d136c376f2
hostapd can now be configured to use anti-clogging mechanism based on the new sae_anti_clogging_threshold parameter (which is dot11RSNASAEAntiCloggingThreshold in the standard). The token is generated using a temporary key and the peer station's MAC address. wpa_supplicant will re-try SAE authentication with the token included if commit message is rejected with a token request. Signed-hostap: Jouni Malinen <j@w1.fi>
40 lines
1.1 KiB
C
40 lines
1.1 KiB
C
/*
|
|
* Simultaneous authentication of equals
|
|
* Copyright (c) 2012, Jouni Malinen <j@w1.fi>
|
|
*
|
|
* This software may be distributed under the terms of the BSD license.
|
|
* See README for more details.
|
|
*/
|
|
|
|
#ifndef SAE_H
|
|
#define SAE_H
|
|
|
|
#define SAE_COMMIT_MAX_LEN (2 + 3 * 32)
|
|
#define SAE_CONFIRM_MAX_LEN (2 + 32)
|
|
|
|
struct sae_data {
|
|
enum { SAE_NOTHING, SAE_COMMITTED, SAE_CONFIRMED, SAE_ACCEPTED } state;
|
|
u16 send_confirm;
|
|
u8 kck[32];
|
|
u8 pmk[32];
|
|
u8 own_commit_scalar[32];
|
|
u8 own_commit_element[2 * 32];
|
|
u8 peer_commit_scalar[32];
|
|
u8 peer_commit_element[2 * 32];
|
|
u8 pwe[2 * 32];
|
|
u8 sae_rand[32];
|
|
};
|
|
|
|
int sae_prepare_commit(const u8 *addr1, const u8 *addr2,
|
|
const u8 *password, size_t password_len,
|
|
struct sae_data *sae);
|
|
int sae_process_commit(struct sae_data *sae);
|
|
void sae_write_commit(struct sae_data *sae, struct wpabuf *buf,
|
|
const struct wpabuf *token);
|
|
u16 sae_parse_commit(struct sae_data *sae, const u8 *data, size_t len,
|
|
const u8 **token, size_t *token_len);
|
|
void sae_write_confirm(struct sae_data *sae, struct wpabuf *buf);
|
|
int sae_check_confirm(struct sae_data *sae, const u8 *data, size_t len);
|
|
|
|
#endif /* SAE_H */
|