fragattacks

mirror of https://github.com/vanhoefm/fragattacks.git synced 2025-02-20 11:03:03 -05:00

History

Jouni Malinen acc39435ff EAP-PEAP peer: Cryptobinding in fast-reconnect case with inner EAP

This was reported to fail with Windows 2012r2 with "Invalid Compound_MAC
in cryptobinding TLV". It turns out that the server decided to go
through inner EAP method (EAP-MSCHAPv2 in the reported case) even when
using PEAP fast-reconnect. This seems to be against the [MS-PEAP]
specification which claims that inner EAP method is not used in such a
case. This resulted in a different CMK being derived by the server (used
the version that used ISK) and wpa_supplicant (used the version where
IPMK|CMK = TK without ISK when using fast-reconnect).

Fix this interop issue by making wpa_supplicant to use the
fast-reconnect version of CMK derivation only when using TLS session
resumption and the server having not initiated inner EAP method before
going through the cryptobinding exchange.

Signed-off-by: Jouni Malinen <j@w1.fi>

2016-01-05 23:50:50 +02:00

Fix wpa_supplicant AP mode P2P IE handling if P2P is disabled

2016-01-01 17:12:43 +02:00

common

mesh: Fix PMKID to match the standard

2015-12-28 17:21:08 +02:00

crypto

EAP-FAST: Enable AES256-based TLS cipher suites with OpenSSL

2015-12-31 20:52:58 +02:00

drivers

nl80211: Don't call linux_iface_up() for a dedicated P2P Device

2015-12-28 17:21:08 +02:00