Does anyone get WPA3-SAE working with MT76?

I'm using Mir3g It's a MT7603 for the 2.4G part and MT7612 for 5G.
I flash the newest SNAPSHOT and install wofssl version of wpad ,selected WPA3-SAE in Wireless Option.But either arch linux PC or iPhone with iOS13.1 recognized as WEP or EAP(with username option but not only the password).
Mix mode works fine ,but log shows my iPhone is connect with PSK but not SAE.

I have the same issue but with ath9k. I tried OpenWrt 19.07-rc1 (4.14 kernel) and also build an own image with wpad-openssl and once again with wpad-wolfssl (4.19 kernel).
I always had the issue that the WPA3-only network looks like WEP on KDE-Plasma devices (and i cant connect) and on gnome it simply does not connect when it tries to. On gnome the journal log is telling me "Failed to deternine AP security information".

I tried few things and have out that 802.11w does not work for me. I also cant connect to WPA2-PSK when 802.11w is enabled. I have the exact same issue like when i have enabled WPA3(that include 802.11w).

Client compatibility (from smartphones, IoT to desktop operating systems) with WPA3 is still hit and miss, mostly simply non-existent. In case of ath9k (0-gen/ draft-n AR5008/ AR910x will need to disable hwcrypto) this is working, the client side however is a different issue. If you're running linux on your client, I would recommend to (at least temporarily) use wpa_supplicant directly, rather than relying on further abstraction levels on top (network-manager. plasma's configuration tools), which might not work yet support it properly. wpa_supplicant >=v2.8 does support WPA3 (unless disabled at compile time by your distro maintainers); v2.7 should already (but had significant shortcomings).

1 Like

Did you managed to get it working?
For me (mt7615), the wlan1 interface will fail to bring-up when I select WPA3-psk

[  261.495783] device wlan1 left promiscuous mode
[  261.500546] br-lan: port 6(wlan1) entered disabled state
[  264.357774] br-lan: port 6(wlan1) entered blocking state
[  264.363143] br-lan: port 6(wlan1) entered disabled state
[  264.369169] device wlan1 entered promiscuous mode
[  364.842113] br-lan: port 6(wlan1) entered disabled state
[  364.888274] device wlan1 left promiscuous mode
[  364.892854] br-lan: port 6(wlan1) entered disabled state
[  366.881956] br-lan: port 6(wlan1) entered blocking state
[  366.887346] br-lan: port 6(wlan1) entered disabled state
[  366.893255] device wlan1 entered promiscuous mode

I previously set up sae-mixed (WPA3+WPA2-psk) with hostapd-openssl for someone on MT76x2E (5GHz), WPA2 worked fine, although a very old Apple device couldn't connect as a WPA2 client, at the time there were no WPA3 clients to test with.