fragattacks/src/rsn_supp
Jouni Malinen 4cada9dcc1 FILS: Add DHss into FILS-Key-Data derivation when using FILS SK+PFS
This part is missing from IEEE Std 802.11ai-2016, but the lack of DHss
here means there would not be proper PFS for the case where PMKSA
caching is used with FILS SK+PFS authentication. This was not really the
intent of the FILS design and that issue was fixed during REVmd work
with the changes proposed in
https://mentor.ieee.org/802.11/dcn/17/11-17-0906-04-000m-fils-fixes.docx
that add DHss into FILS-Key-Data (and PTK, in practice) derivation for
the PMKSA caching case so that a unique ICK, KEK, and TK are derived
even when using the same PMK.

Note: This is not backwards compatible, i.e., this breaks PMKSA caching
with FILS SK+PFS if only STA or AP side implementation is updated.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-09-13 22:17:58 +03:00
..
Makefile tests: Add eapol-fuzzer 2015-04-22 11:44:19 +03:00
peerkey.c DPP: Add new AKM 2017-06-19 21:13:17 +03:00
peerkey.h PeerKey: Fix EAPOL-Key processing 2016-12-18 19:07:29 +02:00
pmksa_cache.c FILS: Update PMKID derivation rules for ERP key hierarchy establishment 2017-09-13 22:17:58 +03:00
pmksa_cache.h FILS: Use FILS Cache Identifier to extend PMKSA applicability 2017-02-26 12:05:40 +02:00
preauth.c FILS: Add support for Cache Identifier in add/remove PMKSA 2017-04-07 18:46:13 +03:00
preauth.h Fix wpa_supplicant build with IEEE8021X_EAPOL=y and CONFIG_NO_WPA=y 2016-01-15 20:04:41 +02:00
tdls.c Use os_memdup() 2017-03-07 13:19:10 +02:00
wpa_ft.c FT: Add selection of FT+FILS AKMs 2017-04-02 12:57:32 +03:00
wpa_i.h FILS: Derive FT key hierarchy on supplicant side for FILS+FT 2017-05-07 22:08:41 +03:00
wpa_ie.c DPP: Add new AKM 2017-06-19 21:13:17 +03:00
wpa_ie.h Simplify VHT Capabilities element parsing 2015-04-22 22:05:11 +03:00
wpa.c FILS: Add DHss into FILS-Key-Data derivation when using FILS SK+PFS 2017-09-13 22:17:58 +03:00
wpa.h FILS: Fix compilation with CONFIG_NO_WPA 2017-07-08 16:21:38 +03:00