Thread Links Date Links
Thread Prev Thread Next Thread Index Date Prev Date Next Date Index

Re: [STDS-802-11-TGBP] PS MAC SP Set #3

Hi Bo,

 

I request to present 11-26/1891 https://mentor.ieee.org/802.11/dcn/26/11-26-1891-00-00bp-security-concerns-analysis.pptx in 5 minutes before we discuss this SP again. Hopefully this can help to improve the discussion/debate efficiency.

 

Thanks,

 

Hui

 

 

From: Guy-Armand Kamendje <guy-armand@xxxxxxxx>
Sent: Wednesday, September 16, 2026 5:03 PM
To: STDS-802-11-TGBP@xxxxxxxxxxxxxxxxx
Subject: Re: [STDS-802-11-TGBP] PS MAC SP Set #3

 

Caution: This e-mail originated outside Infineon Technologies. Please be cautious when sharing information or opening attachments especially from unknown senders. Refer to our intranet guide to help you identify Phishing email.

 

Hello BO, 

Could you please update SP #2 in PS MAC SP Set #3 as follows? 

SP #2: Do you agree on the following?

When the second AMP Authentication message contains an indication from the non-AP AMP STA that the third message is required, the second message  includes a challenge.

    • In this case, the third message (i.e., AMP Authentication Confirm message) consists at least of the response to the challenge and other security parameters which may be common to Authentication message 1 and Authentication message 2
  • Note: The challenge may be the encrypted output of a random number and the hash of the nonce and the IDs
  • Note: The response to the challenge is the encrypted output of the hash of the IDs and the random number from message 2
  • Note: This does not apply to mono static backscatter.
  • Note: This does not apply to AMP-enabled non-AP STAs.

Thanks 

G

 

On Wed, Sep 16, 2026 at 3:20 AM Guy-Armand Kamendje <guy-armand@xxxxxxxx> wrote:

hello BO, 

Please update SP #1 in PS MAC SP Set #3 as follows:

SP #1: Do you agree on the following?

Based on motion #64, #65, #66, #67,

The first authentication message is called Authentication Request,

The second authentication message is called Authentication Response

If mutual authentication is required (i.e., optional), a third message called Authentication Confirm is sent from the AMP AP to the AMP non-AP AMP STA prior to protected UL/DL communication.

 

Note: The requirement for the 3rd message (i.e., Authentication Confirm) may be indicated by the non-AP AMP STA in the Authentication Response message

 

•Note: This does not apply to mono static backscatter.

•Note: This does not apply to AMP-enabled non-AP STAs.

[Reference: 11-26/1346r1]

 

On Tue, Sep 15, 2026 at 2:20 PM Guy-Armand Kamendje <guy-armand@xxxxxxxx> wrote:

Hi BO, 

Please update SP2 in  PS MAC SP Set #3  as follows:

SP #2: Do you agree on the following?

 

To achieve mutual authentication,

•The AMP Authentication Request message consists of at least the Authenticator’s identifier, a Nonce, a replay counter, and other security parameters which are still TBD.

•The AMP Authentication Response message consists of at least the responder’s identifier, a Nonce, the replay counter, an encrypted challenge and other security parameters which are still TBD.

•The AMP Authentication Confirm message consists of at least a status, the replay counter, the response to the challenge and other security parameters which are still TBD.

•Note: This does not apply to mono static backscatter.

•Note: This does not apply to AMP-enabled non-AP STAs.

[Reference: 11-26/1346r1]

G

 

On Tue, Sep 15, 2026 at 2:59 AM Guy-Armand Kamendje <guy-armand@xxxxxxxx> wrote:

Hello BO, 

Please update the text of SP #1, SP #2,  SP #4 and  SP #5 in PS MAC SP Set #3 as follows. 

Could you please confirm that these SPs will be coming back in the queue during the meeting tomorrow?

G

SP #1: Do you agree on the following?

Based on motion #67, prior to protected AMP DL and UL communication, mutual authentication is achieved with the exchange of at most 3 messages. The messages are: Authentication Request, Authentication Response and Authentication Confirm.

Note: The authentication request/response messages are the two messages involved in Motion #66.

•Note: This does not apply to mono static backscatter.

•Note: This does not apply to AMP-enabled non-AP STAs.

[Reference: 11-26/1346r1]

 

SP #2: Do you agree on the following?

 

 

•The AMP Authentication Request message consists at least of the Authenticator’s identifier, a Nonce, a replay counter, and other security parameters which are still TBD.

•The AMP Authentication Response message consists at least of the responder’s identifier, a Nonce, the replay counter, a challenge and other security parameters which are still TBD.

•The AMP Authentication Confirm message consists at least of a status, the replay counter, the response to the challenge and other security parameters which are still TBD.

•Note: This does not apply to mono static backscatter.

•Note: This does not apply to AMP-enabled non-AP STAs.

[Reference: 11-26/1346r1]

 

SP #4: Do you agree on the following?

 

•AMP mutual Authentication could be initiated using either one of the following methods:

•A field in the DL AMP Triggering frame, or an AMP Authentication frame

•A field in an UL AMP Response frame from an AMP STA (in response to an AMP Triggering frame)

•Note: This does not apply to mono static backscatter.

•Note: This does not apply to AMP-enabled non-AP STAs.

[Reference: 11-26/1346r1]

 

SP #5: Do you agree on the following?

 

•An AMP Authentication frame containing an AMP deauthentication request shall be protected.

•Note: This does not apply to mono static backscatter.

•Note: This does not apply to AMP-enabled non-AP STAs.

[Reference: 11-26/1346r1]

To unsubscribe from the STDS-802-11-TGBP list, click the following link: https://listserv.ieee.org/cgi-bin/wa?SUBED1=STDS-802-11-TGBP&A=1

To unsubscribe from the STDS-802-11-TGBP list, click the following link: https://listserv.ieee.org/cgi-bin/wa?SUBED1=STDS-802-11-TGBP&A=1