mirror of
https://github.com/vanhoefm/fragattacks.git
synced 2024-11-25 00:38:24 -05:00
tests: Remove peerkey testing
This is in preparation of complete removal of the PeerKey functionality. Signed-off-by: Jouni Malinen <j@w1.fi>
This commit is contained in:
Jouni Malinen
parent
e760851176
commit
2956fcc401
@ -1,199 +0,0 @@
|
|||||||
# PeerKey tests
|
|
||||||
# Copyright (c) 2013-2016, Jouni Malinen <j@w1.fi>
|
|
||||||
#
|
|
||||||
# This software may be distributed under the terms of the BSD license.
|
|
||||||
# See README for more details.
|
|
||||||
|
|
||||||
from remotehost import remote_compatible
|
|
||||||
import logging
|
|
||||||
logger = logging.getLogger()
|
|
||||||
import os
|
|
||||||
import time
|
|
||||||
|
|
||||||
import hwsim_utils
|
|
||||||
import hostapd
|
|
||||||
from utils import skip_with_fips
|
|
||||||
from wlantest import Wlantest
|
|
||||||
from tshark import run_tshark
|
|
||||||
|
|
||||||
@remote_compatible
|
|
||||||
def test_peerkey(dev, apdev):
|
|
||||||
"""RSN AP and PeerKey between two STAs"""
|
|
||||||
ssid = "test-peerkey"
|
|
||||||
passphrase = "12345678"
|
|
||||||
params = hostapd.wpa2_params(ssid=ssid, passphrase=passphrase)
|
|
||||||
params['peerkey'] = "1"
|
|
||||||
hostapd.add_ap(apdev[0], params)
|
|
||||||
|
|
||||||
dev[0].connect(ssid, psk=passphrase, scan_freq="2412", peerkey=True)
|
|
||||||
dev[1].connect(ssid, psk=passphrase, scan_freq="2412", peerkey=True)
|
|
||||||
hwsim_utils.test_connectivity_sta(dev[0], dev[1])
|
|
||||||
|
|
||||||
dev[0].request("STKSTART " + dev[1].p2p_interface_addr())
|
|
||||||
time.sleep(0.5)
|
|
||||||
# NOTE: Actual use of the direct link (DLS) is not supported in
|
|
||||||
# mac80211_hwsim, so this operation fails at setting the keys after
|
|
||||||
# successfully completed 4-way handshake. This test case does allow the
|
|
||||||
# key negotiation part to be tested for coverage, though.
|
|
||||||
|
|
||||||
def test_peerkey_sniffer_check(dev, apdev, params):
|
|
||||||
"""RSN AP and PeerKey between two STAs with sniffer check"""
|
|
||||||
ssid = "test-peerkey"
|
|
||||||
passphrase = "12345678"
|
|
||||||
hparams = hostapd.wpa2_params(ssid=ssid, passphrase=passphrase)
|
|
||||||
hparams['peerkey'] = "1"
|
|
||||||
hapd = hostapd.add_ap(apdev[0], hparams)
|
|
||||||
|
|
||||||
Wlantest.setup(hapd)
|
|
||||||
wt = Wlantest()
|
|
||||||
wt.flush()
|
|
||||||
wt.add_passphrase("12345678")
|
|
||||||
|
|
||||||
dev[0].connect(ssid, psk=passphrase, scan_freq="2412", peerkey=True)
|
|
||||||
dev[1].connect(ssid, psk=passphrase, scan_freq="2412", peerkey=True)
|
|
||||||
hwsim_utils.test_connectivity_sta(dev[0], dev[1])
|
|
||||||
|
|
||||||
dev[0].request("STKSTART " + dev[1].p2p_interface_addr())
|
|
||||||
time.sleep(1)
|
|
||||||
# NOTE: Actual use of the direct link (DLS) is not supported in
|
|
||||||
# mac80211_hwsim, so this operation fails at setting the keys after
|
|
||||||
# successfully completed 4-way handshake. This test case does allow the
|
|
||||||
# key negotiation part to be tested for coverage, though. Use sniffer to
|
|
||||||
# verify that all the SMK and STK handshake messages were transmitted.
|
|
||||||
|
|
||||||
bssid = hapd.own_addr()
|
|
||||||
addr0 = dev[0].own_addr()
|
|
||||||
addr1 = dev[1].own_addr()
|
|
||||||
|
|
||||||
# Wireshark renamed the EAPOL-Key key_info field, so need to try both the
|
|
||||||
# new and the old name to work with both versions.
|
|
||||||
try_other = False
|
|
||||||
try:
|
|
||||||
out = run_tshark(os.path.join(params['logdir'], "hwsim0.pcapng"),
|
|
||||||
"eapol.type == 3",
|
|
||||||
display=["wlan.sa", "wlan.da",
|
|
||||||
"wlan_rsna_eapol.keydes.key_info"])
|
|
||||||
except Exception, e:
|
|
||||||
if "Unknown tshark field" in str(e):
|
|
||||||
try_other = True
|
|
||||||
pass
|
|
||||||
else:
|
|
||||||
raise
|
|
||||||
if not try_other:
|
|
||||||
found = False
|
|
||||||
for pkt in out.splitlines():
|
|
||||||
sa, da, key_info = pkt.split('\t')
|
|
||||||
if key_info != '':
|
|
||||||
found = True
|
|
||||||
break
|
|
||||||
if not found:
|
|
||||||
try_other = True
|
|
||||||
if try_other:
|
|
||||||
out = run_tshark(os.path.join(params['logdir'], "hwsim0.pcapng"),
|
|
||||||
"eapol.type == 3",
|
|
||||||
display=["wlan.sa", "wlan.da",
|
|
||||||
"eapol.keydes.key_info"],
|
|
||||||
wait=False)
|
|
||||||
|
|
||||||
smk = [ False, False, False, False, False ]
|
|
||||||
stk = [ False, False, False, False ]
|
|
||||||
|
|
||||||
for pkt in out.splitlines():
|
|
||||||
sa, da, key_info = pkt.split('\t')
|
|
||||||
key_info = int(key_info, 16)
|
|
||||||
if sa == addr0 and da == bssid and key_info == 0x2b02:
|
|
||||||
# Initiator -> AP: MIC+Secure+Request+SMK = SMK 1
|
|
||||||
smk[0] = True
|
|
||||||
elif sa == bssid and da == addr1 and key_info == 0x2382:
|
|
||||||
# AP -> Responder: ACK+MIC+Secure+SMK = SMK 2
|
|
||||||
smk[1] = True
|
|
||||||
elif sa == addr1 and da == bssid and key_info == 0x2302:
|
|
||||||
# Responder -> AP: MIC+Secure+SMK = SMK 3
|
|
||||||
smk[2] = True
|
|
||||||
elif sa == bssid and da == addr1 and key_info == 0x3342:
|
|
||||||
# AP -> Responder: Install+MIC+Secure+EncrKeyData+SMK = SMK 4
|
|
||||||
smk[3] = True
|
|
||||||
elif sa == bssid and da == addr0 and key_info == 0x3302:
|
|
||||||
# AP -> Initiator: MIC+Secure+EncrKeyData+SMK = SMK 5
|
|
||||||
smk[4] = True
|
|
||||||
elif sa == addr0 and da == addr1 and key_info == 0x008a:
|
|
||||||
# Initiator -> Responder: Pairwise+ACK = STK 1
|
|
||||||
stk[0] = True
|
|
||||||
elif sa == addr1 and da == addr0 and key_info == 0x010a:
|
|
||||||
# Responder -> Initiator: Pairwise+MIC = STK 2
|
|
||||||
stk[1] = True
|
|
||||||
elif sa == addr0 and da == addr1 and key_info == 0x038a:
|
|
||||||
# Initiator -> Responder: Pairwise+ACK+MIC+Secure = STK 3
|
|
||||||
stk[2] = True
|
|
||||||
elif sa == addr1 and da == addr0 and key_info == 0x030a:
|
|
||||||
# Responder -> Initiator: Pairwise+MIC+Secure = STK 4
|
|
||||||
stk[3] = True
|
|
||||||
|
|
||||||
logger.info("Seen SMK messages: " + str(smk))
|
|
||||||
logger.info("Seen STK messages: " + str(stk))
|
|
||||||
if False in smk:
|
|
||||||
raise Exception("Missing SMK message: " + str(smk))
|
|
||||||
if False in stk:
|
|
||||||
raise Exception("Missing STK message: " + str(stk))
|
|
||||||
|
|
||||||
def test_peerkey_unknown_peer(dev, apdev):
|
|
||||||
"""RSN AP and PeerKey attempt with unknown peer"""
|
|
||||||
ssid = "test-peerkey"
|
|
||||||
passphrase = "12345678"
|
|
||||||
params = hostapd.wpa2_params(ssid=ssid, passphrase=passphrase)
|
|
||||||
params['peerkey'] = "1"
|
|
||||||
hostapd.add_ap(apdev[0], params)
|
|
||||||
|
|
||||||
dev[0].connect(ssid, psk=passphrase, scan_freq="2412", peerkey=True)
|
|
||||||
dev[1].connect(ssid, psk=passphrase, scan_freq="2412", peerkey=True)
|
|
||||||
hwsim_utils.test_connectivity_sta(dev[0], dev[1])
|
|
||||||
|
|
||||||
dev[0].request("STKSTART " + dev[2].p2p_interface_addr())
|
|
||||||
time.sleep(0.5)
|
|
||||||
|
|
||||||
@remote_compatible
|
|
||||||
def test_peerkey_pairwise_mismatch(dev, apdev):
|
|
||||||
"""RSN TKIP+CCMP AP and PeerKey between two STAs using different ciphers"""
|
|
||||||
skip_with_fips(dev[0])
|
|
||||||
ssid = "test-peerkey"
|
|
||||||
passphrase = "12345678"
|
|
||||||
params = hostapd.wpa2_params(ssid=ssid, passphrase=passphrase)
|
|
||||||
params['peerkey'] = "1"
|
|
||||||
params['rsn_pairwise'] = "TKIP CCMP"
|
|
||||||
hapd = hostapd.add_ap(apdev[0], params)
|
|
||||||
|
|
||||||
Wlantest.setup(hapd)
|
|
||||||
wt = Wlantest()
|
|
||||||
wt.flush()
|
|
||||||
wt.add_passphrase("12345678")
|
|
||||||
|
|
||||||
dev[0].connect(ssid, psk=passphrase, scan_freq="2412", peerkey=True,
|
|
||||||
pairwise="CCMP")
|
|
||||||
dev[1].connect(ssid, psk=passphrase, scan_freq="2412", peerkey=True,
|
|
||||||
pairwise="TKIP")
|
|
||||||
hwsim_utils.test_connectivity_sta(dev[0], dev[1])
|
|
||||||
|
|
||||||
dev[0].request("STKSTART " + dev[1].p2p_interface_addr())
|
|
||||||
time.sleep(0.5)
|
|
||||||
dev[1].request("STKSTART " + dev[0].p2p_interface_addr())
|
|
||||||
time.sleep(0.5)
|
|
||||||
|
|
||||||
def test_peerkey_deinit_during_neg(dev, apdev):
|
|
||||||
"""RSN AP deinit during PeerKey negotiation"""
|
|
||||||
ssid = "test-peerkey"
|
|
||||||
passphrase = "12345678"
|
|
||||||
params = hostapd.wpa2_params(ssid=ssid, passphrase=passphrase)
|
|
||||||
params['peerkey'] = "1"
|
|
||||||
hapd = hostapd.add_ap(apdev[0], params)
|
|
||||||
|
|
||||||
dev[0].connect(ssid, psk=passphrase, scan_freq="2412", peerkey=True)
|
|
||||||
dev[1].connect(ssid, psk=passphrase, scan_freq="2412", peerkey=True)
|
|
||||||
|
|
||||||
dev[1].request("SET ext_eapol_frame_io 1")
|
|
||||||
dev[0].request("STKSTART " + dev[1].own_addr())
|
|
||||||
ev = dev[1].wait_event(["EAPOL-TX"], timeout=5)
|
|
||||||
if ev is None:
|
|
||||||
raise Exception("No PeerKey response from dev1")
|
|
||||||
hapd.request("DISABLE")
|
|
||||||
dev[0].request("REMOVE_NETWORK all")
|
|
||||||
dev[1].request("REMOVE_NETWORK all")
|
|
||||||
@ -643,14 +643,6 @@ def test_wpas_ctrl_preauth(dev):
|
|||||||
if "FAIL" in dev[0].request("PREAUTH 00:11:22:33:44:55"):
|
if "FAIL" in dev[0].request("PREAUTH 00:11:22:33:44:55"):
|
||||||
raise Exception("Unexpected failure on PREAUTH")
|
raise Exception("Unexpected failure on PREAUTH")
|
||||||
|
|
||||||
@remote_compatible
|
|
||||||
def test_wpas_ctrl_stkstart(dev):
|
|
||||||
"""wpa_supplicant ctrl_iface strkstart"""
|
|
||||||
if "FAIL" not in dev[0].request("STKSTART "):
|
|
||||||
raise Exception("Unexpected success on invalid STKSTART")
|
|
||||||
if "FAIL" not in dev[0].request("STKSTART 00:11:22:33:44:55"):
|
|
||||||
raise Exception("Unexpected success on STKSTART")
|
|
||||||
|
|
||||||
@remote_compatible
|
@remote_compatible
|
||||||
def test_wpas_ctrl_tdls_discover(dev):
|
def test_wpas_ctrl_tdls_discover(dev):
|
||||||
"""wpa_supplicant ctrl_iface tdls_discover"""
|
"""wpa_supplicant ctrl_iface tdls_discover"""
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user