fragattacks/src
Jouni Malinen ca24117a5a EAP-EKE: Add Session-Id
While RFC 6124 does not define how Session-Id is constructed for
EAP-EKE, there seems to be consensus among the authors on the
construction. Use this Type | Nonce_P | Nonce_S construction based on
the following email:

 From: Yaron Sheffer <yaronf.ietf at gmail.com>
 To: ietf at ietf.org
 Date: Wed, 17 Nov 2010 13:13:42 +0200

Expanding on my previous response, I suggest to resolve Bernard's
concern by adding the following text:

5.6 EAP Key Generation

EAP-EKE can be used for EAP key generation, as defined by [RFC 5247].
When used in this manner, the values required to establish the key
hierarchy are defined as follows:

- Peer-Id is the EAP-EKE ID_P value.
- Server-Id is the EAP-EKE ID_S value.
- Session-Id is the concatenated Type | Nonce_P | Nonce_S, where Type is
  the method type defined for EAP-EKE in [Sec. 4.1], a single octet.

Thanks,
	Yaron

Signed-off-by: Jouni Malinen <j@w1.fi>
2015-05-24 11:58:45 +03:00
..
ap ACS: Scan only channels specified in the channel list 2015-05-24 10:38:27 +03:00
common Add QCA vendor subcmd for Link Property Query 2015-05-07 18:53:23 +03:00
crypto Declare all read only data structures as const 2015-04-25 17:33:06 +03:00
drivers nl80211: Verify that cipher suite conversion succeeds 2015-04-27 16:49:06 +03:00
eap_common EAP-SAKE: Make attribute parser more readable 2015-05-03 16:32:50 +03:00
eap_peer EAP-EKE: Add Session-Id 2015-05-24 11:58:45 +03:00
eap_server EAP-EKE: Add Session-Id 2015-05-24 11:58:45 +03:00
eapol_auth Declare all read only data structures as const 2015-04-25 17:33:06 +03:00
eapol_supp Declare all read only data structures as const 2015-04-25 17:33:06 +03:00
l2_packet tests: Add eapol-fuzzer 2015-04-22 11:44:19 +03:00
p2p P2P: Fix association with an AP/P2P GO that is not a P2P manager 2015-05-07 21:00:22 +03:00
pae MACsec: Update protect frames and replay on reauthentication 2014-12-09 16:56:10 +02:00
radius RADIUS: Fix a copy-paste error in variable name 2015-04-29 12:08:27 +03:00
rsn_supp Simplify VHT Capabilities element parsing 2015-04-22 22:05:11 +03:00
tls libtommath: Fix check mp_init_multi() result 2015-05-03 16:53:59 +03:00
utils tests: Add a module test for wpa_ssid_txt() with too long SSID 2015-04-22 11:44:19 +03:00
wps WPS: Add more debug prints to httpread 2015-05-03 18:26:50 +03:00
lib.rules Add QUIET=1 option for make 2014-12-29 15:49:05 +02:00
Makefile MACsec: Add PAE implementation 2014-05-09 20:42:44 +03:00