From owner-freebsd-mobile@FreeBSD.ORG  Mon Oct 27 00:13:49 2008
Return-Path: <owner-freebsd-mobile@FreeBSD.ORG>
Delivered-To: freebsd-mobile@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id BD6D21065670
	for <freebsd-mobile@freebsd.org>; Mon, 27 Oct 2008 00:13:49 +0000 (UTC)
	(envelope-from freebsd-mobile@m.gmane.org)
Received: from ciao.gmane.org (main.gmane.org [80.91.229.2])
	by mx1.freebsd.org (Postfix) with ESMTP id 77DF68FC1C
	for <freebsd-mobile@freebsd.org>; Mon, 27 Oct 2008 00:13:49 +0000 (UTC)
	(envelope-from freebsd-mobile@m.gmane.org)
Received: from list by ciao.gmane.org with local (Exim 4.43)
	id 1KuFjs-0003qR-EG
	for freebsd-mobile@freebsd.org; Mon, 27 Oct 2008 00:13:45 +0000
Received: from 200.41.broadband11.iol.cz ([90.178.41.200])
	by main.gmane.org with esmtp (Gmexim 0.1 (Debian))
	id 1AlnuQ-0007hv-00
	for <freebsd-mobile@freebsd.org>; Mon, 27 Oct 2008 00:13:44 +0000
Received: from gamato by 200.41.broadband11.iol.cz with local (Gmexim 0.1
	(Debian)) id 1AlnuQ-0007hv-00
	for <freebsd-mobile@freebsd.org>; Mon, 27 Oct 2008 00:13:44 +0000
X-Injected-Via-Gmane: http://gmane.org/
To: freebsd-mobile@freebsd.org
From: martinko <gamato@users.sf.net>
Date: Mon, 27 Oct 2008 01:13:33 +0100
Lines: 28
Message-ID: <ge313d$gou$1@ger.gmane.org>
References: <gdlk40$gq1$1@ger.gmane.org> <48FE6A07.7000507@freebsd.org>
	<gdo0vj$8t7$1@ger.gmane.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Complaints-To: usenet@ger.gmane.org
X-Gmane-NNTP-Posting-Host: 200.41.broadband11.iol.cz
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US;
	rv:1.8.1.17) Gecko/20081009 SeaMonkey/1.1.12
In-Reply-To: <gdo0vj$8t7$1@ger.gmane.org>
Sender: news <news@ger.gmane.org>
Subject: Re: WPA/TKIP preferred to WPA2/AES ?
X-BeenThere: freebsd-mobile@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Mobile computing with FreeBSD <freebsd-mobile.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-mobile>, 
	<mailto:freebsd-mobile-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-mobile>
List-Post: <mailto:freebsd-mobile@freebsd.org>
List-Help: <mailto:freebsd-mobile-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-mobile>,
	<mailto:freebsd-mobile-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 27 Oct 2008 00:13:49 -0000

martinko wrote:
> Sam Leffler wrote:
>> martinko wrote:
>>> Hallo,
>>>
>>> My wireless router has a configuration option to support both WPA / 
>>> WPA2 at the same time, so when a wireless client cannot talk modern 
>>> WPA2 it can use old WPA instead.
>>> Now it works naturally in Windows and apparently in Symbian too but 
>>> unfortunately FreeBSD (6.4) picks up WPA and less secure TKIP instead 
>>> of AES.  Would it be possible to amend this behaviour and use better 
>>> and newer protocols/algorithms/ciphers when available please ?  (that 
>>> is AES preferred to TKIP and WPA2 instead of WPA etc.)
>>>
>>
>> man wpa_supplicant.conf
> 
> Yeah, I could use proto="RSN WPA" but I was wondering whether it 
> wouldn't be better if the system autoselected the best available 
> protocol/cipher (if not specified otherwise) which in this case would be 
> WPA2/CCMP instead of WPA/TKIP.  Or is it not desirable for some reasons?
> 

I've checked it with 7.0 and 7.1 and there's an improvement -- both of 
them autoselected WPA2 but cipher was still TKIP -- it's better than in 
6.x yet still not ideal (which would be WPA2/AES-CCM in this case).

M.