/* fall back to sw encryption for unsupported ciphers */
        switch (key->cipher) {
-       case WLAN_CIPHER_SUITE_AES_CMAC:
-               wcid_keyidx = &wcid->hw_key_idx2;
-               key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIE;
-               break;
        case WLAN_CIPHER_SUITE_TKIP:
        case WLAN_CIPHER_SUITE_CCMP:
        case WLAN_CIPHER_SUITE_CCMP_256:
        case WLAN_CIPHER_SUITE_GCMP_256:
        case WLAN_CIPHER_SUITE_SMS4:
                break;
+       case WLAN_CIPHER_SUITE_AES_CMAC:
+               wcid_keyidx = &wcid->hw_key_idx2;
+               key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIE;
+               fallthrough;
+       case WLAN_CIPHER_SUITE_BIP_CMAC_256:
        case WLAN_CIPHER_SUITE_BIP_GMAC_128:
        case WLAN_CIPHER_SUITE_BIP_GMAC_256:
                if (key->keyidx == 6 || key->keyidx == 7)