services.hostapd.radios.<name>.networks.<name>.authentication.pairwiseCiphers ‐ NixOS ‐ Searchix

services.hostapd.radios.<name>.networks.<name>.authentication.pairwiseCiphers

Set of accepted cipher suites (encryption algorithms) for pairwise keys (unicast packets). By default this allows just CCMP, which is the only commonly supported secure option. Use enableRecommendedPairwiseCiphers to also enable newer recommended ciphers.

Please refer to the hostapd documentation for allowed values. Generally, only CCMP or GCMP modes should be considered safe options. Most devices support CCMP while GCMP and GCMP-256 is often only available with devices supporting WiFi 5 (IEEE 802.11ac) or higher. CCMP-256 support is rare.

Type

list of string

Default

[
  "CCMP"
]

Example

[
  "GCMP"
  "GCMP-256"
]

Declared