Nick Lowe 4b16c15bbc EAP-pwd server: Use os_get_random() for unpredictable token ...

Do not use os_random() that uses a low quality PRNG to generate the
anti-clogging token. The construction can be improved upon by replacing
it with a call to os_get_random(), which uses a high quality PRNG. While
the RFC 5931 explictly recommends not to do this ("SHOULD NOT be from a
source of random entropy"), it does still mandate unpredicability ("MUST
be unpredictable"). The anti-clogging token is most unpredictable when
it is taken from a high quality PRNG.

Signed-off-by: Nick Lowe <nick.lowe@lugatech.com>

2016-02-19 18:44:40 +02:00

..

eap_i.h

EAP server: Add tls_session_lifetime configuration

2015-08-24 02:29:30 +03:00

eap_methods.h

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_aka.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_eke.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_fast.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_gpsk.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_gtc.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_identity.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_ikev2.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_md5.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_methods.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_mschapv2.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_pax.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_peap.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_psk.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_pwd.c

EAP-pwd server: Use os_get_random() for unpredictable token

2016-02-19 18:44:40 +02:00

eap_server_sake.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_sim.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_tls_common.c

EAP server: Set per-EAP method session context

2015-08-24 02:29:30 +03:00

eap_server_tls.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_tnc.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_ttls.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_vendor_test.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server_wsc.c

EAP server: Simplify EAP method registration call

2016-01-13 23:35:53 +02:00

eap_server.c

EAP server: Add tls_session_lifetime configuration

2015-08-24 02:29:30 +03:00

eap_sim_db.c

eap_sim_db: Implement eap_sim_db_expire_pending()

2015-10-31 16:28:16 +02:00

eap_sim_db.h

eap_sim_db: Implement eap_sim_db_expire_pending()

2015-10-31 16:28:16 +02:00

eap_tls_common.h

EAP server: Disable TLS session ticket with EAP-TLS/TTLS/PEAP

2015-08-24 02:29:30 +03:00

eap.h

EAP server: Add tls_session_lifetime configuration

2015-08-24 02:29:30 +03:00

ikev2.c

EAP-IKEv2 server: Avoid undefined behavior in pointer arithmetic

2015-10-24 21:43:54 +03:00

ikev2.h

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00

Makefile

tests: Add ap-mgmt-fuzzer

2015-04-22 11:44:19 +03:00

tncs.c

TNC: Allow TNC to be enabled dynamically

2014-05-17 20:05:55 +03:00

tncs.h

Remove the GPL notification from files contributed by Jouni Malinen

2012-02-11 19:39:36 +02:00