Thread Links Date Links
Thread Prev Thread Next Thread Index Date Prev Date Next Date Index

[STDS-802-11-TGM] DecoyAuth for TGmf

--- This message came from the IEEE 802.11 Task Group M Technical Reflector ---

Hello all,

Thank you for the opportunity to present DecoyAuth to TGmf. I would appreciate technical feedback on the presentation and proposed normative changes:
    • 11-26/1971r0: DecoyAuth: Password-only multi-password SAE
    • 11-26/1982r0: DecoyAuth changeset

The proposal enables a station to authenticate using one of several AP-configured passwords without transmitting a password identifier. Our implementation has been exercised with 512 passwords, password-specific VLAN selection, PMKSA caching, MLO, and FT-SAE roaming.

I am particularly seeking review of:
    • The cryptographic construction and password-selection procedure.
    • The fragmented exchange, state transitions, and denial-of-service considerations.
    • Capability negotiation, fallback behavior, and completeness of the proposed normative text.

I also see potential complementary uses alongside password identifiers: multiple credentials under one tenant/account identifier could support owner/guest access, individually revocable device passwords, or overlapping old/new passwords during rotation. That extension is not included in the current changeset.

Specific clause references, suggested corrections, or pointers to existing mechanisms that address these requirements would be especially helpful. Guidance on the appropriate next step within TGmf would also be appreciated.

Thank you,
Jeff Hansen
Alta Labs

_______________________________________________________________________________

IF YOU WISH to be Removed from this reflector, PLEASE DO NOT send your request to this
CLOSED reflector. We use this valuable tool to communicate on the issues at hand.

SELF SERVICE OPTION:
Point your Browser to - http://listserv.ieee.org/cgi-bin/wa?SUBED1=STDS-802-11-TGM and
then amend your subscription on the form provided.  If you require removal from the reflector
press the LEAVE button.

Further information can be found at: http://www.ieee802.org/11/Email_Subscribe.html
_______________________________________________________________________________