You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
hostap/src/ap
Michael Braun eefe863015 FT RRB: Add msg replay and msg delay protection
This adds a counter and adds sequence numbering to FT RRB packets. The
sequence number is checked against r0kh/r1kh sequence number cache.

Special attention is needed in case the remote AP reboots and thus loses
its state. I prefer it to recover automatically even without synchronized
clocks. Therefore an identifier called dom is generated randomly along the
initial sequence number. If the dom transmitted does not match or the
sequence number is not in the range currently expected, the sender is asked
for a fresh confirmation of its currently used sequence numbers. The packet
that triggered this is cached and processed again later.

Additionally, in order to ensure freshness, the remote AP includes an
timestamp with its messages. It is then verified that the received
messages are indeed fresh by comparing it to the older timestamps
received and the time elapsed since then. Therefore FT_RRB_TIMESTAMP is
no longer needed.

This assigns new OUI 00:13:74 vendor-specific subtype 0x0001 subtypes:
4 (SEQ_REQ) and 5 (SEQ_RESP).

This breaks backward compatibility, i.e., hostapd needs to be updated
on all APs at the same time to allow FT to remain functional.

Signed-off-by: Michael Braun <michael-dev@fami-braun.de>
7 years ago
..
Makefile Fix libap.a build 8 years ago
accounting.c Remove unused generation of Request Authenticator in Account-Request 8 years ago
accounting.h RADIUS: Use more likely unique accounting Acct-{,Multi-}Session-Id 9 years ago
acs.c ACS: Fix memory leak if interface is disabled during scan 7 years ago
acs.h ACS: Fix memory leak if interface is disabled during scan 7 years ago
ap_config.c MBO: Add MBO ANQP-element processing on AP 7 years ago
ap_config.h hostapd: Select a valid secondary channel if both enabled 7 years ago
ap_drv_ops.c FILS: Add FILS AEAD parameters for sta_auth() calls 7 years ago
ap_drv_ops.h hostapd: Fix crash on consecutive channel switch failures 7 years ago
ap_list.c Move ap_list_timer() to use common AP periodic cleanup mechanism 9 years ago
ap_list.h Move ap_list_timer() to use common AP periodic cleanup mechanism 9 years ago
ap_mlme.c FILS: Do not clear PTK on FILS Auth/Assoc (AP) 8 years ago
ap_mlme.h Remove the GPL notification from files contributed by Jouni Malinen 13 years ago
authsrv.c Use os_memdup() 7 years ago
authsrv.h Remove the GPL notification from files contributed by Jouni Malinen 13 years ago
beacon.c hostapd: Add IEEE 802.11ax HE IEs into Beacon/Probe Response frames 7 years ago
beacon.h hostapd: Added signal level to STA tracking 8 years ago
bss_load.c AP: Add support for BSS load element (STA Count, Channel Utilization) 10 years ago
bss_load.h AP: Add support for BSS load element (STA Count, Channel Utilization) 10 years ago
ctrl_iface_ap.c mesh: Add MESH_PMKSA_GET/ADD commands 8 years ago
ctrl_iface_ap.h mesh: Add MESH_PMKSA_GET/ADD commands 8 years ago
dfs.c DFS: Handle pre-CAC expired event 7 years ago
dfs.h DFS: Handle pre-CAC expired event 7 years ago
dhcp_snoop.c Fix DHCP/NDISC snoop deinit followed by failing re-init 7 years ago
dhcp_snoop.h AP: Add support for Proxy ARP, DHCP snooping mechanism 10 years ago
drv_callbacks.c FILS: Handle authentication/association in partial driver AP SME 7 years ago
eap_user_db.c Improve error messages related to EAP DB 9 years ago
eth_p_oui.c FT: Replace inter-AP protocol with use of OUI Extended Ethertype 7 years ago
eth_p_oui.h FT: Replace inter-AP protocol with use of OUI Extended Ethertype 7 years ago
fils_hlp.c FILS: Fix fils_hlp.c build with older netinet/udp.h definitions 7 years ago
fils_hlp.h FILS: DHCP relay for HLP requests 8 years ago
gas_serv.c Fix GAS server ifdef block use 7 years ago
gas_serv.h MBO: Add MBO ANQP-element processing on AP 7 years ago
hostapd.c FT: Replace inter-AP protocol with use of OUI Extended Ethertype 7 years ago
hostapd.h FT: New RRB message format 7 years ago
hs20.c HS 2.0R2 AP: Add support for deauthentication request 10 years ago
hs20.h HS 2.0R2 AP: Add support for deauthentication request 10 years ago
hw_features.c hostapd: Select a valid secondary channel if both enabled 7 years ago
hw_features.h hostapd: Fix some compilation errors 9 years ago
iapp.c IAPP: Set SO_REUSEADDR on listening socket 8 years ago
iapp.h Remove the GPL notification from files contributed by Jouni Malinen 13 years ago
ieee802_1x.c OWE: Define and parse OWE AKM selector 7 years ago
ieee802_1x.h FILS: Export IEEE 802.1X helper functions 8 years ago
ieee802_11.c FILS: Make handle_auth_fils() re-usable for driver-based AP SME 7 years ago
ieee802_11.h FILS: Make handle_auth_fils() re-usable for driver-based AP SME 7 years ago
ieee802_11_auth.c Use os_memdup() 7 years ago
ieee802_11_auth.h VLAN: Separate station grouping and uplink configuration 8 years ago
ieee802_11_he.c hostapd: Add IEEE 802.11ax HE IEs into Beacon/Probe Response frames 7 years ago
ieee802_11_ht.c mesh: Use correct rate in HT and legacy mixed environment 7 years ago
ieee802_11_shared.c FILS: Add FILS SK auth PFS support in AP mode 7 years ago
ieee802_11_vht.c mesh: Use correct rate in VHT and HT mixed environment 7 years ago
mbo_ap.c MBO: Do not parse reason_detail in non_pref_chan attr (AP) 8 years ago
mbo_ap.h MBO: Parse non-preferred channel list on the AP 8 years ago
ndisc_snoop.c Fix DHCP/NDISC snoop deinit followed by failing re-init 7 years ago
ndisc_snoop.h proxyarp: Use C library header files and CONFIG_IPV6 10 years ago
neighbor_db.c hostapd: Add a configuration to set an AP as stationary 8 years ago
neighbor_db.h hostapd: Add a configuration to set an AP as stationary 8 years ago
p2p_hostapd.c Use P2P_IE_VENDOR_TYPE more consistently 10 years ago
p2p_hostapd.h Remove the GPL notification from files contributed by Atheros 13 years ago
peerkey_auth.c PeerKey: Remove dead code related to STSL negotiation state 7 years ago
pmksa_cache_auth.c mesh: Add MESH_PMKSA_GET/ADD commands 8 years ago
pmksa_cache_auth.h mesh: Add MESH_PMKSA_GET/ADD commands 8 years ago
preauth_auth.c Remove the GPL notification from files contributed by Jouni Malinen 13 years ago
preauth_auth.h Remove the GPL notification from files contributed by Jouni Malinen 13 years ago
rrm.c RRM: Fix range request overriding 7 years ago
rrm.h Report beacon request TX status as control interface event 8 years ago
sta_info.c FILS: Add FILS SK auth PFS support in AP mode 7 years ago
sta_info.h FILS: Make handle_auth_fils() re-usable for driver-based AP SME 7 years ago
taxonomy.c Fix or supress various sparse warnings 8 years ago
taxonomy.h taxonomy: Store Probe Request frames in hostapd_sta_info 8 years ago
tkip_countermeasures.c AP: Use monotonic time for MMIC failure/TKIP countermeasures 11 years ago
tkip_countermeasures.h hostapd: Fix a regression in TKIP countermeasures processing 12 years ago
utils.c FST: Do not prune STAs belonging to the same FST 9 years ago
vlan.c VLAN: Fix vlan_compare() for tagged VLANs 8 years ago
vlan.h radius: Add tagged VLAN parsing 8 years ago
vlan_full.c Use a separate header file for Linux bridge interface definitions 8 years ago
vlan_ifconfig.c vlan: Move if_nametoindex() use out of vlan_init.c 8 years ago
vlan_init.c vlan: Move if_nametoindex() use out of vlan_init.c 8 years ago
vlan_init.h VLAN: Separate station grouping and uplink configuration 8 years ago
vlan_ioctl.c Use own header file for defining Linux VLAN kernel interface 8 years ago
vlan_util.c vlan: Remove unnecessary header includes from netlink implementation 8 years ago
vlan_util.h vlan: Move if_nametoindex() use out of vlan_init.c 8 years ago
wmm.c WMM: Fix estimated medium time calculation for some corner cases 7 years ago
wmm.h Remove obsolete license notifications 11 years ago
wnm_ap.c WNM: Remove unused code from BSS TM Req generation 7 years ago
wnm_ap.h hostapd: Add MBO IE to BSS Transition Management Request frame 8 years ago
wpa_auth.c FT RRB: Add msg replay and msg delay protection 7 years ago
wpa_auth.h FT RRB: Add msg replay and msg delay protection 7 years ago
wpa_auth_ft.c FT RRB: Add msg replay and msg delay protection 7 years ago
wpa_auth_glue.c FT RRB: Add msg replay and msg delay protection 7 years ago
wpa_auth_glue.h Remove the GPL notification from files contributed by Jouni Malinen 13 years ago
wpa_auth_i.h FT RRB: Add msg replay and msg delay protection 7 years ago
wpa_auth_ie.c OWE: Process Diffie-Hellman Parameter element in AP mode 7 years ago
wpa_auth_ie.h FT: Differentiate between FT for station and for AP in build 8 years ago
wps_hostapd.c Share a single str_starts() implementation 8 years ago
wps_hostapd.h WPS NFC: Add AP mode connection handover report 11 years ago
x_snoop.c AP: Enable multicast snooping on bridge if ProxyARP IPv6 is in use 9 years ago
x_snoop.h AP: Add multicast-to-unicast conversion send for "x_snoop" 10 years ago