mirror of
https://git.openwrt.org/openwrt/openwrt.git
synced 2026-05-04 09:31:26 +02:00
The WPA3 and Wi-Fi Enhanced Open Deployment Guide v1.1 (Table 4, "SAE Groups") recommends that WPA3-Personal APs advertise support for SAE groups 19, 20 and 21: * group 19 - ECP 256-bit (NIST P-256) * group 20 - ECP 384-bit (NIST P-384) * group 21 - ECP 521-bit (NIST P-521) hostapd's default is group 19 only, which leaves the two larger ECP groups unavailable even though the peer may prefer them. Set sae_groups = "19 20 21" as the default for any BSS whose auth_type is sae or psk-sae (SAE, SAE Transition and SAE Compatibility modes). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> Link: https://github.com/openwrt/openwrt/pull/23009 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>