jeltz/hostap
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
hostap/src/eap_server
History
Nick Lowe 4b16c15bbc EAP-pwd server: Use os_get_random() for unpredictable token 
Do not use os_random() that uses a low quality PRNG to generate the
anti-clogging token. The construction can be improved upon by replacing
it with a call to os_get_random(), which uses a high quality PRNG. While
the RFC 5931 explictly recommends not to do this ("SHOULD NOT be from a
source of random entropy"), it does still mandate unpredicability ("MUST
be unpredictable"). The anti-clogging token is most unpredictable when
it is taken from a high quality PRNG.

Signed-off-by: Nick Lowe <nick.lowe@lugatech.com>
2016-02-19 18:44:40 +02:00
..
eap.h EAP server: Add tls_session_lifetime configuration 2015-08-24 02:29:30 +03:00
eap_i.h EAP server: Add tls_session_lifetime configuration 2015-08-24 02:29:30 +03:00
eap_methods.h EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server.c EAP server: Add tls_session_lifetime configuration 2015-08-24 02:29:30 +03:00
eap_server_aka.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_eke.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_fast.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_gpsk.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_gtc.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_identity.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_ikev2.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_md5.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_methods.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_mschapv2.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_pax.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_peap.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_psk.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_pwd.c EAP-pwd server: Use os_get_random() for unpredictable token 2016-02-19 18:44:40 +02:00
eap_server_sake.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_sim.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_tls.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_tls_common.c EAP server: Set per-EAP method session context 2015-08-24 02:29:30 +03:00
eap_server_tnc.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_ttls.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_vendor_test.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_server_wsc.c EAP server: Simplify EAP method registration call 2016-01-13 23:35:53 +02:00
eap_sim_db.c eap_sim_db: Implement eap_sim_db_expire_pending() 2015-10-31 16:28:16 +02:00
eap_sim_db.h eap_sim_db: Implement eap_sim_db_expire_pending() 2015-10-31 16:28:16 +02:00
eap_tls_common.h EAP server: Disable TLS session ticket with EAP-TLS/TTLS/PEAP 2015-08-24 02:29:30 +03:00
ikev2.c EAP-IKEv2 server: Avoid undefined behavior in pointer arithmetic 2015-10-24 21:43:54 +03:00
ikev2.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
Makefile tests: Add ap-mgmt-fuzzer 2015-04-22 11:44:19 +03:00
tncs.c TNC: Allow TNC to be enabled dynamically 2014-05-17 20:05:55 +03:00
tncs.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00