LuCi wireless "Enable key reinstallation (KRACK) countermeasures" interface mismatch?

For Developers
1

OpenWrt 19.07.3 r11063-85e04e9f46 / LuCI openwrt-19.07 branch git-20.213.35581-7c9cd2b
luci-mod-network - git-20.213.35581-7c9cd2b-1

I wonder whether LuCi wireless settings "Enable key reinstallation" are correct.

Luci Displays an unchecked box:

o Enable key reinstallation
(KRACK) countermeasures

Complicates key reinstallation attacks on the client side by disabling retransmission of EAPOL-Key frames that are used to install keys. This workaround might cause interoperability issues and reduced robustness of key negotiation especially in environments with heavy traffic load.

This results in:

wpa_disable_eapol_key_retries=0

I wonder whether LuCi should display in fact "Disable key reinstallation". If checked, this would result in

wpa_disable_eapol_key_retries=1

Which is the converse.

2

Okay, I understand the original text:

Enable key reinstallation (KRACK) countermeasures

But this is too complicated as there are one additive term "reinstall" and one negative term "countermesure". Unless you are a developper, it is non-understandable.

Maybe the correct wording should be:

Complicate key reinstallation
(KRACK countermeasures)

3

KRACK (" Key Reinstallation Attack ") countermeasures

4

Even better, agreed.