Amazing-Mirror/fragattacks
1
0
Fork 0
mirror of https://github.com/vanhoefm/fragattacks.git synced 2024-11-26 17:28:29 -05:00
Code Issues Projects Releases Wiki Activity
4df61ba5b9
fragattacks/src/common/sae.h

57 lines
1.8 KiB
C
Raw Normal View History

SAE: Use a shared data structure for AP and station This makes it easier to share common functions for both roles. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 14:48:19 -05:00
/*
* Simultaneous authentication of equals
SAE: Add support for ECC group 21 (521-bit random ECP group) In addition to the trivial change in adding the new group ientifier, this required changes to KDF and random number generation to support cases where the length of the prime in bits is not a multiple of eight. The binary presentation of the value needs to be shifted so that the unused most significant bits are the zero padding rather than the extra bits in the end of the array. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-01 07:00:40 -05:00
* Copyright (c) 2012-2013, Jouni Malinen <j@w1.fi>
SAE: Use a shared data structure for AP and station This makes it easier to share common functions for both roles. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 14:48:19 -05:00
*
* This software may be distributed under the terms of the BSD license.
* See README for more details.
*/
#ifndef SAE_H
#define SAE_H
SAE: Use defines for key lengths Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-01 04:52:49 -05:00
#define SAE_KCK_LEN 32
#define SAE_PMK_LEN 32
#define SAE_PMKID_LEN 16
#define SAE_KEYSEED_KEY_LEN 32
SAE: Add support for FFC groups This allows FFC groups to be used with SAE. Though, these groups are not included in the default sae_groups value based on what is available since the FFC groups have the additional requirement of using a safe prime with the current implementation (or specification of the group order). Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-05 14:22:00 -05:00
#define SAE_MAX_PRIME_LEN 512
SAE: Add a define for maximum supported prime length This can be used to increase buffer sizes when adding support for new groups. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-01 04:49:01 -05:00
#define SAE_COMMIT_MAX_LEN (2 + 3 * SAE_MAX_PRIME_LEN)
#define SAE_CONFIRM_MAX_LEN (2 + SAE_MAX_PRIME_LEN)
SAE: Add generation of the commit message fields This adds derivation of PWE and the needed commit values so that the full SAE commit message can be built. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 15:06:11 -05:00
SAE: Use a shared data structure for AP and station This makes it easier to share common functions for both roles. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 14:48:19 -05:00
struct sae_data {
SAE: Rename state variables to match IEEE 802.11 standard The enum values for struct sae_data::state now match the protocol instance states as defined in IEEE Std 802.11-2012, 11.3.8.2.2 Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-31 04:05:42 -05:00
enum { SAE_NOTHING, SAE_COMMITTED, SAE_CONFIRMED, SAE_ACCEPTED } state;
SAE: Use a shared data structure for AP and station This makes it easier to share common functions for both roles. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 14:48:19 -05:00
u16 send_confirm;
SAE: Use defines for key lengths Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-01 04:52:49 -05:00
u8 kck[SAE_KCK_LEN];
u8 pmk[SAE_PMK_LEN];
SAE: Add a define for maximum supported prime length This can be used to increase buffer sizes when adding support for new groups. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-01 04:49:01 -05:00
u8 own_commit_scalar[SAE_MAX_PRIME_LEN];
u8 own_commit_element[2 * SAE_MAX_PRIME_LEN];
u8 peer_commit_scalar[SAE_MAX_PRIME_LEN];
u8 peer_commit_element[2 * SAE_MAX_PRIME_LEN];
SAE: Store PWE as EC point or bignum instead of octet string This avoids unnecessary EC point and bignum initialization steps during the SAE exchange. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-06 09:10:48 -05:00
struct crypto_ec_point *pwe_ecc;
struct crypto_bignum *pwe_ffc;
SAE: Store rand value as bignum instead of octet string This avoids unnecessary bignum initialization steps during the SAE exchange. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-06 08:32:38 -05:00
struct crypto_bignum *sae_rand;
SAE: Maintain EC group context in struct sae_data This can be used to share same EC group context through the SAE exchange. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-01 04:29:53 -05:00
int group;
struct crypto_ec *ec;
int prime_len;
SAE: Add support for FFC groups This allows FFC groups to be used with SAE. Though, these groups are not included in the default sae_groups value based on what is available since the FFC groups have the additional requirement of using a safe prime with the current implementation (or specification of the group order). Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-05 14:22:00 -05:00
const struct dh_group *dh;
SAE: Maintain bignum of group order and prime in context data This simplifies operations by not having to create bignum instances multiple times during SAE exchange. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-05 14:12:29 -05:00
const struct crypto_bignum *prime;
const struct crypto_bignum *order;
SAE: Add support for FFC groups This allows FFC groups to be used with SAE. Though, these groups are not included in the default sae_groups value based on what is available since the FFC groups have the additional requirement of using a safe prime with the current implementation (or specification of the group order). Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-05 14:22:00 -05:00
struct crypto_bignum *prime_buf;
struct crypto_bignum *order_buf;
SAE: Use a shared data structure for AP and station This makes it easier to share common functions for both roles. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 14:48:19 -05:00
};
SAE: Maintain EC group context in struct sae_data This can be used to share same EC group context through the SAE exchange. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-01 04:29:53 -05:00
int sae_set_group(struct sae_data *sae, int group);
void sae_clear_data(struct sae_data *sae);
SAE: Add generation of the commit message fields This adds derivation of PWE and the needed commit values so that the full SAE commit message can be built. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 15:06:11 -05:00
int sae_prepare_commit(const u8 *addr1, const u8 *addr2,
const u8 *password, size_t password_len,
struct sae_data *sae);
SAE: Add processing of the commit message This adds validation of the received commit messages and key derivation for SAE. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 15:16:18 -05:00
int sae_process_commit(struct sae_data *sae);
SAE: Add support for Anti-Clogging mechanism hostapd can now be configured to use anti-clogging mechanism based on the new sae_anti_clogging_threshold parameter (which is dot11RSNASAEAntiCloggingThreshold in the standard). The token is generated using a temporary key and the peer station's MAC address. wpa_supplicant will re-try SAE authentication with the token included if commit message is rejected with a token request. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-31 09:58:36 -05:00
void sae_write_commit(struct sae_data *sae, struct wpabuf *buf,
const struct wpabuf *token);
u16 sae_parse_commit(struct sae_data *sae, const u8 *data, size_t len,
SAE: Allow enabled groups to be configured hostapd.conf sae_groups parameter can now be used to limit the set of groups that the AP allows for SAE. Similarly, sae_groups parameter is wpa_supplicant.conf can be used to set the preferred order of groups. By default, all implemented groups are enabled. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-01 09:23:47 -05:00
const u8 **token, size_t *token_len, int *allowed_groups);
SAE: Add generation of the confirm message fields Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 15:28:57 -05:00
void sae_write_confirm(struct sae_data *sae, struct wpabuf *buf);
SAE: Add processing of the confirm message This adds validation of the received confirm messages for SAE. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 15:31:19 -05:00
int sae_check_confirm(struct sae_data *sae, const u8 *data, size_t len);
SAE: Add generation of the commit message fields This adds derivation of PWE and the needed commit values so that the full SAE commit message can be built. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 15:06:11 -05:00
SAE: Use a shared data structure for AP and station This makes it easier to share common functions for both roles. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 14:48:19 -05:00
#endif /* SAE_H */
Reference in New Issue Copy Permalink