iwinfo only returns the first two ciphers

[Ramon00]

iwinfo shows for the encryption:
Encryption: WPA3 SAE (CCMP, CCMP-256)
While 4 ciphers are enabled and functioning,
For example for a client hostapd_cli shows:
dot11RSNAStatsSelectedPairwiseCipher=00-0f-ac-9
which is GCMP-256.

If you want I can fix the bug myself, but I am not sure if this repo allows PRs and commits from "outsiders".

[Ansuel]

Yes we do. If you have a fix ready just make a pr. Il Sab 7 Feb 2026, 17:06 Ramon Van Gorkom ***@***.***> ha scritto:

…

*Ramon00* created an issue (openwrt/iwinfo#32) <#32> iwinfo shows for the encryption: Encryption: WPA3 SAE (CCMP, CCMP-256) While 4 ciphers are enabled and functioning, For example for a client hostapd_cli shows: dot11RSNAStatsSelectedPairwiseCipher=00-0f-ac-9 which is GCMP-256. If you want I can fix the bug myself, but I am not sure if this repo allows PRs and commits from "outsiders". — Reply to this email directly, view it on GitHub <#32>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AE2ZMQTKMFG4RPS6WL3XP5T4KYERVAVCNFSM6AAAAACUKTAUO6VHI2DSMVQWIX3LMV43ASLTON2WKOZTHEYTANRSG44DSNY> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[Ramon00]

Yes we do. If you have a fix ready just make a pr.

Ok, I don't have a fix ready, let me see if I can find some time. The reason I was asking was that I do not want to invest the time it it won't get merged anyway (like a PR I made for netifd, that repo seems to be completely dead)

[Ramon00]

Seems this :

        switch(wsec)
	{
		case 2:
			c->pair_ciphers |= IWINFO_CIPHER_TKIP;
			break;

		case 4:
			c->pair_ciphers |= IWINFO_CIPHER_CCMP;
			break;

		case 6:
			c->pair_ciphers |= IWINFO_CIPHER_TKIP;
			c->pair_ciphers |= IWINFO_CIPHER_CCMP;
			break;
	}

can just be replaced by c->pair_ciphers = wsec; ? Not clear to me to do bit-decode then bit-reencode with the same bits... If this is jsut to remove the group ciphers if they are present then it should be something like c->pair_ciphers = wsec & pair_mask; But I do not know what mask to use.

Next to that, this is also NOK:
*(pos - 2) = 0;

If ciphers=0 is passed to format_enc_ciphers then you have a buffer underrun. Similarly *(pos - 1) = 0; in format_enc_suites

@Ansuel Can you comment? Also I do not have a build environment set up at, so i cannot test, i can still make a PR. But if you'd rather make the commit yourself then completely fine with me.