mirror of
https://github.com/vanhoefm/fragattacks.git
synced 2024-11-25 08:48:31 -05:00
EAP-TLS server: Fix EMSK derivation with TLS v1.3
The new label string for TLS-Exporter was taken into use for MSK derivation, but it was missed from EMSK deriation in the server side implementation. Signed-off-by: Jouni Malinen <j@w1.fi>
This commit is contained in:
parent
f8aed720e4
commit
2d26434ac7
@ -330,11 +330,15 @@ static u8 * eap_tls_get_emsk(struct eap_sm *sm, void *priv, size_t *len)
|
||||
{
|
||||
struct eap_tls_data *data = priv;
|
||||
u8 *eapKeyData, *emsk;
|
||||
const char *label = "client EAP encryption";
|
||||
const char *label;
|
||||
|
||||
if (data->state != SUCCESS)
|
||||
return NULL;
|
||||
|
||||
if (data->ssl.tls_v13)
|
||||
label = "EXPORTER_EAP_TLS_Key_Material";
|
||||
else
|
||||
label = "client EAP encryption";
|
||||
eapKeyData = eap_server_tls_derive_key(sm, &data->ssl, label,
|
||||
EAP_TLS_KEY_LEN + EAP_EMSK_LEN);
|
||||
if (eapKeyData) {
|
||||
|
Loading…
Reference in New Issue
Block a user