Amazing-Mirror/fragattacks
1
0
Fork 0
mirror of https://github.com/vanhoefm/fragattacks.git synced 2024-11-26 17:28:29 -05:00
Code Issues Projects Releases Wiki Activity
03ea178603
fragattacks/src/rsn_supp/wpa.h

368 lines
9.8 KiB
C
Raw Normal View History

Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-27 20:34:43 -05:00
/*
* wpa_supplicant - WPA definitions
* Copyright (c) 2003-2007, Jouni Malinen <j@w1.fi>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 as
* published by the Free Software Foundation.
*
* Alternatively, this software may be distributed under the terms of BSD
* license.
*
* See README and COPYING for more details.
*/
#ifndef WPA_H
#define WPA_H
Remove src/common from default header file path This makes it clearer which files are including header from src/common. Some of these cases should probably be cleaned up in the future not to do that. In addition, src/common/nl80211_copy.h and wireless_copy.h were moved into src/drivers since they are only used by driver wrappers and do not need to live in src/common.
2009-11-29 10:51:55 -05:00
#include "common/defs.h"
#include "common/eapol_common.h"
#include "common/wpa_common.h"
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-27 20:34:43 -05:00
struct wpa_sm;
struct eapol_sm;
struct wpa_config_blob;
struct wpa_sm_ctx {
void *ctx; /* pointer to arbitrary upper level context */
Added a separate ctx pointer for wpa_msg() calls in WPA supp This is needed to allow IBSS RSN to use per-peer context while maintaining support for wpa_msg() calls to get *wpa_s as the pointer.
2009-01-17 10:54:40 -05:00
void *msg_ctx; /* upper level context for wpa_msg() calls */
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-27 20:34:43 -05:00
Get rid of unnecessary typedefs for enums.
2009-12-26 03:35:08 -05:00
void (*set_state)(void *ctx, enum wpa_states state);
enum wpa_states (*get_state)(void *ctx);
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-27 20:34:43 -05:00
void (*deauthenticate)(void * ctx, int reason_code);
void (*disassociate)(void *ctx, int reason_code);
Get rid of unnecessary typedefs for enums.
2009-12-26 03:35:08 -05:00
int (*set_key)(void *ctx, enum wpa_alg alg,
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-27 20:34:43 -05:00
const u8 *addr, int key_idx, int set_tx,
const u8 *seq, size_t seq_len,
const u8 *key, size_t key_len);
void * (*get_network_ctx)(void *ctx);
int (*get_bssid)(void *ctx, u8 *bssid);
int (*ether_send)(void *ctx, const u8 *dest, u16 proto, const u8 *buf,
size_t len);
int (*get_beacon_ie)(void *ctx);
void (*cancel_auth_timeout)(void *ctx);
u8 * (*alloc_eapol)(void *ctx, u8 type, const void *data, u16 data_len,
size_t *msg_len, void **data_pos);
int (*add_pmkid)(void *ctx, const u8 *bssid, const u8 *pmkid);
int (*remove_pmkid)(void *ctx, const u8 *bssid, const u8 *pmkid);
void (*set_config_blob)(void *ctx, struct wpa_config_blob *blob);
const struct wpa_config_blob * (*get_config_blob)(void *ctx,
const char *name);
int (*mlme_setprotection)(void *ctx, const u8 *addr,
int protection_type, int key_type);
int (*update_ft_ies)(void *ctx, const u8 *md, const u8 *ies,
size_t ies_len);
int (*send_ft_action)(void *ctx, u8 action, const u8 *target_ap,
const u8 *ies, size_t ies_len);
FT: Add driver op for marking a STA authenticated This can be used with FT-over-DS where FT Action frame exchange triggers transition to State 2 (authenticated) without Authentication frame exchange.
2010-03-13 11:28:15 -05:00
int (*mark_authenticated)(void *ctx, const u8 *target_ap);
TDLS: Add initial support for TDLS (IEEE Std 802.11z-2010)
2010-10-07 03:26:56 -04:00
#ifdef CONFIG_TDLS
int (*send_tdls_mgmt)(void *ctx, const u8 *dst,
u8 action_code, u8 dialog_token,
u16 status_code, const u8 *buf, size_t len);
int (*tdls_oper)(void *ctx, int oper, const u8 *peer);
#endif /* CONFIG_TDLS */
nl80211: Support GTK rekey offload Add support to wpa_supplicant for device-based GTK rekeying. In order to support that, pass the KEK, KCK, and replay counter to the driver, and handle rekey events that update the latter. Signed-off-by: Johannes Berg <johannes.berg@intel.com>
2011-07-12 14:22:51 -04:00
void (*set_rekey_offload)(void *ctx, const u8 *kek, const u8 *kck,
const u8 *replay_ctr);
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-27 20:34:43 -05:00
};
enum wpa_sm_conf_params {
RSNA_PMK_LIFETIME /* dot11RSNAConfigPMKLifetime */,
RSNA_PMK_REAUTH_THRESHOLD /* dot11RSNAConfigPMKReauthThreshold */,
RSNA_SA_TIMEOUT /* dot11RSNAConfigSATimeout */,
WPA_PARAM_PROTO,
WPA_PARAM_PAIRWISE,
WPA_PARAM_GROUP,
WPA_PARAM_KEY_MGMT,
WPA_PARAM_MGMT_GROUP,
MFP: Add MFPR flag into station RSN IE if 802.11w is mandatory
2010-03-29 13:48:01 -04:00
WPA_PARAM_RSN_ENABLED,
WPA_PARAM_MFP
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-27 20:34:43 -05:00
};
struct rsn_supp_config {
void *network_ctx;
int peerkey_enabled;
int allowed_pairwise_cipher; /* bitfield of WPA_CIPHER_* */
int proactive_key_caching;
int eap_workaround;
void *eap_conf_ctx;
const u8 *ssid;
size_t ssid_len;
Added support for enforcing frequent PTK rekeying Added a new configuration option, wpa_ptk_rekey, that can be used to enforce frequent PTK rekeying, e.g., to mitigate some attacks against TKIP deficiencies. This can be set either by the Authenticator (to initiate periodic 4-way handshake to rekey PTK) or by the Supplicant (to request Authenticator to rekey PTK). With both wpa_ptk_rekey and wpa_group_rekey (in hostapd) set to 600, TKIP keys will not be used for more than 10 minutes which may make some attacks against TKIP more difficult to implement.
2008-11-06 12:57:21 -05:00
int wpa_ptk_rekey;
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-27 20:34:43 -05:00
};
#ifndef CONFIG_NO_WPA
struct wpa_sm * wpa_sm_init(struct wpa_sm_ctx *ctx);
void wpa_sm_deinit(struct wpa_sm *sm);
void wpa_sm_notify_assoc(struct wpa_sm *sm, const u8 *bssid);
void wpa_sm_notify_disassoc(struct wpa_sm *sm);
void wpa_sm_set_pmk(struct wpa_sm *sm, const u8 *pmk, size_t pmk_len);
void wpa_sm_set_pmk_from_pmksa(struct wpa_sm *sm);
void wpa_sm_set_fast_reauth(struct wpa_sm *sm, int fast_reauth);
void wpa_sm_set_scard_ctx(struct wpa_sm *sm, void *scard_ctx);
void wpa_sm_set_config(struct wpa_sm *sm, struct rsn_supp_config *config);
void wpa_sm_set_own_addr(struct wpa_sm *sm, const u8 *addr);
void wpa_sm_set_ifname(struct wpa_sm *sm, const char *ifname,
const char *bridge_ifname);
void wpa_sm_set_eapol(struct wpa_sm *sm, struct eapol_sm *eapol);
int wpa_sm_set_assoc_wpa_ie(struct wpa_sm *sm, const u8 *ie, size_t len);
int wpa_sm_set_assoc_wpa_ie_default(struct wpa_sm *sm, u8 *wpa_ie,
size_t *wpa_ie_len);
int wpa_sm_set_ap_wpa_ie(struct wpa_sm *sm, const u8 *ie, size_t len);
int wpa_sm_set_ap_rsn_ie(struct wpa_sm *sm, const u8 *ie, size_t len);
int wpa_sm_get_mib(struct wpa_sm *sm, char *buf, size_t buflen);
int wpa_sm_set_param(struct wpa_sm *sm, enum wpa_sm_conf_params param,
unsigned int value);
unsigned int wpa_sm_get_param(struct wpa_sm *sm,
enum wpa_sm_conf_params param);
int wpa_sm_get_status(struct wpa_sm *sm, char *buf, size_t buflen,
int verbose);
void wpa_sm_key_request(struct wpa_sm *sm, int error, int pairwise);
int wpa_parse_wpa_ie(const u8 *wpa_ie, size_t wpa_ie_len,
struct wpa_ie_data *data);
void wpa_sm_aborted_cached(struct wpa_sm *sm);
int wpa_sm_rx_eapol(struct wpa_sm *sm, const u8 *src_addr,
const u8 *buf, size_t len);
int wpa_sm_parse_own_wpa_ie(struct wpa_sm *sm, struct wpa_ie_data *data);
Removed wpa_sm dereference from pmksa_cache_list()
2009-01-13 13:22:42 -05:00
int wpa_sm_pmksa_cache_list(struct wpa_sm *sm, char *buf, size_t len);
Add a drop_sa command to allow 802.11w testing This drops PTK and PMK without notifying the AP.
2010-03-29 18:42:04 -04:00
void wpa_sm_drop_sa(struct wpa_sm *sm);
SME: Do not try to use FT over-the-air if PTK is not available
2010-04-10 15:39:49 -04:00
int wpa_sm_has_ptk(struct wpa_sm *sm);
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-27 20:34:43 -05:00
nl80211: Support GTK rekey offload Add support to wpa_supplicant for device-based GTK rekeying. In order to support that, pass the KEK, KCK, and replay counter to the driver, and handle rekey events that update the latter. Signed-off-by: Johannes Berg <johannes.berg@intel.com>
2011-07-12 14:22:51 -04:00
void wpa_sm_update_replay_ctr(struct wpa_sm *sm, const u8 *replay_ctr);
Flush PMKSA cache entries and invalidate EAP state on network changes If a network configuration block is removed or modified, flush all PMKSA cache entries that were created using that network configuration. Similarly, invalidate EAP state (fast re-auth). The special case for OKC on wpa_supplicant reconfiguration (network_ctx pointer change) is now addressed as part of the PMKSA cache flushing, so it does not need a separate mechanism for clearing the network_ctx values in the PMKSA cache.
2011-09-07 10:46:00 -04:00
void wpa_sm_pmksa_cache_flush(struct wpa_sm *sm, void *network_ctx);
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-27 20:34:43 -05:00
#else /* CONFIG_NO_WPA */
static inline struct wpa_sm * wpa_sm_init(struct wpa_sm_ctx *ctx)
{
return (struct wpa_sm *) 1;
}
static inline void wpa_sm_deinit(struct wpa_sm *sm)
{
}
static inline void wpa_sm_notify_assoc(struct wpa_sm *sm, const u8 *bssid)
{
}
static inline void wpa_sm_notify_disassoc(struct wpa_sm *sm)
{
}
static inline void wpa_sm_set_pmk(struct wpa_sm *sm, const u8 *pmk,
size_t pmk_len)
{
}
static inline void wpa_sm_set_pmk_from_pmksa(struct wpa_sm *sm)
{
}
static inline void wpa_sm_set_fast_reauth(struct wpa_sm *sm, int fast_reauth)
{
}
static inline void wpa_sm_set_scard_ctx(struct wpa_sm *sm, void *scard_ctx)
{
}
static inline void wpa_sm_set_config(struct wpa_sm *sm,
struct rsn_supp_config *config)
{
}
static inline void wpa_sm_set_own_addr(struct wpa_sm *sm, const u8 *addr)
{
}
static inline void wpa_sm_set_ifname(struct wpa_sm *sm, const char *ifname,
const char *bridge_ifname)
{
}
static inline void wpa_sm_set_eapol(struct wpa_sm *sm, struct eapol_sm *eapol)
{
}
static inline int wpa_sm_set_assoc_wpa_ie(struct wpa_sm *sm, const u8 *ie,
size_t len)
{
return -1;
}
static inline int wpa_sm_set_assoc_wpa_ie_default(struct wpa_sm *sm,
u8 *wpa_ie,
size_t *wpa_ie_len)
{
return -1;
}
static inline int wpa_sm_set_ap_wpa_ie(struct wpa_sm *sm, const u8 *ie,
size_t len)
{
return -1;
}
static inline int wpa_sm_set_ap_rsn_ie(struct wpa_sm *sm, const u8 *ie,
size_t len)
{
return -1;
}
static inline int wpa_sm_get_mib(struct wpa_sm *sm, char *buf, size_t buflen)
{
return 0;
}
static inline int wpa_sm_set_param(struct wpa_sm *sm,
enum wpa_sm_conf_params param,
unsigned int value)
{
return -1;
}
static inline unsigned int wpa_sm_get_param(struct wpa_sm *sm,
enum wpa_sm_conf_params param)
{
return 0;
}
static inline int wpa_sm_get_status(struct wpa_sm *sm, char *buf,
size_t buflen, int verbose)
{
return 0;
}
static inline void wpa_sm_key_request(struct wpa_sm *sm, int error,
int pairwise)
{
}
static inline int wpa_parse_wpa_ie(const u8 *wpa_ie, size_t wpa_ie_len,
struct wpa_ie_data *data)
{
return -1;
}
static inline void wpa_sm_aborted_cached(struct wpa_sm *sm)
{
}
static inline int wpa_sm_rx_eapol(struct wpa_sm *sm, const u8 *src_addr,
const u8 *buf, size_t len)
{
return -1;
}
static inline int wpa_sm_parse_own_wpa_ie(struct wpa_sm *sm,
struct wpa_ie_data *data)
{
return -1;
}
Removed wpa_sm dereference from pmksa_cache_list()
2009-01-13 13:22:42 -05:00
static inline int wpa_sm_pmksa_cache_list(struct wpa_sm *sm, char *buf,
size_t len)
{
return -1;
}
Add a drop_sa command to allow 802.11w testing This drops PTK and PMK without notifying the AP.
2010-03-29 18:42:04 -04:00
static inline void wpa_sm_drop_sa(struct wpa_sm *sm)
{
}
Fix wpa_sm_has_ptk() no-WPA wrapper location
2010-04-11 04:39:14 -04:00
static inline int wpa_sm_has_ptk(struct wpa_sm *sm)
{
return 0;
}
nl80211: Support GTK rekey offload Add support to wpa_supplicant for device-based GTK rekeying. In order to support that, pass the KEK, KCK, and replay counter to the driver, and handle rekey events that update the latter. Signed-off-by: Johannes Berg <johannes.berg@intel.com>
2011-07-12 14:22:51 -04:00
static inline void wpa_sm_update_replay_ctr(struct wpa_sm *sm,
const u8 *replay_ctr)
{
}
Flush PMKSA cache entries and invalidate EAP state on network changes If a network configuration block is removed or modified, flush all PMKSA cache entries that were created using that network configuration. Similarly, invalidate EAP state (fast re-auth). The special case for OKC on wpa_supplicant reconfiguration (network_ctx pointer change) is now addressed as part of the PMKSA cache flushing, so it does not need a separate mechanism for clearing the network_ctx values in the PMKSA cache.
2011-09-07 10:46:00 -04:00
static inline void wpa_sm_pmksa_cache_flush(struct wpa_sm *sm,
void *network_ctx)
{
}
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-27 20:34:43 -05:00
#endif /* CONFIG_NO_WPA */
#ifdef CONFIG_PEERKEY
int wpa_sm_stkstart(struct wpa_sm *sm, const u8 *peer);
#else /* CONFIG_PEERKEY */
static inline int wpa_sm_stkstart(struct wpa_sm *sm, const u8 *peer)
{
return -1;
}
#endif /* CONFIG_PEERKEY */
#ifdef CONFIG_IEEE80211R
FT: Clean up wpa_sm_set_ft_params() by using common parse Instead of parsing the IEs in the callers, use the already existing parser in wpa_ft.c to handle MDIE and FTIE from initial MD association response. In addition, this provides more complete access to association response IEs to FT code which will be needed to fix FT 4-way handshake message 2/4.
2010-04-10 04:36:35 -04:00
int wpa_sm_set_ft_params(struct wpa_sm *sm, const u8 *ies, size_t ies_len);
FT: Copy FT Capability and Policy to MDIE from target AP This sets the FT Capability and Policy field in the MDIE to the values received from the target AP (if available). This fixes the MDIE contents during FT Protocol, but the correct value may not yet be used in initial mobility domain association.
2010-04-09 09:26:20 -04:00
int wpa_ft_prepare_auth_request(struct wpa_sm *sm, const u8 *mdie);
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-27 20:34:43 -05:00
int wpa_ft_process_response(struct wpa_sm *sm, const u8 *ies, size_t ies_len,
FT: Add RIC Request generation and validation (but not processing) This adds first part of FT resource request as part of Reassocition Request frame (i.e., FT Protocol, not FT Resource Request Protocol). wpa_supplicant can generate a test resource request when driver_test.c is used with internal MLME code and hostapd can verify the FTIE MIC properly with the included RIC Request. The actual RIC Request IEs are not processed yet and hostapd does not yet reply with RIC Response (nor would wpa_supplicant be able to validate the FTIE MIC for a frame with RIC Response).
2009-03-09 14:45:17 -04:00
int ft_action, const u8 *target_ap,
const u8 *ric_ies, size_t ric_ies_len);
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-27 20:34:43 -05:00
int wpa_ft_is_completed(struct wpa_sm *sm);
int wpa_ft_validate_reassoc_resp(struct wpa_sm *sm, const u8 *ies,
FT: Use correct BSSID when deriving PTK and verifying MIC The old version was using struct wpa_sm::bssid which is not necessarily updated to point to the correct target address when doing over-the-air FT since the address is used before the association has actually been completed.
2008-03-12 05:20:20 -04:00
size_t ies_len, const u8 *src_addr);
FT: Copy FT Capability and Policy to MDIE from target AP This sets the FT Capability and Policy field in the MDIE to the values received from the target AP (if available). This fixes the MDIE contents during FT Protocol, but the correct value may not yet be used in initial mobility domain association.
2010-04-09 09:26:20 -04:00
int wpa_ft_start_over_ds(struct wpa_sm *sm, const u8 *target_ap,
const u8 *mdie);
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-27 20:34:43 -05:00
#else /* CONFIG_IEEE80211R */
static inline int
FT: Fix wpa_sm_set_ft_params wrapper for non-FT build
2010-04-11 12:49:32 -04:00
wpa_sm_set_ft_params(struct wpa_sm *sm, const u8 *ies, size_t ies_len)
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-27 20:34:43 -05:00
{
return 0;
}
FT: Copy FT Capability and Policy to MDIE from target AP This sets the FT Capability and Policy field in the MDIE to the values received from the target AP (if available). This fixes the MDIE contents during FT Protocol, but the correct value may not yet be used in initial mobility domain association.
2010-04-09 09:26:20 -04:00
static inline int wpa_ft_prepare_auth_request(struct wpa_sm *sm,
const u8 *mdie)
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-27 20:34:43 -05:00
{
return 0;
}
static inline int
wpa_ft_process_response(struct wpa_sm *sm, const u8 *ies, size_t ies_len,
int ft_action, const u8 *target_ap)
{
return 0;
}
static inline int wpa_ft_is_completed(struct wpa_sm *sm)
{
return 0;
}
static inline int
FT: Use correct BSSID when deriving PTK and verifying MIC The old version was using struct wpa_sm::bssid which is not necessarily updated to point to the correct target address when doing over-the-air FT since the address is used before the association has actually been completed.
2008-03-12 05:20:20 -04:00
wpa_ft_validate_reassoc_resp(struct wpa_sm *sm, const u8 *ies, size_t ies_len,
const u8 *src_addr)
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-27 20:34:43 -05:00
{
return -1;
}
#endif /* CONFIG_IEEE80211R */
TDLS: Add initial support for TDLS (IEEE Std 802.11z-2010)
2010-10-07 03:26:56 -04:00
/* tdls.c */
TDLS: Do not allow setup to be started if AP prohibits TDLS
2011-01-28 12:27:28 -05:00
void wpa_tdls_ap_ies(struct wpa_sm *sm, const u8 *ies, size_t len);
void wpa_tdls_assoc_resp_ies(struct wpa_sm *sm, const u8 *ies, size_t len);
TDLS: Add initial support for TDLS (IEEE Std 802.11z-2010)
2010-10-07 03:26:56 -04:00
int wpa_tdls_start(struct wpa_sm *sm, const u8 *addr);
TDLS: Allow wpa_cli tdls_setup to start renegotiation If there is already a link the requested peer, request start of renegotiation instead of completely new link. This seems to be needed to allow some driver to accept the trigger for a new negotiation.
2011-01-27 18:24:24 -05:00
int wpa_tdls_reneg(struct wpa_sm *sm, const u8 *addr);
TDLS: Add initial support for TDLS (IEEE Std 802.11z-2010)
2010-10-07 03:26:56 -04:00
int wpa_tdls_recv_teardown_notify(struct wpa_sm *sm, const u8 *addr,
u16 reason_code);
int wpa_tdls_init(struct wpa_sm *sm);
void wpa_tdls_deinit(struct wpa_sm *sm);
TDLS: Allow TDLS to be disabled at runtime for testing purposes Control interface command 'SET tdls_disabled <1/0>' can now be used to disable/enable TDLS at runtime. This is mainly for testing purposes.
2011-03-24 14:44:17 -04:00
void wpa_tdls_enable(struct wpa_sm *sm, int enabled);
TDLS: Add initial support for TDLS (IEEE Std 802.11z-2010)
2010-10-07 03:26:56 -04:00
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-27 20:34:43 -05:00
#endif /* WPA_H */
Reference in New Issue Copy Permalink