jeltz/hostap
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
hostap/src/common/sae.h

72 lines
2.2 KiB
C
Raw Normal View History

SAE: Use a shared data structure for AP and station This makes it easier to share common functions for both roles. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 20:48:19 +01:00
/*
* Simultaneous authentication of equals
SAE: Add support for ECC group 21 (521-bit random ECP group) In addition to the trivial change in adding the new group ientifier, this required changes to KDF and random number generation to support cases where the length of the prime in bits is not a multiple of eight. The binary presentation of the value needs to be shifted so that the unused most significant bits are the zero padding rather than the extra bits in the end of the array. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-01 13:00:40 +01:00
* Copyright (c) 2012-2013, Jouni Malinen <j@w1.fi>
SAE: Use a shared data structure for AP and station This makes it easier to share common functions for both roles. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 20:48:19 +01:00
*
* This software may be distributed under the terms of the BSD license.
* See README for more details.
*/
#ifndef SAE_H
#define SAE_H
SAE: Use defines for key lengths Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-01 10:52:49 +01:00
#define SAE_KCK_LEN 32
#define SAE_PMK_LEN 32
#define SAE_PMKID_LEN 16
#define SAE_KEYSEED_KEY_LEN 32
SAE: Add support for FFC groups This allows FFC groups to be used with SAE. Though, these groups are not included in the default sae_groups value based on what is available since the FFC groups have the additional requirement of using a safe prime with the current implementation (or specification of the group order). Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-05 20:22:00 +01:00
#define SAE_MAX_PRIME_LEN 512
SAE: Store commit elements as EC point or bignum instead of octet string This avoids unnecessary EC point and bignum initialization steps during the SAE exchange. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-06 17:12:58 +01:00
#define SAE_MAX_ECC_PRIME_LEN 66
SAE: Add a define for maximum supported prime length This can be used to increase buffer sizes when adding support for new groups. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-01 10:49:01 +01:00
#define SAE_COMMIT_MAX_LEN (2 + 3 * SAE_MAX_PRIME_LEN)
#define SAE_CONFIRM_MAX_LEN (2 + SAE_MAX_PRIME_LEN)
SAE: Add generation of the commit message fields This adds derivation of PWE and the needed commit values so that the full SAE commit message can be built. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 21:06:11 +01:00
SAE: Verify that own/peer commit-scalar and COMMIT-ELEMENT are different This check explicitly for reflection attack and stops authentication immediately if that is detected instead of continuing to the following 4-way handshake that would fail due to the attacker not knowing the key from the SAE exchange. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-06-23 21:30:15 +02:00
/* Special value returned by sae_parse_commit() */
#define SAE_SILENTLY_DISCARD 65535
SAE: Move temporary data into a separate data structure This allows even more memory to be freed when the SAE instance enters Accepted state. This leaves only the minimal needed memory allocated during the association which is especially helpful for the AP implementation where multiple stations may be associated concurrently. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-06 18:26:27 +01:00
struct sae_temporary_data {
SAE: Use defines for key lengths Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-01 10:52:49 +01:00
u8 kck[SAE_KCK_LEN];
SAE: Store commit scalars as bignum instead of octet string This avoids unnecessary bignum initialization steps during the SAE exchange. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-06 15:57:53 +01:00
struct crypto_bignum *own_commit_scalar;
SAE: Store commit elements as EC point or bignum instead of octet string This avoids unnecessary EC point and bignum initialization steps during the SAE exchange. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-06 17:12:58 +01:00
struct crypto_bignum *own_commit_element_ffc;
struct crypto_ec_point *own_commit_element_ecc;
struct crypto_bignum *peer_commit_element_ffc;
struct crypto_ec_point *peer_commit_element_ecc;
SAE: Store PWE as EC point or bignum instead of octet string This avoids unnecessary EC point and bignum initialization steps during the SAE exchange. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-06 15:10:48 +01:00
struct crypto_ec_point *pwe_ecc;
struct crypto_bignum *pwe_ffc;
SAE: Store rand value as bignum instead of octet string This avoids unnecessary bignum initialization steps during the SAE exchange. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-06 14:32:38 +01:00
struct crypto_bignum *sae_rand;
SAE: Maintain EC group context in struct sae_data This can be used to share same EC group context through the SAE exchange. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-01 10:29:53 +01:00
struct crypto_ec *ec;
int prime_len;
SAE: Add support for FFC groups This allows FFC groups to be used with SAE. Though, these groups are not included in the default sae_groups value based on what is available since the FFC groups have the additional requirement of using a safe prime with the current implementation (or specification of the group order). Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-05 20:22:00 +01:00
const struct dh_group *dh;
SAE: Maintain bignum of group order and prime in context data This simplifies operations by not having to create bignum instances multiple times during SAE exchange. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-05 20:12:29 +01:00
const struct crypto_bignum *prime;
const struct crypto_bignum *order;
SAE: Add support for FFC groups This allows FFC groups to be used with SAE. Though, these groups are not included in the default sae_groups value based on what is available since the FFC groups have the additional requirement of using a safe prime with the current implementation (or specification of the group order). Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-05 20:22:00 +01:00
struct crypto_bignum *prime_buf;
struct crypto_bignum *order_buf;
mesh: Fix SAE anti-clogging functionality for mesh The mesh anti-clogging functionality is implemented partially. This patch fixes to parse anti-clogging request frame and use anti-clogging token. Signed-off-by: Masashi Honma <masashi.honma@gmail.com>
2014-11-25 03:04:40 +01:00
struct wpabuf *anti_clogging_token;
SAE: Use a shared data structure for AP and station This makes it easier to share common functions for both roles. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 20:48:19 +01:00
};
SAE: Move temporary data into a separate data structure This allows even more memory to be freed when the SAE instance enters Accepted state. This leaves only the minimal needed memory allocated during the association which is especially helpful for the AP implementation where multiple stations may be associated concurrently. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-06 18:26:27 +01:00
struct sae_data {
enum { SAE_NOTHING, SAE_COMMITTED, SAE_CONFIRMED, SAE_ACCEPTED } state;
u16 send_confirm;
u8 pmk[SAE_PMK_LEN];
mesh: Fix PMKID to match the standard IEEE Std 802.11-2012 11.3.5.4 specifies the PMKID for SAE-derived keys as: L((commit-scalar + peer-commit-scalar) mod r, 0, 128) This is already calculated in the SAE code when the PMK is derived, but not saved anywhere. Later, when generating the PMKID for plink action frames, the definition for PMKID from 11.6.1.3 is incorrectly used. Correct this by saving the PMKID when the key is generated and use it subsequently. Signed-off-by: Bob Copeland <me@bobcopeland.com>
2015-12-27 03:20:51 +01:00
u8 pmkid[SAE_PMKID_LEN];
SAE: Move temporary data into a separate data structure This allows even more memory to be freed when the SAE instance enters Accepted state. This leaves only the minimal needed memory allocated during the association which is especially helpful for the AP implementation where multiple stations may be associated concurrently. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-06 18:26:27 +01:00
struct crypto_bignum *peer_commit_scalar;
int group;
SAE: Implement retransmission timer Add the t0 retransmission timer as specified by IEEE Std 802.11-2012, 11.3.8.4. This makes SAE much more likely to succeed in the case of lost frames. Signed-off-by: Bob Copeland <me@bobcopeland.com>
2015-01-07 07:10:57 +01:00
int sync;
SAE: Move temporary data into a separate data structure This allows even more memory to be freed when the SAE instance enters Accepted state. This leaves only the minimal needed memory allocated during the association which is especially helpful for the AP implementation where multiple stations may be associated concurrently. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-06 18:26:27 +01:00
struct sae_temporary_data *tmp;
};
SAE: Maintain EC group context in struct sae_data This can be used to share same EC group context through the SAE exchange. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-01 10:29:53 +01:00
int sae_set_group(struct sae_data *sae, int group);
SAE: Free temporary buffers when moving to Accepted state Most of the variables are not needed anymore once the SAE instance has entered Accepted state. Free these to save memory. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-06 18:06:59 +01:00
void sae_clear_temp_data(struct sae_data *sae);
SAE: Maintain EC group context in struct sae_data This can be used to share same EC group context through the SAE exchange. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-01 10:29:53 +01:00
void sae_clear_data(struct sae_data *sae);
SAE: Add generation of the commit message fields This adds derivation of PWE and the needed commit values so that the full SAE commit message can be built. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 21:06:11 +01:00
int sae_prepare_commit(const u8 *addr1, const u8 *addr2,
const u8 *password, size_t password_len,
struct sae_data *sae);
SAE: Add processing of the commit message This adds validation of the received commit messages and key derivation for SAE. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 21:16:18 +01:00
int sae_process_commit(struct sae_data *sae);
SAE: Add support for Anti-Clogging mechanism hostapd can now be configured to use anti-clogging mechanism based on the new sae_anti_clogging_threshold parameter (which is dot11RSNASAEAntiCloggingThreshold in the standard). The token is generated using a temporary key and the peer station's MAC address. wpa_supplicant will re-try SAE authentication with the token included if commit message is rejected with a token request. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-31 15:58:36 +01:00
void sae_write_commit(struct sae_data *sae, struct wpabuf *buf,
const struct wpabuf *token);
u16 sae_parse_commit(struct sae_data *sae, const u8 *data, size_t len,
SAE: Allow enabled groups to be configured hostapd.conf sae_groups parameter can now be used to limit the set of groups that the AP allows for SAE. Similarly, sae_groups parameter is wpa_supplicant.conf can be used to set the preferred order of groups. By default, all implemented groups are enabled. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-01 15:23:47 +01:00
const u8 **token, size_t *token_len, int *allowed_groups);
SAE: Add generation of the confirm message fields Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 21:28:57 +01:00
void sae_write_confirm(struct sae_data *sae, struct wpabuf *buf);
SAE: Add processing of the confirm message This adds validation of the received confirm messages for SAE. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 21:31:19 +01:00
int sae_check_confirm(struct sae_data *sae, const u8 *data, size_t len);
SAE: Fix Anti-Clogging Token request frame format This commit inserts Finite Cyclic Group to Anti-Clogging Token request frame because IEEE Std 802.11-2012, Table 8-29 says "Finite Cyclic Group is present if Status is zero or 76". Signed-off-by: Masashi Honma <masashi.honma@gmail.com>
2014-11-25 03:04:41 +01:00
u16 sae_group_allowed(struct sae_data *sae, int *allowed_groups, u16 group);
SAE: Add generation of the commit message fields This adds derivation of PWE and the needed commit values so that the full SAE commit message can be built. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 21:06:11 +01:00
SAE: Use a shared data structure for AP and station This makes it easier to share common functions for both roles. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 20:48:19 +01:00
#endif /* SAE_H */
Reference in a new issue Copy permalink