27 	 0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14, 15,
29 	 1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14, 15,  0,
31 	 2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14, 15,  0,  1,
33 	 3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14, 15,  0,  1,  2,
35 	 4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14, 15,  0,  1,  2,  3,
37 	 5,  6,  7,  8,  9, 10, 11, 12, 13, 14, 15,  0,  1,  2,  3,  4,
39 	 6,  7,  8,  9, 10, 11, 12, 13, 14, 15,  0,  1,  2,  3,  4,  5,
41 	 7,  8,  9, 10, 11, 12, 13, 14, 15,  0,  1,  2,  3,  4,  5,  6,
43 	 8,  9, 10, 11, 12, 13, 14, 15,  0,  1,  2,  3,  4,  5,  6,  7,
45 	 9, 10, 11, 12, 13, 14, 15,  0,  1,  2,  3,  4,  5,  6,  7,  8,
47 	10, 11, 12, 13, 14, 15,  0,  1,  2,  3,  4,  5,  6,  7,  8,  9,
49 	11, 12, 13, 14, 15,  0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10,
51 	12, 13, 14, 15,  0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11,
53 	13, 14, 15,  0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12,
55 	14, 15,  0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13,
57 	15,  0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14,
60 	 0, 15, 14, 13, 12, 11, 10,  9,  8,  7,  6,  5,  4,  3,  2,  1,
62 	 1,  0, 15, 14, 13, 12, 11, 10,  9,  8,  7,  6,  5,  4,  3,  2,
64 	 2,  1,  0, 15, 14, 13, 12, 11, 10,  9,  8,  7,  6,  5,  4,  3,
66 	 3,  2,  1,  0, 15, 14, 13, 12, 11, 10,  9,  8,  7,  6,  5,  4,
68 	 4,  3,  2,  1,  0, 15, 14, 13, 12, 11, 10,  9,  8,  7,  6,  5,
70 	 5,  4,  3,  2,  1,  0, 15, 14, 13, 12, 11, 10,  9,  8,  7,  6,
72 	 6,  5,  4,  3,  2,  1,  0, 15, 14, 13, 12, 11, 10,  9,  8,  7,
74 	 7,  6,  5,  4,  3,  2,  1,  0, 15, 14, 13, 12, 11, 10,  9,  8,
76 	 8,  7,  6,  5,  4,  3,  2,  1,  0, 15, 14, 13, 12, 11, 10,  9,
78 	 9,  8,  7,  6,  5,  4,  3,  2,  1,  0, 15, 14, 13, 12, 11, 10,
80 	10,  9,  8,  7,  6,  5,  4,  3,  2,  1,  0, 15, 14, 13, 12, 11,
82 	11, 10,  9,  8,  7,  6,  5,  4,  3,  2,  1,  0, 15, 14, 13, 12,
84 	12, 11, 10,  9,  8,  7,  6,  5,  4,  3,  2,  1,  0, 15, 14, 13,
86 	13, 12, 11, 10,  9,  8,  7,  6,  5,  4,  3,  2,  1,  0, 15, 14,
88 	14, 13, 12, 11, 10,  9,  8,  7,  6,  5,  4,  3,  2,  1,  0, 15,
90 	15, 14, 13, 12, 11, 10,  9,  8,  7,  6,  5,  4,  3,  2,  1,  0
94 	 7,  2,  1, 30, 16, 20, 27, 11, 31,  6,  8, 13, 29,  5, 10, 21,
439 		wpabuf_free(pk->m);  in sae_deinit_pk()
461 	/* <m-as-hexdump>:<base64-encoded-DER-encoded-key> */  in sae_parse_pk()
468 		wpa_printf(MSG_INFO, "SAE: Unexpected Modifier M length %zu",  in sae_parse_pk()
476 	pk->m = wpabuf_alloc(len);  in sae_parse_pk()
477 	if (!pk->m || hexstr2bin(val, wpabuf_put(pk->m, len), len)) {  in sae_parse_pk()
478 		wpa_printf(MSG_INFO, "SAE: Failed to parse m");  in sae_parse_pk()
546 				bool ap, const u8 *m, size_t m_len,  in sae_pk_hash_sig_data()  argument
555 	 * M || K_AP || AP-BSSID || STA-MAC */  in sae_pk_hash_sig_data()
579 	wpabuf_put_data(sig_data, m, m_len);  in sae_pk_hash_sig_data()
644 	if (sae_pk_hash_sig_data(sae, hash_len, true, wpabuf_head(pk->m),  in sae_write_confirm_pk()
645 				 wpabuf_len(pk->m), wpabuf_head(pk->pubkey),  in sae_write_confirm_pk()
657 	encr_mod_len = wpabuf_len(pk->m) + AES_BLOCK_SIZE;  in sae_write_confirm_pk()
678 	/* KeyAuth = Sig_AP(eleAP || eleSTA || scaAP || scaSTA || M || K_AP ||  in sae_write_confirm_pk()
686 	/* EncryptedModifier = AES-SIV-Q(M); no AAD */  in sae_write_confirm_pk()
689 			    wpabuf_head(pk->m), wpabuf_len(pk->m),  in sae_write_confirm_pk()
704 				     const u8 *m, size_t m_len,  in sae_pk_valid_fingerprint()  argument
719 	/* Fingerprint = L(Hash(SSID || M || K_AP), 0, 8*Sec + 19*Lambda/4 - 5)  in sae_pk_valid_fingerprint()
730 	os_memcpy(pos, m, m_len);  in sae_pk_valid_fingerprint()
734 	wpa_hexdump_key(MSG_DEBUG, "SAE-PK: SSID || M || K_AP",  in sae_pk_valid_fingerprint()
740 	wpa_hexdump(MSG_DEBUG, "SAE-PK: Hash(SSID || M || K_AP)",  in sae_pk_valid_fingerprint()
775 	u8 m[SAE_PK_M_LEN];  in sae_check_confirm_pk()  local
827 			    0, NULL, NULL, m) < 0) {  in sae_check_confirm_pk()
832 	wpa_hexdump_key(MSG_DEBUG, "SAE-PK: Modifier M", m, SAE_PK_M_LEN);  in sae_check_confirm_pk()
852 	if (!sae_pk_valid_fingerprint(sae, m, SAE_PK_M_LEN, k_ap, k_ap_len,  in sae_check_confirm_pk()
862 	if (sae_pk_hash_sig_data(sae, hash_len, false, m, SAE_PK_M_LEN,  in sae_check_confirm_pk()