1526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/* 2526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * WPA Supplicant - WPA state machine and EAPOL-Key processing 3526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Copyright (c) 2003-2008, Jouni Malinen <j@w1.fi> 4526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * 5526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * This program is free software; you can redistribute it and/or modify 6526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * it under the terms of the GNU General Public License version 2 as 7526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * published by the Free Software Foundation. 8526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * 9526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Alternatively, this software may be distributed under the terms of BSD 10526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * license. 11526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * 12526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * See README and COPYING for more details. 13526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 14526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 15526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#include "includes.h" 16526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 17526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#include "common.h" 18b349ef9e9f3f5399bf96b3c1c663cb9e547f50a1Dmitry Shmidt#include "crypto/rc4.h" 19b349ef9e9f3f5399bf96b3c1c663cb9e547f50a1Dmitry Shmidt#include "crypto/aes_wrap.h" 20526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#include "wpa.h" 21526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#include "eloop.h" 22526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#include "eapol_supp/eapol_supp_sm.h" 23526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#include "preauth.h" 24526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#include "pmksa_cache.h" 25526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#include "wpa_i.h" 26526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#include "wpa_ie.h" 27526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#include "peerkey.h" 28526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#include "ieee802_11_defs.h" 29526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 30526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 31526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 32526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_cipher_txt - Convert cipher suite to a text string 33526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @cipher: Cipher suite (WPA_CIPHER_* enum) 34526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Returns: Pointer to a text string of the cipher suite name 35526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 36526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic const char * wpa_cipher_txt(int cipher) 37526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 38526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt switch (cipher) { 39526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_NONE: 40526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return "NONE"; 41526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_WEP40: 42526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return "WEP-40"; 43526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_WEP104: 44526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return "WEP-104"; 45526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_TKIP: 46526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return "TKIP"; 47526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_CCMP: 48526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return "CCMP"; 49526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt default: 50526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return "UNKNOWN"; 51526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 52526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 53526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 54526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 55526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 56526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_key_mgmt_txt - Convert key management suite to a text string 57526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @key_mgmt: Key management suite (WPA_KEY_MGMT_* enum) 58526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @proto: WPA/WPA2 version (WPA_PROTO_*) 59526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Returns: Pointer to a text string of the key management suite name 60526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 61526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic const char * wpa_key_mgmt_txt(int key_mgmt, int proto) 62526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 63526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt switch (key_mgmt) { 64526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_KEY_MGMT_IEEE8021X: 65526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return proto == WPA_PROTO_RSN ? 66526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "WPA2/IEEE 802.1X/EAP" : "WPA/IEEE 802.1X/EAP"; 67526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_KEY_MGMT_PSK: 68526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return proto == WPA_PROTO_RSN ? 69526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "WPA2-PSK" : "WPA-PSK"; 70526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_KEY_MGMT_NONE: 71526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return "NONE"; 72526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_KEY_MGMT_IEEE8021X_NO_WPA: 73526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return "IEEE 802.1X (no WPA)"; 74526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_IEEE80211R 75526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_KEY_MGMT_FT_IEEE8021X: 76526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return "FT-EAP"; 77526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_KEY_MGMT_FT_PSK: 78526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return "FT-PSK"; 79526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211R */ 80526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_IEEE80211W 81526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_KEY_MGMT_IEEE8021X_SHA256: 82526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return "WPA2-EAP-SHA256"; 83526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_KEY_MGMT_PSK_SHA256: 84526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return "WPA2-PSK-SHA256"; 85526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211W */ 86526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt default: 87526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return "UNKNOWN"; 88526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 89526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 90526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 91526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 92526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 93526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_eapol_key_send - Send WPA/RSN EAPOL-Key message 94526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 95526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @kck: Key Confirmation Key (KCK, part of PTK) 96526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @ver: Version field from Key Info 97526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @dest: Destination address for the frame 98526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @proto: Ethertype (usually ETH_P_EAPOL) 99526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @msg: EAPOL-Key message 100526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @msg_len: Length of message 101526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @key_mic: Pointer to the buffer to which the EAPOL-Key MIC is written 102526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 103526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtvoid wpa_eapol_key_send(struct wpa_sm *sm, const u8 *kck, 104526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int ver, const u8 *dest, u16 proto, 105526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u8 *msg, size_t msg_len, u8 *key_mic) 106526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 107526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (is_zero_ether_addr(dest) && is_zero_ether_addr(sm->bssid)) { 108526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* 109526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Association event was not yet received; try to fetch 110526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * BSSID from the driver. 111526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 112526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_sm_get_bssid(sm, sm->bssid) < 0) { 113526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: Failed to read BSSID for " 114526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "EAPOL-Key destination address"); 115526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 116526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt dest = sm->bssid; 117526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: Use BSSID (" MACSTR 118526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ") as the destination for EAPOL-Key", 119526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt MAC2STR(dest)); 120526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 121526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 122526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (key_mic) 123526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_eapol_key_mic(kck, ver, msg, msg_len, key_mic); 124526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "WPA: TX EAPOL-Key", msg, msg_len); 125526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_sm_ether_send(sm, dest, proto, msg, msg_len); 126526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt eapol_sm_notify_tx_eapol_key(sm->eapol); 127526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_free(msg); 128526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 129526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 130526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 131526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 132526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_key_request - Send EAPOL-Key Request 133526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 134526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @error: Indicate whether this is an Michael MIC error report 135526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @pairwise: 1 = error report for pairwise packet, 0 = for group packet 136526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * 137526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Send an EAPOL-Key Request to the current authenticator. This function is 138526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * used to request rekeying and it is usually called when a local Michael MIC 139526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * failure is detected. 140526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 141526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtvoid wpa_sm_key_request(struct wpa_sm *sm, int error, int pairwise) 142526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 143526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt size_t rlen; 144526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_eapol_key *reply; 145526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int key_info, ver; 146526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u8 bssid[ETH_ALEN], *rbuf; 147526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 148526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_key_mgmt_ft(sm->key_mgmt) || wpa_key_mgmt_sha256(sm->key_mgmt)) 149526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ver = WPA_KEY_INFO_TYPE_AES_128_CMAC; 150526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt else if (sm->pairwise_cipher == WPA_CIPHER_CCMP) 151526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ver = WPA_KEY_INFO_TYPE_HMAC_SHA1_AES; 152526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt else 153526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ver = WPA_KEY_INFO_TYPE_HMAC_MD5_RC4; 154526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 155526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_sm_get_bssid(sm, bssid) < 0) { 156526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "Failed to read BSSID for EAPOL-Key " 157526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "request"); 158526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return; 159526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 160526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 161526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rbuf = wpa_sm_alloc_eapol(sm, IEEE802_1X_TYPE_EAPOL_KEY, NULL, 162526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sizeof(*reply), &rlen, (void *) &reply); 163526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (rbuf == NULL) 164526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return; 165526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 166526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt reply->type = sm->proto == WPA_PROTO_RSN ? 167526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt EAPOL_KEY_TYPE_RSN : EAPOL_KEY_TYPE_WPA; 168526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info = WPA_KEY_INFO_REQUEST | ver; 169526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->ptk_set) 170526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info |= WPA_KEY_INFO_MIC; 171526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (error) 172526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info |= WPA_KEY_INFO_ERROR; 173526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (pairwise) 174526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info |= WPA_KEY_INFO_KEY_TYPE; 175526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_PUT_BE16(reply->key_info, key_info); 176526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_PUT_BE16(reply->key_length, 0); 177526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(reply->replay_counter, sm->request_counter, 178526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_REPLAY_COUNTER_LEN); 179526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt inc_byte_array(sm->request_counter, WPA_REPLAY_COUNTER_LEN); 180526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 181526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_PUT_BE16(reply->key_data_length, 0); 182526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 183526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "WPA: Sending EAPOL-Key Request (error=%d " 184526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "pairwise=%d ptk_set=%d len=%lu)", 185526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt error, pairwise, sm->ptk_set, (unsigned long) rlen); 186526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_eapol_key_send(sm, sm->ptk.kck, ver, bssid, ETH_P_EAPOL, 187526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rbuf, rlen, key_info & WPA_KEY_INFO_MIC ? 188526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt reply->key_mic : NULL); 189526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 190526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 191526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 192526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic int wpa_supplicant_get_pmk(struct wpa_sm *sm, 193526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const unsigned char *src_addr, 194526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const u8 *pmkid) 195526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 196526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int abort_cached = 0; 197526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 198526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (pmkid && !sm->cur_pmksa) { 199526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* When using drivers that generate RSN IE, wpa_supplicant may 200526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * not have enough time to get the association information 201526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * event before receiving this 1/4 message, so try to find a 202526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * matching PMKSA cache entry here. */ 203526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->cur_pmksa = pmksa_cache_get(sm->pmksa, src_addr, pmkid); 204526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->cur_pmksa) { 205526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: found matching PMKID from " 206526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "PMKSA cache"); 207526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 208526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: no matching PMKID found"); 209526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt abort_cached = 1; 210526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 211526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 212526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 213526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (pmkid && sm->cur_pmksa && 214526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcmp(pmkid, sm->cur_pmksa->pmkid, PMKID_LEN) == 0) { 215526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, "RSN: matched PMKID", pmkid, PMKID_LEN); 216526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_sm_set_pmk_from_pmksa(sm); 217526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "RSN: PMK from PMKSA cache", 218526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->pmk, sm->pmk_len); 219526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt eapol_sm_notify_cached(sm->eapol); 220526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_IEEE80211R 221526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->xxkey_len = 0; 222526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211R */ 223526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else if (wpa_key_mgmt_wpa_ieee8021x(sm->key_mgmt) && sm->eapol) { 224526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int res, pmk_len; 225526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt pmk_len = PMK_LEN; 226526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt res = eapol_sm_get_key(sm->eapol, sm->pmk, PMK_LEN); 227526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (res) { 228526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* 229526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * EAP-LEAP is an exception from other EAP methods: it 230526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * uses only 16-byte PMK. 231526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 232526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt res = eapol_sm_get_key(sm->eapol, sm->pmk, 16); 233526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt pmk_len = 16; 234526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 235526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_IEEE80211R 236526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u8 buf[2 * PMK_LEN]; 237526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (eapol_sm_get_key(sm->eapol, buf, 2 * PMK_LEN) == 0) 238526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt { 239526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(sm->xxkey, buf + PMK_LEN, PMK_LEN); 240526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->xxkey_len = PMK_LEN; 241526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memset(buf, 0, sizeof(buf)); 242526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 243526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211R */ 244526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 245526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (res == 0) { 246526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "WPA: PMK from EAPOL state " 247526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "machines", sm->pmk, pmk_len); 248526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->pmk_len = pmk_len; 249526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt pmksa_cache_add(sm->pmksa, sm->pmk, pmk_len, src_addr, 250526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->own_addr, sm->network_ctx, 251526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->key_mgmt); 252526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (!sm->cur_pmksa && pmkid && 253526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt pmksa_cache_get(sm->pmksa, src_addr, pmkid)) { 254526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: the new PMK " 255526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "matches with the PMKID"); 256526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt abort_cached = 0; 257526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 258526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 259526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_msg(sm->ctx->ctx, MSG_WARNING, 260526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "WPA: Failed to get master session key from " 261526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "EAPOL state machines"); 262526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_msg(sm->ctx->ctx, MSG_WARNING, 263526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "WPA: Key handshake aborted"); 264526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->cur_pmksa) { 265526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: Cancelled PMKSA " 266526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "caching attempt"); 267526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->cur_pmksa = NULL; 268526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt abort_cached = 1; 269526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else if (!abort_cached) { 270526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 271526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 272526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 273526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 274526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 275526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (abort_cached && wpa_key_mgmt_wpa_ieee8021x(sm->key_mgmt)) { 276526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* Send EAPOL-Start to trigger full EAP authentication. */ 277526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u8 *buf; 278526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt size_t buflen; 279526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 280526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: no PMKSA entry found - trigger " 281526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "full EAP authentication"); 282526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt buf = wpa_sm_alloc_eapol(sm, IEEE802_1X_TYPE_EAPOL_START, 283526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt NULL, 0, &buflen, NULL); 284526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (buf) { 285526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_sm_ether_send(sm, sm->bssid, ETH_P_EAPOL, 286526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt buf, buflen); 287526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_free(buf); 2882dbb7cbd90cd42f4ef9393036e68456035a23b55Jouni Malinen return -2; 289526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 290526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 291526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 292526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 293526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 294526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 295526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 296526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 297526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 298526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 299526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_supplicant_send_2_of_4 - Send message 2 of WPA/RSN 4-Way Handshake 300526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 301526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @dst: Destination address for the frame 302526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @key: Pointer to the EAPOL-Key frame header 303526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @ver: Version bits from EAPOL-Key Key Info 304526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @nonce: Nonce value for the EAPOL-Key frame 305526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @wpa_ie: WPA/RSN IE 306526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @wpa_ie_len: Length of the WPA/RSN IE 307526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @ptk: PTK to use for keyed hash and encryption 308526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Returns: 0 on success, -1 on failure 309526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 310526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtint wpa_supplicant_send_2_of_4(struct wpa_sm *sm, const unsigned char *dst, 311526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const struct wpa_eapol_key *key, 312526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int ver, const u8 *nonce, 313526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const u8 *wpa_ie, size_t wpa_ie_len, 314526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_ptk *ptk) 315526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 316526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt size_t rlen; 317526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_eapol_key *reply; 318526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u8 *rbuf; 319526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 320526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_ie == NULL) { 321526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: No wpa_ie set - cannot " 322526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "generate msg 2/4"); 323526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 324526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 325526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 326526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, "WPA: WPA IE for msg 2/4", wpa_ie, wpa_ie_len); 327526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 328526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rbuf = wpa_sm_alloc_eapol(sm, IEEE802_1X_TYPE_EAPOL_KEY, 329526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt NULL, sizeof(*reply) + wpa_ie_len, 330526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt &rlen, (void *) &reply); 331526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (rbuf == NULL) 332526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 333526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 334526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt reply->type = sm->proto == WPA_PROTO_RSN ? 335526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt EAPOL_KEY_TYPE_RSN : EAPOL_KEY_TYPE_WPA; 336526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_PUT_BE16(reply->key_info, 337526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ver | WPA_KEY_INFO_KEY_TYPE | WPA_KEY_INFO_MIC); 338526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->proto == WPA_PROTO_RSN) 339526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_PUT_BE16(reply->key_length, 0); 340526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt else 341526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(reply->key_length, key->key_length, 2); 342526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(reply->replay_counter, key->replay_counter, 343526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_REPLAY_COUNTER_LEN); 344526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 345526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_PUT_BE16(reply->key_data_length, wpa_ie_len); 346526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(reply + 1, wpa_ie, wpa_ie_len); 347526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 348526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(reply->key_nonce, nonce, WPA_NONCE_LEN); 349526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 350526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: Sending EAPOL-Key 2/4"); 351526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_eapol_key_send(sm, ptk->kck, ver, dst, ETH_P_EAPOL, 352526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rbuf, rlen, reply->key_mic); 353526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 354526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 355526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 356526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 357526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 358526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic int wpa_derive_ptk(struct wpa_sm *sm, const unsigned char *src_addr, 359526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const struct wpa_eapol_key *key, 360526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_ptk *ptk) 361526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 362dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt size_t ptk_len = sm->pairwise_cipher == WPA_CIPHER_CCMP ? 48 : 64; 363526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_IEEE80211R 364526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_key_mgmt_ft(sm->key_mgmt)) 365dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt return wpa_derive_ptk_ft(sm, src_addr, key, ptk, ptk_len); 366526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211R */ 367526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 368526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_pmk_to_ptk(sm->pmk, sm->pmk_len, "Pairwise key expansion", 369526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->own_addr, sm->bssid, sm->snonce, key->key_nonce, 370dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt (u8 *) ptk, ptk_len, 371526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_key_mgmt_sha256(sm->key_mgmt)); 372526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 373526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 374526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 375526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 376526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic void wpa_supplicant_process_1_of_4(struct wpa_sm *sm, 377526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const unsigned char *src_addr, 378526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const struct wpa_eapol_key *key, 379526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u16 ver) 380526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 381526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_eapol_ie_parse ie; 382526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_ptk *ptk; 383526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u8 buf[8]; 3842dbb7cbd90cd42f4ef9393036e68456035a23b55Jouni Malinen int res; 385526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 386526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_sm_get_network_ctx(sm) == NULL) { 387526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: No SSID info found (msg 1 of " 388526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "4)."); 389526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return; 390526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 391526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 392526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_sm_set_state(sm, WPA_4WAY_HANDSHAKE); 393526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: RX message 1 of 4-Way Handshake from " 394526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt MACSTR " (ver=%d)", MAC2STR(src_addr), ver); 395526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 396526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memset(&ie, 0, sizeof(ie)); 397526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 398526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifndef CONFIG_NO_WPA2 399526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->proto == WPA_PROTO_RSN) { 400526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* RSN: msg 1/4 should contain PMKID for the selected PMK */ 401526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const u8 *_buf = (const u8 *) (key + 1); 402526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt size_t len = WPA_GET_BE16(key->key_data_length); 403526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, "RSN: msg 1/4 key data", _buf, len); 404526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_supplicant_parse_ies(_buf, len, &ie); 405526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ie.pmkid) { 406526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, "RSN: PMKID from " 407526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "Authenticator", ie.pmkid, PMKID_LEN); 408526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 409526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 410526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_NO_WPA2 */ 411526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 4122dbb7cbd90cd42f4ef9393036e68456035a23b55Jouni Malinen res = wpa_supplicant_get_pmk(sm, src_addr, ie.pmkid); 4132dbb7cbd90cd42f4ef9393036e68456035a23b55Jouni Malinen if (res == -2) { 4142dbb7cbd90cd42f4ef9393036e68456035a23b55Jouni Malinen wpa_printf(MSG_DEBUG, "RSN: Do not reply to msg 1/4 - " 4152dbb7cbd90cd42f4ef9393036e68456035a23b55Jouni Malinen "requesting full EAP authentication"); 4162dbb7cbd90cd42f4ef9393036e68456035a23b55Jouni Malinen return; 4172dbb7cbd90cd42f4ef9393036e68456035a23b55Jouni Malinen } 4182dbb7cbd90cd42f4ef9393036e68456035a23b55Jouni Malinen if (res) 419dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt goto failed; 420526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 421526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->renew_snonce) { 422526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (os_get_random(sm->snonce, WPA_NONCE_LEN)) { 423526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_msg(sm->ctx->ctx, MSG_WARNING, 424526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "WPA: Failed to get random data for SNonce"); 425dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt goto failed; 426526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 427526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->renew_snonce = 0; 428526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, "WPA: Renewed SNonce", 429526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->snonce, WPA_NONCE_LEN); 430526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 431526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 432526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* Calculate PTK which will be stored as a temporary PTK until it has 433526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * been verified when processing message 3/4. */ 434526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ptk = &sm->tptk; 435526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_derive_ptk(sm, src_addr, key, ptk); 436526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* Supplicant: swap tx/rx Mic keys */ 437526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(buf, ptk->u.auth.tx_mic_key, 8); 438526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(ptk->u.auth.tx_mic_key, ptk->u.auth.rx_mic_key, 8); 439526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(ptk->u.auth.rx_mic_key, buf, 8); 440526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->tptk_set = 1; 441526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 442526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_supplicant_send_2_of_4(sm, sm->bssid, key, ver, sm->snonce, 443526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->assoc_wpa_ie, sm->assoc_wpa_ie_len, 444526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ptk)) 445dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt goto failed; 446526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 447526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(sm->anonce, key->key_nonce, WPA_NONCE_LEN); 448dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt return; 449dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt 450dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidtfailed: 451dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt wpa_sm_deauthenticate(sm, WLAN_REASON_UNSPECIFIED); 452526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 453526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 454526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 455526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic void wpa_sm_start_preauth(void *eloop_ctx, void *timeout_ctx) 456526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 457526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_sm *sm = eloop_ctx; 458526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rsn_preauth_candidate_process(sm); 459526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 460526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 461526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 462526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic void wpa_supplicant_key_neg_complete(struct wpa_sm *sm, 463526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const u8 *addr, int secure) 464526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 465526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_msg(sm->ctx->ctx, MSG_INFO, "WPA: Key negotiation completed with " 466526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt MACSTR " [PTK=%s GTK=%s]", MAC2STR(addr), 467526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_cipher_txt(sm->pairwise_cipher), 468526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_cipher_txt(sm->group_cipher)); 469526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_sm_cancel_auth_timeout(sm); 470526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_sm_set_state(sm, WPA_COMPLETED); 471526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 472526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (secure) { 473526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_sm_mlme_setprotection( 474526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm, addr, MLME_SETPROTECTION_PROTECT_TYPE_RX_TX, 475526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt MLME_SETPROTECTION_KEY_TYPE_PAIRWISE); 476526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt eapol_sm_notify_portValid(sm->eapol, TRUE); 477526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_key_mgmt_wpa_psk(sm->key_mgmt)) 478526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt eapol_sm_notify_eap_success(sm->eapol, TRUE); 479526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* 480526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Start preauthentication after a short wait to avoid a 481526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * possible race condition between the data receive and key 482526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * configuration after the 4-Way Handshake. This increases the 483526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * likelyhood of the first preauth EAPOL-Start frame getting to 484526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * the target AP. 485526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 486526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt eloop_register_timeout(1, 0, wpa_sm_start_preauth, sm, NULL); 487526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 488526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 489526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->cur_pmksa && sm->cur_pmksa->opportunistic) { 490526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: Authenticator accepted " 491526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "opportunistic PMKSA entry - marking it valid"); 492526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->cur_pmksa->opportunistic = 0; 493526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 494526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 495526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_IEEE80211R 496526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_key_mgmt_ft(sm->key_mgmt)) { 497526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* Prepare for the next transition */ 498526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_ft_prepare_auth_request(sm); 499526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 500526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211R */ 501526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 502526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 503526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 504526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic void wpa_sm_rekey_ptk(void *eloop_ctx, void *timeout_ctx) 505526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 506526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_sm *sm = eloop_ctx; 507526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: Request PTK rekeying"); 508526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_sm_key_request(sm, 0, 1); 509526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 510526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 511526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 512526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic int wpa_supplicant_install_ptk(struct wpa_sm *sm, 513526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const struct wpa_eapol_key *key) 514526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 515526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int keylen, rsclen; 516526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_alg alg; 517526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const u8 *key_rsc; 518526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u8 null_rsc[8] = { 0, 0, 0, 0, 0, 0, 0, 0 }; 519526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 520526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: Installing PTK to the driver."); 521526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 522526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt switch (sm->pairwise_cipher) { 523526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_CCMP: 524526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt alg = WPA_ALG_CCMP; 525526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt keylen = 16; 526526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rsclen = 6; 527526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 528526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_TKIP: 529526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt alg = WPA_ALG_TKIP; 530526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt keylen = 32; 531526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rsclen = 6; 532526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 533526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_NONE: 534526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: Pairwise Cipher Suite: " 535526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "NONE - do not use pairwise keys"); 536526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 537526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt default: 538526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Unsupported pairwise cipher %d", 539526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->pairwise_cipher); 540526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 541526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 542526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 543526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->proto == WPA_PROTO_RSN) { 544526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_rsc = null_rsc; 545526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 546526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_rsc = key->key_rsc; 547526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, "WPA: RSC", key_rsc, rsclen); 548526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 549526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 550526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_sm_set_key(sm, alg, sm->bssid, 0, 1, key_rsc, rsclen, 551526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (u8 *) sm->ptk.tk1, keylen) < 0) { 552526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Failed to set PTK to the " 553dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt "driver (alg=%d keylen=%d bssid=" MACSTR ")", 554dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt alg, keylen, MAC2STR(sm->bssid)); 555526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 556526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 557526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 558526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->wpa_ptk_rekey) { 559526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt eloop_cancel_timeout(wpa_sm_rekey_ptk, sm, NULL); 560526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt eloop_register_timeout(sm->wpa_ptk_rekey, 0, wpa_sm_rekey_ptk, 561526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm, NULL); 562526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 563526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 564526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 565526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 566526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 567526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 568526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic int wpa_supplicant_check_group_cipher(int group_cipher, 569526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int keylen, int maxkeylen, 570526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int *key_rsc_len, wpa_alg *alg) 571526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 572526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int ret = 0; 573526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 574526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt switch (group_cipher) { 575526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_CCMP: 576526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (keylen != 16 || maxkeylen < 16) { 577526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ret = -1; 578526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 579526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 580526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt *key_rsc_len = 6; 581526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt *alg = WPA_ALG_CCMP; 582526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 583526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_TKIP: 584526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (keylen != 32 || maxkeylen < 32) { 585526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ret = -1; 586526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 587526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 588526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt *key_rsc_len = 6; 589526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt *alg = WPA_ALG_TKIP; 590526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 591526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_WEP104: 592526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (keylen != 13 || maxkeylen < 13) { 593526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ret = -1; 594526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 595526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 596526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt *key_rsc_len = 0; 597526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt *alg = WPA_ALG_WEP; 598526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 599526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_WEP40: 600526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (keylen != 5 || maxkeylen < 5) { 601526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ret = -1; 602526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 603526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 604526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt *key_rsc_len = 0; 605526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt *alg = WPA_ALG_WEP; 606526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 607526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt default: 608526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Unsupported Group Cipher %d", 609526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt group_cipher); 610526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 611526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 612526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 613526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ret < 0 ) { 614526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Unsupported %s Group Cipher key " 615526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "length %d (%d).", 616526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_cipher_txt(group_cipher), keylen, maxkeylen); 617526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 618526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 619526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return ret; 620526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 621526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 622526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 623526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstruct wpa_gtk_data { 624526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_alg alg; 625526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int tx, key_rsc_len, keyidx; 626526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u8 gtk[32]; 627526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int gtk_len; 628526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt}; 629526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 630526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 631526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic int wpa_supplicant_install_gtk(struct wpa_sm *sm, 632526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const struct wpa_gtk_data *gd, 633526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const u8 *key_rsc) 634526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 635526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const u8 *_gtk = gd->gtk; 636526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u8 gtk_buf[32]; 637526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 638526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "WPA: Group Key", gd->gtk, gd->gtk_len); 639526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: Installing GTK to the driver " 640526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "(keyidx=%d tx=%d len=%d).", gd->keyidx, gd->tx, 641526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt gd->gtk_len); 642526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, "WPA: RSC", key_rsc, gd->key_rsc_len); 643526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->group_cipher == WPA_CIPHER_TKIP) { 644526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* Swap Tx/Rx keys for Michael MIC */ 645526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(gtk_buf, gd->gtk, 16); 646526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(gtk_buf + 16, gd->gtk + 24, 8); 647526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(gtk_buf + 24, gd->gtk + 16, 8); 648526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt _gtk = gtk_buf; 649526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 650526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->pairwise_cipher == WPA_CIPHER_NONE) { 651526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_sm_set_key(sm, gd->alg, 652526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (u8 *) "\xff\xff\xff\xff\xff\xff", 653526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt gd->keyidx, 1, key_rsc, gd->key_rsc_len, 654526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt _gtk, gd->gtk_len) < 0) { 655526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Failed to set " 656526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "GTK to the driver (Group only)."); 657526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 658526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 659526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else if (wpa_sm_set_key(sm, gd->alg, 660526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (u8 *) "\xff\xff\xff\xff\xff\xff", 661526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt gd->keyidx, gd->tx, key_rsc, gd->key_rsc_len, 662526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt _gtk, gd->gtk_len) < 0) { 663526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Failed to set GTK to " 664dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt "the driver (alg=%d keylen=%d keyidx=%d)", 665dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt gd->alg, gd->gtk_len, gd->keyidx); 666526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 667526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 668526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 669526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 670526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 671526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 672526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 673526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic int wpa_supplicant_gtk_tx_bit_workaround(const struct wpa_sm *sm, 674526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int tx) 675526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 676526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (tx && sm->pairwise_cipher != WPA_CIPHER_NONE) { 677526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* Ignore Tx bit for GTK if a pairwise key is used. One AP 678526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * seemed to set this bit (incorrectly, since Tx is only when 679526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * doing Group Key only APs) and without this workaround, the 680526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * data connection does not work because wpa_supplicant 681526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * configured non-zero keyidx to be used for unicast. */ 682526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "WPA: Tx bit set for GTK, but pairwise " 683526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "keys are used - ignore Tx bit"); 684526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 685526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 686526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return tx; 687526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 688526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 689526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 690526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic int wpa_supplicant_pairwise_gtk(struct wpa_sm *sm, 691526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const struct wpa_eapol_key *key, 692526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const u8 *gtk, size_t gtk_len, 693526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int key_info) 694526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 695526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifndef CONFIG_NO_WPA2 696526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_gtk_data gd; 697526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 698526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* 699526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * IEEE Std 802.11i-2004 - 8.5.2 EAPOL-Key frames - Figure 43x 700526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * GTK KDE format: 701526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * KeyID[bits 0-1], Tx [bit 2], Reserved [bits 3-7] 702526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Reserved [bits 0-7] 703526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * GTK 704526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 705526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 706526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memset(&gd, 0, sizeof(gd)); 707526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "RSN: received GTK in pairwise handshake", 708526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt gtk, gtk_len); 709526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 710526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (gtk_len < 2 || gtk_len - 2 > sizeof(gd.gtk)) 711526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 712526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 713526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt gd.keyidx = gtk[0] & 0x3; 714526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt gd.tx = wpa_supplicant_gtk_tx_bit_workaround(sm, 715526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt !!(gtk[0] & BIT(2))); 716526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt gtk += 2; 717526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt gtk_len -= 2; 718526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 719526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(gd.gtk, gtk, gtk_len); 720526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt gd.gtk_len = gtk_len; 721526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 722526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_supplicant_check_group_cipher(sm->group_cipher, 723526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt gtk_len, gtk_len, 724526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt &gd.key_rsc_len, &gd.alg) || 725526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_supplicant_install_gtk(sm, &gd, key->key_rsc)) { 726526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: Failed to install GTK"); 727526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 728526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 729526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 730526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_supplicant_key_neg_complete(sm, sm->bssid, 731526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info & WPA_KEY_INFO_SECURE); 732526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 733526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#else /* CONFIG_NO_WPA2 */ 734526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 735526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_NO_WPA2 */ 736526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 737526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 738526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 739526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic int ieee80211w_set_keys(struct wpa_sm *sm, 740526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_eapol_ie_parse *ie) 741526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 742526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_IEEE80211W 743526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->mgmt_group_cipher != WPA_CIPHER_AES_128_CMAC) 744526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 745526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 746526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ie->igtk) { 747526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const struct wpa_igtk_kde *igtk; 748526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u16 keyidx; 749526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ie->igtk_len != sizeof(*igtk)) 750526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 751526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt igtk = (const struct wpa_igtk_kde *) ie->igtk; 752526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt keyidx = WPA_GET_LE16(igtk->keyid); 753526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: IGTK keyid %d " 754526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "pn %02x%02x%02x%02x%02x%02x", 755526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt keyidx, MAC2STR(igtk->pn)); 756526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "WPA: IGTK", 757526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt igtk->igtk, WPA_IGTK_LEN); 758526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (keyidx > 4095) { 759526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Invalid IGTK KeyID %d", 760526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt keyidx); 761526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 762526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 763526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_sm_set_key(sm, WPA_ALG_IGTK, 764526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (u8 *) "\xff\xff\xff\xff\xff\xff", 765526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt keyidx, 0, igtk->pn, sizeof(igtk->pn), 766526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt igtk->igtk, WPA_IGTK_LEN) < 0) { 767526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Failed to configure IGTK" 768526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt " to the driver"); 769526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 770526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 771526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 772526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 773526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 774526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#else /* CONFIG_IEEE80211W */ 775526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 776526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211W */ 777526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 778526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 779526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 780526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic void wpa_report_ie_mismatch(struct wpa_sm *sm, 781526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const char *reason, const u8 *src_addr, 782526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const u8 *wpa_ie, size_t wpa_ie_len, 783526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const u8 *rsn_ie, size_t rsn_ie_len) 784526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 785526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_msg(sm->ctx->ctx, MSG_WARNING, "WPA: %s (src=" MACSTR ")", 786526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt reason, MAC2STR(src_addr)); 787526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 788526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->ap_wpa_ie) { 789526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_INFO, "WPA: WPA IE in Beacon/ProbeResp", 790526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->ap_wpa_ie, sm->ap_wpa_ie_len); 791526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 792526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_ie) { 793526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (!sm->ap_wpa_ie) { 794526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "WPA: No WPA IE in " 795526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "Beacon/ProbeResp"); 796526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 797526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_INFO, "WPA: WPA IE in 3/4 msg", 798526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_ie, wpa_ie_len); 799526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 800526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 801526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->ap_rsn_ie) { 802526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_INFO, "WPA: RSN IE in Beacon/ProbeResp", 803526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->ap_rsn_ie, sm->ap_rsn_ie_len); 804526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 805526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (rsn_ie) { 806526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (!sm->ap_rsn_ie) { 807526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "WPA: No RSN IE in " 808526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "Beacon/ProbeResp"); 809526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 810526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_INFO, "WPA: RSN IE in 3/4 msg", 811526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rsn_ie, rsn_ie_len); 812526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 813526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 814526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_sm_disassociate(sm, WLAN_REASON_IE_IN_4WAY_DIFFERS); 815526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 816526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 817526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 818526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic int wpa_supplicant_validate_ie(struct wpa_sm *sm, 819526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const unsigned char *src_addr, 820526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_eapol_ie_parse *ie) 821526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 822526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->ap_wpa_ie == NULL && sm->ap_rsn_ie == NULL) { 823526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: No WPA/RSN IE for this AP known. " 824526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "Trying to get from scan results"); 825526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_sm_get_beacon_ie(sm) < 0) { 826526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Could not find AP from " 827526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "the scan results"); 828526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 829526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: Found the current AP from " 830526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "updated scan results"); 831526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 832526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 833526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 834526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ie->wpa_ie == NULL && ie->rsn_ie == NULL && 835526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (sm->ap_wpa_ie || sm->ap_rsn_ie)) { 836526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_report_ie_mismatch(sm, "IE in 3/4 msg does not match " 837526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "with IE in Beacon/ProbeResp (no IE?)", 838526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt src_addr, ie->wpa_ie, ie->wpa_ie_len, 839526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ie->rsn_ie, ie->rsn_ie_len); 840526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 841526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 842526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 843526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if ((ie->wpa_ie && sm->ap_wpa_ie && 844526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (ie->wpa_ie_len != sm->ap_wpa_ie_len || 845526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcmp(ie->wpa_ie, sm->ap_wpa_ie, ie->wpa_ie_len) != 0)) || 846526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (ie->rsn_ie && sm->ap_rsn_ie && 847526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (ie->rsn_ie_len != sm->ap_rsn_ie_len || 848526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcmp(ie->rsn_ie, sm->ap_rsn_ie, ie->rsn_ie_len) != 0))) { 849526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_report_ie_mismatch(sm, "IE in 3/4 msg does not match " 850526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "with IE in Beacon/ProbeResp", 851526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt src_addr, ie->wpa_ie, ie->wpa_ie_len, 852526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ie->rsn_ie, ie->rsn_ie_len); 853526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 854526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 855526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 856526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->proto == WPA_PROTO_WPA && 857526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ie->rsn_ie && sm->ap_rsn_ie == NULL && sm->rsn_enabled) { 858526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_report_ie_mismatch(sm, "Possible downgrade attack " 859526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "detected - RSN was enabled and RSN IE " 860526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "was in msg 3/4, but not in " 861526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "Beacon/ProbeResp", 862526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt src_addr, ie->wpa_ie, ie->wpa_ie_len, 863526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ie->rsn_ie, ie->rsn_ie_len); 864526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 865526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 866526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 867526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_IEEE80211R 868526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_key_mgmt_ft(sm->key_mgmt)) { 869526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct rsn_mdie *mdie; 870526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* TODO: verify that full MDIE matches with the one from scan 871526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * results, not only mobility domain */ 872526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt mdie = (struct rsn_mdie *) (ie->mdie + 2); 873526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ie->mdie == NULL || ie->mdie_len < 2 + sizeof(*mdie) || 874526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcmp(mdie->mobility_domain, sm->mobility_domain, 875526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt MOBILITY_DOMAIN_ID_LEN) != 0) { 876526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "FT: MDIE in msg 3/4 did not " 877526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "match with the current mobility domain"); 878526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 879526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 880526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 881526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211R */ 882526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 883526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 884526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 885526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 886526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 887526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 888526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_supplicant_send_4_of_4 - Send message 4 of WPA/RSN 4-Way Handshake 889526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 890526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @dst: Destination address for the frame 891526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @key: Pointer to the EAPOL-Key frame header 892526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @ver: Version bits from EAPOL-Key Key Info 893526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @key_info: Key Info 894526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @kde: KDEs to include the EAPOL-Key frame 895526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @kde_len: Length of KDEs 896526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @ptk: PTK to use for keyed hash and encryption 897526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Returns: 0 on success, -1 on failure 898526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 899526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtint wpa_supplicant_send_4_of_4(struct wpa_sm *sm, const unsigned char *dst, 900526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const struct wpa_eapol_key *key, 901526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u16 ver, u16 key_info, 902526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const u8 *kde, size_t kde_len, 903526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_ptk *ptk) 904526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 905526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt size_t rlen; 906526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_eapol_key *reply; 907526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u8 *rbuf; 908526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 909526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (kde) 910526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, "WPA: KDE for msg 4/4", kde, kde_len); 911526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 912526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rbuf = wpa_sm_alloc_eapol(sm, IEEE802_1X_TYPE_EAPOL_KEY, NULL, 913526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sizeof(*reply) + kde_len, 914526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt &rlen, (void *) &reply); 915526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (rbuf == NULL) 916526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 917526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 918526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt reply->type = sm->proto == WPA_PROTO_RSN ? 919526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt EAPOL_KEY_TYPE_RSN : EAPOL_KEY_TYPE_WPA; 920526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info &= WPA_KEY_INFO_SECURE; 921526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info |= ver | WPA_KEY_INFO_KEY_TYPE | WPA_KEY_INFO_MIC; 922526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_PUT_BE16(reply->key_info, key_info); 923526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->proto == WPA_PROTO_RSN) 924526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_PUT_BE16(reply->key_length, 0); 925526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt else 926526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(reply->key_length, key->key_length, 2); 927526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(reply->replay_counter, key->replay_counter, 928526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_REPLAY_COUNTER_LEN); 929526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 930526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_PUT_BE16(reply->key_data_length, kde_len); 931526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (kde) 932526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(reply + 1, kde, kde_len); 933526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 934526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: Sending EAPOL-Key 4/4"); 935526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_eapol_key_send(sm, ptk->kck, ver, dst, ETH_P_EAPOL, 936526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rbuf, rlen, reply->key_mic); 937526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 938526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 939526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 940526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 941526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 942526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic void wpa_supplicant_process_3_of_4(struct wpa_sm *sm, 943526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const struct wpa_eapol_key *key, 944526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u16 ver) 945526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 946526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u16 key_info, keylen, len; 947526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const u8 *pos; 948526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_eapol_ie_parse ie; 949526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 950526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_sm_set_state(sm, WPA_4WAY_HANDSHAKE); 951526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: RX message 3 of 4-Way Handshake from " 952526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt MACSTR " (ver=%d)", MAC2STR(sm->bssid), ver); 953526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 954526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info = WPA_GET_BE16(key->key_info); 955526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 956526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt pos = (const u8 *) (key + 1); 957526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt len = WPA_GET_BE16(key->key_data_length); 958526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, "WPA: IE KeyData", pos, len); 959526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_supplicant_parse_ies(pos, len, &ie); 960526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ie.gtk && !(key_info & WPA_KEY_INFO_ENCR_KEY_DATA)) { 961526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: GTK IE in unencrypted key data"); 962dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt goto failed; 963526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 964526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_IEEE80211W 965526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ie.igtk && !(key_info & WPA_KEY_INFO_ENCR_KEY_DATA)) { 966526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: IGTK KDE in unencrypted key " 967526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "data"); 968dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt goto failed; 969526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 970526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 971526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ie.igtk && ie.igtk_len != sizeof(struct wpa_igtk_kde)) { 972526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Invalid IGTK KDE length %lu", 973526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (unsigned long) ie.igtk_len); 974dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt goto failed; 975526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 976526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211W */ 977526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 978526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_supplicant_validate_ie(sm, sm->bssid, &ie) < 0) 979dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt goto failed; 980526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 981526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (os_memcmp(sm->anonce, key->key_nonce, WPA_NONCE_LEN) != 0) { 982526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: ANonce from message 1 of 4-Way " 983526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "Handshake differs from 3 of 4-Way Handshake - drop" 984526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt " packet (src=" MACSTR ")", MAC2STR(sm->bssid)); 985dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt goto failed; 986526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 987526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 988526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt keylen = WPA_GET_BE16(key->key_length); 989526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt switch (sm->pairwise_cipher) { 990526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_CCMP: 991526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (keylen != 16) { 992526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Invalid CCMP key length " 993526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "%d (src=" MACSTR ")", 994526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt keylen, MAC2STR(sm->bssid)); 995dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt goto failed; 996526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 997526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 998526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_TKIP: 999526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (keylen != 32) { 1000526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Invalid TKIP key length " 1001526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "%d (src=" MACSTR ")", 1002526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt keylen, MAC2STR(sm->bssid)); 1003dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt goto failed; 1004526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1005526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 1006526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1007526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1008526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_supplicant_send_4_of_4(sm, sm->bssid, key, ver, key_info, 1009dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt NULL, 0, &sm->ptk)) { 1010dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt goto failed; 1011dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt } 1012526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1013526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* SNonce was successfully used in msg 3/4, so mark it to be renewed 1014526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * for the next 4-Way Handshake. If msg 3 is received again, the old 1015526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * SNonce will still be used to avoid changing PTK. */ 1016526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->renew_snonce = 1; 1017526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1018526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (key_info & WPA_KEY_INFO_INSTALL) { 1019dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt if (wpa_supplicant_install_ptk(sm, key)) 1020dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt goto failed; 1021526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1022526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1023526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (key_info & WPA_KEY_INFO_SECURE) { 1024526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_sm_mlme_setprotection( 1025526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm, sm->bssid, MLME_SETPROTECTION_PROTECT_TYPE_RX, 1026526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt MLME_SETPROTECTION_KEY_TYPE_PAIRWISE); 1027526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt eapol_sm_notify_portValid(sm->eapol, TRUE); 1028526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1029526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_sm_set_state(sm, WPA_GROUP_HANDSHAKE); 1030526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1031526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ie.gtk && 1032526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_supplicant_pairwise_gtk(sm, key, 1033526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ie.gtk, ie.gtk_len, key_info) < 0) { 1034526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "RSN: Failed to configure GTK"); 1035dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt goto failed; 1036526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1037526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1038dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt if (ieee80211w_set_keys(sm, &ie) < 0) { 1039526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "RSN: Failed to configure IGTK"); 1040dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt goto failed; 1041dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt } 1042dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt 1043dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt return; 1044dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt 1045dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidtfailed: 1046dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt wpa_sm_deauthenticate(sm, WLAN_REASON_UNSPECIFIED); 1047526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1048526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1049526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1050526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic int wpa_supplicant_process_1_of_2_rsn(struct wpa_sm *sm, 1051526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const u8 *keydata, 1052526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt size_t keydatalen, 1053526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u16 key_info, 1054526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_gtk_data *gd) 1055526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1056526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int maxkeylen; 1057526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_eapol_ie_parse ie; 1058526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1059526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, "RSN: msg 1/2 key data", keydata, keydatalen); 1060526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_supplicant_parse_ies(keydata, keydatalen, &ie); 1061526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ie.gtk && !(key_info & WPA_KEY_INFO_ENCR_KEY_DATA)) { 1062526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: GTK IE in unencrypted key data"); 1063526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1064526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1065526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ie.gtk == NULL) { 1066526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "WPA: No GTK IE in Group Key msg 1/2"); 1067526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1068526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1069526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt maxkeylen = gd->gtk_len = ie.gtk_len - 2; 1070526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1071526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_supplicant_check_group_cipher(sm->group_cipher, 1072526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt gd->gtk_len, maxkeylen, 1073526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt &gd->key_rsc_len, &gd->alg)) 1074526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1075526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1076526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, "RSN: received GTK in group key handshake", 1077526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ie.gtk, ie.gtk_len); 1078526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt gd->keyidx = ie.gtk[0] & 0x3; 1079526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt gd->tx = wpa_supplicant_gtk_tx_bit_workaround(sm, 1080526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt !!(ie.gtk[0] & BIT(2))); 1081526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ie.gtk_len - 2 > sizeof(gd->gtk)) { 1082526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "RSN: Too long GTK in GTK IE " 1083526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "(len=%lu)", (unsigned long) ie.gtk_len - 2); 1084526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1085526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1086526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(gd->gtk, ie.gtk + 2, ie.gtk_len - 2); 1087526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1088526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ieee80211w_set_keys(sm, &ie) < 0) 1089526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "RSN: Failed to configure IGTK"); 1090526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1091526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 1092526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1093526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1094526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1095526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic int wpa_supplicant_process_1_of_2_wpa(struct wpa_sm *sm, 1096526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const struct wpa_eapol_key *key, 1097526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt size_t keydatalen, int key_info, 1098526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt size_t extra_len, u16 ver, 1099526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_gtk_data *gd) 1100526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1101526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt size_t maxkeylen; 1102526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u8 ek[32]; 1103526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1104526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt gd->gtk_len = WPA_GET_BE16(key->key_length); 1105526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt maxkeylen = keydatalen; 1106526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (keydatalen > extra_len) { 1107526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "WPA: Truncated EAPOL-Key packet:" 1108526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt " key_data_length=%lu > extra_len=%lu", 1109526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (unsigned long) keydatalen, 1110526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (unsigned long) extra_len); 1111526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1112526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1113526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ver == WPA_KEY_INFO_TYPE_HMAC_SHA1_AES) { 1114526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (maxkeylen < 8) { 1115526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "WPA: Too short maxkeylen (%lu)", 1116526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (unsigned long) maxkeylen); 1117526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1118526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1119526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt maxkeylen -= 8; 1120526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1121526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1122526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_supplicant_check_group_cipher(sm->group_cipher, 1123526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt gd->gtk_len, maxkeylen, 1124526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt &gd->key_rsc_len, &gd->alg)) 1125526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1126526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1127526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt gd->keyidx = (key_info & WPA_KEY_INFO_KEY_INDEX_MASK) >> 1128526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_KEY_INFO_KEY_INDEX_SHIFT; 1129526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ver == WPA_KEY_INFO_TYPE_HMAC_MD5_RC4) { 1130526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(ek, key->key_iv, 16); 1131526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(ek + 16, sm->ptk.kek, 16); 1132526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (keydatalen > sizeof(gd->gtk)) { 1133526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: RC4 key data " 1134526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "too long (%lu)", 1135526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (unsigned long) keydatalen); 1136526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1137526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1138526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(gd->gtk, key + 1, keydatalen); 1139526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rc4_skip(ek, 32, 256, gd->gtk, keydatalen); 1140526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else if (ver == WPA_KEY_INFO_TYPE_HMAC_SHA1_AES) { 1141526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (keydatalen % 8) { 1142526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Unsupported AES-WRAP " 1143526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "len %lu", (unsigned long) keydatalen); 1144526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1145526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1146526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (maxkeylen > sizeof(gd->gtk)) { 1147526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: AES-WRAP key data " 1148526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "too long (keydatalen=%lu maxkeylen=%lu)", 1149526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (unsigned long) keydatalen, 1150526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (unsigned long) maxkeylen); 1151526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1152526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1153526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (aes_unwrap(sm->ptk.kek, maxkeylen / 8, 1154526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (const u8 *) (key + 1), gd->gtk)) { 1155526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: AES unwrap " 1156526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "failed - could not decrypt GTK"); 1157526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1158526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1159526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 1160526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Unsupported key_info type %d", 1161526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ver); 1162526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1163526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1164526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt gd->tx = wpa_supplicant_gtk_tx_bit_workaround( 1165526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm, !!(key_info & WPA_KEY_INFO_TXRX)); 1166526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 1167526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1168526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1169526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1170526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic int wpa_supplicant_send_2_of_2(struct wpa_sm *sm, 1171526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const struct wpa_eapol_key *key, 1172526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int ver, u16 key_info) 1173526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1174526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt size_t rlen; 1175526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_eapol_key *reply; 1176526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u8 *rbuf; 1177526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1178526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rbuf = wpa_sm_alloc_eapol(sm, IEEE802_1X_TYPE_EAPOL_KEY, NULL, 1179526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sizeof(*reply), &rlen, (void *) &reply); 1180526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (rbuf == NULL) 1181526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1182526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1183526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt reply->type = sm->proto == WPA_PROTO_RSN ? 1184526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt EAPOL_KEY_TYPE_RSN : EAPOL_KEY_TYPE_WPA; 1185526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info &= WPA_KEY_INFO_KEY_INDEX_MASK; 1186526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info |= ver | WPA_KEY_INFO_MIC | WPA_KEY_INFO_SECURE; 1187526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_PUT_BE16(reply->key_info, key_info); 1188526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->proto == WPA_PROTO_RSN) 1189526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_PUT_BE16(reply->key_length, 0); 1190526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt else 1191526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(reply->key_length, key->key_length, 2); 1192526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(reply->replay_counter, key->replay_counter, 1193526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_REPLAY_COUNTER_LEN); 1194526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1195526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_PUT_BE16(reply->key_data_length, 0); 1196526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1197526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: Sending EAPOL-Key 2/2"); 1198526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_eapol_key_send(sm, sm->ptk.kck, ver, sm->bssid, ETH_P_EAPOL, 1199526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rbuf, rlen, reply->key_mic); 1200526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1201526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 1202526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1203526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1204526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1205526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic void wpa_supplicant_process_1_of_2(struct wpa_sm *sm, 1206526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const unsigned char *src_addr, 1207526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const struct wpa_eapol_key *key, 1208526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int extra_len, u16 ver) 1209526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1210526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u16 key_info, keydatalen; 1211526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int rekey, ret; 1212526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_gtk_data gd; 1213526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1214526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memset(&gd, 0, sizeof(gd)); 1215526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1216526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rekey = wpa_sm_get_state(sm) == WPA_COMPLETED; 1217526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: RX message 1 of Group Key Handshake from " 1218526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt MACSTR " (ver=%d)", MAC2STR(src_addr), ver); 1219526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1220526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info = WPA_GET_BE16(key->key_info); 1221526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt keydatalen = WPA_GET_BE16(key->key_data_length); 1222526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1223526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->proto == WPA_PROTO_RSN) { 1224526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ret = wpa_supplicant_process_1_of_2_rsn(sm, 1225526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (const u8 *) (key + 1), 1226526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt keydatalen, key_info, 1227526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt &gd); 1228526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 1229526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ret = wpa_supplicant_process_1_of_2_wpa(sm, key, keydatalen, 1230526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info, extra_len, 1231526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ver, &gd); 1232526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1233526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1234526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_sm_set_state(sm, WPA_GROUP_HANDSHAKE); 1235526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1236526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ret) 1237dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt goto failed; 1238526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1239526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_supplicant_install_gtk(sm, &gd, key->key_rsc) || 1240526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_supplicant_send_2_of_2(sm, key, ver, key_info)) 1241dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt goto failed; 1242526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1243526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (rekey) { 1244526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_msg(sm->ctx->ctx, MSG_INFO, "WPA: Group rekeying " 1245526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "completed with " MACSTR " [GTK=%s]", 1246526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt MAC2STR(sm->bssid), wpa_cipher_txt(sm->group_cipher)); 1247526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_sm_cancel_auth_timeout(sm); 1248526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_sm_set_state(sm, WPA_COMPLETED); 1249526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 1250526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_supplicant_key_neg_complete(sm, sm->bssid, 1251526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info & 1252526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_KEY_INFO_SECURE); 1253526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1254dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt return; 1255dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt 1256dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidtfailed: 1257dde787cc314cd04caa4ea5f031cc8a02495ca513Dmitry Shmidt wpa_sm_deauthenticate(sm, WLAN_REASON_UNSPECIFIED); 1258526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1259526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1260526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1261526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic int wpa_supplicant_verify_eapol_key_mic(struct wpa_sm *sm, 1262526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_eapol_key *key, 1263526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u16 ver, 1264526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const u8 *buf, size_t len) 1265526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1266526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u8 mic[16]; 1267526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int ok = 0; 1268526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1269526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(mic, key->key_mic, 16); 1270526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->tptk_set) { 1271526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memset(key->key_mic, 0, 16); 1272526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_eapol_key_mic(sm->tptk.kck, ver, buf, len, 1273526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key->key_mic); 1274526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (os_memcmp(mic, key->key_mic, 16) != 0) { 1275526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Invalid EAPOL-Key MIC " 1276526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "when using TPTK - ignoring TPTK"); 1277526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 1278526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ok = 1; 1279526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->tptk_set = 0; 1280526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->ptk_set = 1; 1281526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(&sm->ptk, &sm->tptk, sizeof(sm->ptk)); 1282526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1283526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1284526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1285526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (!ok && sm->ptk_set) { 1286526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memset(key->key_mic, 0, 16); 1287526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_eapol_key_mic(sm->ptk.kck, ver, buf, len, 1288526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key->key_mic); 1289526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (os_memcmp(mic, key->key_mic, 16) != 0) { 1290526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Invalid EAPOL-Key MIC " 1291526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "- dropping packet"); 1292526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1293526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1294526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ok = 1; 1295526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1296526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1297526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (!ok) { 1298526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Could not verify EAPOL-Key MIC " 1299526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "- dropping packet"); 1300526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1301526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1302526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1303526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(sm->rx_replay_counter, key->replay_counter, 1304526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_REPLAY_COUNTER_LEN); 1305526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->rx_replay_counter_set = 1; 1306526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 1307526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1308526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1309526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1310526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/* Decrypt RSN EAPOL-Key key data (RC4 or AES-WRAP) */ 1311526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic int wpa_supplicant_decrypt_key_data(struct wpa_sm *sm, 1312526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_eapol_key *key, u16 ver) 1313526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1314526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u16 keydatalen = WPA_GET_BE16(key->key_data_length); 1315526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1316526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, "RSN: encrypted key data", 1317526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (u8 *) (key + 1), keydatalen); 1318526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (!sm->ptk_set) { 1319526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: PTK not available, " 1320526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "cannot decrypt EAPOL-Key key data."); 1321526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1322526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1323526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1324526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* Decrypt key data here so that this operation does not need 1325526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * to be implemented separately for each message type. */ 1326526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ver == WPA_KEY_INFO_TYPE_HMAC_MD5_RC4) { 1327526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u8 ek[32]; 1328526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(ek, key->key_iv, 16); 1329526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(ek + 16, sm->ptk.kek, 16); 1330526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rc4_skip(ek, 32, 256, (u8 *) (key + 1), keydatalen); 1331526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else if (ver == WPA_KEY_INFO_TYPE_HMAC_SHA1_AES || 1332526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ver == WPA_KEY_INFO_TYPE_AES_128_CMAC) { 1333526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u8 *buf; 1334526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (keydatalen % 8) { 1335526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Unsupported " 1336526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "AES-WRAP len %d", keydatalen); 1337526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1338526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1339526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt keydatalen -= 8; /* AES-WRAP adds 8 bytes */ 1340526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt buf = os_malloc(keydatalen); 1341526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (buf == NULL) { 1342526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: No memory for " 1343526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "AES-UNWRAP buffer"); 1344526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1345526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1346526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (aes_unwrap(sm->ptk.kek, keydatalen / 8, 1347526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (u8 *) (key + 1), buf)) { 1348526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_free(buf); 1349526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: AES unwrap failed - " 1350526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "could not decrypt EAPOL-Key key data"); 1351526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1352526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1353526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(key + 1, buf, keydatalen); 1354526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_free(buf); 1355526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_PUT_BE16(key->key_data_length, keydatalen); 1356526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 1357526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Unsupported key_info type %d", 1358526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ver); 1359526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1360526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1361526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "WPA: decrypted EAPOL-Key key data", 1362526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (u8 *) (key + 1), keydatalen); 1363526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 1364526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1365526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1366526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1367526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 1368526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_aborted_cached - Notify WPA that PMKSA caching was aborted 1369526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 1370526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 1371526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtvoid wpa_sm_aborted_cached(struct wpa_sm *sm) 1372526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1373526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm && sm->cur_pmksa) { 1374526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: Cancelling PMKSA caching attempt"); 1375526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->cur_pmksa = NULL; 1376526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1377526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1378526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1379526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1380526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic void wpa_eapol_key_dump(const struct wpa_eapol_key *key) 1381526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1382526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifndef CONFIG_NO_STDOUT_DEBUG 1383526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u16 key_info = WPA_GET_BE16(key->key_info); 1384526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1385526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, " EAPOL-Key type=%d", key->type); 1386526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, " key_info 0x%x (ver=%d keyidx=%d rsvd=%d %s" 1387526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "%s%s%s%s%s%s%s)", 1388526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info, key_info & WPA_KEY_INFO_TYPE_MASK, 1389526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (key_info & WPA_KEY_INFO_KEY_INDEX_MASK) >> 1390526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_KEY_INFO_KEY_INDEX_SHIFT, 1391526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (key_info & (BIT(13) | BIT(14) | BIT(15))) >> 13, 1392526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info & WPA_KEY_INFO_KEY_TYPE ? "Pairwise" : "Group", 1393526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info & WPA_KEY_INFO_INSTALL ? " Install" : "", 1394526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info & WPA_KEY_INFO_ACK ? " Ack" : "", 1395526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info & WPA_KEY_INFO_MIC ? " MIC" : "", 1396526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info & WPA_KEY_INFO_SECURE ? " Secure" : "", 1397526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info & WPA_KEY_INFO_ERROR ? " Error" : "", 1398526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info & WPA_KEY_INFO_REQUEST ? " Request" : "", 1399526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info & WPA_KEY_INFO_ENCR_KEY_DATA ? " Encr" : ""); 1400526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, " key_length=%u key_data_length=%u", 1401526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_GET_BE16(key->key_length), 1402526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_GET_BE16(key->key_data_length)); 1403526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, " replay_counter", 1404526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key->replay_counter, WPA_REPLAY_COUNTER_LEN); 1405526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, " key_nonce", key->key_nonce, WPA_NONCE_LEN); 1406526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, " key_iv", key->key_iv, 16); 1407526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, " key_rsc", key->key_rsc, 8); 1408526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, " key_id (reserved)", key->key_id, 8); 1409526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, " key_mic", key->key_mic, 16); 1410526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_NO_STDOUT_DEBUG */ 1411526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1412526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1413526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1414526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 1415526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_rx_eapol - Process received WPA EAPOL frames 1416526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 1417526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @src_addr: Source MAC address of the EAPOL packet 1418526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @buf: Pointer to the beginning of the EAPOL data (EAPOL header) 1419526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @len: Length of the EAPOL frame 1420526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Returns: 1 = WPA EAPOL-Key processed, 0 = not a WPA EAPOL-Key, -1 failure 1421526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * 1422526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * This function is called for each received EAPOL frame. Other than EAPOL-Key 1423526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * frames can be skipped if filtering is done elsewhere. wpa_sm_rx_eapol() is 1424526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * only processing WPA and WPA2 EAPOL-Key frames. 1425526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * 1426526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * The received EAPOL-Key packets are validated and valid packets are replied 1427526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * to. In addition, key material (PTK, GTK) is configured at the end of a 1428526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * successful key handshake. 1429526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 1430526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtint wpa_sm_rx_eapol(struct wpa_sm *sm, const u8 *src_addr, 1431526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const u8 *buf, size_t len) 1432526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1433526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt size_t plen, data_len, extra_len; 1434526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct ieee802_1x_hdr *hdr; 1435526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_eapol_key *key; 1436526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u16 key_info, ver; 1437526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u8 *tmp; 1438526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int ret = -1; 1439526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_peerkey *peerkey = NULL; 1440526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1441526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_IEEE80211R 1442526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->ft_completed = 0; 1443526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211R */ 1444526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1445526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (len < sizeof(*hdr) + sizeof(*key)) { 1446526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: EAPOL frame too short to be a WPA " 1447526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "EAPOL-Key (len %lu, expecting at least %lu)", 1448526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (unsigned long) len, 1449526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (unsigned long) sizeof(*hdr) + sizeof(*key)); 1450526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 1451526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1452526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1453526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt tmp = os_malloc(len); 1454526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (tmp == NULL) 1455526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 1456526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(tmp, buf, len); 1457526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1458526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt hdr = (struct ieee802_1x_hdr *) tmp; 1459526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key = (struct wpa_eapol_key *) (hdr + 1); 1460526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt plen = be_to_host16(hdr->length); 1461526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt data_len = plen + sizeof(*hdr); 1462526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "IEEE 802.1X RX: version=%d type=%d length=%lu", 1463526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt hdr->version, hdr->type, (unsigned long) plen); 1464526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1465526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (hdr->version < EAPOL_VERSION) { 1466526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* TODO: backwards compatibility */ 1467526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1468526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (hdr->type != IEEE802_1X_TYPE_EAPOL_KEY) { 1469526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: EAPOL frame (type %u) discarded, " 1470526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "not a Key frame", hdr->type); 1471526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ret = 0; 1472526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt goto out; 1473526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1474526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (plen > len - sizeof(*hdr) || plen < sizeof(*key)) { 1475526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: EAPOL frame payload size %lu " 1476526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "invalid (frame size %lu)", 1477526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (unsigned long) plen, (unsigned long) len); 1478526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ret = 0; 1479526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt goto out; 1480526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1481526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1482526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (key->type != EAPOL_KEY_TYPE_WPA && key->type != EAPOL_KEY_TYPE_RSN) 1483526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt { 1484526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: EAPOL-Key type (%d) unknown, " 1485526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "discarded", key->type); 1486526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ret = 0; 1487526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt goto out; 1488526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1489526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_eapol_key_dump(key); 1490526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1491526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt eapol_sm_notify_lower_layer_success(sm->eapol, 0); 1492526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "WPA: RX EAPOL-Key", tmp, len); 1493526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (data_len < len) { 1494526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: ignoring %lu bytes after the IEEE " 1495526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "802.1X data", (unsigned long) len - data_len); 1496526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1497526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt key_info = WPA_GET_BE16(key->key_info); 1498526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ver = key_info & WPA_KEY_INFO_TYPE_MASK; 1499526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ver != WPA_KEY_INFO_TYPE_HMAC_MD5_RC4 && 1500526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#if defined(CONFIG_IEEE80211R) || defined(CONFIG_IEEE80211W) 1501526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ver != WPA_KEY_INFO_TYPE_AES_128_CMAC && 1502526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211R || CONFIG_IEEE80211W */ 1503526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ver != WPA_KEY_INFO_TYPE_HMAC_SHA1_AES) { 1504526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "WPA: Unsupported EAPOL-Key descriptor " 1505526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "version %d.", ver); 1506526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt goto out; 1507526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1508526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1509526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_IEEE80211R 1510526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_key_mgmt_ft(sm->key_mgmt)) { 1511526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* IEEE 802.11r uses a new key_info type (AES-128-CMAC). */ 1512526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ver != WPA_KEY_INFO_TYPE_AES_128_CMAC) { 1513526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "FT: AP did not use " 1514526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "AES-128-CMAC."); 1515526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt goto out; 1516526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1517526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else 1518526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211R */ 1519526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_IEEE80211W 1520526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_key_mgmt_sha256(sm->key_mgmt)) { 1521526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ver != WPA_KEY_INFO_TYPE_AES_128_CMAC) { 1522526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "WPA: AP did not use the " 1523526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "negotiated AES-128-CMAC."); 1524526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt goto out; 1525526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1526526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else 1527526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211W */ 1528526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->pairwise_cipher == WPA_CIPHER_CCMP && 1529526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ver != WPA_KEY_INFO_TYPE_HMAC_SHA1_AES) { 1530526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "WPA: CCMP is used, but EAPOL-Key " 1531526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "descriptor version (%d) is not 2.", ver); 1532526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->group_cipher != WPA_CIPHER_CCMP && 1533526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt !(key_info & WPA_KEY_INFO_KEY_TYPE)) { 1534526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* Earlier versions of IEEE 802.11i did not explicitly 1535526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * require version 2 descriptor for all EAPOL-Key 1536526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * packets, so allow group keys to use version 1 if 1537526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * CCMP is not used for them. */ 1538526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "WPA: Backwards compatibility: " 1539526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "allow invalid version for non-CCMP group " 1540526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "keys"); 1541526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else 1542526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt goto out; 1543526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1544526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1545526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_PEERKEY 1546526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt for (peerkey = sm->peerkey; peerkey; peerkey = peerkey->next) { 1547526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (os_memcmp(peerkey->addr, src_addr, ETH_ALEN) == 0) 1548526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 1549526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1550526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1551526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (!(key_info & WPA_KEY_INFO_SMK_MESSAGE) && peerkey) { 1552526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (!peerkey->initiator && peerkey->replay_counter_set && 1553526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcmp(key->replay_counter, peerkey->replay_counter, 1554526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_REPLAY_COUNTER_LEN) <= 0) { 1555526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "RSN: EAPOL-Key Replay " 1556526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "Counter did not increase (STK) - dropping " 1557526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "packet"); 1558526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt goto out; 1559526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else if (peerkey->initiator) { 1560526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt u8 _tmp[WPA_REPLAY_COUNTER_LEN]; 1561526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(_tmp, key->replay_counter, 1562526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_REPLAY_COUNTER_LEN); 1563526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt inc_byte_array(_tmp, WPA_REPLAY_COUNTER_LEN); 1564526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (os_memcmp(_tmp, peerkey->replay_counter, 1565526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_REPLAY_COUNTER_LEN) != 0) { 1566526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: EAPOL-Key Replay " 1567526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "Counter did not match (STK) - " 1568526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dropping packet"); 1569526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt goto out; 1570526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1571526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1572526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1573526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1574526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (peerkey && peerkey->initiator && (key_info & WPA_KEY_INFO_ACK)) { 1575526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "RSN: Ack bit in key_info from STK peer"); 1576526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt goto out; 1577526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1578526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_PEERKEY */ 1579526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1580526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (!peerkey && sm->rx_replay_counter_set && 1581526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcmp(key->replay_counter, sm->rx_replay_counter, 1582526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_REPLAY_COUNTER_LEN) <= 0) { 1583526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: EAPOL-Key Replay Counter did not" 1584526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt " increase - dropping packet"); 1585526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt goto out; 1586526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1587526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1588526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (!(key_info & (WPA_KEY_INFO_ACK | WPA_KEY_INFO_SMK_MESSAGE)) 1589526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_PEERKEY 1590526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt && (peerkey == NULL || !peerkey->initiator) 1591526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_PEERKEY */ 1592526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ) { 1593526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "WPA: No Ack bit in key_info"); 1594526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt goto out; 1595526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1596526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1597526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (key_info & WPA_KEY_INFO_REQUEST) { 1598526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_INFO, "WPA: EAPOL-Key with Request bit - " 1599526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dropped"); 1600526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt goto out; 1601526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1602526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1603526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if ((key_info & WPA_KEY_INFO_MIC) && !peerkey && 1604526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_supplicant_verify_eapol_key_mic(sm, key, ver, tmp, data_len)) 1605526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt goto out; 1606526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1607526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_PEERKEY 1608526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if ((key_info & WPA_KEY_INFO_MIC) && peerkey && 1609526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt peerkey_verify_eapol_key_mic(sm, peerkey, key, ver, tmp, data_len)) 1610526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt goto out; 1611526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_PEERKEY */ 1612526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1613526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt extra_len = data_len - sizeof(*hdr) - sizeof(*key); 1614526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1615526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (WPA_GET_BE16(key->key_data_length) > extra_len) { 1616526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_msg(sm->ctx->ctx, MSG_INFO, "WPA: Invalid EAPOL-Key " 1617526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "frame - key_data overflow (%d > %lu)", 1618526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_GET_BE16(key->key_data_length), 1619526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (unsigned long) extra_len); 1620526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt goto out; 1621526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1622526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt extra_len = WPA_GET_BE16(key->key_data_length); 1623526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1624526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->proto == WPA_PROTO_RSN && 1625526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (key_info & WPA_KEY_INFO_ENCR_KEY_DATA)) { 1626526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_supplicant_decrypt_key_data(sm, key, ver)) 1627526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt goto out; 1628526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt extra_len = WPA_GET_BE16(key->key_data_length); 1629526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1630526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1631526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (key_info & WPA_KEY_INFO_KEY_TYPE) { 1632526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (key_info & WPA_KEY_INFO_KEY_INDEX_MASK) { 1633526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Ignored EAPOL-Key " 1634526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "(Pairwise) with non-zero key index"); 1635526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt goto out; 1636526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1637526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (peerkey) { 1638526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* PeerKey 4-Way Handshake */ 1639526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt peerkey_rx_eapol_4way(sm, peerkey, key, key_info, ver); 1640526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else if (key_info & WPA_KEY_INFO_MIC) { 1641526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* 3/4 4-Way Handshake */ 1642526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_supplicant_process_3_of_4(sm, key, ver); 1643526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 1644526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* 1/4 4-Way Handshake */ 1645526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_supplicant_process_1_of_4(sm, src_addr, key, 1646526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ver); 1647526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1648526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else if (key_info & WPA_KEY_INFO_SMK_MESSAGE) { 1649526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* PeerKey SMK Handshake */ 1650526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt peerkey_rx_eapol_smk(sm, src_addr, key, extra_len, key_info, 1651526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ver); 1652526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 1653526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (key_info & WPA_KEY_INFO_MIC) { 1654526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* 1/2 Group Key Handshake */ 1655526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_supplicant_process_1_of_2(sm, src_addr, key, 1656526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt extra_len, ver); 1657526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 1658526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_WARNING, "WPA: EAPOL-Key (Group) " 1659526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "without Mic bit - dropped"); 1660526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1661526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1662526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1663526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ret = 1; 1664526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1665526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtout: 1666526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_free(tmp); 1667526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return ret; 1668526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1669526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1670526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1671526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_CTRL_IFACE 1672526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic int wpa_cipher_bits(int cipher) 1673526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1674526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt switch (cipher) { 1675526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_CCMP: 1676526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 128; 1677526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_TKIP: 1678526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 256; 1679526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_WEP104: 1680526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 104; 1681526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_WEP40: 1682526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 40; 1683526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt default: 1684526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 1685526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1686526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1687526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1688526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1689526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic u32 wpa_key_mgmt_suite(struct wpa_sm *sm) 1690526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1691526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt switch (sm->key_mgmt) { 1692526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_KEY_MGMT_IEEE8021X: 1693526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return (sm->proto == WPA_PROTO_RSN ? 1694526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt RSN_AUTH_KEY_MGMT_UNSPEC_802_1X : 1695526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_AUTH_KEY_MGMT_UNSPEC_802_1X); 1696526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_KEY_MGMT_PSK: 1697526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return (sm->proto == WPA_PROTO_RSN ? 1698526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt RSN_AUTH_KEY_MGMT_PSK_OVER_802_1X : 1699526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt WPA_AUTH_KEY_MGMT_PSK_OVER_802_1X); 1700526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_IEEE80211R 1701526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_KEY_MGMT_FT_IEEE8021X: 1702526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return RSN_AUTH_KEY_MGMT_FT_802_1X; 1703526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_KEY_MGMT_FT_PSK: 1704526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return RSN_AUTH_KEY_MGMT_FT_PSK; 1705526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211R */ 1706526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_IEEE80211W 1707526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_KEY_MGMT_IEEE8021X_SHA256: 1708526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return RSN_AUTH_KEY_MGMT_802_1X_SHA256; 1709526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_KEY_MGMT_PSK_SHA256: 1710526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return RSN_AUTH_KEY_MGMT_PSK_SHA256; 1711526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211W */ 1712526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_KEY_MGMT_WPA_NONE: 1713526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return WPA_AUTH_KEY_MGMT_NONE; 1714526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt default: 1715526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 1716526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1717526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1718526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1719526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1720526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic u32 wpa_cipher_suite(struct wpa_sm *sm, int cipher) 1721526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1722526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt switch (cipher) { 1723526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_CCMP: 1724526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return (sm->proto == WPA_PROTO_RSN ? 1725526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt RSN_CIPHER_SUITE_CCMP : WPA_CIPHER_SUITE_CCMP); 1726526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_TKIP: 1727526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return (sm->proto == WPA_PROTO_RSN ? 1728526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt RSN_CIPHER_SUITE_TKIP : WPA_CIPHER_SUITE_TKIP); 1729526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_WEP104: 1730526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return (sm->proto == WPA_PROTO_RSN ? 1731526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt RSN_CIPHER_SUITE_WEP104 : WPA_CIPHER_SUITE_WEP104); 1732526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_WEP40: 1733526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return (sm->proto == WPA_PROTO_RSN ? 1734526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt RSN_CIPHER_SUITE_WEP40 : WPA_CIPHER_SUITE_WEP40); 1735526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_CIPHER_NONE: 1736526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return (sm->proto == WPA_PROTO_RSN ? 1737526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt RSN_CIPHER_SUITE_NONE : WPA_CIPHER_SUITE_NONE); 1738526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt default: 1739526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 1740526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1741526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1742526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1743526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1744526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#define RSN_SUITE "%02x-%02x-%02x-%d" 1745526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#define RSN_SUITE_ARG(s) \ 1746526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt((s) >> 24) & 0xff, ((s) >> 16) & 0xff, ((s) >> 8) & 0xff, (s) & 0xff 1747526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1748526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 1749526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_get_mib - Dump text list of MIB entries 1750526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 1751526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @buf: Buffer for the list 1752526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @buflen: Length of the buffer 1753526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Returns: Number of bytes written to buffer 1754526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * 1755526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * This function is used fetch dot11 MIB variables. 1756526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 1757526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtint wpa_sm_get_mib(struct wpa_sm *sm, char *buf, size_t buflen) 1758526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1759526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt char pmkid_txt[PMKID_LEN * 2 + 1]; 1760526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int rsna, ret; 1761526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt size_t len; 1762526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1763526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->cur_pmksa) { 1764526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_snprintf_hex(pmkid_txt, sizeof(pmkid_txt), 1765526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->cur_pmksa->pmkid, PMKID_LEN); 1766526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else 1767526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt pmkid_txt[0] = '\0'; 1768526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1769526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if ((wpa_key_mgmt_wpa_psk(sm->key_mgmt) || 1770526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_key_mgmt_wpa_ieee8021x(sm->key_mgmt)) && 1771526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->proto == WPA_PROTO_RSN) 1772526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rsna = 1; 1773526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt else 1774526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rsna = 0; 1775526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1776526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ret = os_snprintf(buf, buflen, 1777526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAOptionImplemented=TRUE\n" 1778526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAPreauthenticationImplemented=TRUE\n" 1779526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAEnabled=%s\n" 1780526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAPreauthenticationEnabled=%s\n" 1781526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAConfigVersion=%d\n" 1782526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAConfigPairwiseKeysSupported=5\n" 1783526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAConfigGroupCipherSize=%d\n" 1784526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAConfigPMKLifetime=%d\n" 1785526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAConfigPMKReauthThreshold=%d\n" 1786526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAConfigNumberOfPTKSAReplayCounters=1\n" 1787526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAConfigSATimeout=%d\n", 1788526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rsna ? "TRUE" : "FALSE", 1789526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rsna ? "TRUE" : "FALSE", 1790526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt RSN_VERSION, 1791526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_cipher_bits(sm->group_cipher), 1792526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->dot11RSNAConfigPMKLifetime, 1793526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->dot11RSNAConfigPMKReauthThreshold, 1794526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->dot11RSNAConfigSATimeout); 1795526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ret < 0 || (size_t) ret >= buflen) 1796526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 1797526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt len = ret; 1798526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1799526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ret = os_snprintf( 1800526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt buf + len, buflen - len, 1801526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAAuthenticationSuiteSelected=" RSN_SUITE "\n" 1802526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAPairwiseCipherSelected=" RSN_SUITE "\n" 1803526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAGroupCipherSelected=" RSN_SUITE "\n" 1804526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAPMKIDUsed=%s\n" 1805526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAAuthenticationSuiteRequested=" RSN_SUITE "\n" 1806526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAPairwiseCipherRequested=" RSN_SUITE "\n" 1807526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAGroupCipherRequested=" RSN_SUITE "\n" 1808526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNAConfigNumberOfGTKSAReplayCounters=0\n" 1809526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "dot11RSNA4WayHandshakeFailures=%u\n", 1810526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt RSN_SUITE_ARG(wpa_key_mgmt_suite(sm)), 1811526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt RSN_SUITE_ARG(wpa_cipher_suite(sm, sm->pairwise_cipher)), 1812526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt RSN_SUITE_ARG(wpa_cipher_suite(sm, sm->group_cipher)), 1813526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt pmkid_txt, 1814526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt RSN_SUITE_ARG(wpa_key_mgmt_suite(sm)), 1815526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt RSN_SUITE_ARG(wpa_cipher_suite(sm, sm->pairwise_cipher)), 1816526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt RSN_SUITE_ARG(wpa_cipher_suite(sm, sm->group_cipher)), 1817526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->dot11RSNA4WayHandshakeFailures); 1818526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ret >= 0 && (size_t) ret < buflen) 1819526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt len += ret; 1820526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1821526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return (int) len; 1822526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1823526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_CTRL_IFACE */ 1824526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1825526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1826526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstatic void wpa_sm_pmksa_free_cb(struct rsn_pmksa_cache_entry *entry, 1827526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt void *ctx, int replace) 1828526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1829526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_sm *sm = ctx; 1830526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1831526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->cur_pmksa == entry || 1832526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt (sm->pmk_len == entry->pmk_len && 1833526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcmp(sm->pmk, entry->pmk, sm->pmk_len) == 0)) { 1834526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: removed current PMKSA entry"); 1835526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->cur_pmksa = NULL; 1836526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1837526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (replace) { 1838526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* A new entry is being added, so no need to 1839526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * deauthenticate in this case. This happens when EAP 1840526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * authentication is completed again (reauth or failed 1841526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * PMKSA caching attempt). */ 1842526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return; 1843526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1844526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1845526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memset(sm->pmk, 0, sizeof(sm->pmk)); 1846526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_sm_deauthenticate(sm, WLAN_REASON_UNSPECIFIED); 1847526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1848526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1849526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1850526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1851526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 1852526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_init - Initialize WPA state machine 1853526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @ctx: Context pointer for callbacks; this needs to be an allocated buffer 1854526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Returns: Pointer to the allocated WPA state machine data 1855526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * 1856526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * This function is used to allocate a new WPA state machine and the returned 1857526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * value is passed to all WPA state machine calls. 1858526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 1859526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtstruct wpa_sm * wpa_sm_init(struct wpa_sm_ctx *ctx) 1860526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1861526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt struct wpa_sm *sm; 1862526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1863526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm = os_zalloc(sizeof(*sm)); 1864526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm == NULL) 1865526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return NULL; 1866526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->renew_snonce = 1; 1867526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->ctx = ctx; 1868526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1869526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->dot11RSNAConfigPMKLifetime = 43200; 1870526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->dot11RSNAConfigPMKReauthThreshold = 70; 1871526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->dot11RSNAConfigSATimeout = 60; 1872526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1873526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->pmksa = pmksa_cache_init(wpa_sm_pmksa_free_cb, sm, sm); 1874526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->pmksa == NULL) { 1875526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_ERROR, "RSN: PMKSA cache initialization " 1876526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "failed"); 1877526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_free(sm); 1878526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return NULL; 1879526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1880526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1881526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return sm; 1882526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1883526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1884526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1885526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 1886526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_deinit - Deinitialize WPA state machine 1887526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 1888526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 1889526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtvoid wpa_sm_deinit(struct wpa_sm *sm) 1890526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1891526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm == NULL) 1892526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return; 1893526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt pmksa_cache_deinit(sm->pmksa); 1894526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt eloop_cancel_timeout(wpa_sm_start_preauth, sm, NULL); 1895526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt eloop_cancel_timeout(wpa_sm_rekey_ptk, sm, NULL); 1896526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_free(sm->assoc_wpa_ie); 1897526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_free(sm->ap_wpa_ie); 1898526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_free(sm->ap_rsn_ie); 1899526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_free(sm->ctx); 1900526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt peerkey_deinit(sm); 1901526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_free(sm); 1902526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1903526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1904526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1905526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 1906526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_notify_assoc - Notify WPA state machine about association 1907526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 1908526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @bssid: The BSSID of the new association 1909526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * 1910526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * This function is called to let WPA state machine know that the connection 1911526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * was established. 1912526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 1913526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtvoid wpa_sm_notify_assoc(struct wpa_sm *sm, const u8 *bssid) 1914526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1915526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int clear_ptk = 1; 1916526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1917526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm == NULL) 1918526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return; 1919526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1920526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: Association event - clear replay counter"); 1921526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(sm->bssid, bssid, ETH_ALEN); 1922526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memset(sm->rx_replay_counter, 0, WPA_REPLAY_COUNTER_LEN); 1923526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->rx_replay_counter_set = 0; 1924526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->renew_snonce = 1; 1925526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (os_memcmp(sm->preauth_bssid, bssid, ETH_ALEN) == 0) 1926526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rsn_preauth_deinit(sm); 1927526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1928526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_IEEE80211R 1929526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_ft_is_completed(sm)) { 1930526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_supplicant_key_neg_complete(sm, sm->bssid, 1); 1931526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1932526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* Prepare for the next transition */ 1933526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_ft_prepare_auth_request(sm); 1934526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1935526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt clear_ptk = 0; 1936526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1937526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211R */ 1938526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1939526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (clear_ptk) { 1940526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* 1941526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * IEEE 802.11, 8.4.10: Delete PTK SA on (re)association if 1942526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * this is not part of a Fast BSS Transition. 1943526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 1944526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: Clear old PTK"); 1945526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->ptk_set = 0; 1946526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->tptk_set = 0; 1947526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 1948526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1949526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1950526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1951526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 1952526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_notify_disassoc - Notify WPA state machine about disassociation 1953526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 1954526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * 1955526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * This function is called to let WPA state machine know that the connection 1956526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * was lost. This will abort any existing pre-authentication session. 1957526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 1958526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtvoid wpa_sm_notify_disassoc(struct wpa_sm *sm) 1959526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1960526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt rsn_preauth_deinit(sm); 1961526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_sm_get_state(sm) == WPA_4WAY_HANDSHAKE) 1962526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->dot11RSNA4WayHandshakeFailures++; 1963526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1964526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1965526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1966526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 1967526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_set_pmk - Set PMK 1968526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 1969526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @pmk: The new PMK 1970526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @pmk_len: The length of the new PMK in bytes 1971526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * 1972526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Configure the PMK for WPA state machine. 1973526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 1974526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtvoid wpa_sm_set_pmk(struct wpa_sm *sm, const u8 *pmk, size_t pmk_len) 1975526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1976526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm == NULL) 1977526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return; 1978526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1979526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->pmk_len = pmk_len; 1980526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(sm->pmk, pmk, pmk_len); 1981526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1982526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_IEEE80211R 1983526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* Set XXKey to be PSK for FT key derivation */ 1984526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->xxkey_len = pmk_len; 1985526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(sm->xxkey, pmk, pmk_len); 1986526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211R */ 1987526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 1988526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1989526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 1990526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 1991526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_set_pmk_from_pmksa - Set PMK based on the current PMKSA 1992526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 1993526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * 1994526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Take the PMK from the current PMKSA into use. If no PMKSA is active, the PMK 1995526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * will be cleared. 1996526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 1997526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtvoid wpa_sm_set_pmk_from_pmksa(struct wpa_sm *sm) 1998526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 1999526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm == NULL) 2000526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return; 2001526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2002526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->cur_pmksa) { 2003526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->pmk_len = sm->cur_pmksa->pmk_len; 2004526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(sm->pmk, sm->cur_pmksa->pmk, sm->pmk_len); 2005526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 2006526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->pmk_len = PMK_LEN; 2007526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memset(sm->pmk, 0, PMK_LEN); 2008526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 2009526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 2010526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2011526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2012526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 2013526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_set_fast_reauth - Set fast reauthentication (EAP) enabled/disabled 2014526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 2015526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @fast_reauth: Whether fast reauthentication (EAP) is allowed 2016526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 2017526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtvoid wpa_sm_set_fast_reauth(struct wpa_sm *sm, int fast_reauth) 2018526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 2019526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm) 2020526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->fast_reauth = fast_reauth; 2021526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 2022526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2023526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2024526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 2025526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_set_scard_ctx - Set context pointer for smartcard callbacks 2026526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 2027526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @scard_ctx: Context pointer for smartcard related callback functions 2028526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 2029526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtvoid wpa_sm_set_scard_ctx(struct wpa_sm *sm, void *scard_ctx) 2030526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 2031526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm == NULL) 2032526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return; 2033526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->scard_ctx = scard_ctx; 2034526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->preauth_eapol) 2035526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt eapol_sm_register_scard_ctx(sm->preauth_eapol, scard_ctx); 2036526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 2037526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2038526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2039526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 2040526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_set_config - Notification of current configration change 2041526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 2042526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @config: Pointer to current network configuration 2043526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * 2044526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Notify WPA state machine that configuration has changed. config will be 2045526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * stored as a backpointer to network configuration. This can be %NULL to clear 2046526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * the stored pointed. 2047526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 2048526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtvoid wpa_sm_set_config(struct wpa_sm *sm, struct rsn_supp_config *config) 2049526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 2050526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (!sm) 2051526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return; 2052526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2053526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (config) { 2054526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->network_ctx = config->network_ctx; 2055526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->peerkey_enabled = config->peerkey_enabled; 2056526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->allowed_pairwise_cipher = config->allowed_pairwise_cipher; 2057526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->proactive_key_caching = config->proactive_key_caching; 2058526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->eap_workaround = config->eap_workaround; 2059526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->eap_conf_ctx = config->eap_conf_ctx; 2060526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (config->ssid) { 2061526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(sm->ssid, config->ssid, config->ssid_len); 2062526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->ssid_len = config->ssid_len; 2063526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else 2064526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->ssid_len = 0; 2065526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->wpa_ptk_rekey = config->wpa_ptk_rekey; 2066526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 2067526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->network_ctx = NULL; 2068526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->peerkey_enabled = 0; 2069526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->allowed_pairwise_cipher = 0; 2070526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->proactive_key_caching = 0; 2071526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->eap_workaround = 0; 2072526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->eap_conf_ctx = NULL; 2073526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->ssid_len = 0; 2074526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->wpa_ptk_rekey = 0; 2075526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 2076526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (config == NULL || config->network_ctx != sm->network_ctx) 2077526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt pmksa_cache_notify_reconfig(sm->pmksa); 2078526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 2079526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2080526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2081526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 2082526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_set_own_addr - Set own MAC address 2083526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 2084526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @addr: Own MAC address 2085526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 2086526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtvoid wpa_sm_set_own_addr(struct wpa_sm *sm, const u8 *addr) 2087526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 2088526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm) 2089526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(sm->own_addr, addr, ETH_ALEN); 2090526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 2091526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2092526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2093526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 2094526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_set_ifname - Set network interface name 2095526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 2096526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @ifname: Interface name 2097526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @bridge_ifname: Optional bridge interface name (for pre-auth) 2098526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 2099526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtvoid wpa_sm_set_ifname(struct wpa_sm *sm, const char *ifname, 2100526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt const char *bridge_ifname) 2101526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 2102526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm) { 2103526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->ifname = ifname; 2104526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->bridge_ifname = bridge_ifname; 2105526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 2106526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 2107526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2108526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2109526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 2110526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_set_eapol - Set EAPOL state machine pointer 2111526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 2112526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @eapol: Pointer to EAPOL state machine allocated with eapol_sm_init() 2113526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 2114526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtvoid wpa_sm_set_eapol(struct wpa_sm *sm, struct eapol_sm *eapol) 2115526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 2116526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm) 2117526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->eapol = eapol; 2118526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 2119526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2120526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2121526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 2122526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_set_param - Set WPA state machine parameters 2123526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 2124526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @param: Parameter field 2125526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @value: Parameter value 2126526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Returns: 0 on success, -1 on failure 2127526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 2128526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtint wpa_sm_set_param(struct wpa_sm *sm, enum wpa_sm_conf_params param, 2129526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt unsigned int value) 2130526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 2131526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int ret = 0; 2132526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2133526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm == NULL) 2134526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 2135526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2136526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt switch (param) { 2137526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case RSNA_PMK_LIFETIME: 2138526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (value > 0) 2139526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->dot11RSNAConfigPMKLifetime = value; 2140526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt else 2141526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ret = -1; 2142526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 2143526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case RSNA_PMK_REAUTH_THRESHOLD: 2144526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (value > 0 && value <= 100) 2145526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->dot11RSNAConfigPMKReauthThreshold = value; 2146526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt else 2147526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ret = -1; 2148526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 2149526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case RSNA_SA_TIMEOUT: 2150526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (value > 0) 2151526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->dot11RSNAConfigSATimeout = value; 2152526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt else 2153526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ret = -1; 2154526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 2155526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_PARAM_PROTO: 2156526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->proto = value; 2157526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 2158526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_PARAM_PAIRWISE: 2159526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->pairwise_cipher = value; 2160526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 2161526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_PARAM_GROUP: 2162526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->group_cipher = value; 2163526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 2164526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_PARAM_KEY_MGMT: 2165526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->key_mgmt = value; 2166526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 2167526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_IEEE80211W 2168526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_PARAM_MGMT_GROUP: 2169526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->mgmt_group_cipher = value; 2170526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 2171526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211W */ 2172526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_PARAM_RSN_ENABLED: 2173526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->rsn_enabled = value; 2174526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 2175526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt default: 2176526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt break; 2177526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 2178526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2179526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return ret; 2180526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 2181526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2182526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2183526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 2184526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_get_param - Get WPA state machine parameters 2185526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 2186526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @param: Parameter field 2187526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Returns: Parameter value 2188526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 2189526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtunsigned int wpa_sm_get_param(struct wpa_sm *sm, enum wpa_sm_conf_params param) 2190526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 2191526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm == NULL) 2192526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 2193526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2194526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt switch (param) { 2195526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case RSNA_PMK_LIFETIME: 2196526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return sm->dot11RSNAConfigPMKLifetime; 2197526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case RSNA_PMK_REAUTH_THRESHOLD: 2198526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return sm->dot11RSNAConfigPMKReauthThreshold; 2199526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case RSNA_SA_TIMEOUT: 2200526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return sm->dot11RSNAConfigSATimeout; 2201526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_PARAM_PROTO: 2202526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return sm->proto; 2203526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_PARAM_PAIRWISE: 2204526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return sm->pairwise_cipher; 2205526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_PARAM_GROUP: 2206526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return sm->group_cipher; 2207526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_PARAM_KEY_MGMT: 2208526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return sm->key_mgmt; 2209526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#ifdef CONFIG_IEEE80211W 2210526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_PARAM_MGMT_GROUP: 2211526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return sm->mgmt_group_cipher; 2212526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt#endif /* CONFIG_IEEE80211W */ 2213526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt case WPA_PARAM_RSN_ENABLED: 2214526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return sm->rsn_enabled; 2215526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt default: 2216526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 2217526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 2218526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 2219526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2220526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2221526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 2222526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_get_status - Get WPA state machine 2223526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 2224526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @buf: Buffer for status information 2225526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @buflen: Maximum buffer length 2226526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @verbose: Whether to include verbose status information 2227526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Returns: Number of bytes written to buf. 2228526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * 2229526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Query WPA state machine for status information. This function fills in 2230526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * a text area with current status information. If the buffer (buf) is not 2231526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * large enough, status information will be truncated to fit the buffer. 2232526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 2233526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtint wpa_sm_get_status(struct wpa_sm *sm, char *buf, size_t buflen, 2234526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int verbose) 2235526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 2236526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt char *pos = buf, *end = buf + buflen; 2237526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int ret; 2238526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2239526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt ret = os_snprintf(pos, end - pos, 2240526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "pairwise_cipher=%s\n" 2241526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "group_cipher=%s\n" 2242526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "key_mgmt=%s\n", 2243526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_cipher_txt(sm->pairwise_cipher), 2244526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_cipher_txt(sm->group_cipher), 2245526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_key_mgmt_txt(sm->key_mgmt, sm->proto)); 2246526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ret < 0 || ret >= end - pos) 2247526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return pos - buf; 2248526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt pos += ret; 2249526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return pos - buf; 2250526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 2251526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2252526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2253526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 2254526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_set_assoc_wpa_ie_default - Generate own WPA/RSN IE from configuration 2255526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 2256526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @wpa_ie: Pointer to buffer for WPA/RSN IE 2257526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @wpa_ie_len: Pointer to the length of the wpa_ie buffer 2258526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Returns: 0 on success, -1 on failure 2259526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 2260526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtint wpa_sm_set_assoc_wpa_ie_default(struct wpa_sm *sm, u8 *wpa_ie, 2261526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt size_t *wpa_ie_len) 2262526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 2263526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt int res; 2264526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2265526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm == NULL) 2266526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 2267526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2268526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt res = wpa_gen_wpa_ie(sm, wpa_ie, *wpa_ie_len); 2269526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (res < 0) 2270526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 2271526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt *wpa_ie_len = res; 2272526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2273526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, "WPA: Set own WPA IE default", 2274526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_ie, *wpa_ie_len); 2275526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2276526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->assoc_wpa_ie == NULL) { 2277526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt /* 2278526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Make a copy of the WPA/RSN IE so that 4-Way Handshake gets 2279526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * the correct version of the IE even if PMKSA caching is 2280526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * aborted (which would remove PMKID from IE generation). 2281526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 2282526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->assoc_wpa_ie = os_malloc(*wpa_ie_len); 2283526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->assoc_wpa_ie == NULL) 2284526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 2285526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2286526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(sm->assoc_wpa_ie, wpa_ie, *wpa_ie_len); 2287526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->assoc_wpa_ie_len = *wpa_ie_len; 2288526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 2289526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2290526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 2291526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 2292526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2293526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2294526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 2295526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_set_assoc_wpa_ie - Set own WPA/RSN IE from (Re)AssocReq 2296526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 2297526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @ie: Pointer to IE data (starting from id) 2298526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @len: IE length 2299526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Returns: 0 on success, -1 on failure 2300526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * 2301526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Inform WPA state machine about the WPA/RSN IE used in (Re)Association 2302526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Request frame. The IE will be used to override the default value generated 2303526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * with wpa_sm_set_assoc_wpa_ie_default(). 2304526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 2305526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtint wpa_sm_set_assoc_wpa_ie(struct wpa_sm *sm, const u8 *ie, size_t len) 2306526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 2307526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm == NULL) 2308526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 2309526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2310526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_free(sm->assoc_wpa_ie); 2311526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ie == NULL || len == 0) { 2312526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: clearing own WPA/RSN IE"); 2313526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->assoc_wpa_ie = NULL; 2314526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->assoc_wpa_ie_len = 0; 2315526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 2316526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, "WPA: set own WPA/RSN IE", ie, len); 2317526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->assoc_wpa_ie = os_malloc(len); 2318526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->assoc_wpa_ie == NULL) 2319526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 2320526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2321526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(sm->assoc_wpa_ie, ie, len); 2322526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->assoc_wpa_ie_len = len; 2323526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 2324526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2325526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 2326526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 2327526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2328526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2329526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 2330526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_set_ap_wpa_ie - Set AP WPA IE from Beacon/ProbeResp 2331526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 2332526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @ie: Pointer to IE data (starting from id) 2333526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @len: IE length 2334526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Returns: 0 on success, -1 on failure 2335526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * 2336526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Inform WPA state machine about the WPA IE used in Beacon / Probe Response 2337526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * frame. 2338526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 2339526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtint wpa_sm_set_ap_wpa_ie(struct wpa_sm *sm, const u8 *ie, size_t len) 2340526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 2341526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm == NULL) 2342526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 2343526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2344526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_free(sm->ap_wpa_ie); 2345526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ie == NULL || len == 0) { 2346526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: clearing AP WPA IE"); 2347526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->ap_wpa_ie = NULL; 2348526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->ap_wpa_ie_len = 0; 2349526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 2350526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, "WPA: set AP WPA IE", ie, len); 2351526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->ap_wpa_ie = os_malloc(len); 2352526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->ap_wpa_ie == NULL) 2353526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 2354526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2355526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(sm->ap_wpa_ie, ie, len); 2356526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->ap_wpa_ie_len = len; 2357526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 2358526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2359526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 2360526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 2361526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2362526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2363526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 2364526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_set_ap_rsn_ie - Set AP RSN IE from Beacon/ProbeResp 2365526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 2366526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @ie: Pointer to IE data (starting from id) 2367526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @len: IE length 2368526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Returns: 0 on success, -1 on failure 2369526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * 2370526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Inform WPA state machine about the RSN IE used in Beacon / Probe Response 2371526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * frame. 2372526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 2373526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtint wpa_sm_set_ap_rsn_ie(struct wpa_sm *sm, const u8 *ie, size_t len) 2374526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 2375526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm == NULL) 2376526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 2377526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2378526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_free(sm->ap_rsn_ie); 2379526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (ie == NULL || len == 0) { 2380526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: clearing AP RSN IE"); 2381526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->ap_rsn_ie = NULL; 2382526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->ap_rsn_ie_len = 0; 2383526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } else { 2384526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_hexdump(MSG_DEBUG, "WPA: set AP RSN IE", ie, len); 2385526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->ap_rsn_ie = os_malloc(len); 2386526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm->ap_rsn_ie == NULL) 2387526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 2388526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2389526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt os_memcpy(sm->ap_rsn_ie, ie, len); 2390526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt sm->ap_rsn_ie_len = len; 2391526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 2392526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2393526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 2394526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 2395526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2396526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt 2397526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt/** 2398526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * wpa_sm_parse_own_wpa_ie - Parse own WPA/RSN IE 2399526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 2400526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * @data: Pointer to data area for parsing results 2401526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Returns: 0 on success, -1 if IE is not known, or -2 on parsing failure 2402526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * 2403526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * Parse the contents of the own WPA or RSN IE from (Re)AssocReq and write the 2404526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt * parsed data into data. 2405526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt */ 2406526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidtint wpa_sm_parse_own_wpa_ie(struct wpa_sm *sm, struct wpa_ie_data *data) 2407526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt{ 2408526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (sm == NULL || sm->assoc_wpa_ie == NULL) { 2409526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt wpa_printf(MSG_DEBUG, "WPA: No WPA/RSN IE available from " 2410526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt "association info"); 2411526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -1; 2412526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt } 2413526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt if (wpa_parse_wpa_ie(sm->assoc_wpa_ie, sm->assoc_wpa_ie_len, data)) 2414526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return -2; 2415526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt return 0; 2416526fc2a7dc09b4450086cdec313a5c44d36b10fdDmitry Shmidt} 2417