I confirm the same problem with a Samsung S4 and a D-LINK DIR-855.
Setting the cypher type to "TKIP" solves it for Samsung but it breaks it for an older Sony laptop.
Luckily DIR-855 is a dual-AP so I could configure the 2.4GHz band with TKIP only while keeping "TKIP+AES" on the 5GHz band.

Samsung should solve the problem. Spent the evening debugging this