EAP-SIM/AKA peer: Add support for EAP Method prefix

Add support for EAP method prefix in the anonymous identity
used during EAP-SIM/AKA/AKA' authentication when encrypted IMSI
is used. The prefix is a single character that indicates which
EAP method is required by the client.

Signed-off-by: Hai Shalom <haishalom@google.com>
This commit is contained in:
Hai Shalom 2019-12-27 09:44:49 -08:00 committed by Jouni Malinen
parent 991e6b9e79
commit d20365db17

View file

@ -1219,6 +1219,10 @@ int eap_sim_anonymous_username(const u8 *id, size_t id_len)
os_memcmp(id, anonymous_id_prefix, anonymous_id_len) == 0)
return 1; /* 'anonymous@realm' */
if (id_len > anonymous_id_len + 1 &&
os_memcmp(id + 1, anonymous_id_prefix, anonymous_id_len) == 0)
return 1; /* 'Xanonymous@realm' where X is an EAP method code */
if (id_len > 1 && id[0] == '@')
return 1; /* '@realm' */