18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * WPA Supplicant - IEEE 802.11r - Fast BSS Transition 38d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Copyright (c) 2006-2007, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license. 6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details. 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "includes.h" 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "common.h" 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/aes_wrap.h" 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/random.h" 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "common/ieee802_11_defs.h" 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "common/ieee802_11_common.h" 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "wpa.h" 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "wpa_i.h" 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IEEE80211R 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint wpa_derive_ptk_ft(struct wpa_sm *sm, const unsigned char *src_addr, 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct wpa_eapol_key *key, 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_ptk *ptk, size_t ptk_len) 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 ptk_name[WPA_PMK_NAME_LEN]; 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *anonce = key->key_nonce; 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm->xxkey_len == 0) { 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: XXKey not available for key " 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "derivation"); 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_derive_pmk_r0(sm->xxkey, sm->xxkey_len, sm->ssid, 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->ssid_len, sm->mobility_domain, 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->r0kh_id, sm->r0kh_id_len, sm->own_addr, 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->pmk_r0, sm->pmk_r0_name); 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "FT: PMK-R0", sm->pmk_r0, PMK_LEN); 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: PMKR0Name", 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->pmk_r0_name, WPA_PMK_NAME_LEN); 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_derive_pmk_r1(sm->pmk_r0, sm->pmk_r0_name, sm->r1kh_id, 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->own_addr, sm->pmk_r1, sm->pmk_r1_name); 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "FT: PMK-R1", sm->pmk_r1, PMK_LEN); 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: PMKR1Name", sm->pmk_r1_name, 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PMK_NAME_LEN); 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_pmk_r1_to_ptk(sm->pmk_r1, sm->snonce, anonce, sm->own_addr, 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->bssid, sm->pmk_r1_name, 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) ptk, ptk_len, ptk_name); 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "FT: PTK", (u8 *) ptk, ptk_len); 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: PTKName", ptk_name, WPA_PMK_NAME_LEN); 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * wpa_sm_set_ft_params - Set FT (IEEE 802.11r) parameters 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ies: Association Response IEs or %NULL to clear FT parameters 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ies_len: Length of ies buffer in octets 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint wpa_sm_set_ft_params(struct wpa_sm *sm, const u8 *ies, size_t ies_len) 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_ft_ies ft; 668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm == NULL) 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_ft_parse_ies(ies, ies_len, &ft) < 0) 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ft.mdie && ft.mdie_len < MOBILITY_DOMAIN_ID_LEN + 1) 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ft.mdie) { 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: Mobility domain", 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ft.mdie, MOBILITY_DOMAIN_ID_LEN); 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(sm->mobility_domain, ft.mdie, 808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MOBILITY_DOMAIN_ID_LEN); 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->mdie_ft_capab = ft.mdie[MOBILITY_DOMAIN_ID_LEN]; 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Capability and Policy: 0x%02x", 838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->mdie_ft_capab); 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(sm->mobility_domain, 0, MOBILITY_DOMAIN_ID_LEN); 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ft.r0kh_id) { 888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: R0KH-ID", 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ft.r0kh_id, ft.r0kh_id_len); 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(sm->r0kh_id, ft.r0kh_id, ft.r0kh_id_len); 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->r0kh_id_len = ft.r0kh_id_len; 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* FIX: When should R0KH-ID be cleared? We need to keep the 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * old R0KH-ID in order to be able to use this during FT. */ 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * os_memset(sm->r0kh_id, 0, FT_R0KH_ID_LEN); 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * sm->r0kh_id_len = 0; 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ft.r1kh_id) { 1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: R1KH-ID", 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ft.r1kh_id, FT_R1KH_ID_LEN); 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(sm->r1kh_id, ft.r1kh_id, FT_R1KH_ID_LEN); 1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(sm->r1kh_id, 0, FT_R1KH_ID_LEN); 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(sm->assoc_resp_ies); 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->assoc_resp_ies = os_malloc(ft.mdie_len + 2 + ft.ftie_len + 2); 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm->assoc_resp_ies) { 1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pos = sm->assoc_resp_ies; 1128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ft.mdie) { 1138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, ft.mdie - 2, ft.mdie_len + 2); 1148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += ft.mdie_len + 2; 1158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ft.ftie) { 1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, ft.ftie - 2, ft.ftie_len + 2); 1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += ft.ftie_len + 2; 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->assoc_resp_ies_len = pos - sm->assoc_resp_ies; 1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: Stored MDIE and FTIE from " 1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(Re)Association Response", 1238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->assoc_resp_ies, sm->assoc_resp_ies_len); 1248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 1278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * wpa_ft_gen_req_ies - Generate FT (IEEE 802.11r) IEs for Auth/ReAssoc Request 1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @len: Buffer for returning the length of the IEs 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @anonce: ANonce or %NULL if not yet available 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmk_name: PMKR0Name or PMKR1Name to be added into the RSN IE PMKID List 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @kck: 128-bit KCK for MIC or %NULL if no MIC is used 1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @target_ap: Target AP address 1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ric_ies: Optional IE(s), e.g., WMM TSPEC(s), for RIC-Request or %NULL 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ric_ies_len: Length of ric_ies buffer in octets 1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ap_mdie: Mobility Domain IE from the target AP 1418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to buffer with IEs or %NULL on failure 1428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Caller is responsible for freeing the returned buffer with os_free(); 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic u8 * wpa_ft_gen_req_ies(struct wpa_sm *sm, size_t *len, 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *anonce, const u8 *pmk_name, 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *kck, const u8 *target_ap, 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *ric_ies, size_t ric_ies_len, 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *ap_mdie) 1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t buf_len; 1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *buf, *pos, *ftie_len, *ftie_pos; 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_mdie *mdie; 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_ftie *ftie; 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_ie_hdr *rsnie; 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 capab; 1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->ft_completed = 0; 1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf_len = 2 + sizeof(struct rsn_mdie) + 2 + sizeof(struct rsn_ftie) + 1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2 + sm->r0kh_id_len + ric_ies_len + 100; 1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf = os_zalloc(buf_len); 1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (buf == NULL) 1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = buf; 1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* RSNIE[PMKR0Name/PMKR1Name] */ 1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsnie = (struct rsn_ie_hdr *) pos; 1698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsnie->elem_id = WLAN_EID_RSN; 1708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_LE16(rsnie->version, RSN_VERSION); 1718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = (u8 *) (rsnie + 1); 1728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Group Suite Selector */ 1744530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt if (sm->group_cipher != WPA_CIPHER_CCMP && 1754530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt sm->group_cipher != WPA_CIPHER_GCMP && 1764530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt sm->group_cipher != WPA_CIPHER_TKIP) { 1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "FT: Invalid group cipher (%d)", 1788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->group_cipher); 1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(buf); 1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1824530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt RSN_SELECTOR_PUT(pos, wpa_cipher_to_suite(WPA_PROTO_RSN, 1834530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt sm->group_cipher)); 1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += RSN_SELECTOR_LEN; 1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Pairwise Suite Count */ 1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_LE16(pos, 1); 1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Pairwise Suite List */ 1914530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt if (!wpa_cipher_valid_pairwise(sm->pairwise_cipher)) { 1928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "FT: Invalid pairwise cipher (%d)", 1938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->pairwise_cipher); 1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(buf); 1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1974530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt RSN_SELECTOR_PUT(pos, wpa_cipher_to_suite(WPA_PROTO_RSN, 1984530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt sm->pairwise_cipher)); 1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += RSN_SELECTOR_LEN; 2008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Authenticated Key Management Suite Count */ 2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_LE16(pos, 1); 2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Authenticated Key Management Suite List */ 2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm->key_mgmt == WPA_KEY_MGMT_FT_IEEE8021X) 2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_FT_802_1X); 2088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else if (sm->key_mgmt == WPA_KEY_MGMT_FT_PSK) 2098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_FT_PSK); 2108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else { 2118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "FT: Invalid key management type (%d)", 2128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->key_mgmt); 2138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(buf); 2148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 2158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += RSN_SELECTOR_LEN; 2178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* RSN Capabilities */ 2198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt capab = 0; 2208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IEEE80211W 2218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm->mgmt_group_cipher == WPA_CIPHER_AES_128_CMAC) 2228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt capab |= WPA_CAPABILITY_MFPC; 2238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IEEE80211W */ 2248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_LE16(pos, capab); 2258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 2268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* PMKID Count */ 2288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_LE16(pos, 1); 2298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2; 2308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* PMKID List [PMKR0Name/PMKR1Name] */ 2328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, pmk_name, WPA_PMK_NAME_LEN); 2338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += WPA_PMK_NAME_LEN; 2348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IEEE80211W 2368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm->mgmt_group_cipher == WPA_CIPHER_AES_128_CMAC) { 2378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Management Group Cipher Suite */ 2388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_AES_128_CMAC); 2398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += RSN_SELECTOR_LEN; 2408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IEEE80211W */ 2428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsnie->len = (pos - (u8 *) rsnie) - 2; 2448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* MDIE */ 2468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = WLAN_EID_MOBILITY_DOMAIN; 2478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = sizeof(*mdie); 2488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mdie = (struct rsn_mdie *) pos; 2498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += sizeof(*mdie); 2508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(mdie->mobility_domain, sm->mobility_domain, 2518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MOBILITY_DOMAIN_ID_LEN); 2528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mdie->ft_capab = ap_mdie && ap_mdie[1] >= 3 ? ap_mdie[4] : 2538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->mdie_ft_capab; 2548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* FTIE[SNonce, [R1KH-ID,] R0KH-ID ] */ 2568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie_pos = pos; 2578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = WLAN_EID_FAST_BSS_TRANSITION; 2588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie_len = pos++; 2598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie = (struct rsn_ftie *) pos; 2608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += sizeof(*ftie); 2618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(ftie->snonce, sm->snonce, WPA_NONCE_LEN); 2628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (anonce) 2638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(ftie->anonce, anonce, WPA_NONCE_LEN); 2648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (kck) { 2658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* R1KH-ID sub-element in third FT message */ 2668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = FTIE_SUBELEM_R1KH_ID; 2678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = FT_R1KH_ID_LEN; 2688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, sm->r1kh_id, FT_R1KH_ID_LEN); 2698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += FT_R1KH_ID_LEN; 2708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* R0KH-ID sub-element */ 2728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = FTIE_SUBELEM_R0KH_ID; 2738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = sm->r0kh_id_len; 2748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, sm->r0kh_id, sm->r0kh_id_len); 2758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += sm->r0kh_id_len; 2768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *ftie_len = pos - ftie_len - 1; 2778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ric_ies) { 2798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* RIC Request */ 2808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(pos, ric_ies, ric_ies_len); 2818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += ric_ies_len; 2828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (kck) { 2858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 2868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * IEEE Std 802.11r-2008, 11A.8.4 2878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * MIC shall be calculated over: 2888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * non-AP STA MAC address 2898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Target AP MAC address 2908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Transaction seq number (5 for ReassocReq, 3 otherwise) 2918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RSN IE 2928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * MDIE 2938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * FTIE (with MIC field set to 0) 2948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RIC-Request (if present) 2958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Information element count */ 2978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->mic_control[1] = 3 + ieee802_11_ie_count(ric_ies, 2988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ric_ies_len); 2998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_ft_mic(kck, sm->own_addr, target_ap, 5, 3008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ((u8 *) mdie) - 2, 2 + sizeof(*mdie), 3018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie_pos, 2 + *ftie_len, 3028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) rsnie, 2 + rsnie->len, ric_ies, 3038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ric_ies_len, ftie->mic) < 0) { 3048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "FT: Failed to calculate MIC"); 3058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(buf); 3068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 3078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *len = pos - buf; 3118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return buf; 3138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_ft_install_ptk(struct wpa_sm *sm, const u8 *bssid) 3178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int keylen; 3198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt enum wpa_alg alg; 3208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 null_rsc[6] = { 0, 0, 0, 0, 0, 0 }; 3218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Installing PTK to the driver."); 3238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3244530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt if (!wpa_cipher_valid_pairwise(sm->pairwise_cipher)) { 3258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "FT: Unsupported pairwise cipher %d", 3268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->pairwise_cipher); 3278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3304530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt alg = wpa_cipher_to_alg(sm->pairwise_cipher); 3314530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt keylen = wpa_cipher_key_len(sm->pairwise_cipher); 3324530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt 3338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_sm_set_key(sm, alg, bssid, 0, 1, null_rsc, 3348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(null_rsc), (u8 *) sm->ptk.tk1, keylen) < 0) { 3358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "FT: Failed to set PTK to the driver"); 3368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 3408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 3448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * wpa_ft_prepare_auth_request - Generate over-the-air auth request 3458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 3468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @mdie: Target AP MDIE 3478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 3488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint wpa_ft_prepare_auth_request(struct wpa_sm *sm, const u8 *mdie) 3508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *ft_ies; 3528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t ft_ies_len; 3538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Generate a new SNonce */ 3558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (random_get_bytes(sm->snonce, WPA_NONCE_LEN)) { 3568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "FT: Failed to generate a new SNonce"); 3578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ft_ies = wpa_ft_gen_req_ies(sm, &ft_ies_len, NULL, sm->pmk_r0_name, 3618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt NULL, sm->bssid, NULL, 0, mdie); 3628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ft_ies) { 3638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_sm_update_ft_ies(sm, sm->mobility_domain, 3648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ft_ies, ft_ies_len); 3658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(ft_ies); 3668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 3698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint wpa_ft_process_response(struct wpa_sm *sm, const u8 *ies, size_t ies_len, 3738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ft_action, const u8 *target_ap, 3748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *ric_ies, size_t ric_ies_len) 3758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *ft_ies; 3778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t ft_ies_len, ptk_len; 3788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_ft_ies parse; 3798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_mdie *mdie; 3808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_ftie *ftie; 3818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 ptk_name[WPA_PMK_NAME_LEN]; 3828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ret; 3838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *bssid; 3848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: Response IEs", ies, ies_len); 3868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: RIC IEs", ric_ies, ric_ies_len); 3878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ft_action) { 3898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!sm->over_the_ds_in_progress) { 3908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: No over-the-DS in progress " 3918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "- drop FT Action Response"); 3928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(target_ap, sm->target_ap, ETH_ALEN) != 0) { 3968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: No over-the-DS in progress " 3978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "with this Target AP - drop FT Action " 3988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Response"); 3998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm->key_mgmt != WPA_KEY_MGMT_FT_IEEE8021X && 4048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->key_mgmt != WPA_KEY_MGMT_FT_PSK) { 4058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Reject FT IEs since FT is not " 4068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "enabled for this connection"); 4078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_ft_parse_ies(ies, ies_len, &parse) < 0) { 4118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Failed to parse IEs"); 4128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mdie = (struct rsn_mdie *) parse.mdie; 4168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (mdie == NULL || parse.mdie_len < sizeof(*mdie) || 4178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(mdie->mobility_domain, sm->mobility_domain, 4188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MOBILITY_DOMAIN_ID_LEN) != 0) { 4198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Invalid MDIE"); 4208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie = (struct rsn_ftie *) parse.ftie; 4248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ftie == NULL || parse.ftie_len < sizeof(*ftie)) { 4258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Invalid FTIE"); 4268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(ftie->snonce, sm->snonce, WPA_NONCE_LEN) != 0) { 4308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: SNonce mismatch in FTIE"); 4318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: Received SNonce", 4328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->snonce, WPA_NONCE_LEN); 4338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: Expected SNonce", 4348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->snonce, WPA_NONCE_LEN); 4358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (parse.r0kh_id == NULL) { 4398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: No R0KH-ID subelem in FTIE"); 4408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (parse.r0kh_id_len != sm->r0kh_id_len || 4448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(parse.r0kh_id, sm->r0kh_id, parse.r0kh_id_len) != 0) { 4458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: R0KH-ID in FTIE did not match with " 4468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "the current R0KH-ID"); 4478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: R0KH-ID in FTIE", 4488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt parse.r0kh_id, parse.r0kh_id_len); 4498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: The current R0KH-ID", 4508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->r0kh_id, sm->r0kh_id_len); 4518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (parse.r1kh_id == NULL) { 4558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: No R1KH-ID subelem in FTIE"); 4568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (parse.rsn_pmkid == NULL || 4608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(parse.rsn_pmkid, sm->pmk_r0_name, WPA_PMK_NAME_LEN)) { 4618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: No matching PMKR0Name (PMKID) in " 4628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "RSNIE"); 4638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(sm->r1kh_id, parse.r1kh_id, FT_R1KH_ID_LEN); 4678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: R1KH-ID", sm->r1kh_id, FT_R1KH_ID_LEN); 4688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: SNonce", sm->snonce, WPA_NONCE_LEN); 4698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: ANonce", ftie->anonce, WPA_NONCE_LEN); 4708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(sm->anonce, ftie->anonce, WPA_NONCE_LEN); 4718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_derive_pmk_r1(sm->pmk_r0, sm->pmk_r0_name, sm->r1kh_id, 4728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->own_addr, sm->pmk_r1, sm->pmk_r1_name); 4738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "FT: PMK-R1", sm->pmk_r1, PMK_LEN); 4748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: PMKR1Name", 4758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->pmk_r1_name, WPA_PMK_NAME_LEN); 4768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt bssid = target_ap; 47861d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt ptk_len = sm->pairwise_cipher != WPA_CIPHER_TKIP ? 48 : 64; 4798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_pmk_r1_to_ptk(sm->pmk_r1, sm->snonce, ftie->anonce, sm->own_addr, 4808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt bssid, sm->pmk_r1_name, 4818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) &sm->ptk, ptk_len, ptk_name); 4828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "FT: PTK", 4838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) &sm->ptk, ptk_len); 4848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: PTKName", ptk_name, WPA_PMK_NAME_LEN); 4858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ft_ies = wpa_ft_gen_req_ies(sm, &ft_ies_len, ftie->anonce, 4878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->pmk_r1_name, sm->ptk.kck, bssid, 4888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ric_ies, ric_ies_len, 4898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt parse.mdie ? parse.mdie - 2 : NULL); 4908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ft_ies) { 4918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_sm_update_ft_ies(sm, sm->mobility_domain, 4928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ft_ies, ft_ies_len); 4938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(ft_ies); 4948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_sm_mark_authenticated(sm, bssid); 4978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = wpa_ft_install_ptk(sm, bssid); 4988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret) { 4998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 5008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Some drivers do not support key configuration when we are 5018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * not associated with the target AP. Work around this by 5028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * trying again after the following reassociation gets 5038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * completed. 5048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 5058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Failed to set PTK prior to " 5068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "association - try again after reassociation"); 5078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->set_ptk_after_assoc = 1; 5088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else 5098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->set_ptk_after_assoc = 0; 5108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->ft_completed = 1; 5128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ft_action) { 5138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 5148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * The caller is expected trigger re-association with the 5158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Target AP. 5168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 5178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(sm->bssid, target_ap, ETH_ALEN); 5188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 5218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint wpa_ft_is_completed(struct wpa_sm *sm) 5258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm == NULL) 5278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 5288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm->key_mgmt != WPA_KEY_MGMT_FT_IEEE8021X && 5308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->key_mgmt != WPA_KEY_MGMT_FT_PSK) 5318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 5328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return sm->ft_completed; 5348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_ft_process_gtk_subelem(struct wpa_sm *sm, const u8 *gtk_elem, 5388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t gtk_elem_len) 5398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 gtk[32]; 5418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int keyidx; 5428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt enum wpa_alg alg; 5438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t gtk_len, keylen, rsc_len; 5448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (gtk_elem == NULL) { 5468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: No GTK included in FTIE"); 5478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 5488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "FT: Received GTK in Reassoc Resp", 5518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt gtk_elem, gtk_elem_len); 5528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (gtk_elem_len < 11 + 24 || (gtk_elem_len - 11) % 8 || 5548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt gtk_elem_len - 19 > sizeof(gtk)) { 5558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Invalid GTK sub-elem " 5568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %lu", (unsigned long) gtk_elem_len); 5578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt gtk_len = gtk_elem_len - 19; 5608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (aes_unwrap(sm->ptk.kek, gtk_len / 8, gtk_elem + 11, gtk)) { 5618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "FT: AES unwrap failed - could not " 5628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "decrypt GTK"); 5638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5664530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt keylen = wpa_cipher_key_len(sm->group_cipher); 5674530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt rsc_len = wpa_cipher_rsc_len(sm->group_cipher); 5684530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt alg = wpa_cipher_to_alg(sm->group_cipher); 5694530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt if (alg == WPA_ALG_NONE) { 5708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Unsupported Group Cipher %d", 5718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->group_cipher); 5728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (gtk_len < keylen) { 5768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Too short GTK in FTIE"); 5778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Key Info[2] | Key Length[1] | RSC[8] | Key[5..32]. */ 5818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt keyidx = WPA_GET_LE16(gtk_elem) & 0x03; 5838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (gtk_elem[2] != keylen) { 5858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: GTK length mismatch: received %d " 5868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "negotiated %lu", 5878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt gtk_elem[2], (unsigned long) keylen); 5888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "FT: GTK from Reassoc Resp", gtk, keylen); 5928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_sm_set_key(sm, alg, broadcast_ether_addr, keyidx, 0, 5938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt gtk_elem + 3, rsc_len, gtk, keylen) < 0) { 5948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Failed to set GTK to the " 5958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "driver."); 5968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 6008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 6018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IEEE80211W 6048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int wpa_ft_process_igtk_subelem(struct wpa_sm *sm, const u8 *igtk_elem, 6058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t igtk_elem_len) 6068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 6078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 igtk[WPA_IGTK_LEN]; 6088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 keyidx; 6098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm->mgmt_group_cipher != WPA_CIPHER_AES_128_CMAC) 6118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 6128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (igtk_elem == NULL) { 6148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: No IGTK included in FTIE"); 6158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 6168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "FT: Received IGTK in Reassoc Resp", 6198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt igtk_elem, igtk_elem_len); 6208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (igtk_elem_len != 2 + 6 + 1 + WPA_IGTK_LEN + 8) { 6228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Invalid IGTK sub-elem " 6238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %lu", (unsigned long) igtk_elem_len); 6248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (igtk_elem[8] != WPA_IGTK_LEN) { 6278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Invalid IGTK sub-elem Key Length " 6288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%d", igtk_elem[8]); 6298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (aes_unwrap(sm->ptk.kek, WPA_IGTK_LEN / 8, igtk_elem + 9, igtk)) { 6338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "FT: AES unwrap failed - could not " 6348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "decrypt IGTK"); 6358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* KeyID[2] | IPN[6] | Key Length[1] | Key[16+8] */ 6398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt keyidx = WPA_GET_LE16(igtk_elem); 6418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "FT: IGTK from Reassoc Resp", igtk, 6438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_IGTK_LEN); 6448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_sm_set_key(sm, WPA_ALG_IGTK, broadcast_ether_addr, keyidx, 0, 6458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt igtk_elem + 2, 6, igtk, WPA_IGTK_LEN) < 0) { 6468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "WPA: Failed to set IGTK to the " 6478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "driver."); 6488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 6528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 6538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IEEE80211W */ 6548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint wpa_ft_validate_reassoc_resp(struct wpa_sm *sm, const u8 *ies, 6578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t ies_len, const u8 *src_addr) 6588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 6598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_ft_ies parse; 6608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_mdie *mdie; 6618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_ftie *ftie; 6628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned int count; 6638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 mic[16]; 6648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: Response IEs", ies, ies_len); 6668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm->key_mgmt != WPA_KEY_MGMT_FT_IEEE8021X && 6688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->key_mgmt != WPA_KEY_MGMT_FT_PSK) { 6698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Reject FT IEs since FT is not " 6708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "enabled for this connection"); 6718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_ft_parse_ies(ies, ies_len, &parse) < 0) { 6758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Failed to parse IEs"); 6768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mdie = (struct rsn_mdie *) parse.mdie; 6808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (mdie == NULL || parse.mdie_len < sizeof(*mdie) || 6818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(mdie->mobility_domain, sm->mobility_domain, 6828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MOBILITY_DOMAIN_ID_LEN) != 0) { 6838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Invalid MDIE"); 6848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie = (struct rsn_ftie *) parse.ftie; 6888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ftie == NULL || parse.ftie_len < sizeof(*ftie)) { 6898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Invalid FTIE"); 6908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(ftie->snonce, sm->snonce, WPA_NONCE_LEN) != 0) { 6948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: SNonce mismatch in FTIE"); 6958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: Received SNonce", 6968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->snonce, WPA_NONCE_LEN); 6978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: Expected SNonce", 6988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->snonce, WPA_NONCE_LEN); 6998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(ftie->anonce, sm->anonce, WPA_NONCE_LEN) != 0) { 7038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: ANonce mismatch in FTIE"); 7048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: Received ANonce", 7058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->anonce, WPA_NONCE_LEN); 7068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: Expected ANonce", 7078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->anonce, WPA_NONCE_LEN); 7088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (parse.r0kh_id == NULL) { 7128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: No R0KH-ID subelem in FTIE"); 7138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (parse.r0kh_id_len != sm->r0kh_id_len || 7178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(parse.r0kh_id, sm->r0kh_id, parse.r0kh_id_len) != 0) { 7188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: R0KH-ID in FTIE did not match with " 7198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "the current R0KH-ID"); 7208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: R0KH-ID in FTIE", 7218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt parse.r0kh_id, parse.r0kh_id_len); 7228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "FT: The current R0KH-ID", 7238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->r0kh_id, sm->r0kh_id_len); 7248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (parse.r1kh_id == NULL) { 7288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: No R1KH-ID subelem in FTIE"); 7298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(parse.r1kh_id, sm->r1kh_id, FT_R1KH_ID_LEN) != 0) { 7338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Unknown R1KH-ID used in " 7348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "ReassocResp"); 7358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (parse.rsn_pmkid == NULL || 7398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(parse.rsn_pmkid, sm->pmk_r1_name, WPA_PMK_NAME_LEN)) { 7408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: No matching PMKR1Name (PMKID) in " 7418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "RSNIE (pmkid=%d)", !!parse.rsn_pmkid); 7428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt count = 3; 7461f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt if (parse.ric) 7471f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt count += ieee802_11_ie_count(parse.ric, parse.ric_len); 7488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ftie->mic_control[1] != count) { 7498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Unexpected IE count in MIC " 7508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Control: received %u expected %u", 7518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ftie->mic_control[1], count); 7528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_ft_mic(sm->ptk.kck, sm->own_addr, src_addr, 6, 7568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt parse.mdie - 2, parse.mdie_len + 2, 7578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt parse.ftie - 2, parse.ftie_len + 2, 7588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt parse.rsn - 2, parse.rsn_len + 2, 7598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt parse.ric, parse.ric_len, 7608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mic) < 0) { 7618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Failed to calculate MIC"); 7628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(mic, ftie->mic, 16) != 0) { 7668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Invalid MIC in FTIE"); 7678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "FT: Received MIC", ftie->mic, 16); 7688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "FT: Calculated MIC", mic, 16); 7698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_ft_process_gtk_subelem(sm, parse.gtk, parse.gtk_len) < 0) 7738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IEEE80211W 7768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_ft_process_igtk_subelem(sm, parse.igtk, parse.igtk_len) < 0) 7778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IEEE80211W */ 7798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm->set_ptk_after_assoc) { 7818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Try to set PTK again now that we " 7828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "are associated"); 7838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_ft_install_ptk(sm, src_addr) < 0) 7848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->set_ptk_after_assoc = 0; 7868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (parse.ric) { 7898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "FT: RIC Response", 7908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt parse.ric, parse.ric_len); 7918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: parse response and inform driver about results */ 7928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 7958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 7968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 7998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * wpa_ft_start_over_ds - Generate over-the-DS auth request 8008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @sm: Pointer to WPA state machine data from wpa_sm_init() 8018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @target_ap: Target AP Address 8028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @mdie: Mobility Domain IE from the target AP 8038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 8048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 8058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint wpa_ft_start_over_ds(struct wpa_sm *sm, const u8 *target_ap, 8068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *mdie) 8078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 8088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *ft_ies; 8098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t ft_ies_len; 8108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "FT: Request over-the-DS with " MACSTR, 8128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAC2STR(target_ap)); 8138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Generate a new SNonce */ 8158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (random_get_bytes(sm->snonce, WPA_NONCE_LEN)) { 8168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "FT: Failed to generate a new SNonce"); 8178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ft_ies = wpa_ft_gen_req_ies(sm, &ft_ies_len, NULL, sm->pmk_r0_name, 8218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt NULL, target_ap, NULL, 0, mdie); 8228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ft_ies) { 8238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->over_the_ds_in_progress = 1; 8248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(sm->target_ap, target_ap, ETH_ALEN); 8258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_sm_send_ft_action(sm, 1, target_ap, ft_ies, ft_ies_len); 8268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(ft_ies); 8278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 8308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 8318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IEEE80211R */ 833