From 9824de57a43318f8db1cc7f926f6d4f311d92054 Mon Sep 17 00:00:00 2001 From: Jouni Malinen Date: Fri, 15 Sep 2017 00:36:25 +0300 Subject: [PATCH] Fix EAPOL-Key version check for a corner case with Suite B AKM While the Suite B AKM is not really going to be used with CCMP-128 or GCMP-128 cipher, this corner case could be fixed if it is useful for some testing purposes. Allow that special case to skip the HMAC-SHA1 check based on CCMP/GCMP cipher and use the following AKM-defined check instead. Signed-off-by: Jouni Malinen --- src/ap/wpa_auth.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/ap/wpa_auth.c b/src/ap/wpa_auth.c index e5b66b397..aca687c70 100644 --- a/src/ap/wpa_auth.c +++ b/src/ap/wpa_auth.c @@ -1024,6 +1024,7 @@ void wpa_receive(struct wpa_authenticator *wpa_auth, } if (!wpa_use_aes_cmac(sm) && + !wpa_key_mgmt_suite_b(sm->wpa_key_mgmt) && !wpa_key_mgmt_fils(sm->wpa_key_mgmt) && sm->wpa_key_mgmt != WPA_KEY_MGMT_OWE && sm->wpa_key_mgmt != WPA_KEY_MGMT_DPP &&