WPA3

https://papers.mathyvanhoef.com/dragonblood.pdf

https://openwrt.org/docs/guide-user/network/wifi/basic

WPA Modes

Besides the WPA mode, the encryption option also specifies the group and peer ciphers to use. To override the cipher, the value of encryption must be given in the form mode+cipher. See the listing below for possible combinations. If the hwmode of the interface is set to ng or na, then the CCMP cipher is always added to the list.

Value	WPA Version	Ciphers	Supported since
sae	WPA3 Personal (SAE)	CCMP	19.01
sae-mixed	WPA2/WPA3 Personal (PSK/SAE) mixed mode	CCMP	19.01

-- openwrt - /etc/config/wireless option encryption 'sae'