Key Type

Encryption 1 bit EAPOL-Key descriptor unverified

Set for a pairwise key, clear for a group key.

Reading a capture

All four messages of a four-way handshake have this set. Clear means a group key handshake, which is a two-message exchange that looks similar and is not the same thing.

Where it sits

EAPOL-Key > Key Information > Key Type

Open in the explorer — Four-way handshake message 1
Open in the explorer — Four-way handshake message 2
Open in the explorer — Four-way handshake message 3
Open in the explorer — Four-way handshake message 4

Accuracy

Clause: 802.11-2024 §12.7.2
Verified: Not verified against the standard. Treat this as a claim, not a fact.