hostap/src
Michael Braun eefe863015 FT RRB: Add msg replay and msg delay protection
This adds a counter and adds sequence numbering to FT RRB packets. The
sequence number is checked against r0kh/r1kh sequence number cache.

Special attention is needed in case the remote AP reboots and thus loses
its state. I prefer it to recover automatically even without synchronized
clocks. Therefore an identifier called dom is generated randomly along the
initial sequence number. If the dom transmitted does not match or the
sequence number is not in the range currently expected, the sender is asked
for a fresh confirmation of its currently used sequence numbers. The packet
that triggered this is cached and processed again later.

Additionally, in order to ensure freshness, the remote AP includes an
timestamp with its messages. It is then verified that the received
messages are indeed fresh by comparing it to the older timestamps
received and the time elapsed since then. Therefore FT_RRB_TIMESTAMP is
no longer needed.

This assigns new OUI 00:13:74 vendor-specific subtype 0x0001 subtypes:
4 (SEQ_REQ) and 5 (SEQ_RESP).

This breaks backward compatibility, i.e., hostapd needs to be updated
on all APs at the same time to allow FT to remain functional.

Signed-off-by: Michael Braun <michael-dev@fami-braun.de>
2017-05-03 22:16:14 +03:00
..
ap FT RRB: Add msg replay and msg delay protection 2017-05-03 22:16:14 +03:00
common FILS: Specify if FILS HLP was sent in connect 2017-04-29 16:35:23 +03:00
crypto Return success/failure result from sha384_prf() 2017-03-12 20:43:06 +02:00
drivers atheros: Get rid of static analyzer warnings on 0-length memcpy 2017-05-01 22:08:16 +03:00
eap_common Use os_memdup() 2017-03-07 13:19:10 +02:00
eap_peer ERP: Silence static analyzer warning 2017-05-01 22:08:16 +03:00
eap_server Use os_memdup() 2017-03-07 13:19:10 +02:00
eapol_auth Use os_memdup() 2017-03-07 13:19:10 +02:00
eapol_supp ERP: External control of ERP key information 2017-04-07 18:46:13 +03:00
fst FST: Silence compiler warning on WPA_ASSERT 2017-01-29 18:45:29 +02:00
l2_packet tests: Add TEST_FAIL() checks in l2_packet 2017-03-04 11:43:58 +02:00
p2p P2P: Do not use wait_time for SD Response TX for last fragmentation 2017-04-01 14:25:26 +03:00
pae PAE: Silence static analyzer warning about NULL pointer dereference 2017-04-24 11:38:10 +03:00
radius Use os_memdup() 2017-03-07 13:19:10 +02:00
rsn_supp FILS: Fix key info in GTK rekey EAPOL-Key msg 2/2 2017-04-10 16:18:11 +03:00
tls Use os_memdup() 2017-03-07 13:19:10 +02:00
utils FT: Replace inter-AP protocol with use of OUI Extended Ethertype 2017-05-03 18:30:31 +03:00
wps Use os_memdup() 2017-03-07 13:19:10 +02:00
lib.rules Add QUIET=1 option for make 2014-12-29 15:49:05 +02:00
Makefile FST: Add the Fast Session Transfer (FST) module 2015-07-16 18:26:15 +03:00