WPA/TKIP preferred to WPA2/AES ?

[martinko]

martinko wrote:
> Sam Leffler wrote:
>> martinko wrote:
>>> Hallo,
>>>
>>> My wireless router has a configuration option to support both WPA / 
>>> WPA2 at the same time, so when a wireless client cannot talk modern 
>>> WPA2 it can use old WPA instead.
>>> Now it works naturally in Windows and apparently in Symbian too but 
>>> unfortunately FreeBSD (6.4) picks up WPA and less secure TKIP instead 
>>> of AES.  Would it be possible to amend this behaviour and use better 
>>> and newer protocols/algorithms/ciphers when available please ?  (that 
>>> is AES preferred to TKIP and WPA2 instead of WPA etc.)
>>>
>>
>> man wpa_supplicant.conf
> 
> Yeah, I could use proto="RSN WPA" but I was wondering whether it 
> wouldn't be better if the system autoselected the best available 
> protocol/cipher (if not specified otherwise) which in this case would be 
> WPA2/CCMP instead of WPA/TKIP.  Or is it not desirable for some reasons?
> 

I've checked it with 7.0 and 7.1 and there's an improvement -- both of 
them autoselected WPA2 but cipher was still TKIP -- it's better than in 
6.x yet still not ideal (which would be WPA2/AES-CCM in this case).

M.