Thomas Winter 6d3dc9ba1e mka: Check OLPN for exhaustion on SAKuse decode ...

Most of the time is spent in the CP state machine RETIRE state where LKI
is not set and OKI is the currently used SAK so OLPN needs to be checked
for PN exhaustion.

hostapd/wpa_supplicant implemented an interpretation of the standard as
described in a proposed amendment titled "MKA pending PN exhastion"
which was deemed to be wrong. This amendment was included in IEEE Std
802.1Xck-2018.

Signed-off-by: Thomas Winter <Thomas.Winter@alliedtelesis.co.nz>

2019-09-19 00:21:47 +03:00

..

ieee802_1x_cp.c

mka: Clear out old/latest key values on CHANGE in CP state machine

2019-09-19 00:21:47 +03:00

ieee802_1x_cp.h

mka: Remove unused authorization data from CP

2018-12-27 11:26:27 +02:00

ieee802_1x_kay_i.h

UBSan: Pack MACsec peer id structure

2019-02-25 19:48:49 +02:00

ieee802_1x_kay.c

mka: Check OLPN for exhaustion on SAKuse decode

2019-09-19 00:21:47 +03:00

ieee802_1x_kay.h

mka: MIB information

2018-12-29 16:52:31 +02:00

ieee802_1x_key.c

mka: Extend CAK/CKN-from-EAP-MSK API to pass in MSK length

2018-12-26 16:44:58 +02:00

ieee802_1x_key.h

mka: Extend CAK/CKN-from-EAP-MSK API to pass in MSK length

2018-12-26 16:44:58 +02:00

ieee802_1x_secy_ops.c

mka: Debug output cleanup/fix

2018-12-26 16:42:25 +02:00

ieee802_1x_secy_ops.h

mka: Fix lowest acceptable Packet Number (LPN) calculation and use

2018-12-26 16:42:25 +02:00

Makefile

MACsec: Add PAE implementation

2014-05-09 20:42:44 +03:00