diff --git a/src/eapol.c b/src/eapol.c
index 60021581..bcf6fd0f 100644
--- a/src/eapol.c
+++ b/src/eapol.c
@@ -739,6 +739,11 @@ void eapol_sm_set_tx_user_data(struct eapol_sm *sm, void *user_data)
 	sm->tx_user_data = user_data;
 }
 
+uint32_t eapol_sm_get_pairwise_cipher(struct eapol_sm *sm)
+{
+	return sm->pairwise_cipher;
+}
+
 static bool eapol_sm_ifindex_match(void *data, void *user_data)
 {
 	struct eapol_sm *sm = data;
diff --git a/src/eapol.h b/src/eapol.h
index f414eedf..fa3f6ebc 100644
--- a/src/eapol.h
+++ b/src/eapol.h
@@ -187,6 +187,9 @@ bool eapol_sm_set_own_wpa(struct eapol_sm *sm, const uint8_t *wpa_ie,
 				size_t len);
 void eapol_sm_set_user_data(struct eapol_sm *sm, void *user_data);
 void eapol_sm_set_tx_user_data(struct eapol_sm *sm, void *user_data);
+
+uint32_t eapol_sm_get_pairwise_cipher(struct eapol_sm *sm);
+
 struct l_io *eapol_open_pae(uint32_t index);
 
 void eapol_start(uint32_t ifindex, struct eapol_sm *sm);