Jouni Malinen a6eae3f7a1 EAP-MSCHAPv2: Use os_memcmp_const() for hash/password comparisons ...

This makes the implementation less likely to provide useful timing
information to potential attackers from comparisons of information
received from a remote device and private material known only by the
authorized devices.

Signed-off-by: Jouni Malinen <j@w1.fi>

2014-07-02 12:38:48 +03:00

..

eap_aka.c

EAP-SIM/AKA: Use os_memcmp_const() for hash/password comparisons

2014-07-02 12:38:47 +03:00

eap_config.h

Add SIM identifier to the network profile and cred block

2014-04-24 12:15:32 +03:00

eap_eke.c

EAP-EKE: Use os_memcmp_const() for hash/password comparisons

2014-07-02 12:38:47 +03:00

eap_fast_pac.c

wpa_supplicant: Fix NULL dereference in eap_fast_parse_end()

2014-02-13 15:58:21 +02:00

eap_fast_pac.h

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00

eap_fast.c

EAP-FAST: Use os_memcmp_const() for hash/password comparisons

2014-07-02 12:38:47 +03:00

eap_gpsk.c

EAP-GPSK: Use os_memcmp_const() for hash/password comparisons

2014-07-02 12:38:47 +03:00

eap_gtc.c

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00

eap_i.h

Skip network disabling on expected EAP failure

2014-01-08 16:42:15 +02:00

eap_ikev2.c

EAP-IKEv2: Remove obsolete ccns.pl project workarounds

2014-06-08 12:28:36 +03:00

eap_leap.c

EAP-LEAP: Use os_memcmp_const() for hash/password comparisons

2014-07-02 12:38:47 +03:00

eap_md5.c

EAP-MD5: Verify that CHAP operation succeeds

2012-08-16 18:49:02 +03:00

eap_methods.c

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00

eap_methods.h

HS 2.0R2: Add WFA server-only EAP-TLS peer method

2014-02-26 01:24:23 +02:00

eap_mschapv2.c

EAP-MSCHAPv2: Check hash function results more consistently (CID 68105)

2014-06-14 12:32:45 +03:00

eap_otp.c

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00

eap_pax.c

EAP-PAX: Use os_memcmp_const() for hash/password comparisons

2014-07-02 12:38:47 +03:00

eap_peap.c

EAP-PEAP: Use os_memcmp_const() for hash/password comparisons

2014-07-02 12:38:47 +03:00

eap_proxy_dummy.c

eap_proxy: Add context data pointer to the get_imsi call

2013-10-23 20:51:46 +03:00

eap_proxy.h

eap_proxy: Add context data pointer to the get_imsi call

2013-10-23 20:51:46 +03:00

eap_psk.c

EAP-PSK: Use os_memcmp_const() for hash/password comparisons

2014-07-02 12:38:47 +03:00

eap_pwd.c

EAP-pwd: Add explicit total length limit

2014-07-02 12:38:47 +03:00

eap_sake.c

EAP-SAKE: Use os_memcmp_const() for hash/password comparisons

2014-07-02 12:38:47 +03:00

eap_sim.c

EAP-SIM/AKA: Pass EAP type as argument to eap_sim_msg_finish()

2014-07-02 12:38:47 +03:00

eap_tls_common.c

HS 2.0R2: Add WFA server-only EAP-TLS peer method

2014-02-26 01:24:23 +02:00

eap_tls_common.h

HS 2.0R2: Add WFA server-only EAP-TLS peer method

2014-02-26 01:24:23 +02:00

eap_tls.c

HS 2.0R2: Add WFA server-only EAP-TLS peer method

2014-02-26 01:24:23 +02:00

eap_tnc.c

EAP-TNC: Limit maximum message buffer to 75000 bytes (CID 62873)

2014-06-13 16:03:45 +03:00

eap_ttls.c

EAP peer: Add Session-Id derivation

2013-02-09 01:20:38 +02:00

eap_vendor_test.c

Use proper private enterprise number for EAP VENDOR-TEST

2012-08-22 21:37:19 +03:00

eap_wsc.c

WPS: Remove unused WEP related functionality

2014-04-06 12:31:45 +03:00

eap.c

Skip network disabling on expected EAP failure

2014-01-08 16:42:15 +02:00

eap.h

Skip network disabling on expected EAP failure

2014-01-08 16:42:15 +02:00

ikev2.c

EAP-IKEv2: Use os_memcmp_const() for hash/password comparisons

2014-07-02 12:38:47 +03:00

ikev2.h

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00

Makefile

Add CONFIG_CODE_COVERAGE=y option for gcov

2013-11-24 19:16:12 +02:00

mschapv2.c

EAP-MSCHAPv2: Use os_memcmp_const() for hash/password comparisons

2014-07-02 12:38:48 +03:00

mschapv2.h

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00

tncc.c

TNC: Fix minor memory leak (CID 62848)

2014-06-12 19:44:58 +03:00

tncc.h

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00