certificates icon indicating copy to clipboard operation
certificates copied to clipboard

Add support for Suite-B cryptography

Open Gunni opened this issue 2 years ago • 0 comments

Hello!

  • Vote on this issue by adding a 👍 reaction
  • If you want to implement this feature, comment to let us know (we'll work with you on design, scheduling, etc.)

Issue details

I would like to use WPA3-Enterprise with 192-bit security level.

Right now I get this error in adb logcat on my android: WifiKeyStore: Invalid certificate type for Suite-B: 1.2.840.10045.4.3.2 or insufficient bit length: 0.

Why is this needed?

For certificates used at the 192-bit security level, the subject public key must use the secp384r1 curve and be signed with the secp384r1 curve.

Wi-Fi alliance requires the use of both ECDSA secp384r1 and RSA 3072 certificates in WPA3-Enterprise 192-bit security networks.

Gunni avatar Oct 22 '23 20:10 Gunni