrian Chadd <adrian@FreeBSD.org>
AuthorDate: 2025-03-01 04:36:42 +0000
Commit:     Adrian Chadd <adrian@FreeBSD.org>
CommitDate: 2025-03-27 01:28:46 +0000

    rtwn: add support for AES-GCM-128 in the supported software cipher set
    
    I'm testing this with rtwn(4) NICs right now, so enable it here.
    
    Locally tested:
    
    * RTL8812AU / RTL8821AU, STA mode (with some wpa_supplicant.conf
      shenanigans to force GCMP as the pairwise key to an OpenWRT AP
      configured to use GCMP but without requiring MFP.)
    
    Differential Revision:  https://reviews.freebsd.org/D49190
    Reviewed by:    bz
---
 sys/dev/rtwn/if_rtwn.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/sys/dev/rtwn/if_rtwn.c b/sys/dev/rtwn/if_rtwn.c
index 2003fa7d20be..7df1b78db37b 100644
--- a/sys/dev/rtwn/if_rtwn.c
+++ b/sys/dev/rtwn/if_rtwn.c
@@ -298,6 +298,11 @@ rtwn_attach(struct rtwn_softc *sc)
 	sc->sc_node_free = ic->ic_node_free;
 	ic->ic_node_free = rtwn_node_free;
 
+	/* Note: this has to happen AFTER ieee80211_ifattach() */
+	ieee80211_set_software_ciphers(ic, IEEE80211_CRYPTO_WEP |
+	    IEEE80211_CRYPTO_TKIP | IEEE80211_CRYPTO_AES_CCM |
+	    IEEE80211_CRYPTO_AES_GCM_128);
+
 	rtwn_postattach(sc);
 	rtwn_radiotap_attach(sc);