xref: /freebsd/contrib/wpa/src/common/wpa_common.c (revision 85732ac8bccbc0adcf5a261ea1ffec8ca7b3a92d)
139beb93cSSam Leffler /*
239beb93cSSam Leffler  * WPA/RSN - Shared functions for supplicant and authenticator
3*85732ac8SCy Schubert  * Copyright (c) 2002-2018, Jouni Malinen <j@w1.fi>
439beb93cSSam Leffler  *
5f05cddf9SRui Paulo  * This software may be distributed under the terms of the BSD license.
6f05cddf9SRui Paulo  * See README for more details.
739beb93cSSam Leffler  */
839beb93cSSam Leffler 
939beb93cSSam Leffler #include "includes.h"
1039beb93cSSam Leffler 
1139beb93cSSam Leffler #include "common.h"
12e28a4053SRui Paulo #include "crypto/md5.h"
13e28a4053SRui Paulo #include "crypto/sha1.h"
14e28a4053SRui Paulo #include "crypto/sha256.h"
155b9c547cSRui Paulo #include "crypto/sha384.h"
16*85732ac8SCy Schubert #include "crypto/sha512.h"
17e28a4053SRui Paulo #include "crypto/aes_wrap.h"
18e28a4053SRui Paulo #include "crypto/crypto.h"
1939beb93cSSam Leffler #include "ieee802_11_defs.h"
2039beb93cSSam Leffler #include "defs.h"
2139beb93cSSam Leffler #include "wpa_common.h"
2239beb93cSSam Leffler 
2339beb93cSSam Leffler 
24*85732ac8SCy Schubert static unsigned int wpa_kck_len(int akmp, size_t pmk_len)
255b9c547cSRui Paulo {
26*85732ac8SCy Schubert 	switch (akmp) {
27*85732ac8SCy Schubert 	case WPA_KEY_MGMT_IEEE8021X_SUITE_B_192:
28*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FT_IEEE8021X_SHA384:
295b9c547cSRui Paulo 		return 24;
30*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FILS_SHA256:
31*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FT_FILS_SHA256:
32*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FILS_SHA384:
33*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FT_FILS_SHA384:
34*85732ac8SCy Schubert 		return 0;
35*85732ac8SCy Schubert 	case WPA_KEY_MGMT_DPP:
36*85732ac8SCy Schubert 		return pmk_len / 2;
37*85732ac8SCy Schubert 	case WPA_KEY_MGMT_OWE:
38*85732ac8SCy Schubert 		return pmk_len / 2;
39*85732ac8SCy Schubert 	default:
405b9c547cSRui Paulo 		return 16;
415b9c547cSRui Paulo 	}
42*85732ac8SCy Schubert }
435b9c547cSRui Paulo 
445b9c547cSRui Paulo 
45*85732ac8SCy Schubert #ifdef CONFIG_IEEE80211R
46*85732ac8SCy Schubert static unsigned int wpa_kck2_len(int akmp)
475b9c547cSRui Paulo {
48*85732ac8SCy Schubert 	switch (akmp) {
49*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FT_FILS_SHA256:
50*85732ac8SCy Schubert 		return 16;
51*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FT_FILS_SHA384:
52*85732ac8SCy Schubert 		return 24;
53*85732ac8SCy Schubert 	default:
54*85732ac8SCy Schubert 		return 0;
55*85732ac8SCy Schubert 	}
56*85732ac8SCy Schubert }
57*85732ac8SCy Schubert #endif /* CONFIG_IEEE80211R */
58*85732ac8SCy Schubert 
59*85732ac8SCy Schubert 
60*85732ac8SCy Schubert static unsigned int wpa_kek_len(int akmp, size_t pmk_len)
61*85732ac8SCy Schubert {
62*85732ac8SCy Schubert 	switch (akmp) {
63*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FILS_SHA384:
64*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FT_FILS_SHA384:
65*85732ac8SCy Schubert 		return 64;
66*85732ac8SCy Schubert 	case WPA_KEY_MGMT_IEEE8021X_SUITE_B_192:
67*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FILS_SHA256:
68*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FT_FILS_SHA256:
69*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FT_IEEE8021X_SHA384:
705b9c547cSRui Paulo 		return 32;
71*85732ac8SCy Schubert 	case WPA_KEY_MGMT_DPP:
72*85732ac8SCy Schubert 		return pmk_len <= 32 ? 16 : 32;
73*85732ac8SCy Schubert 	case WPA_KEY_MGMT_OWE:
74*85732ac8SCy Schubert 		return pmk_len <= 32 ? 16 : 32;
75*85732ac8SCy Schubert 	default:
765b9c547cSRui Paulo 		return 16;
775b9c547cSRui Paulo 	}
78*85732ac8SCy Schubert }
795b9c547cSRui Paulo 
805b9c547cSRui Paulo 
81*85732ac8SCy Schubert #ifdef CONFIG_IEEE80211R
82*85732ac8SCy Schubert static unsigned int wpa_kek2_len(int akmp)
835b9c547cSRui Paulo {
84*85732ac8SCy Schubert 	switch (akmp) {
85*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FT_FILS_SHA256:
865b9c547cSRui Paulo 		return 16;
87*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FT_FILS_SHA384:
88*85732ac8SCy Schubert 		return 32;
89*85732ac8SCy Schubert 	default:
90*85732ac8SCy Schubert 		return 0;
91*85732ac8SCy Schubert 	}
92*85732ac8SCy Schubert }
93*85732ac8SCy Schubert #endif /* CONFIG_IEEE80211R */
94*85732ac8SCy Schubert 
95*85732ac8SCy Schubert 
96*85732ac8SCy Schubert unsigned int wpa_mic_len(int akmp, size_t pmk_len)
97*85732ac8SCy Schubert {
98*85732ac8SCy Schubert 	switch (akmp) {
99*85732ac8SCy Schubert 	case WPA_KEY_MGMT_IEEE8021X_SUITE_B_192:
100*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FT_IEEE8021X_SHA384:
101*85732ac8SCy Schubert 		return 24;
102*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FILS_SHA256:
103*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FILS_SHA384:
104*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FT_FILS_SHA256:
105*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FT_FILS_SHA384:
106*85732ac8SCy Schubert 		return 0;
107*85732ac8SCy Schubert 	case WPA_KEY_MGMT_DPP:
108*85732ac8SCy Schubert 		return pmk_len / 2;
109*85732ac8SCy Schubert 	case WPA_KEY_MGMT_OWE:
110*85732ac8SCy Schubert 		return pmk_len / 2;
111*85732ac8SCy Schubert 	default:
112*85732ac8SCy Schubert 		return 16;
113*85732ac8SCy Schubert 	}
114*85732ac8SCy Schubert }
115*85732ac8SCy Schubert 
116*85732ac8SCy Schubert 
117*85732ac8SCy Schubert /**
118*85732ac8SCy Schubert  * wpa_use_akm_defined - Is AKM-defined Key Descriptor Version used
119*85732ac8SCy Schubert  * @akmp: WPA_KEY_MGMT_* used in key derivation
120*85732ac8SCy Schubert  * Returns: 1 if AKM-defined Key Descriptor Version is used; 0 otherwise
121*85732ac8SCy Schubert  */
122*85732ac8SCy Schubert int wpa_use_akm_defined(int akmp)
123*85732ac8SCy Schubert {
124*85732ac8SCy Schubert 	return akmp == WPA_KEY_MGMT_OSEN ||
125*85732ac8SCy Schubert 		akmp == WPA_KEY_MGMT_OWE ||
126*85732ac8SCy Schubert 		akmp == WPA_KEY_MGMT_DPP ||
127*85732ac8SCy Schubert 		akmp == WPA_KEY_MGMT_FT_IEEE8021X_SHA384 ||
128*85732ac8SCy Schubert 		wpa_key_mgmt_sae(akmp) ||
129*85732ac8SCy Schubert 		wpa_key_mgmt_suite_b(akmp) ||
130*85732ac8SCy Schubert 		wpa_key_mgmt_fils(akmp);
131*85732ac8SCy Schubert }
132*85732ac8SCy Schubert 
133*85732ac8SCy Schubert 
134*85732ac8SCy Schubert /**
135*85732ac8SCy Schubert  * wpa_use_cmac - Is CMAC integrity algorithm used for EAPOL-Key MIC
136*85732ac8SCy Schubert  * @akmp: WPA_KEY_MGMT_* used in key derivation
137*85732ac8SCy Schubert  * Returns: 1 if CMAC is used; 0 otherwise
138*85732ac8SCy Schubert  */
139*85732ac8SCy Schubert int wpa_use_cmac(int akmp)
140*85732ac8SCy Schubert {
141*85732ac8SCy Schubert 	return akmp == WPA_KEY_MGMT_OSEN ||
142*85732ac8SCy Schubert 		akmp == WPA_KEY_MGMT_OWE ||
143*85732ac8SCy Schubert 		akmp == WPA_KEY_MGMT_DPP ||
144*85732ac8SCy Schubert 		wpa_key_mgmt_ft(akmp) ||
145*85732ac8SCy Schubert 		wpa_key_mgmt_sha256(akmp) ||
146*85732ac8SCy Schubert 		wpa_key_mgmt_sae(akmp) ||
147*85732ac8SCy Schubert 		wpa_key_mgmt_suite_b(akmp);
148*85732ac8SCy Schubert }
149*85732ac8SCy Schubert 
150*85732ac8SCy Schubert 
151*85732ac8SCy Schubert /**
152*85732ac8SCy Schubert  * wpa_use_aes_key_wrap - Is AES Keywrap algorithm used for EAPOL-Key Key Data
153*85732ac8SCy Schubert  * @akmp: WPA_KEY_MGMT_* used in key derivation
154*85732ac8SCy Schubert  * Returns: 1 if AES Keywrap is used; 0 otherwise
155*85732ac8SCy Schubert  *
156*85732ac8SCy Schubert  * Note: AKM 00-0F-AC:1 and 00-0F-AC:2 have special rules for selecting whether
157*85732ac8SCy Schubert  * to use AES Keywrap based on the negotiated pairwise cipher. This function
158*85732ac8SCy Schubert  * does not cover those special cases.
159*85732ac8SCy Schubert  */
160*85732ac8SCy Schubert int wpa_use_aes_key_wrap(int akmp)
161*85732ac8SCy Schubert {
162*85732ac8SCy Schubert 	return akmp == WPA_KEY_MGMT_OSEN ||
163*85732ac8SCy Schubert 		akmp == WPA_KEY_MGMT_OWE ||
164*85732ac8SCy Schubert 		akmp == WPA_KEY_MGMT_DPP ||
165*85732ac8SCy Schubert 		wpa_key_mgmt_ft(akmp) ||
166*85732ac8SCy Schubert 		wpa_key_mgmt_sha256(akmp) ||
167*85732ac8SCy Schubert 		wpa_key_mgmt_sae(akmp) ||
168*85732ac8SCy Schubert 		wpa_key_mgmt_suite_b(akmp);
1695b9c547cSRui Paulo }
1705b9c547cSRui Paulo 
1715b9c547cSRui Paulo 
17239beb93cSSam Leffler /**
17339beb93cSSam Leffler  * wpa_eapol_key_mic - Calculate EAPOL-Key MIC
17439beb93cSSam Leffler  * @key: EAPOL-Key Key Confirmation Key (KCK)
1755b9c547cSRui Paulo  * @key_len: KCK length in octets
1765b9c547cSRui Paulo  * @akmp: WPA_KEY_MGMT_* used in key derivation
17739beb93cSSam Leffler  * @ver: Key descriptor version (WPA_KEY_INFO_TYPE_*)
17839beb93cSSam Leffler  * @buf: Pointer to the beginning of the EAPOL header (version field)
17939beb93cSSam Leffler  * @len: Length of the EAPOL frame (from EAPOL header to the end of the frame)
18039beb93cSSam Leffler  * @mic: Pointer to the buffer to which the EAPOL-Key MIC is written
18139beb93cSSam Leffler  * Returns: 0 on success, -1 on failure
18239beb93cSSam Leffler  *
18339beb93cSSam Leffler  * Calculate EAPOL-Key MIC for an EAPOL-Key packet. The EAPOL-Key MIC field has
18439beb93cSSam Leffler  * to be cleared (all zeroes) when calling this function.
18539beb93cSSam Leffler  *
18639beb93cSSam Leffler  * Note: 'IEEE Std 802.11i-2004 - 8.5.2 EAPOL-Key frames' has an error in the
18739beb93cSSam Leffler  * description of the Key MIC calculation. It includes packet data from the
18839beb93cSSam Leffler  * beginning of the EAPOL-Key header, not EAPOL header. This incorrect change
18939beb93cSSam Leffler  * happened during final editing of the standard and the correct behavior is
19039beb93cSSam Leffler  * defined in the last draft (IEEE 802.11i/D10).
19139beb93cSSam Leffler  */
1925b9c547cSRui Paulo int wpa_eapol_key_mic(const u8 *key, size_t key_len, int akmp, int ver,
1935b9c547cSRui Paulo 		      const u8 *buf, size_t len, u8 *mic)
19439beb93cSSam Leffler {
195*85732ac8SCy Schubert 	u8 hash[SHA512_MAC_LEN];
196*85732ac8SCy Schubert 
197*85732ac8SCy Schubert 	if (key_len == 0) {
198*85732ac8SCy Schubert 		wpa_printf(MSG_DEBUG,
199*85732ac8SCy Schubert 			   "WPA: KCK not set - cannot calculate MIC");
200*85732ac8SCy Schubert 		return -1;
201*85732ac8SCy Schubert 	}
20239beb93cSSam Leffler 
20339beb93cSSam Leffler 	switch (ver) {
204f05cddf9SRui Paulo #ifndef CONFIG_FIPS
20539beb93cSSam Leffler 	case WPA_KEY_INFO_TYPE_HMAC_MD5_RC4:
206*85732ac8SCy Schubert 		wpa_printf(MSG_DEBUG, "WPA: EAPOL-Key MIC using HMAC-MD5");
2075b9c547cSRui Paulo 		return hmac_md5(key, key_len, buf, len, mic);
208f05cddf9SRui Paulo #endif /* CONFIG_FIPS */
20939beb93cSSam Leffler 	case WPA_KEY_INFO_TYPE_HMAC_SHA1_AES:
210*85732ac8SCy Schubert 		wpa_printf(MSG_DEBUG, "WPA: EAPOL-Key MIC using HMAC-SHA1");
2115b9c547cSRui Paulo 		if (hmac_sha1(key, key_len, buf, len, hash))
212e28a4053SRui Paulo 			return -1;
21339beb93cSSam Leffler 		os_memcpy(mic, hash, MD5_MAC_LEN);
21439beb93cSSam Leffler 		break;
2153157ba21SRui Paulo #if defined(CONFIG_IEEE80211R) || defined(CONFIG_IEEE80211W)
21639beb93cSSam Leffler 	case WPA_KEY_INFO_TYPE_AES_128_CMAC:
217*85732ac8SCy Schubert 		wpa_printf(MSG_DEBUG, "WPA: EAPOL-Key MIC using AES-CMAC");
21839beb93cSSam Leffler 		return omac1_aes_128(key, buf, len, mic);
2193157ba21SRui Paulo #endif /* CONFIG_IEEE80211R || CONFIG_IEEE80211W */
2205b9c547cSRui Paulo 	case WPA_KEY_INFO_TYPE_AKM_DEFINED:
2215b9c547cSRui Paulo 		switch (akmp) {
222*85732ac8SCy Schubert #ifdef CONFIG_SAE
223*85732ac8SCy Schubert 		case WPA_KEY_MGMT_SAE:
224*85732ac8SCy Schubert 		case WPA_KEY_MGMT_FT_SAE:
225*85732ac8SCy Schubert 			wpa_printf(MSG_DEBUG,
226*85732ac8SCy Schubert 				   "WPA: EAPOL-Key MIC using AES-CMAC (AKM-defined - SAE)");
227*85732ac8SCy Schubert 			return omac1_aes_128(key, buf, len, mic);
228*85732ac8SCy Schubert #endif /* CONFIG_SAE */
2295b9c547cSRui Paulo #ifdef CONFIG_HS20
2305b9c547cSRui Paulo 		case WPA_KEY_MGMT_OSEN:
231*85732ac8SCy Schubert 			wpa_printf(MSG_DEBUG,
232*85732ac8SCy Schubert 				   "WPA: EAPOL-Key MIC using AES-CMAC (AKM-defined - OSEN)");
2335b9c547cSRui Paulo 			return omac1_aes_128(key, buf, len, mic);
2345b9c547cSRui Paulo #endif /* CONFIG_HS20 */
2355b9c547cSRui Paulo #ifdef CONFIG_SUITEB
2365b9c547cSRui Paulo 		case WPA_KEY_MGMT_IEEE8021X_SUITE_B:
237*85732ac8SCy Schubert 			wpa_printf(MSG_DEBUG,
238*85732ac8SCy Schubert 				   "WPA: EAPOL-Key MIC using HMAC-SHA256 (AKM-defined - Suite B)");
2395b9c547cSRui Paulo 			if (hmac_sha256(key, key_len, buf, len, hash))
2405b9c547cSRui Paulo 				return -1;
2415b9c547cSRui Paulo 			os_memcpy(mic, hash, MD5_MAC_LEN);
2425b9c547cSRui Paulo 			break;
2435b9c547cSRui Paulo #endif /* CONFIG_SUITEB */
2445b9c547cSRui Paulo #ifdef CONFIG_SUITEB192
2455b9c547cSRui Paulo 		case WPA_KEY_MGMT_IEEE8021X_SUITE_B_192:
246*85732ac8SCy Schubert 			wpa_printf(MSG_DEBUG,
247*85732ac8SCy Schubert 				   "WPA: EAPOL-Key MIC using HMAC-SHA384 (AKM-defined - Suite B 192-bit)");
2485b9c547cSRui Paulo 			if (hmac_sha384(key, key_len, buf, len, hash))
2495b9c547cSRui Paulo 				return -1;
2505b9c547cSRui Paulo 			os_memcpy(mic, hash, 24);
2515b9c547cSRui Paulo 			break;
2525b9c547cSRui Paulo #endif /* CONFIG_SUITEB192 */
253*85732ac8SCy Schubert #ifdef CONFIG_OWE
254*85732ac8SCy Schubert 		case WPA_KEY_MGMT_OWE:
255*85732ac8SCy Schubert 			wpa_printf(MSG_DEBUG,
256*85732ac8SCy Schubert 				   "WPA: EAPOL-Key MIC using HMAC-SHA%u (AKM-defined - OWE)",
257*85732ac8SCy Schubert 				   (unsigned int) key_len * 8 * 2);
258*85732ac8SCy Schubert 			if (key_len == 128 / 8) {
259*85732ac8SCy Schubert 				if (hmac_sha256(key, key_len, buf, len, hash))
260*85732ac8SCy Schubert 					return -1;
261*85732ac8SCy Schubert 			} else if (key_len == 192 / 8) {
262*85732ac8SCy Schubert 				if (hmac_sha384(key, key_len, buf, len, hash))
263*85732ac8SCy Schubert 					return -1;
264*85732ac8SCy Schubert 			} else if (key_len == 256 / 8) {
265*85732ac8SCy Schubert 				if (hmac_sha512(key, key_len, buf, len, hash))
266*85732ac8SCy Schubert 					return -1;
267*85732ac8SCy Schubert 			} else {
268*85732ac8SCy Schubert 				wpa_printf(MSG_INFO,
269*85732ac8SCy Schubert 					   "OWE: Unsupported KCK length: %u",
270*85732ac8SCy Schubert 					   (unsigned int) key_len);
271*85732ac8SCy Schubert 				return -1;
272*85732ac8SCy Schubert 			}
273*85732ac8SCy Schubert 			os_memcpy(mic, hash, key_len);
274*85732ac8SCy Schubert 			break;
275*85732ac8SCy Schubert #endif /* CONFIG_OWE */
276*85732ac8SCy Schubert #ifdef CONFIG_DPP
277*85732ac8SCy Schubert 		case WPA_KEY_MGMT_DPP:
278*85732ac8SCy Schubert 			wpa_printf(MSG_DEBUG,
279*85732ac8SCy Schubert 				   "WPA: EAPOL-Key MIC using HMAC-SHA%u (AKM-defined - DPP)",
280*85732ac8SCy Schubert 				   (unsigned int) key_len * 8 * 2);
281*85732ac8SCy Schubert 			if (key_len == 128 / 8) {
282*85732ac8SCy Schubert 				if (hmac_sha256(key, key_len, buf, len, hash))
283*85732ac8SCy Schubert 					return -1;
284*85732ac8SCy Schubert 			} else if (key_len == 192 / 8) {
285*85732ac8SCy Schubert 				if (hmac_sha384(key, key_len, buf, len, hash))
286*85732ac8SCy Schubert 					return -1;
287*85732ac8SCy Schubert 			} else if (key_len == 256 / 8) {
288*85732ac8SCy Schubert 				if (hmac_sha512(key, key_len, buf, len, hash))
289*85732ac8SCy Schubert 					return -1;
290*85732ac8SCy Schubert 			} else {
291*85732ac8SCy Schubert 				wpa_printf(MSG_INFO,
292*85732ac8SCy Schubert 					   "DPP: Unsupported KCK length: %u",
293*85732ac8SCy Schubert 					   (unsigned int) key_len);
294*85732ac8SCy Schubert 				return -1;
295*85732ac8SCy Schubert 			}
296*85732ac8SCy Schubert 			os_memcpy(mic, hash, key_len);
297*85732ac8SCy Schubert 			break;
298*85732ac8SCy Schubert #endif /* CONFIG_DPP */
299*85732ac8SCy Schubert #if defined(CONFIG_IEEE80211R) && defined(CONFIG_SHA384)
300*85732ac8SCy Schubert 		case WPA_KEY_MGMT_FT_IEEE8021X_SHA384:
301*85732ac8SCy Schubert 			wpa_printf(MSG_DEBUG,
302*85732ac8SCy Schubert 				   "WPA: EAPOL-Key MIC using HMAC-SHA384 (AKM-defined - FT 802.1X SHA384)");
303*85732ac8SCy Schubert 			if (hmac_sha384(key, key_len, buf, len, hash))
304*85732ac8SCy Schubert 				return -1;
305*85732ac8SCy Schubert 			os_memcpy(mic, hash, 24);
306*85732ac8SCy Schubert 			break;
307*85732ac8SCy Schubert #endif /* CONFIG_IEEE80211R && CONFIG_SHA384 */
3085b9c547cSRui Paulo 		default:
309*85732ac8SCy Schubert 			wpa_printf(MSG_DEBUG,
310*85732ac8SCy Schubert 				   "WPA: EAPOL-Key MIC algorithm not known (AKM-defined - akmp=0x%x)",
311*85732ac8SCy Schubert 				   akmp);
3125b9c547cSRui Paulo 			return -1;
3135b9c547cSRui Paulo 		}
3145b9c547cSRui Paulo 		break;
31539beb93cSSam Leffler 	default:
316*85732ac8SCy Schubert 		wpa_printf(MSG_DEBUG,
317*85732ac8SCy Schubert 			   "WPA: EAPOL-Key MIC algorithm not known (ver=%d)",
318*85732ac8SCy Schubert 			   ver);
31939beb93cSSam Leffler 		return -1;
32039beb93cSSam Leffler 	}
32139beb93cSSam Leffler 
32239beb93cSSam Leffler 	return 0;
32339beb93cSSam Leffler }
32439beb93cSSam Leffler 
32539beb93cSSam Leffler 
32639beb93cSSam Leffler /**
32739beb93cSSam Leffler  * wpa_pmk_to_ptk - Calculate PTK from PMK, addresses, and nonces
32839beb93cSSam Leffler  * @pmk: Pairwise master key
32939beb93cSSam Leffler  * @pmk_len: Length of PMK
33039beb93cSSam Leffler  * @label: Label to use in derivation
33139beb93cSSam Leffler  * @addr1: AA or SA
33239beb93cSSam Leffler  * @addr2: SA or AA
33339beb93cSSam Leffler  * @nonce1: ANonce or SNonce
33439beb93cSSam Leffler  * @nonce2: SNonce or ANonce
33539beb93cSSam Leffler  * @ptk: Buffer for pairwise transient key
3365b9c547cSRui Paulo  * @akmp: Negotiated AKM
3375b9c547cSRui Paulo  * @cipher: Negotiated pairwise cipher
3385b9c547cSRui Paulo  * Returns: 0 on success, -1 on failure
33939beb93cSSam Leffler  *
34039beb93cSSam Leffler  * IEEE Std 802.11i-2004 - 8.5.1.2 Pairwise key hierarchy
34139beb93cSSam Leffler  * PTK = PRF-X(PMK, "Pairwise key expansion",
34239beb93cSSam Leffler  *             Min(AA, SA) || Max(AA, SA) ||
34339beb93cSSam Leffler  *             Min(ANonce, SNonce) || Max(ANonce, SNonce))
34439beb93cSSam Leffler  */
3455b9c547cSRui Paulo int wpa_pmk_to_ptk(const u8 *pmk, size_t pmk_len, const char *label,
34639beb93cSSam Leffler 		   const u8 *addr1, const u8 *addr2,
34739beb93cSSam Leffler 		   const u8 *nonce1, const u8 *nonce2,
3485b9c547cSRui Paulo 		   struct wpa_ptk *ptk, int akmp, int cipher)
34939beb93cSSam Leffler {
35039beb93cSSam Leffler 	u8 data[2 * ETH_ALEN + 2 * WPA_NONCE_LEN];
3515b9c547cSRui Paulo 	u8 tmp[WPA_KCK_MAX_LEN + WPA_KEK_MAX_LEN + WPA_TK_MAX_LEN];
3525b9c547cSRui Paulo 	size_t ptk_len;
35339beb93cSSam Leffler 
354*85732ac8SCy Schubert 	if (pmk_len == 0) {
355*85732ac8SCy Schubert 		wpa_printf(MSG_ERROR, "WPA: No PMK set for PTK derivation");
356*85732ac8SCy Schubert 		return -1;
357*85732ac8SCy Schubert 	}
358*85732ac8SCy Schubert 
35939beb93cSSam Leffler 	if (os_memcmp(addr1, addr2, ETH_ALEN) < 0) {
36039beb93cSSam Leffler 		os_memcpy(data, addr1, ETH_ALEN);
36139beb93cSSam Leffler 		os_memcpy(data + ETH_ALEN, addr2, ETH_ALEN);
36239beb93cSSam Leffler 	} else {
36339beb93cSSam Leffler 		os_memcpy(data, addr2, ETH_ALEN);
36439beb93cSSam Leffler 		os_memcpy(data + ETH_ALEN, addr1, ETH_ALEN);
36539beb93cSSam Leffler 	}
36639beb93cSSam Leffler 
36739beb93cSSam Leffler 	if (os_memcmp(nonce1, nonce2, WPA_NONCE_LEN) < 0) {
36839beb93cSSam Leffler 		os_memcpy(data + 2 * ETH_ALEN, nonce1, WPA_NONCE_LEN);
36939beb93cSSam Leffler 		os_memcpy(data + 2 * ETH_ALEN + WPA_NONCE_LEN, nonce2,
37039beb93cSSam Leffler 			  WPA_NONCE_LEN);
37139beb93cSSam Leffler 	} else {
37239beb93cSSam Leffler 		os_memcpy(data + 2 * ETH_ALEN, nonce2, WPA_NONCE_LEN);
37339beb93cSSam Leffler 		os_memcpy(data + 2 * ETH_ALEN + WPA_NONCE_LEN, nonce1,
37439beb93cSSam Leffler 			  WPA_NONCE_LEN);
37539beb93cSSam Leffler 	}
37639beb93cSSam Leffler 
377*85732ac8SCy Schubert 	ptk->kck_len = wpa_kck_len(akmp, pmk_len);
378*85732ac8SCy Schubert 	ptk->kek_len = wpa_kek_len(akmp, pmk_len);
3795b9c547cSRui Paulo 	ptk->tk_len = wpa_cipher_key_len(cipher);
380*85732ac8SCy Schubert 	if (ptk->tk_len == 0) {
381*85732ac8SCy Schubert 		wpa_printf(MSG_ERROR,
382*85732ac8SCy Schubert 			   "WPA: Unsupported cipher (0x%x) used in PTK derivation",
383*85732ac8SCy Schubert 			   cipher);
384*85732ac8SCy Schubert 		return -1;
385*85732ac8SCy Schubert 	}
3865b9c547cSRui Paulo 	ptk_len = ptk->kck_len + ptk->kek_len + ptk->tk_len;
3875b9c547cSRui Paulo 
388*85732ac8SCy Schubert 	if (wpa_key_mgmt_sha384(akmp)) {
389*85732ac8SCy Schubert #if defined(CONFIG_SUITEB192) || defined(CONFIG_FILS)
390*85732ac8SCy Schubert 		wpa_printf(MSG_DEBUG, "WPA: PTK derivation using PRF(SHA384)");
391*85732ac8SCy Schubert 		if (sha384_prf(pmk, pmk_len, label, data, sizeof(data),
392*85732ac8SCy Schubert 			       tmp, ptk_len) < 0)
393*85732ac8SCy Schubert 			return -1;
394*85732ac8SCy Schubert #else /* CONFIG_SUITEB192 || CONFIG_FILS */
395*85732ac8SCy Schubert 		return -1;
396*85732ac8SCy Schubert #endif /* CONFIG_SUITEB192 || CONFIG_FILS */
397*85732ac8SCy Schubert 	} else if (wpa_key_mgmt_sha256(akmp) || akmp == WPA_KEY_MGMT_OWE) {
398*85732ac8SCy Schubert #if defined(CONFIG_IEEE80211W) || defined(CONFIG_SAE) || defined(CONFIG_FILS)
399*85732ac8SCy Schubert 		wpa_printf(MSG_DEBUG, "WPA: PTK derivation using PRF(SHA256)");
400*85732ac8SCy Schubert 		if (sha256_prf(pmk, pmk_len, label, data, sizeof(data),
401*85732ac8SCy Schubert 			       tmp, ptk_len) < 0)
402*85732ac8SCy Schubert 			return -1;
403*85732ac8SCy Schubert #else /* CONFIG_IEEE80211W or CONFIG_SAE or CONFIG_FILS */
404*85732ac8SCy Schubert 		return -1;
405*85732ac8SCy Schubert #endif /* CONFIG_IEEE80211W or CONFIG_SAE or CONFIG_FILS */
406*85732ac8SCy Schubert #ifdef CONFIG_DPP
407*85732ac8SCy Schubert 	} else if (akmp == WPA_KEY_MGMT_DPP && pmk_len == 32) {
408*85732ac8SCy Schubert 		wpa_printf(MSG_DEBUG, "WPA: PTK derivation using PRF(SHA256)");
409*85732ac8SCy Schubert 		if (sha256_prf(pmk, pmk_len, label, data, sizeof(data),
410*85732ac8SCy Schubert 			       tmp, ptk_len) < 0)
411*85732ac8SCy Schubert 			return -1;
412*85732ac8SCy Schubert 	} else if (akmp == WPA_KEY_MGMT_DPP && pmk_len == 48) {
413*85732ac8SCy Schubert 		wpa_printf(MSG_DEBUG, "WPA: PTK derivation using PRF(SHA384)");
414*85732ac8SCy Schubert 		if (sha384_prf(pmk, pmk_len, label, data, sizeof(data),
415*85732ac8SCy Schubert 			       tmp, ptk_len) < 0)
416*85732ac8SCy Schubert 			return -1;
417*85732ac8SCy Schubert 	} else if (akmp == WPA_KEY_MGMT_DPP && pmk_len == 64) {
418*85732ac8SCy Schubert 		wpa_printf(MSG_DEBUG, "WPA: PTK derivation using PRF(SHA512)");
419*85732ac8SCy Schubert 		if (sha512_prf(pmk, pmk_len, label, data, sizeof(data),
420*85732ac8SCy Schubert 			       tmp, ptk_len) < 0)
421*85732ac8SCy Schubert 			return -1;
422*85732ac8SCy Schubert 	} else if (akmp == WPA_KEY_MGMT_DPP) {
423*85732ac8SCy Schubert 		wpa_printf(MSG_INFO, "DPP: Unknown PMK length %u",
424*85732ac8SCy Schubert 			   (unsigned int) pmk_len);
425*85732ac8SCy Schubert 		return -1;
426*85732ac8SCy Schubert #endif /* CONFIG_DPP */
427*85732ac8SCy Schubert 	} else {
428*85732ac8SCy Schubert 		wpa_printf(MSG_DEBUG, "WPA: PTK derivation using PRF(SHA1)");
429*85732ac8SCy Schubert 		if (sha1_prf(pmk, pmk_len, label, data, sizeof(data), tmp,
430*85732ac8SCy Schubert 			     ptk_len) < 0)
431*85732ac8SCy Schubert 			return -1;
432*85732ac8SCy Schubert 	}
43339beb93cSSam Leffler 
43439beb93cSSam Leffler 	wpa_printf(MSG_DEBUG, "WPA: PTK derivation - A1=" MACSTR " A2=" MACSTR,
43539beb93cSSam Leffler 		   MAC2STR(addr1), MAC2STR(addr2));
436f05cddf9SRui Paulo 	wpa_hexdump(MSG_DEBUG, "WPA: Nonce1", nonce1, WPA_NONCE_LEN);
437f05cddf9SRui Paulo 	wpa_hexdump(MSG_DEBUG, "WPA: Nonce2", nonce2, WPA_NONCE_LEN);
43839beb93cSSam Leffler 	wpa_hexdump_key(MSG_DEBUG, "WPA: PMK", pmk, pmk_len);
4395b9c547cSRui Paulo 	wpa_hexdump_key(MSG_DEBUG, "WPA: PTK", tmp, ptk_len);
4405b9c547cSRui Paulo 
4415b9c547cSRui Paulo 	os_memcpy(ptk->kck, tmp, ptk->kck_len);
4425b9c547cSRui Paulo 	wpa_hexdump_key(MSG_DEBUG, "WPA: KCK", ptk->kck, ptk->kck_len);
4435b9c547cSRui Paulo 
4445b9c547cSRui Paulo 	os_memcpy(ptk->kek, tmp + ptk->kck_len, ptk->kek_len);
4455b9c547cSRui Paulo 	wpa_hexdump_key(MSG_DEBUG, "WPA: KEK", ptk->kek, ptk->kek_len);
4465b9c547cSRui Paulo 
4475b9c547cSRui Paulo 	os_memcpy(ptk->tk, tmp + ptk->kck_len + ptk->kek_len, ptk->tk_len);
4485b9c547cSRui Paulo 	wpa_hexdump_key(MSG_DEBUG, "WPA: TK", ptk->tk, ptk->tk_len);
4495b9c547cSRui Paulo 
450*85732ac8SCy Schubert 	ptk->kek2_len = 0;
451*85732ac8SCy Schubert 	ptk->kck2_len = 0;
452*85732ac8SCy Schubert 
4535b9c547cSRui Paulo 	os_memset(tmp, 0, sizeof(tmp));
4545b9c547cSRui Paulo 	return 0;
45539beb93cSSam Leffler }
45639beb93cSSam Leffler 
457*85732ac8SCy Schubert #ifdef CONFIG_FILS
458*85732ac8SCy Schubert 
459*85732ac8SCy Schubert int fils_rmsk_to_pmk(int akmp, const u8 *rmsk, size_t rmsk_len,
460*85732ac8SCy Schubert 		     const u8 *snonce, const u8 *anonce, const u8 *dh_ss,
461*85732ac8SCy Schubert 		     size_t dh_ss_len, u8 *pmk, size_t *pmk_len)
462*85732ac8SCy Schubert {
463*85732ac8SCy Schubert 	u8 nonces[2 * FILS_NONCE_LEN];
464*85732ac8SCy Schubert 	const u8 *addr[2];
465*85732ac8SCy Schubert 	size_t len[2];
466*85732ac8SCy Schubert 	size_t num_elem;
467*85732ac8SCy Schubert 	int res;
468*85732ac8SCy Schubert 
469*85732ac8SCy Schubert 	/* PMK = HMAC-Hash(SNonce || ANonce, rMSK [ || DHss ]) */
470*85732ac8SCy Schubert 	wpa_printf(MSG_DEBUG, "FILS: rMSK to PMK derivation");
471*85732ac8SCy Schubert 
472*85732ac8SCy Schubert 	if (wpa_key_mgmt_sha384(akmp))
473*85732ac8SCy Schubert 		*pmk_len = SHA384_MAC_LEN;
474*85732ac8SCy Schubert 	else if (wpa_key_mgmt_sha256(akmp))
475*85732ac8SCy Schubert 		*pmk_len = SHA256_MAC_LEN;
476*85732ac8SCy Schubert 	else
477*85732ac8SCy Schubert 		return -1;
478*85732ac8SCy Schubert 
479*85732ac8SCy Schubert 	wpa_hexdump_key(MSG_DEBUG, "FILS: rMSK", rmsk, rmsk_len);
480*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "FILS: SNonce", snonce, FILS_NONCE_LEN);
481*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "FILS: ANonce", anonce, FILS_NONCE_LEN);
482*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "FILS: DHss", dh_ss, dh_ss_len);
483*85732ac8SCy Schubert 
484*85732ac8SCy Schubert 	os_memcpy(nonces, snonce, FILS_NONCE_LEN);
485*85732ac8SCy Schubert 	os_memcpy(&nonces[FILS_NONCE_LEN], anonce, FILS_NONCE_LEN);
486*85732ac8SCy Schubert 	addr[0] = rmsk;
487*85732ac8SCy Schubert 	len[0] = rmsk_len;
488*85732ac8SCy Schubert 	num_elem = 1;
489*85732ac8SCy Schubert 	if (dh_ss) {
490*85732ac8SCy Schubert 		addr[1] = dh_ss;
491*85732ac8SCy Schubert 		len[1] = dh_ss_len;
492*85732ac8SCy Schubert 		num_elem++;
493*85732ac8SCy Schubert 	}
494*85732ac8SCy Schubert 	if (wpa_key_mgmt_sha384(akmp))
495*85732ac8SCy Schubert 		res = hmac_sha384_vector(nonces, 2 * FILS_NONCE_LEN, num_elem,
496*85732ac8SCy Schubert 					 addr, len, pmk);
497*85732ac8SCy Schubert 	else
498*85732ac8SCy Schubert 		res = hmac_sha256_vector(nonces, 2 * FILS_NONCE_LEN, num_elem,
499*85732ac8SCy Schubert 					 addr, len, pmk);
500*85732ac8SCy Schubert 	if (res == 0)
501*85732ac8SCy Schubert 		wpa_hexdump_key(MSG_DEBUG, "FILS: PMK", pmk, *pmk_len);
502*85732ac8SCy Schubert 	else
503*85732ac8SCy Schubert 		*pmk_len = 0;
504*85732ac8SCy Schubert 	return res;
505*85732ac8SCy Schubert }
506*85732ac8SCy Schubert 
507*85732ac8SCy Schubert 
508*85732ac8SCy Schubert int fils_pmkid_erp(int akmp, const u8 *reauth, size_t reauth_len,
509*85732ac8SCy Schubert 		   u8 *pmkid)
510*85732ac8SCy Schubert {
511*85732ac8SCy Schubert 	const u8 *addr[1];
512*85732ac8SCy Schubert 	size_t len[1];
513*85732ac8SCy Schubert 	u8 hash[SHA384_MAC_LEN];
514*85732ac8SCy Schubert 	int res;
515*85732ac8SCy Schubert 
516*85732ac8SCy Schubert 	/* PMKID = Truncate-128(Hash(EAP-Initiate/Reauth)) */
517*85732ac8SCy Schubert 	addr[0] = reauth;
518*85732ac8SCy Schubert 	len[0] = reauth_len;
519*85732ac8SCy Schubert 	if (wpa_key_mgmt_sha384(akmp))
520*85732ac8SCy Schubert 		res = sha384_vector(1, addr, len, hash);
521*85732ac8SCy Schubert 	else if (wpa_key_mgmt_sha256(akmp))
522*85732ac8SCy Schubert 		res = sha256_vector(1, addr, len, hash);
523*85732ac8SCy Schubert 	else
524*85732ac8SCy Schubert 		return -1;
525*85732ac8SCy Schubert 	if (res)
526*85732ac8SCy Schubert 		return res;
527*85732ac8SCy Schubert 	os_memcpy(pmkid, hash, PMKID_LEN);
528*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "FILS: PMKID", pmkid, PMKID_LEN);
529*85732ac8SCy Schubert 	return 0;
530*85732ac8SCy Schubert }
531*85732ac8SCy Schubert 
532*85732ac8SCy Schubert 
533*85732ac8SCy Schubert int fils_pmk_to_ptk(const u8 *pmk, size_t pmk_len, const u8 *spa, const u8 *aa,
534*85732ac8SCy Schubert 		    const u8 *snonce, const u8 *anonce, const u8 *dhss,
535*85732ac8SCy Schubert 		    size_t dhss_len, struct wpa_ptk *ptk,
536*85732ac8SCy Schubert 		    u8 *ick, size_t *ick_len, int akmp, int cipher,
537*85732ac8SCy Schubert 		    u8 *fils_ft, size_t *fils_ft_len)
538*85732ac8SCy Schubert {
539*85732ac8SCy Schubert 	u8 *data, *pos;
540*85732ac8SCy Schubert 	size_t data_len;
541*85732ac8SCy Schubert 	u8 tmp[FILS_ICK_MAX_LEN + WPA_KEK_MAX_LEN + WPA_TK_MAX_LEN +
542*85732ac8SCy Schubert 	       FILS_FT_MAX_LEN];
543*85732ac8SCy Schubert 	size_t key_data_len;
544*85732ac8SCy Schubert 	const char *label = "FILS PTK Derivation";
545*85732ac8SCy Schubert 	int ret = -1;
546*85732ac8SCy Schubert 
547*85732ac8SCy Schubert 	/*
548*85732ac8SCy Schubert 	 * FILS-Key-Data = PRF-X(PMK, "FILS PTK Derivation",
549*85732ac8SCy Schubert 	 *                       SPA || AA || SNonce || ANonce [ || DHss ])
550*85732ac8SCy Schubert 	 * ICK = L(FILS-Key-Data, 0, ICK_bits)
551*85732ac8SCy Schubert 	 * KEK = L(FILS-Key-Data, ICK_bits, KEK_bits)
552*85732ac8SCy Schubert 	 * TK = L(FILS-Key-Data, ICK_bits + KEK_bits, TK_bits)
553*85732ac8SCy Schubert 	 * If doing FT initial mobility domain association:
554*85732ac8SCy Schubert 	 * FILS-FT = L(FILS-Key-Data, ICK_bits + KEK_bits + TK_bits,
555*85732ac8SCy Schubert 	 *             FILS-FT_bits)
556*85732ac8SCy Schubert 	 */
557*85732ac8SCy Schubert 	data_len = 2 * ETH_ALEN + 2 * FILS_NONCE_LEN + dhss_len;
558*85732ac8SCy Schubert 	data = os_malloc(data_len);
559*85732ac8SCy Schubert 	if (!data)
560*85732ac8SCy Schubert 		goto err;
561*85732ac8SCy Schubert 	pos = data;
562*85732ac8SCy Schubert 	os_memcpy(pos, spa, ETH_ALEN);
563*85732ac8SCy Schubert 	pos += ETH_ALEN;
564*85732ac8SCy Schubert 	os_memcpy(pos, aa, ETH_ALEN);
565*85732ac8SCy Schubert 	pos += ETH_ALEN;
566*85732ac8SCy Schubert 	os_memcpy(pos, snonce, FILS_NONCE_LEN);
567*85732ac8SCy Schubert 	pos += FILS_NONCE_LEN;
568*85732ac8SCy Schubert 	os_memcpy(pos, anonce, FILS_NONCE_LEN);
569*85732ac8SCy Schubert 	pos += FILS_NONCE_LEN;
570*85732ac8SCy Schubert 	if (dhss)
571*85732ac8SCy Schubert 		os_memcpy(pos, dhss, dhss_len);
572*85732ac8SCy Schubert 
573*85732ac8SCy Schubert 	ptk->kck_len = 0;
574*85732ac8SCy Schubert 	ptk->kek_len = wpa_kek_len(akmp, pmk_len);
575*85732ac8SCy Schubert 	ptk->tk_len = wpa_cipher_key_len(cipher);
576*85732ac8SCy Schubert 	if (wpa_key_mgmt_sha384(akmp))
577*85732ac8SCy Schubert 		*ick_len = 48;
578*85732ac8SCy Schubert 	else if (wpa_key_mgmt_sha256(akmp))
579*85732ac8SCy Schubert 		*ick_len = 32;
580*85732ac8SCy Schubert 	else
581*85732ac8SCy Schubert 		goto err;
582*85732ac8SCy Schubert 	key_data_len = *ick_len + ptk->kek_len + ptk->tk_len;
583*85732ac8SCy Schubert 
584*85732ac8SCy Schubert 	if (fils_ft && fils_ft_len) {
585*85732ac8SCy Schubert 		if (akmp == WPA_KEY_MGMT_FT_FILS_SHA256) {
586*85732ac8SCy Schubert 			*fils_ft_len = 32;
587*85732ac8SCy Schubert 		} else if (akmp == WPA_KEY_MGMT_FT_FILS_SHA384) {
588*85732ac8SCy Schubert 			*fils_ft_len = 48;
589*85732ac8SCy Schubert 		} else {
590*85732ac8SCy Schubert 			*fils_ft_len = 0;
591*85732ac8SCy Schubert 			fils_ft = NULL;
592*85732ac8SCy Schubert 		}
593*85732ac8SCy Schubert 		key_data_len += *fils_ft_len;
594*85732ac8SCy Schubert 	}
595*85732ac8SCy Schubert 
596*85732ac8SCy Schubert 	if (wpa_key_mgmt_sha384(akmp)) {
597*85732ac8SCy Schubert 		wpa_printf(MSG_DEBUG, "FILS: PTK derivation using PRF(SHA384)");
598*85732ac8SCy Schubert 		if (sha384_prf(pmk, pmk_len, label, data, data_len,
599*85732ac8SCy Schubert 			       tmp, key_data_len) < 0)
600*85732ac8SCy Schubert 			goto err;
601*85732ac8SCy Schubert 	} else {
602*85732ac8SCy Schubert 		wpa_printf(MSG_DEBUG, "FILS: PTK derivation using PRF(SHA256)");
603*85732ac8SCy Schubert 		if (sha256_prf(pmk, pmk_len, label, data, data_len,
604*85732ac8SCy Schubert 			       tmp, key_data_len) < 0)
605*85732ac8SCy Schubert 			goto err;
606*85732ac8SCy Schubert 	}
607*85732ac8SCy Schubert 
608*85732ac8SCy Schubert 	wpa_printf(MSG_DEBUG, "FILS: PTK derivation - SPA=" MACSTR
609*85732ac8SCy Schubert 		   " AA=" MACSTR, MAC2STR(spa), MAC2STR(aa));
610*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "FILS: SNonce", snonce, FILS_NONCE_LEN);
611*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "FILS: ANonce", anonce, FILS_NONCE_LEN);
612*85732ac8SCy Schubert 	if (dhss)
613*85732ac8SCy Schubert 		wpa_hexdump_key(MSG_DEBUG, "FILS: DHss", dhss, dhss_len);
614*85732ac8SCy Schubert 	wpa_hexdump_key(MSG_DEBUG, "FILS: PMK", pmk, pmk_len);
615*85732ac8SCy Schubert 	wpa_hexdump_key(MSG_DEBUG, "FILS: FILS-Key-Data", tmp, key_data_len);
616*85732ac8SCy Schubert 
617*85732ac8SCy Schubert 	os_memcpy(ick, tmp, *ick_len);
618*85732ac8SCy Schubert 	wpa_hexdump_key(MSG_DEBUG, "FILS: ICK", ick, *ick_len);
619*85732ac8SCy Schubert 
620*85732ac8SCy Schubert 	os_memcpy(ptk->kek, tmp + *ick_len, ptk->kek_len);
621*85732ac8SCy Schubert 	wpa_hexdump_key(MSG_DEBUG, "FILS: KEK", ptk->kek, ptk->kek_len);
622*85732ac8SCy Schubert 
623*85732ac8SCy Schubert 	os_memcpy(ptk->tk, tmp + *ick_len + ptk->kek_len, ptk->tk_len);
624*85732ac8SCy Schubert 	wpa_hexdump_key(MSG_DEBUG, "FILS: TK", ptk->tk, ptk->tk_len);
625*85732ac8SCy Schubert 
626*85732ac8SCy Schubert 	if (fils_ft && fils_ft_len) {
627*85732ac8SCy Schubert 		os_memcpy(fils_ft, tmp + *ick_len + ptk->kek_len + ptk->tk_len,
628*85732ac8SCy Schubert 			  *fils_ft_len);
629*85732ac8SCy Schubert 		wpa_hexdump_key(MSG_DEBUG, "FILS: FILS-FT",
630*85732ac8SCy Schubert 				fils_ft, *fils_ft_len);
631*85732ac8SCy Schubert 	}
632*85732ac8SCy Schubert 
633*85732ac8SCy Schubert 	ptk->kek2_len = 0;
634*85732ac8SCy Schubert 	ptk->kck2_len = 0;
635*85732ac8SCy Schubert 
636*85732ac8SCy Schubert 	os_memset(tmp, 0, sizeof(tmp));
637*85732ac8SCy Schubert 	ret = 0;
638*85732ac8SCy Schubert err:
639*85732ac8SCy Schubert 	bin_clear_free(data, data_len);
640*85732ac8SCy Schubert 	return ret;
641*85732ac8SCy Schubert }
642*85732ac8SCy Schubert 
643*85732ac8SCy Schubert 
644*85732ac8SCy Schubert int fils_key_auth_sk(const u8 *ick, size_t ick_len, const u8 *snonce,
645*85732ac8SCy Schubert 		     const u8 *anonce, const u8 *sta_addr, const u8 *bssid,
646*85732ac8SCy Schubert 		     const u8 *g_sta, size_t g_sta_len,
647*85732ac8SCy Schubert 		     const u8 *g_ap, size_t g_ap_len,
648*85732ac8SCy Schubert 		     int akmp, u8 *key_auth_sta, u8 *key_auth_ap,
649*85732ac8SCy Schubert 		     size_t *key_auth_len)
650*85732ac8SCy Schubert {
651*85732ac8SCy Schubert 	const u8 *addr[6];
652*85732ac8SCy Schubert 	size_t len[6];
653*85732ac8SCy Schubert 	size_t num_elem = 4;
654*85732ac8SCy Schubert 	int res;
655*85732ac8SCy Schubert 
656*85732ac8SCy Schubert 	wpa_printf(MSG_DEBUG, "FILS: Key-Auth derivation: STA-MAC=" MACSTR
657*85732ac8SCy Schubert 		   " AP-BSSID=" MACSTR, MAC2STR(sta_addr), MAC2STR(bssid));
658*85732ac8SCy Schubert 	wpa_hexdump_key(MSG_DEBUG, "FILS: ICK", ick, ick_len);
659*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "FILS: SNonce", snonce, FILS_NONCE_LEN);
660*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "FILS: ANonce", anonce, FILS_NONCE_LEN);
661*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "FILS: gSTA", g_sta, g_sta_len);
662*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "FILS: gAP", g_ap, g_ap_len);
663*85732ac8SCy Schubert 
664*85732ac8SCy Schubert 	/*
665*85732ac8SCy Schubert 	 * For (Re)Association Request frame (STA->AP):
666*85732ac8SCy Schubert 	 * Key-Auth = HMAC-Hash(ICK, SNonce || ANonce || STA-MAC || AP-BSSID
667*85732ac8SCy Schubert 	 *                      [ || gSTA || gAP ])
668*85732ac8SCy Schubert 	 */
669*85732ac8SCy Schubert 	addr[0] = snonce;
670*85732ac8SCy Schubert 	len[0] = FILS_NONCE_LEN;
671*85732ac8SCy Schubert 	addr[1] = anonce;
672*85732ac8SCy Schubert 	len[1] = FILS_NONCE_LEN;
673*85732ac8SCy Schubert 	addr[2] = sta_addr;
674*85732ac8SCy Schubert 	len[2] = ETH_ALEN;
675*85732ac8SCy Schubert 	addr[3] = bssid;
676*85732ac8SCy Schubert 	len[3] = ETH_ALEN;
677*85732ac8SCy Schubert 	if (g_sta && g_ap_len && g_ap && g_ap_len) {
678*85732ac8SCy Schubert 		addr[4] = g_sta;
679*85732ac8SCy Schubert 		len[4] = g_sta_len;
680*85732ac8SCy Schubert 		addr[5] = g_ap;
681*85732ac8SCy Schubert 		len[5] = g_ap_len;
682*85732ac8SCy Schubert 		num_elem = 6;
683*85732ac8SCy Schubert 	}
684*85732ac8SCy Schubert 
685*85732ac8SCy Schubert 	if (wpa_key_mgmt_sha384(akmp)) {
686*85732ac8SCy Schubert 		*key_auth_len = 48;
687*85732ac8SCy Schubert 		res = hmac_sha384_vector(ick, ick_len, num_elem, addr, len,
688*85732ac8SCy Schubert 					 key_auth_sta);
689*85732ac8SCy Schubert 	} else if (wpa_key_mgmt_sha256(akmp)) {
690*85732ac8SCy Schubert 		*key_auth_len = 32;
691*85732ac8SCy Schubert 		res = hmac_sha256_vector(ick, ick_len, num_elem, addr, len,
692*85732ac8SCy Schubert 					 key_auth_sta);
693*85732ac8SCy Schubert 	} else {
694*85732ac8SCy Schubert 		return -1;
695*85732ac8SCy Schubert 	}
696*85732ac8SCy Schubert 	if (res < 0)
697*85732ac8SCy Schubert 		return res;
698*85732ac8SCy Schubert 
699*85732ac8SCy Schubert 	/*
700*85732ac8SCy Schubert 	 * For (Re)Association Response frame (AP->STA):
701*85732ac8SCy Schubert 	 * Key-Auth = HMAC-Hash(ICK, ANonce || SNonce || AP-BSSID || STA-MAC
702*85732ac8SCy Schubert 	 *                      [ || gAP || gSTA ])
703*85732ac8SCy Schubert 	 */
704*85732ac8SCy Schubert 	addr[0] = anonce;
705*85732ac8SCy Schubert 	addr[1] = snonce;
706*85732ac8SCy Schubert 	addr[2] = bssid;
707*85732ac8SCy Schubert 	addr[3] = sta_addr;
708*85732ac8SCy Schubert 	if (g_sta && g_ap_len && g_ap && g_ap_len) {
709*85732ac8SCy Schubert 		addr[4] = g_ap;
710*85732ac8SCy Schubert 		len[4] = g_ap_len;
711*85732ac8SCy Schubert 		addr[5] = g_sta;
712*85732ac8SCy Schubert 		len[5] = g_sta_len;
713*85732ac8SCy Schubert 	}
714*85732ac8SCy Schubert 
715*85732ac8SCy Schubert 	if (wpa_key_mgmt_sha384(akmp))
716*85732ac8SCy Schubert 		res = hmac_sha384_vector(ick, ick_len, num_elem, addr, len,
717*85732ac8SCy Schubert 					 key_auth_ap);
718*85732ac8SCy Schubert 	else if (wpa_key_mgmt_sha256(akmp))
719*85732ac8SCy Schubert 		res = hmac_sha256_vector(ick, ick_len, num_elem, addr, len,
720*85732ac8SCy Schubert 					 key_auth_ap);
721*85732ac8SCy Schubert 	if (res < 0)
722*85732ac8SCy Schubert 		return res;
723*85732ac8SCy Schubert 
724*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "FILS: Key-Auth (STA)",
725*85732ac8SCy Schubert 		    key_auth_sta, *key_auth_len);
726*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "FILS: Key-Auth (AP)",
727*85732ac8SCy Schubert 		    key_auth_ap, *key_auth_len);
728*85732ac8SCy Schubert 
729*85732ac8SCy Schubert 	return 0;
730*85732ac8SCy Schubert }
731*85732ac8SCy Schubert 
732*85732ac8SCy Schubert #endif /* CONFIG_FILS */
733*85732ac8SCy Schubert 
73439beb93cSSam Leffler 
73539beb93cSSam Leffler #ifdef CONFIG_IEEE80211R
7365b9c547cSRui Paulo int wpa_ft_mic(const u8 *kck, size_t kck_len, const u8 *sta_addr,
7375b9c547cSRui Paulo 	       const u8 *ap_addr, u8 transaction_seqnum,
7385b9c547cSRui Paulo 	       const u8 *mdie, size_t mdie_len,
73939beb93cSSam Leffler 	       const u8 *ftie, size_t ftie_len,
74039beb93cSSam Leffler 	       const u8 *rsnie, size_t rsnie_len,
74139beb93cSSam Leffler 	       const u8 *ric, size_t ric_len, u8 *mic)
74239beb93cSSam Leffler {
743325151a3SRui Paulo 	const u8 *addr[9];
744325151a3SRui Paulo 	size_t len[9];
745325151a3SRui Paulo 	size_t i, num_elem = 0;
746*85732ac8SCy Schubert 	u8 zero_mic[24];
747*85732ac8SCy Schubert 	size_t mic_len, fte_fixed_len;
74839beb93cSSam Leffler 
749*85732ac8SCy Schubert 	if (kck_len == 16) {
750*85732ac8SCy Schubert 		mic_len = 16;
751*85732ac8SCy Schubert #ifdef CONFIG_SHA384
752*85732ac8SCy Schubert 	} else if (kck_len == 24) {
753*85732ac8SCy Schubert 		mic_len = 24;
754*85732ac8SCy Schubert #endif /* CONFIG_SHA384 */
755*85732ac8SCy Schubert 	} else {
7565b9c547cSRui Paulo 		wpa_printf(MSG_WARNING, "FT: Unsupported KCK length %u",
7575b9c547cSRui Paulo 			   (unsigned int) kck_len);
7585b9c547cSRui Paulo 		return -1;
7595b9c547cSRui Paulo 	}
7605b9c547cSRui Paulo 
761*85732ac8SCy Schubert 	fte_fixed_len = sizeof(struct rsn_ftie) - 16 + mic_len;
762*85732ac8SCy Schubert 
763325151a3SRui Paulo 	addr[num_elem] = sta_addr;
764325151a3SRui Paulo 	len[num_elem] = ETH_ALEN;
765325151a3SRui Paulo 	num_elem++;
76639beb93cSSam Leffler 
767325151a3SRui Paulo 	addr[num_elem] = ap_addr;
768325151a3SRui Paulo 	len[num_elem] = ETH_ALEN;
769325151a3SRui Paulo 	num_elem++;
770325151a3SRui Paulo 
771325151a3SRui Paulo 	addr[num_elem] = &transaction_seqnum;
772325151a3SRui Paulo 	len[num_elem] = 1;
773325151a3SRui Paulo 	num_elem++;
774325151a3SRui Paulo 
77539beb93cSSam Leffler 	if (rsnie) {
776325151a3SRui Paulo 		addr[num_elem] = rsnie;
777325151a3SRui Paulo 		len[num_elem] = rsnie_len;
778325151a3SRui Paulo 		num_elem++;
77939beb93cSSam Leffler 	}
78039beb93cSSam Leffler 	if (mdie) {
781325151a3SRui Paulo 		addr[num_elem] = mdie;
782325151a3SRui Paulo 		len[num_elem] = mdie_len;
783325151a3SRui Paulo 		num_elem++;
78439beb93cSSam Leffler 	}
78539beb93cSSam Leffler 	if (ftie) {
786*85732ac8SCy Schubert 		if (ftie_len < 2 + fte_fixed_len)
78739beb93cSSam Leffler 			return -1;
788325151a3SRui Paulo 
789325151a3SRui Paulo 		/* IE hdr and mic_control */
790325151a3SRui Paulo 		addr[num_elem] = ftie;
791325151a3SRui Paulo 		len[num_elem] = 2 + 2;
792325151a3SRui Paulo 		num_elem++;
793325151a3SRui Paulo 
794325151a3SRui Paulo 		/* MIC field with all zeros */
795*85732ac8SCy Schubert 		os_memset(zero_mic, 0, mic_len);
796325151a3SRui Paulo 		addr[num_elem] = zero_mic;
797*85732ac8SCy Schubert 		len[num_elem] = mic_len;
798325151a3SRui Paulo 		num_elem++;
799325151a3SRui Paulo 
800325151a3SRui Paulo 		/* Rest of FTIE */
801*85732ac8SCy Schubert 		addr[num_elem] = ftie + 2 + 2 + mic_len;
802*85732ac8SCy Schubert 		len[num_elem] = ftie_len - (2 + 2 + mic_len);
803325151a3SRui Paulo 		num_elem++;
80439beb93cSSam Leffler 	}
80539beb93cSSam Leffler 	if (ric) {
806325151a3SRui Paulo 		addr[num_elem] = ric;
807325151a3SRui Paulo 		len[num_elem] = ric_len;
808325151a3SRui Paulo 		num_elem++;
80939beb93cSSam Leffler 	}
81039beb93cSSam Leffler 
811325151a3SRui Paulo 	for (i = 0; i < num_elem; i++)
812325151a3SRui Paulo 		wpa_hexdump(MSG_MSGDUMP, "FT: MIC data", addr[i], len[i]);
813*85732ac8SCy Schubert #ifdef CONFIG_SHA384
814*85732ac8SCy Schubert 	if (kck_len == 24) {
815*85732ac8SCy Schubert 		u8 hash[SHA384_MAC_LEN];
816*85732ac8SCy Schubert 
817*85732ac8SCy Schubert 		if (hmac_sha384_vector(kck, kck_len, num_elem, addr, len, hash))
818*85732ac8SCy Schubert 			return -1;
819*85732ac8SCy Schubert 		os_memcpy(mic, hash, 24);
820*85732ac8SCy Schubert 	}
821*85732ac8SCy Schubert #endif /* CONFIG_SHA384 */
822*85732ac8SCy Schubert 	if (kck_len == 16 &&
823*85732ac8SCy Schubert 	    omac1_aes_128_vector(kck, num_elem, addr, len, mic))
82439beb93cSSam Leffler 		return -1;
82539beb93cSSam Leffler 
82639beb93cSSam Leffler 	return 0;
82739beb93cSSam Leffler }
828f05cddf9SRui Paulo 
829f05cddf9SRui Paulo 
830f05cddf9SRui Paulo static int wpa_ft_parse_ftie(const u8 *ie, size_t ie_len,
831*85732ac8SCy Schubert 			     struct wpa_ft_ies *parse, int use_sha384)
832f05cddf9SRui Paulo {
833f05cddf9SRui Paulo 	const u8 *end, *pos;
834f05cddf9SRui Paulo 
835f05cddf9SRui Paulo 	parse->ftie = ie;
836f05cddf9SRui Paulo 	parse->ftie_len = ie_len;
837f05cddf9SRui Paulo 
838*85732ac8SCy Schubert 	pos = ie + (use_sha384 ? sizeof(struct rsn_ftie_sha384) :
839*85732ac8SCy Schubert 		    sizeof(struct rsn_ftie));
840f05cddf9SRui Paulo 	end = ie + ie_len;
841*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "FT: Parse FTE subelements", pos, end - pos);
842f05cddf9SRui Paulo 
843780fb4a2SCy Schubert 	while (end - pos >= 2) {
844780fb4a2SCy Schubert 		u8 id, len;
845780fb4a2SCy Schubert 
846780fb4a2SCy Schubert 		id = *pos++;
847780fb4a2SCy Schubert 		len = *pos++;
848*85732ac8SCy Schubert 		if (len > end - pos) {
849*85732ac8SCy Schubert 			wpa_printf(MSG_DEBUG, "FT: Truncated subelement");
850780fb4a2SCy Schubert 			break;
851*85732ac8SCy Schubert 		}
852780fb4a2SCy Schubert 
853780fb4a2SCy Schubert 		switch (id) {
854f05cddf9SRui Paulo 		case FTIE_SUBELEM_R1KH_ID:
855780fb4a2SCy Schubert 			if (len != FT_R1KH_ID_LEN) {
856780fb4a2SCy Schubert 				wpa_printf(MSG_DEBUG,
857780fb4a2SCy Schubert 					   "FT: Invalid R1KH-ID length in FTIE: %d",
858780fb4a2SCy Schubert 					   len);
859f05cddf9SRui Paulo 				return -1;
860f05cddf9SRui Paulo 			}
861780fb4a2SCy Schubert 			parse->r1kh_id = pos;
862f05cddf9SRui Paulo 			break;
863f05cddf9SRui Paulo 		case FTIE_SUBELEM_GTK:
864780fb4a2SCy Schubert 			parse->gtk = pos;
865780fb4a2SCy Schubert 			parse->gtk_len = len;
866f05cddf9SRui Paulo 			break;
867f05cddf9SRui Paulo 		case FTIE_SUBELEM_R0KH_ID:
868780fb4a2SCy Schubert 			if (len < 1 || len > FT_R0KH_ID_MAX_LEN) {
869780fb4a2SCy Schubert 				wpa_printf(MSG_DEBUG,
870780fb4a2SCy Schubert 					   "FT: Invalid R0KH-ID length in FTIE: %d",
871780fb4a2SCy Schubert 					   len);
872f05cddf9SRui Paulo 				return -1;
873f05cddf9SRui Paulo 			}
874780fb4a2SCy Schubert 			parse->r0kh_id = pos;
875780fb4a2SCy Schubert 			parse->r0kh_id_len = len;
876f05cddf9SRui Paulo 			break;
877f05cddf9SRui Paulo #ifdef CONFIG_IEEE80211W
878f05cddf9SRui Paulo 		case FTIE_SUBELEM_IGTK:
879780fb4a2SCy Schubert 			parse->igtk = pos;
880780fb4a2SCy Schubert 			parse->igtk_len = len;
881f05cddf9SRui Paulo 			break;
882f05cddf9SRui Paulo #endif /* CONFIG_IEEE80211W */
883*85732ac8SCy Schubert 		default:
884*85732ac8SCy Schubert 			wpa_printf(MSG_DEBUG, "FT: Unknown subelem id %u", id);
885*85732ac8SCy Schubert 			break;
886f05cddf9SRui Paulo 		}
887f05cddf9SRui Paulo 
888780fb4a2SCy Schubert 		pos += len;
889f05cddf9SRui Paulo 	}
890f05cddf9SRui Paulo 
891f05cddf9SRui Paulo 	return 0;
892f05cddf9SRui Paulo }
893f05cddf9SRui Paulo 
894f05cddf9SRui Paulo 
895f05cddf9SRui Paulo int wpa_ft_parse_ies(const u8 *ies, size_t ies_len,
896*85732ac8SCy Schubert 		     struct wpa_ft_ies *parse, int use_sha384)
897f05cddf9SRui Paulo {
898f05cddf9SRui Paulo 	const u8 *end, *pos;
899f05cddf9SRui Paulo 	struct wpa_ie_data data;
900f05cddf9SRui Paulo 	int ret;
901f05cddf9SRui Paulo 	const struct rsn_ftie *ftie;
902f05cddf9SRui Paulo 	int prot_ie_count = 0;
903*85732ac8SCy Schubert 	int update_use_sha384 = 0;
904*85732ac8SCy Schubert 
905*85732ac8SCy Schubert 	if (use_sha384 < 0) {
906*85732ac8SCy Schubert 		use_sha384 = 0;
907*85732ac8SCy Schubert 		update_use_sha384 = 1;
908*85732ac8SCy Schubert 	}
909f05cddf9SRui Paulo 
910f05cddf9SRui Paulo 	os_memset(parse, 0, sizeof(*parse));
911f05cddf9SRui Paulo 	if (ies == NULL)
912f05cddf9SRui Paulo 		return 0;
913f05cddf9SRui Paulo 
914f05cddf9SRui Paulo 	pos = ies;
915f05cddf9SRui Paulo 	end = ies + ies_len;
916780fb4a2SCy Schubert 	while (end - pos >= 2) {
917780fb4a2SCy Schubert 		u8 id, len;
918780fb4a2SCy Schubert 
919780fb4a2SCy Schubert 		id = *pos++;
920780fb4a2SCy Schubert 		len = *pos++;
921780fb4a2SCy Schubert 		if (len > end - pos)
922780fb4a2SCy Schubert 			break;
923780fb4a2SCy Schubert 
924780fb4a2SCy Schubert 		switch (id) {
925f05cddf9SRui Paulo 		case WLAN_EID_RSN:
926*85732ac8SCy Schubert 			wpa_hexdump(MSG_DEBUG, "FT: RSNE", pos, len);
927780fb4a2SCy Schubert 			parse->rsn = pos;
928780fb4a2SCy Schubert 			parse->rsn_len = len;
929f05cddf9SRui Paulo 			ret = wpa_parse_wpa_ie_rsn(parse->rsn - 2,
930f05cddf9SRui Paulo 						   parse->rsn_len + 2,
931f05cddf9SRui Paulo 						   &data);
932f05cddf9SRui Paulo 			if (ret < 0) {
933f05cddf9SRui Paulo 				wpa_printf(MSG_DEBUG, "FT: Failed to parse "
934f05cddf9SRui Paulo 					   "RSN IE: %d", ret);
935f05cddf9SRui Paulo 				return -1;
936f05cddf9SRui Paulo 			}
937f05cddf9SRui Paulo 			if (data.num_pmkid == 1 && data.pmkid)
938f05cddf9SRui Paulo 				parse->rsn_pmkid = data.pmkid;
939*85732ac8SCy Schubert 			parse->key_mgmt = data.key_mgmt;
940*85732ac8SCy Schubert 			parse->pairwise_cipher = data.pairwise_cipher;
941*85732ac8SCy Schubert 			if (update_use_sha384) {
942*85732ac8SCy Schubert 				use_sha384 =
943*85732ac8SCy Schubert 					wpa_key_mgmt_sha384(parse->key_mgmt);
944*85732ac8SCy Schubert 				update_use_sha384 = 0;
945*85732ac8SCy Schubert 			}
946f05cddf9SRui Paulo 			break;
947f05cddf9SRui Paulo 		case WLAN_EID_MOBILITY_DOMAIN:
948*85732ac8SCy Schubert 			wpa_hexdump(MSG_DEBUG, "FT: MDE", pos, len);
949780fb4a2SCy Schubert 			if (len < sizeof(struct rsn_mdie))
950325151a3SRui Paulo 				return -1;
951780fb4a2SCy Schubert 			parse->mdie = pos;
952780fb4a2SCy Schubert 			parse->mdie_len = len;
953f05cddf9SRui Paulo 			break;
954f05cddf9SRui Paulo 		case WLAN_EID_FAST_BSS_TRANSITION:
955*85732ac8SCy Schubert 			wpa_hexdump(MSG_DEBUG, "FT: FTE", pos, len);
956*85732ac8SCy Schubert 			if (use_sha384) {
957*85732ac8SCy Schubert 				const struct rsn_ftie_sha384 *ftie_sha384;
958*85732ac8SCy Schubert 
959*85732ac8SCy Schubert 				if (len < sizeof(*ftie_sha384))
960*85732ac8SCy Schubert 					return -1;
961*85732ac8SCy Schubert 				ftie_sha384 =
962*85732ac8SCy Schubert 					(const struct rsn_ftie_sha384 *) pos;
963*85732ac8SCy Schubert 				wpa_hexdump(MSG_DEBUG, "FT: FTE-MIC Control",
964*85732ac8SCy Schubert 					    ftie_sha384->mic_control, 2);
965*85732ac8SCy Schubert 				wpa_hexdump(MSG_DEBUG, "FT: FTE-MIC",
966*85732ac8SCy Schubert 					    ftie_sha384->mic,
967*85732ac8SCy Schubert 					    sizeof(ftie_sha384->mic));
968*85732ac8SCy Schubert 				wpa_hexdump(MSG_DEBUG, "FT: FTE-ANonce",
969*85732ac8SCy Schubert 					    ftie_sha384->anonce,
970*85732ac8SCy Schubert 					    WPA_NONCE_LEN);
971*85732ac8SCy Schubert 				wpa_hexdump(MSG_DEBUG, "FT: FTE-SNonce",
972*85732ac8SCy Schubert 					    ftie_sha384->snonce,
973*85732ac8SCy Schubert 					    WPA_NONCE_LEN);
974*85732ac8SCy Schubert 				prot_ie_count = ftie_sha384->mic_control[1];
975*85732ac8SCy Schubert 				if (wpa_ft_parse_ftie(pos, len, parse, 1) < 0)
976*85732ac8SCy Schubert 					return -1;
977*85732ac8SCy Schubert 				break;
978*85732ac8SCy Schubert 			}
979*85732ac8SCy Schubert 
980780fb4a2SCy Schubert 			if (len < sizeof(*ftie))
981f05cddf9SRui Paulo 				return -1;
982780fb4a2SCy Schubert 			ftie = (const struct rsn_ftie *) pos;
983*85732ac8SCy Schubert 			wpa_hexdump(MSG_DEBUG, "FT: FTE-MIC Control",
984*85732ac8SCy Schubert 				    ftie->mic_control, 2);
985*85732ac8SCy Schubert 			wpa_hexdump(MSG_DEBUG, "FT: FTE-MIC",
986*85732ac8SCy Schubert 				    ftie->mic, sizeof(ftie->mic));
987*85732ac8SCy Schubert 			wpa_hexdump(MSG_DEBUG, "FT: FTE-ANonce",
988*85732ac8SCy Schubert 				    ftie->anonce, WPA_NONCE_LEN);
989*85732ac8SCy Schubert 			wpa_hexdump(MSG_DEBUG, "FT: FTE-SNonce",
990*85732ac8SCy Schubert 				    ftie->snonce, WPA_NONCE_LEN);
991f05cddf9SRui Paulo 			prot_ie_count = ftie->mic_control[1];
992*85732ac8SCy Schubert 			if (wpa_ft_parse_ftie(pos, len, parse, 0) < 0)
993f05cddf9SRui Paulo 				return -1;
994f05cddf9SRui Paulo 			break;
995f05cddf9SRui Paulo 		case WLAN_EID_TIMEOUT_INTERVAL:
996*85732ac8SCy Schubert 			wpa_hexdump(MSG_DEBUG, "FT: Timeout Interval",
997*85732ac8SCy Schubert 				    pos, len);
998780fb4a2SCy Schubert 			if (len != 5)
999325151a3SRui Paulo 				break;
1000780fb4a2SCy Schubert 			parse->tie = pos;
1001780fb4a2SCy Schubert 			parse->tie_len = len;
1002f05cddf9SRui Paulo 			break;
1003f05cddf9SRui Paulo 		case WLAN_EID_RIC_DATA:
1004f05cddf9SRui Paulo 			if (parse->ric == NULL)
1005780fb4a2SCy Schubert 				parse->ric = pos - 2;
1006f05cddf9SRui Paulo 			break;
1007f05cddf9SRui Paulo 		}
1008f05cddf9SRui Paulo 
1009780fb4a2SCy Schubert 		pos += len;
1010f05cddf9SRui Paulo 	}
1011f05cddf9SRui Paulo 
1012f05cddf9SRui Paulo 	if (prot_ie_count == 0)
1013f05cddf9SRui Paulo 		return 0; /* no MIC */
1014f05cddf9SRui Paulo 
1015f05cddf9SRui Paulo 	/*
1016f05cddf9SRui Paulo 	 * Check that the protected IE count matches with IEs included in the
1017f05cddf9SRui Paulo 	 * frame.
1018f05cddf9SRui Paulo 	 */
1019f05cddf9SRui Paulo 	if (parse->rsn)
1020f05cddf9SRui Paulo 		prot_ie_count--;
1021f05cddf9SRui Paulo 	if (parse->mdie)
1022f05cddf9SRui Paulo 		prot_ie_count--;
1023f05cddf9SRui Paulo 	if (parse->ftie)
1024f05cddf9SRui Paulo 		prot_ie_count--;
1025f05cddf9SRui Paulo 	if (prot_ie_count < 0) {
1026f05cddf9SRui Paulo 		wpa_printf(MSG_DEBUG, "FT: Some required IEs not included in "
1027f05cddf9SRui Paulo 			   "the protected IE count");
1028f05cddf9SRui Paulo 		return -1;
1029f05cddf9SRui Paulo 	}
1030f05cddf9SRui Paulo 
1031f05cddf9SRui Paulo 	if (prot_ie_count == 0 && parse->ric) {
1032f05cddf9SRui Paulo 		wpa_printf(MSG_DEBUG, "FT: RIC IE(s) in the frame, but not "
1033f05cddf9SRui Paulo 			   "included in protected IE count");
1034f05cddf9SRui Paulo 		return -1;
1035f05cddf9SRui Paulo 	}
1036f05cddf9SRui Paulo 
1037f05cddf9SRui Paulo 	/* Determine the end of the RIC IE(s) */
1038780fb4a2SCy Schubert 	if (parse->ric) {
1039f05cddf9SRui Paulo 		pos = parse->ric;
1040780fb4a2SCy Schubert 		while (end - pos >= 2 && 2 + pos[1] <= end - pos &&
1041f05cddf9SRui Paulo 		       prot_ie_count) {
1042f05cddf9SRui Paulo 			prot_ie_count--;
1043f05cddf9SRui Paulo 			pos += 2 + pos[1];
1044f05cddf9SRui Paulo 		}
1045f05cddf9SRui Paulo 		parse->ric_len = pos - parse->ric;
1046780fb4a2SCy Schubert 	}
1047f05cddf9SRui Paulo 	if (prot_ie_count) {
1048f05cddf9SRui Paulo 		wpa_printf(MSG_DEBUG, "FT: %d protected IEs missing from "
1049f05cddf9SRui Paulo 			   "frame", (int) prot_ie_count);
1050f05cddf9SRui Paulo 		return -1;
1051f05cddf9SRui Paulo 	}
1052f05cddf9SRui Paulo 
1053f05cddf9SRui Paulo 	return 0;
1054f05cddf9SRui Paulo }
105539beb93cSSam Leffler #endif /* CONFIG_IEEE80211R */
105639beb93cSSam Leffler 
105739beb93cSSam Leffler 
105839beb93cSSam Leffler static int rsn_selector_to_bitfield(const u8 *s)
105939beb93cSSam Leffler {
106039beb93cSSam Leffler 	if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_NONE)
106139beb93cSSam Leffler 		return WPA_CIPHER_NONE;
106239beb93cSSam Leffler 	if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_TKIP)
106339beb93cSSam Leffler 		return WPA_CIPHER_TKIP;
106439beb93cSSam Leffler 	if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_CCMP)
106539beb93cSSam Leffler 		return WPA_CIPHER_CCMP;
106639beb93cSSam Leffler #ifdef CONFIG_IEEE80211W
106739beb93cSSam Leffler 	if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_AES_128_CMAC)
106839beb93cSSam Leffler 		return WPA_CIPHER_AES_128_CMAC;
106939beb93cSSam Leffler #endif /* CONFIG_IEEE80211W */
1070f05cddf9SRui Paulo 	if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_GCMP)
1071f05cddf9SRui Paulo 		return WPA_CIPHER_GCMP;
10725b9c547cSRui Paulo 	if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_CCMP_256)
10735b9c547cSRui Paulo 		return WPA_CIPHER_CCMP_256;
10745b9c547cSRui Paulo 	if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_GCMP_256)
10755b9c547cSRui Paulo 		return WPA_CIPHER_GCMP_256;
10765b9c547cSRui Paulo 	if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_BIP_GMAC_128)
10775b9c547cSRui Paulo 		return WPA_CIPHER_BIP_GMAC_128;
10785b9c547cSRui Paulo 	if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_BIP_GMAC_256)
10795b9c547cSRui Paulo 		return WPA_CIPHER_BIP_GMAC_256;
10805b9c547cSRui Paulo 	if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_BIP_CMAC_256)
10815b9c547cSRui Paulo 		return WPA_CIPHER_BIP_CMAC_256;
10825b9c547cSRui Paulo 	if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_NO_GROUP_ADDRESSED)
10835b9c547cSRui Paulo 		return WPA_CIPHER_GTK_NOT_USED;
108439beb93cSSam Leffler 	return 0;
108539beb93cSSam Leffler }
108639beb93cSSam Leffler 
108739beb93cSSam Leffler 
108839beb93cSSam Leffler static int rsn_key_mgmt_to_bitfield(const u8 *s)
108939beb93cSSam Leffler {
109039beb93cSSam Leffler 	if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_UNSPEC_802_1X)
109139beb93cSSam Leffler 		return WPA_KEY_MGMT_IEEE8021X;
109239beb93cSSam Leffler 	if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_PSK_OVER_802_1X)
109339beb93cSSam Leffler 		return WPA_KEY_MGMT_PSK;
109439beb93cSSam Leffler #ifdef CONFIG_IEEE80211R
109539beb93cSSam Leffler 	if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_FT_802_1X)
109639beb93cSSam Leffler 		return WPA_KEY_MGMT_FT_IEEE8021X;
109739beb93cSSam Leffler 	if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_FT_PSK)
109839beb93cSSam Leffler 		return WPA_KEY_MGMT_FT_PSK;
1099*85732ac8SCy Schubert #ifdef CONFIG_SHA384
1100*85732ac8SCy Schubert 	if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_FT_802_1X_SHA384)
1101*85732ac8SCy Schubert 		return WPA_KEY_MGMT_FT_IEEE8021X_SHA384;
1102*85732ac8SCy Schubert #endif /* CONFIG_SHA384 */
110339beb93cSSam Leffler #endif /* CONFIG_IEEE80211R */
110439beb93cSSam Leffler #ifdef CONFIG_IEEE80211W
110539beb93cSSam Leffler 	if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_802_1X_SHA256)
110639beb93cSSam Leffler 		return WPA_KEY_MGMT_IEEE8021X_SHA256;
110739beb93cSSam Leffler 	if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_PSK_SHA256)
110839beb93cSSam Leffler 		return WPA_KEY_MGMT_PSK_SHA256;
110939beb93cSSam Leffler #endif /* CONFIG_IEEE80211W */
1110f05cddf9SRui Paulo #ifdef CONFIG_SAE
1111f05cddf9SRui Paulo 	if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_SAE)
1112f05cddf9SRui Paulo 		return WPA_KEY_MGMT_SAE;
1113f05cddf9SRui Paulo 	if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_FT_SAE)
1114f05cddf9SRui Paulo 		return WPA_KEY_MGMT_FT_SAE;
1115f05cddf9SRui Paulo #endif /* CONFIG_SAE */
11165b9c547cSRui Paulo 	if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_802_1X_SUITE_B)
11175b9c547cSRui Paulo 		return WPA_KEY_MGMT_IEEE8021X_SUITE_B;
11185b9c547cSRui Paulo 	if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_802_1X_SUITE_B_192)
11195b9c547cSRui Paulo 		return WPA_KEY_MGMT_IEEE8021X_SUITE_B_192;
1120*85732ac8SCy Schubert 	if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_FILS_SHA256)
1121*85732ac8SCy Schubert 		return WPA_KEY_MGMT_FILS_SHA256;
1122*85732ac8SCy Schubert 	if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_FILS_SHA384)
1123*85732ac8SCy Schubert 		return WPA_KEY_MGMT_FILS_SHA384;
1124*85732ac8SCy Schubert 	if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_FT_FILS_SHA256)
1125*85732ac8SCy Schubert 		return WPA_KEY_MGMT_FT_FILS_SHA256;
1126*85732ac8SCy Schubert 	if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_FT_FILS_SHA384)
1127*85732ac8SCy Schubert 		return WPA_KEY_MGMT_FT_FILS_SHA384;
1128*85732ac8SCy Schubert #ifdef CONFIG_OWE
1129*85732ac8SCy Schubert 	if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_OWE)
1130*85732ac8SCy Schubert 		return WPA_KEY_MGMT_OWE;
1131*85732ac8SCy Schubert #endif /* CONFIG_OWE */
1132*85732ac8SCy Schubert #ifdef CONFIG_DPP
1133*85732ac8SCy Schubert 	if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_DPP)
1134*85732ac8SCy Schubert 		return WPA_KEY_MGMT_DPP;
1135*85732ac8SCy Schubert #endif /* CONFIG_DPP */
1136325151a3SRui Paulo 	if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_OSEN)
1137325151a3SRui Paulo 		return WPA_KEY_MGMT_OSEN;
113839beb93cSSam Leffler 	return 0;
113939beb93cSSam Leffler }
11405b9c547cSRui Paulo 
11415b9c547cSRui Paulo 
1142325151a3SRui Paulo int wpa_cipher_valid_group(int cipher)
11435b9c547cSRui Paulo {
11445b9c547cSRui Paulo 	return wpa_cipher_valid_pairwise(cipher) ||
11455b9c547cSRui Paulo 		cipher == WPA_CIPHER_GTK_NOT_USED;
11465b9c547cSRui Paulo }
11475b9c547cSRui Paulo 
11485b9c547cSRui Paulo 
11495b9c547cSRui Paulo #ifdef CONFIG_IEEE80211W
11505b9c547cSRui Paulo int wpa_cipher_valid_mgmt_group(int cipher)
11515b9c547cSRui Paulo {
11525b9c547cSRui Paulo 	return cipher == WPA_CIPHER_AES_128_CMAC ||
11535b9c547cSRui Paulo 		cipher == WPA_CIPHER_BIP_GMAC_128 ||
11545b9c547cSRui Paulo 		cipher == WPA_CIPHER_BIP_GMAC_256 ||
11555b9c547cSRui Paulo 		cipher == WPA_CIPHER_BIP_CMAC_256;
11565b9c547cSRui Paulo }
11575b9c547cSRui Paulo #endif /* CONFIG_IEEE80211W */
115839beb93cSSam Leffler 
115939beb93cSSam Leffler 
116039beb93cSSam Leffler /**
116139beb93cSSam Leffler  * wpa_parse_wpa_ie_rsn - Parse RSN IE
116239beb93cSSam Leffler  * @rsn_ie: Buffer containing RSN IE
116339beb93cSSam Leffler  * @rsn_ie_len: RSN IE buffer length (including IE number and length octets)
116439beb93cSSam Leffler  * @data: Pointer to structure that will be filled in with parsed data
116539beb93cSSam Leffler  * Returns: 0 on success, <0 on failure
116639beb93cSSam Leffler  */
116739beb93cSSam Leffler int wpa_parse_wpa_ie_rsn(const u8 *rsn_ie, size_t rsn_ie_len,
116839beb93cSSam Leffler 			 struct wpa_ie_data *data)
116939beb93cSSam Leffler {
117039beb93cSSam Leffler 	const u8 *pos;
117139beb93cSSam Leffler 	int left;
117239beb93cSSam Leffler 	int i, count;
117339beb93cSSam Leffler 
117439beb93cSSam Leffler 	os_memset(data, 0, sizeof(*data));
117539beb93cSSam Leffler 	data->proto = WPA_PROTO_RSN;
117639beb93cSSam Leffler 	data->pairwise_cipher = WPA_CIPHER_CCMP;
117739beb93cSSam Leffler 	data->group_cipher = WPA_CIPHER_CCMP;
117839beb93cSSam Leffler 	data->key_mgmt = WPA_KEY_MGMT_IEEE8021X;
117939beb93cSSam Leffler 	data->capabilities = 0;
118039beb93cSSam Leffler 	data->pmkid = NULL;
118139beb93cSSam Leffler 	data->num_pmkid = 0;
118239beb93cSSam Leffler #ifdef CONFIG_IEEE80211W
118339beb93cSSam Leffler 	data->mgmt_group_cipher = WPA_CIPHER_AES_128_CMAC;
118439beb93cSSam Leffler #else /* CONFIG_IEEE80211W */
118539beb93cSSam Leffler 	data->mgmt_group_cipher = 0;
118639beb93cSSam Leffler #endif /* CONFIG_IEEE80211W */
118739beb93cSSam Leffler 
118839beb93cSSam Leffler 	if (rsn_ie_len == 0) {
118939beb93cSSam Leffler 		/* No RSN IE - fail silently */
119039beb93cSSam Leffler 		return -1;
119139beb93cSSam Leffler 	}
119239beb93cSSam Leffler 
119339beb93cSSam Leffler 	if (rsn_ie_len < sizeof(struct rsn_ie_hdr)) {
119439beb93cSSam Leffler 		wpa_printf(MSG_DEBUG, "%s: ie len too short %lu",
119539beb93cSSam Leffler 			   __func__, (unsigned long) rsn_ie_len);
119639beb93cSSam Leffler 		return -1;
119739beb93cSSam Leffler 	}
119839beb93cSSam Leffler 
1199325151a3SRui Paulo 	if (rsn_ie_len >= 6 && rsn_ie[1] >= 4 &&
1200325151a3SRui Paulo 	    rsn_ie[1] == rsn_ie_len - 2 &&
1201325151a3SRui Paulo 	    WPA_GET_BE32(&rsn_ie[2]) == OSEN_IE_VENDOR_TYPE) {
1202325151a3SRui Paulo 		pos = rsn_ie + 6;
1203325151a3SRui Paulo 		left = rsn_ie_len - 6;
1204325151a3SRui Paulo 
1205*85732ac8SCy Schubert 		data->group_cipher = WPA_CIPHER_GTK_NOT_USED;
1206*85732ac8SCy Schubert 		data->key_mgmt = WPA_KEY_MGMT_OSEN;
1207325151a3SRui Paulo 		data->proto = WPA_PROTO_OSEN;
1208325151a3SRui Paulo 	} else {
1209325151a3SRui Paulo 		const struct rsn_ie_hdr *hdr;
1210325151a3SRui Paulo 
121139beb93cSSam Leffler 		hdr = (const struct rsn_ie_hdr *) rsn_ie;
121239beb93cSSam Leffler 
121339beb93cSSam Leffler 		if (hdr->elem_id != WLAN_EID_RSN ||
121439beb93cSSam Leffler 		    hdr->len != rsn_ie_len - 2 ||
121539beb93cSSam Leffler 		    WPA_GET_LE16(hdr->version) != RSN_VERSION) {
121639beb93cSSam Leffler 			wpa_printf(MSG_DEBUG, "%s: malformed ie or unknown version",
121739beb93cSSam Leffler 				   __func__);
121839beb93cSSam Leffler 			return -2;
121939beb93cSSam Leffler 		}
122039beb93cSSam Leffler 
122139beb93cSSam Leffler 		pos = (const u8 *) (hdr + 1);
122239beb93cSSam Leffler 		left = rsn_ie_len - sizeof(*hdr);
1223325151a3SRui Paulo 	}
122439beb93cSSam Leffler 
122539beb93cSSam Leffler 	if (left >= RSN_SELECTOR_LEN) {
122639beb93cSSam Leffler 		data->group_cipher = rsn_selector_to_bitfield(pos);
12275b9c547cSRui Paulo 		if (!wpa_cipher_valid_group(data->group_cipher)) {
1228780fb4a2SCy Schubert 			wpa_printf(MSG_DEBUG,
1229780fb4a2SCy Schubert 				   "%s: invalid group cipher 0x%x (%08x)",
1230780fb4a2SCy Schubert 				   __func__, data->group_cipher,
1231780fb4a2SCy Schubert 				   WPA_GET_BE32(pos));
123239beb93cSSam Leffler 			return -1;
123339beb93cSSam Leffler 		}
123439beb93cSSam Leffler 		pos += RSN_SELECTOR_LEN;
123539beb93cSSam Leffler 		left -= RSN_SELECTOR_LEN;
123639beb93cSSam Leffler 	} else if (left > 0) {
123739beb93cSSam Leffler 		wpa_printf(MSG_DEBUG, "%s: ie length mismatch, %u too much",
123839beb93cSSam Leffler 			   __func__, left);
123939beb93cSSam Leffler 		return -3;
124039beb93cSSam Leffler 	}
124139beb93cSSam Leffler 
124239beb93cSSam Leffler 	if (left >= 2) {
124339beb93cSSam Leffler 		data->pairwise_cipher = 0;
124439beb93cSSam Leffler 		count = WPA_GET_LE16(pos);
124539beb93cSSam Leffler 		pos += 2;
124639beb93cSSam Leffler 		left -= 2;
12475b9c547cSRui Paulo 		if (count == 0 || count > left / RSN_SELECTOR_LEN) {
124839beb93cSSam Leffler 			wpa_printf(MSG_DEBUG, "%s: ie count botch (pairwise), "
124939beb93cSSam Leffler 				   "count %u left %u", __func__, count, left);
125039beb93cSSam Leffler 			return -4;
125139beb93cSSam Leffler 		}
125239beb93cSSam Leffler 		for (i = 0; i < count; i++) {
125339beb93cSSam Leffler 			data->pairwise_cipher |= rsn_selector_to_bitfield(pos);
125439beb93cSSam Leffler 			pos += RSN_SELECTOR_LEN;
125539beb93cSSam Leffler 			left -= RSN_SELECTOR_LEN;
125639beb93cSSam Leffler 		}
125739beb93cSSam Leffler #ifdef CONFIG_IEEE80211W
125839beb93cSSam Leffler 		if (data->pairwise_cipher & WPA_CIPHER_AES_128_CMAC) {
125939beb93cSSam Leffler 			wpa_printf(MSG_DEBUG, "%s: AES-128-CMAC used as "
126039beb93cSSam Leffler 				   "pairwise cipher", __func__);
126139beb93cSSam Leffler 			return -1;
126239beb93cSSam Leffler 		}
126339beb93cSSam Leffler #endif /* CONFIG_IEEE80211W */
126439beb93cSSam Leffler 	} else if (left == 1) {
126539beb93cSSam Leffler 		wpa_printf(MSG_DEBUG, "%s: ie too short (for key mgmt)",
126639beb93cSSam Leffler 			   __func__);
126739beb93cSSam Leffler 		return -5;
126839beb93cSSam Leffler 	}
126939beb93cSSam Leffler 
127039beb93cSSam Leffler 	if (left >= 2) {
127139beb93cSSam Leffler 		data->key_mgmt = 0;
127239beb93cSSam Leffler 		count = WPA_GET_LE16(pos);
127339beb93cSSam Leffler 		pos += 2;
127439beb93cSSam Leffler 		left -= 2;
12755b9c547cSRui Paulo 		if (count == 0 || count > left / RSN_SELECTOR_LEN) {
127639beb93cSSam Leffler 			wpa_printf(MSG_DEBUG, "%s: ie count botch (key mgmt), "
127739beb93cSSam Leffler 				   "count %u left %u", __func__, count, left);
127839beb93cSSam Leffler 			return -6;
127939beb93cSSam Leffler 		}
128039beb93cSSam Leffler 		for (i = 0; i < count; i++) {
128139beb93cSSam Leffler 			data->key_mgmt |= rsn_key_mgmt_to_bitfield(pos);
128239beb93cSSam Leffler 			pos += RSN_SELECTOR_LEN;
128339beb93cSSam Leffler 			left -= RSN_SELECTOR_LEN;
128439beb93cSSam Leffler 		}
128539beb93cSSam Leffler 	} else if (left == 1) {
128639beb93cSSam Leffler 		wpa_printf(MSG_DEBUG, "%s: ie too short (for capabilities)",
128739beb93cSSam Leffler 			   __func__);
128839beb93cSSam Leffler 		return -7;
128939beb93cSSam Leffler 	}
129039beb93cSSam Leffler 
129139beb93cSSam Leffler 	if (left >= 2) {
129239beb93cSSam Leffler 		data->capabilities = WPA_GET_LE16(pos);
129339beb93cSSam Leffler 		pos += 2;
129439beb93cSSam Leffler 		left -= 2;
129539beb93cSSam Leffler 	}
129639beb93cSSam Leffler 
129739beb93cSSam Leffler 	if (left >= 2) {
12985b9c547cSRui Paulo 		u16 num_pmkid = WPA_GET_LE16(pos);
129939beb93cSSam Leffler 		pos += 2;
130039beb93cSSam Leffler 		left -= 2;
13015b9c547cSRui Paulo 		if (num_pmkid > (unsigned int) left / PMKID_LEN) {
130239beb93cSSam Leffler 			wpa_printf(MSG_DEBUG, "%s: PMKID underflow "
13035b9c547cSRui Paulo 				   "(num_pmkid=%u left=%d)",
13045b9c547cSRui Paulo 				   __func__, num_pmkid, left);
130539beb93cSSam Leffler 			data->num_pmkid = 0;
130639beb93cSSam Leffler 			return -9;
130739beb93cSSam Leffler 		} else {
13085b9c547cSRui Paulo 			data->num_pmkid = num_pmkid;
130939beb93cSSam Leffler 			data->pmkid = pos;
131039beb93cSSam Leffler 			pos += data->num_pmkid * PMKID_LEN;
131139beb93cSSam Leffler 			left -= data->num_pmkid * PMKID_LEN;
131239beb93cSSam Leffler 		}
131339beb93cSSam Leffler 	}
131439beb93cSSam Leffler 
131539beb93cSSam Leffler #ifdef CONFIG_IEEE80211W
131639beb93cSSam Leffler 	if (left >= 4) {
131739beb93cSSam Leffler 		data->mgmt_group_cipher = rsn_selector_to_bitfield(pos);
13185b9c547cSRui Paulo 		if (!wpa_cipher_valid_mgmt_group(data->mgmt_group_cipher)) {
1319780fb4a2SCy Schubert 			wpa_printf(MSG_DEBUG,
1320780fb4a2SCy Schubert 				   "%s: Unsupported management group cipher 0x%x (%08x)",
1321780fb4a2SCy Schubert 				   __func__, data->mgmt_group_cipher,
1322780fb4a2SCy Schubert 				   WPA_GET_BE32(pos));
132339beb93cSSam Leffler 			return -10;
132439beb93cSSam Leffler 		}
132539beb93cSSam Leffler 		pos += RSN_SELECTOR_LEN;
132639beb93cSSam Leffler 		left -= RSN_SELECTOR_LEN;
132739beb93cSSam Leffler 	}
132839beb93cSSam Leffler #endif /* CONFIG_IEEE80211W */
132939beb93cSSam Leffler 
133039beb93cSSam Leffler 	if (left > 0) {
13315b9c547cSRui Paulo 		wpa_hexdump(MSG_DEBUG,
13325b9c547cSRui Paulo 			    "wpa_parse_wpa_ie_rsn: ignore trailing bytes",
13335b9c547cSRui Paulo 			    pos, left);
133439beb93cSSam Leffler 	}
133539beb93cSSam Leffler 
133639beb93cSSam Leffler 	return 0;
133739beb93cSSam Leffler }
133839beb93cSSam Leffler 
133939beb93cSSam Leffler 
1340f05cddf9SRui Paulo static int wpa_selector_to_bitfield(const u8 *s)
1341f05cddf9SRui Paulo {
1342f05cddf9SRui Paulo 	if (RSN_SELECTOR_GET(s) == WPA_CIPHER_SUITE_NONE)
1343f05cddf9SRui Paulo 		return WPA_CIPHER_NONE;
1344f05cddf9SRui Paulo 	if (RSN_SELECTOR_GET(s) == WPA_CIPHER_SUITE_TKIP)
1345f05cddf9SRui Paulo 		return WPA_CIPHER_TKIP;
1346f05cddf9SRui Paulo 	if (RSN_SELECTOR_GET(s) == WPA_CIPHER_SUITE_CCMP)
1347f05cddf9SRui Paulo 		return WPA_CIPHER_CCMP;
1348f05cddf9SRui Paulo 	return 0;
1349f05cddf9SRui Paulo }
1350f05cddf9SRui Paulo 
1351f05cddf9SRui Paulo 
1352f05cddf9SRui Paulo static int wpa_key_mgmt_to_bitfield(const u8 *s)
1353f05cddf9SRui Paulo {
1354f05cddf9SRui Paulo 	if (RSN_SELECTOR_GET(s) == WPA_AUTH_KEY_MGMT_UNSPEC_802_1X)
1355f05cddf9SRui Paulo 		return WPA_KEY_MGMT_IEEE8021X;
1356f05cddf9SRui Paulo 	if (RSN_SELECTOR_GET(s) == WPA_AUTH_KEY_MGMT_PSK_OVER_802_1X)
1357f05cddf9SRui Paulo 		return WPA_KEY_MGMT_PSK;
1358f05cddf9SRui Paulo 	if (RSN_SELECTOR_GET(s) == WPA_AUTH_KEY_MGMT_NONE)
1359f05cddf9SRui Paulo 		return WPA_KEY_MGMT_WPA_NONE;
1360f05cddf9SRui Paulo 	return 0;
1361f05cddf9SRui Paulo }
1362f05cddf9SRui Paulo 
1363f05cddf9SRui Paulo 
1364f05cddf9SRui Paulo int wpa_parse_wpa_ie_wpa(const u8 *wpa_ie, size_t wpa_ie_len,
1365f05cddf9SRui Paulo 			 struct wpa_ie_data *data)
1366f05cddf9SRui Paulo {
1367f05cddf9SRui Paulo 	const struct wpa_ie_hdr *hdr;
1368f05cddf9SRui Paulo 	const u8 *pos;
1369f05cddf9SRui Paulo 	int left;
1370f05cddf9SRui Paulo 	int i, count;
1371f05cddf9SRui Paulo 
1372f05cddf9SRui Paulo 	os_memset(data, 0, sizeof(*data));
1373f05cddf9SRui Paulo 	data->proto = WPA_PROTO_WPA;
1374f05cddf9SRui Paulo 	data->pairwise_cipher = WPA_CIPHER_TKIP;
1375f05cddf9SRui Paulo 	data->group_cipher = WPA_CIPHER_TKIP;
1376f05cddf9SRui Paulo 	data->key_mgmt = WPA_KEY_MGMT_IEEE8021X;
1377f05cddf9SRui Paulo 	data->capabilities = 0;
1378f05cddf9SRui Paulo 	data->pmkid = NULL;
1379f05cddf9SRui Paulo 	data->num_pmkid = 0;
1380f05cddf9SRui Paulo 	data->mgmt_group_cipher = 0;
1381f05cddf9SRui Paulo 
1382f05cddf9SRui Paulo 	if (wpa_ie_len < sizeof(struct wpa_ie_hdr)) {
1383f05cddf9SRui Paulo 		wpa_printf(MSG_DEBUG, "%s: ie len too short %lu",
1384f05cddf9SRui Paulo 			   __func__, (unsigned long) wpa_ie_len);
1385f05cddf9SRui Paulo 		return -1;
1386f05cddf9SRui Paulo 	}
1387f05cddf9SRui Paulo 
1388f05cddf9SRui Paulo 	hdr = (const struct wpa_ie_hdr *) wpa_ie;
1389f05cddf9SRui Paulo 
1390f05cddf9SRui Paulo 	if (hdr->elem_id != WLAN_EID_VENDOR_SPECIFIC ||
1391f05cddf9SRui Paulo 	    hdr->len != wpa_ie_len - 2 ||
1392f05cddf9SRui Paulo 	    RSN_SELECTOR_GET(hdr->oui) != WPA_OUI_TYPE ||
1393f05cddf9SRui Paulo 	    WPA_GET_LE16(hdr->version) != WPA_VERSION) {
1394f05cddf9SRui Paulo 		wpa_printf(MSG_DEBUG, "%s: malformed ie or unknown version",
1395f05cddf9SRui Paulo 			   __func__);
1396f05cddf9SRui Paulo 		return -2;
1397f05cddf9SRui Paulo 	}
1398f05cddf9SRui Paulo 
1399f05cddf9SRui Paulo 	pos = (const u8 *) (hdr + 1);
1400f05cddf9SRui Paulo 	left = wpa_ie_len - sizeof(*hdr);
1401f05cddf9SRui Paulo 
1402f05cddf9SRui Paulo 	if (left >= WPA_SELECTOR_LEN) {
1403f05cddf9SRui Paulo 		data->group_cipher = wpa_selector_to_bitfield(pos);
1404f05cddf9SRui Paulo 		pos += WPA_SELECTOR_LEN;
1405f05cddf9SRui Paulo 		left -= WPA_SELECTOR_LEN;
1406f05cddf9SRui Paulo 	} else if (left > 0) {
1407f05cddf9SRui Paulo 		wpa_printf(MSG_DEBUG, "%s: ie length mismatch, %u too much",
1408f05cddf9SRui Paulo 			   __func__, left);
1409f05cddf9SRui Paulo 		return -3;
1410f05cddf9SRui Paulo 	}
1411f05cddf9SRui Paulo 
1412f05cddf9SRui Paulo 	if (left >= 2) {
1413f05cddf9SRui Paulo 		data->pairwise_cipher = 0;
1414f05cddf9SRui Paulo 		count = WPA_GET_LE16(pos);
1415f05cddf9SRui Paulo 		pos += 2;
1416f05cddf9SRui Paulo 		left -= 2;
14175b9c547cSRui Paulo 		if (count == 0 || count > left / WPA_SELECTOR_LEN) {
1418f05cddf9SRui Paulo 			wpa_printf(MSG_DEBUG, "%s: ie count botch (pairwise), "
1419f05cddf9SRui Paulo 				   "count %u left %u", __func__, count, left);
1420f05cddf9SRui Paulo 			return -4;
1421f05cddf9SRui Paulo 		}
1422f05cddf9SRui Paulo 		for (i = 0; i < count; i++) {
1423f05cddf9SRui Paulo 			data->pairwise_cipher |= wpa_selector_to_bitfield(pos);
1424f05cddf9SRui Paulo 			pos += WPA_SELECTOR_LEN;
1425f05cddf9SRui Paulo 			left -= WPA_SELECTOR_LEN;
1426f05cddf9SRui Paulo 		}
1427f05cddf9SRui Paulo 	} else if (left == 1) {
1428f05cddf9SRui Paulo 		wpa_printf(MSG_DEBUG, "%s: ie too short (for key mgmt)",
1429f05cddf9SRui Paulo 			   __func__);
1430f05cddf9SRui Paulo 		return -5;
1431f05cddf9SRui Paulo 	}
1432f05cddf9SRui Paulo 
1433f05cddf9SRui Paulo 	if (left >= 2) {
1434f05cddf9SRui Paulo 		data->key_mgmt = 0;
1435f05cddf9SRui Paulo 		count = WPA_GET_LE16(pos);
1436f05cddf9SRui Paulo 		pos += 2;
1437f05cddf9SRui Paulo 		left -= 2;
14385b9c547cSRui Paulo 		if (count == 0 || count > left / WPA_SELECTOR_LEN) {
1439f05cddf9SRui Paulo 			wpa_printf(MSG_DEBUG, "%s: ie count botch (key mgmt), "
1440f05cddf9SRui Paulo 				   "count %u left %u", __func__, count, left);
1441f05cddf9SRui Paulo 			return -6;
1442f05cddf9SRui Paulo 		}
1443f05cddf9SRui Paulo 		for (i = 0; i < count; i++) {
1444f05cddf9SRui Paulo 			data->key_mgmt |= wpa_key_mgmt_to_bitfield(pos);
1445f05cddf9SRui Paulo 			pos += WPA_SELECTOR_LEN;
1446f05cddf9SRui Paulo 			left -= WPA_SELECTOR_LEN;
1447f05cddf9SRui Paulo 		}
1448f05cddf9SRui Paulo 	} else if (left == 1) {
1449f05cddf9SRui Paulo 		wpa_printf(MSG_DEBUG, "%s: ie too short (for capabilities)",
1450f05cddf9SRui Paulo 			   __func__);
1451f05cddf9SRui Paulo 		return -7;
1452f05cddf9SRui Paulo 	}
1453f05cddf9SRui Paulo 
1454f05cddf9SRui Paulo 	if (left >= 2) {
1455f05cddf9SRui Paulo 		data->capabilities = WPA_GET_LE16(pos);
1456f05cddf9SRui Paulo 		pos += 2;
1457f05cddf9SRui Paulo 		left -= 2;
1458f05cddf9SRui Paulo 	}
1459f05cddf9SRui Paulo 
1460f05cddf9SRui Paulo 	if (left > 0) {
14615b9c547cSRui Paulo 		wpa_hexdump(MSG_DEBUG,
14625b9c547cSRui Paulo 			    "wpa_parse_wpa_ie_wpa: ignore trailing bytes",
14635b9c547cSRui Paulo 			    pos, left);
1464f05cddf9SRui Paulo 	}
1465f05cddf9SRui Paulo 
1466f05cddf9SRui Paulo 	return 0;
1467f05cddf9SRui Paulo }
1468f05cddf9SRui Paulo 
1469f05cddf9SRui Paulo 
147039beb93cSSam Leffler #ifdef CONFIG_IEEE80211R
147139beb93cSSam Leffler 
147239beb93cSSam Leffler /**
147339beb93cSSam Leffler  * wpa_derive_pmk_r0 - Derive PMK-R0 and PMKR0Name
147439beb93cSSam Leffler  *
147539beb93cSSam Leffler  * IEEE Std 802.11r-2008 - 8.5.1.5.3
147639beb93cSSam Leffler  */
1477*85732ac8SCy Schubert int wpa_derive_pmk_r0(const u8 *xxkey, size_t xxkey_len,
147839beb93cSSam Leffler 		      const u8 *ssid, size_t ssid_len,
147939beb93cSSam Leffler 		      const u8 *mdid, const u8 *r0kh_id, size_t r0kh_id_len,
1480*85732ac8SCy Schubert 		      const u8 *s0kh_id, u8 *pmk_r0, u8 *pmk_r0_name,
1481*85732ac8SCy Schubert 		      int use_sha384)
148239beb93cSSam Leffler {
1483325151a3SRui Paulo 	u8 buf[1 + SSID_MAX_LEN + MOBILITY_DOMAIN_ID_LEN + 1 +
148439beb93cSSam Leffler 	       FT_R0KH_ID_MAX_LEN + ETH_ALEN];
1485*85732ac8SCy Schubert 	u8 *pos, r0_key_data[64], hash[48];
148639beb93cSSam Leffler 	const u8 *addr[2];
148739beb93cSSam Leffler 	size_t len[2];
1488*85732ac8SCy Schubert 	size_t q = use_sha384 ? 48 : 32;
1489*85732ac8SCy Schubert 	size_t r0_key_data_len = q + 16;
149039beb93cSSam Leffler 
149139beb93cSSam Leffler 	/*
149239beb93cSSam Leffler 	 * R0-Key-Data = KDF-384(XXKey, "FT-R0",
149339beb93cSSam Leffler 	 *                       SSIDlength || SSID || MDID || R0KHlength ||
149439beb93cSSam Leffler 	 *                       R0KH-ID || S0KH-ID)
1495*85732ac8SCy Schubert 	 * XXKey is either the second 256 bits of MSK or PSK; or the first
1496*85732ac8SCy Schubert 	 * 384 bits of MSK for FT-EAP-SHA384.
1497*85732ac8SCy Schubert 	 * PMK-R0 = L(R0-Key-Data, 0, Q)
1498*85732ac8SCy Schubert 	 * PMK-R0Name-Salt = L(R0-Key-Data, Q, 128)
1499*85732ac8SCy Schubert 	 * Q = 384 for FT-EAP-SHA384; otherwise, 256
150039beb93cSSam Leffler 	 */
1501325151a3SRui Paulo 	if (ssid_len > SSID_MAX_LEN || r0kh_id_len > FT_R0KH_ID_MAX_LEN)
1502*85732ac8SCy Schubert 		return -1;
1503*85732ac8SCy Schubert 	wpa_printf(MSG_DEBUG, "FT: Derive PMK-R0 using KDF-%s",
1504*85732ac8SCy Schubert 		   use_sha384 ? "SHA384" : "SHA256");
1505*85732ac8SCy Schubert 	wpa_hexdump_key(MSG_DEBUG, "FT: XXKey", xxkey, xxkey_len);
1506*85732ac8SCy Schubert 	wpa_hexdump_ascii(MSG_DEBUG, "FT: SSID", ssid, ssid_len);
1507*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "FT: MDID", mdid, MOBILITY_DOMAIN_ID_LEN);
1508*85732ac8SCy Schubert 	wpa_hexdump_ascii(MSG_DEBUG, "FT: R0KH-ID", r0kh_id, r0kh_id_len);
1509*85732ac8SCy Schubert 	wpa_printf(MSG_DEBUG, "FT: S0KH-ID: " MACSTR, MAC2STR(s0kh_id));
151039beb93cSSam Leffler 	pos = buf;
151139beb93cSSam Leffler 	*pos++ = ssid_len;
151239beb93cSSam Leffler 	os_memcpy(pos, ssid, ssid_len);
151339beb93cSSam Leffler 	pos += ssid_len;
151439beb93cSSam Leffler 	os_memcpy(pos, mdid, MOBILITY_DOMAIN_ID_LEN);
151539beb93cSSam Leffler 	pos += MOBILITY_DOMAIN_ID_LEN;
151639beb93cSSam Leffler 	*pos++ = r0kh_id_len;
151739beb93cSSam Leffler 	os_memcpy(pos, r0kh_id, r0kh_id_len);
151839beb93cSSam Leffler 	pos += r0kh_id_len;
151939beb93cSSam Leffler 	os_memcpy(pos, s0kh_id, ETH_ALEN);
152039beb93cSSam Leffler 	pos += ETH_ALEN;
152139beb93cSSam Leffler 
1522*85732ac8SCy Schubert #ifdef CONFIG_SHA384
1523*85732ac8SCy Schubert 	if (use_sha384) {
1524*85732ac8SCy Schubert 		if (xxkey_len != SHA384_MAC_LEN) {
1525*85732ac8SCy Schubert 			wpa_printf(MSG_ERROR,
1526*85732ac8SCy Schubert 				   "FT: Unexpected XXKey length %d (expected %d)",
1527*85732ac8SCy Schubert 				   (int) xxkey_len, SHA384_MAC_LEN);
1528*85732ac8SCy Schubert 			return -1;
1529*85732ac8SCy Schubert 		}
1530*85732ac8SCy Schubert 		if (sha384_prf(xxkey, xxkey_len, "FT-R0", buf, pos - buf,
1531*85732ac8SCy Schubert 			       r0_key_data, r0_key_data_len) < 0)
1532*85732ac8SCy Schubert 			return -1;
1533*85732ac8SCy Schubert 	}
1534*85732ac8SCy Schubert #endif /* CONFIG_SHA384 */
1535*85732ac8SCy Schubert 	if (!use_sha384) {
1536*85732ac8SCy Schubert 		if (xxkey_len != PMK_LEN) {
1537*85732ac8SCy Schubert 			wpa_printf(MSG_ERROR,
1538*85732ac8SCy Schubert 				   "FT: Unexpected XXKey length %d (expected %d)",
1539*85732ac8SCy Schubert 				   (int) xxkey_len, PMK_LEN);
1540*85732ac8SCy Schubert 			return -1;
1541*85732ac8SCy Schubert 		}
1542*85732ac8SCy Schubert 		if (sha256_prf(xxkey, xxkey_len, "FT-R0", buf, pos - buf,
1543*85732ac8SCy Schubert 			       r0_key_data, r0_key_data_len) < 0)
1544*85732ac8SCy Schubert 			return -1;
1545*85732ac8SCy Schubert 	}
1546*85732ac8SCy Schubert 	os_memcpy(pmk_r0, r0_key_data, q);
1547*85732ac8SCy Schubert 	wpa_hexdump_key(MSG_DEBUG, "FT: PMK-R0", pmk_r0, q);
1548*85732ac8SCy Schubert 	wpa_hexdump_key(MSG_DEBUG, "FT: PMK-R0Name-Salt", &r0_key_data[q], 16);
154939beb93cSSam Leffler 
155039beb93cSSam Leffler 	/*
1551*85732ac8SCy Schubert 	 * PMKR0Name = Truncate-128(Hash("FT-R0N" || PMK-R0Name-Salt)
155239beb93cSSam Leffler 	 */
155339beb93cSSam Leffler 	addr[0] = (const u8 *) "FT-R0N";
155439beb93cSSam Leffler 	len[0] = 6;
1555*85732ac8SCy Schubert 	addr[1] = &r0_key_data[q];
155639beb93cSSam Leffler 	len[1] = 16;
155739beb93cSSam Leffler 
1558*85732ac8SCy Schubert #ifdef CONFIG_SHA384
1559*85732ac8SCy Schubert 	if (use_sha384 && sha384_vector(2, addr, len, hash) < 0)
1560*85732ac8SCy Schubert 		return -1;
1561*85732ac8SCy Schubert #endif /* CONFIG_SHA384 */
1562*85732ac8SCy Schubert 	if (!use_sha384 && sha256_vector(2, addr, len, hash) < 0)
1563*85732ac8SCy Schubert 		return -1;
156439beb93cSSam Leffler 	os_memcpy(pmk_r0_name, hash, WPA_PMK_NAME_LEN);
1565*85732ac8SCy Schubert 	os_memset(r0_key_data, 0, sizeof(r0_key_data));
1566*85732ac8SCy Schubert 	return 0;
156739beb93cSSam Leffler }
156839beb93cSSam Leffler 
156939beb93cSSam Leffler 
157039beb93cSSam Leffler /**
157139beb93cSSam Leffler  * wpa_derive_pmk_r1_name - Derive PMKR1Name
157239beb93cSSam Leffler  *
157339beb93cSSam Leffler  * IEEE Std 802.11r-2008 - 8.5.1.5.4
157439beb93cSSam Leffler  */
1575*85732ac8SCy Schubert int wpa_derive_pmk_r1_name(const u8 *pmk_r0_name, const u8 *r1kh_id,
1576*85732ac8SCy Schubert 			   const u8 *s1kh_id, u8 *pmk_r1_name, int use_sha384)
157739beb93cSSam Leffler {
1578*85732ac8SCy Schubert 	u8 hash[48];
157939beb93cSSam Leffler 	const u8 *addr[4];
158039beb93cSSam Leffler 	size_t len[4];
158139beb93cSSam Leffler 
158239beb93cSSam Leffler 	/*
1583*85732ac8SCy Schubert 	 * PMKR1Name = Truncate-128(Hash("FT-R1N" || PMKR0Name ||
158439beb93cSSam Leffler 	 *                               R1KH-ID || S1KH-ID))
158539beb93cSSam Leffler 	 */
158639beb93cSSam Leffler 	addr[0] = (const u8 *) "FT-R1N";
158739beb93cSSam Leffler 	len[0] = 6;
158839beb93cSSam Leffler 	addr[1] = pmk_r0_name;
158939beb93cSSam Leffler 	len[1] = WPA_PMK_NAME_LEN;
159039beb93cSSam Leffler 	addr[2] = r1kh_id;
159139beb93cSSam Leffler 	len[2] = FT_R1KH_ID_LEN;
159239beb93cSSam Leffler 	addr[3] = s1kh_id;
159339beb93cSSam Leffler 	len[3] = ETH_ALEN;
159439beb93cSSam Leffler 
1595*85732ac8SCy Schubert #ifdef CONFIG_SHA384
1596*85732ac8SCy Schubert 	if (use_sha384 && sha384_vector(4, addr, len, hash) < 0)
1597*85732ac8SCy Schubert 		return -1;
1598*85732ac8SCy Schubert #endif /* CONFIG_SHA384 */
1599*85732ac8SCy Schubert 	if (!use_sha384 && sha256_vector(4, addr, len, hash) < 0)
1600*85732ac8SCy Schubert 		return -1;
160139beb93cSSam Leffler 	os_memcpy(pmk_r1_name, hash, WPA_PMK_NAME_LEN);
1602*85732ac8SCy Schubert 	return 0;
160339beb93cSSam Leffler }
160439beb93cSSam Leffler 
160539beb93cSSam Leffler 
160639beb93cSSam Leffler /**
160739beb93cSSam Leffler  * wpa_derive_pmk_r1 - Derive PMK-R1 and PMKR1Name from PMK-R0
160839beb93cSSam Leffler  *
160939beb93cSSam Leffler  * IEEE Std 802.11r-2008 - 8.5.1.5.4
161039beb93cSSam Leffler  */
1611*85732ac8SCy Schubert int wpa_derive_pmk_r1(const u8 *pmk_r0, size_t pmk_r0_len,
1612*85732ac8SCy Schubert 		      const u8 *pmk_r0_name,
161339beb93cSSam Leffler 		      const u8 *r1kh_id, const u8 *s1kh_id,
161439beb93cSSam Leffler 		      u8 *pmk_r1, u8 *pmk_r1_name)
161539beb93cSSam Leffler {
161639beb93cSSam Leffler 	u8 buf[FT_R1KH_ID_LEN + ETH_ALEN];
161739beb93cSSam Leffler 	u8 *pos;
161839beb93cSSam Leffler 
161939beb93cSSam Leffler 	/* PMK-R1 = KDF-256(PMK-R0, "FT-R1", R1KH-ID || S1KH-ID) */
1620*85732ac8SCy Schubert 	wpa_printf(MSG_DEBUG, "FT: Derive PMK-R1 using KDF-%s",
1621*85732ac8SCy Schubert 		   pmk_r0_len == SHA384_MAC_LEN ? "SHA384" : "SHA256");
1622*85732ac8SCy Schubert 	wpa_hexdump_key(MSG_DEBUG, "FT: PMK-R0", pmk_r0, pmk_r0_len);
1623*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "FT: R1KH-ID", r1kh_id, FT_R1KH_ID_LEN);
1624*85732ac8SCy Schubert 	wpa_printf(MSG_DEBUG, "FT: S1KH-ID: " MACSTR, MAC2STR(s1kh_id));
162539beb93cSSam Leffler 	pos = buf;
162639beb93cSSam Leffler 	os_memcpy(pos, r1kh_id, FT_R1KH_ID_LEN);
162739beb93cSSam Leffler 	pos += FT_R1KH_ID_LEN;
162839beb93cSSam Leffler 	os_memcpy(pos, s1kh_id, ETH_ALEN);
162939beb93cSSam Leffler 	pos += ETH_ALEN;
163039beb93cSSam Leffler 
1631*85732ac8SCy Schubert #ifdef CONFIG_SHA384
1632*85732ac8SCy Schubert 	if (pmk_r0_len == SHA384_MAC_LEN &&
1633*85732ac8SCy Schubert 	    sha384_prf(pmk_r0, pmk_r0_len, "FT-R1",
1634*85732ac8SCy Schubert 		       buf, pos - buf, pmk_r1, pmk_r0_len) < 0)
1635*85732ac8SCy Schubert 		return -1;
1636*85732ac8SCy Schubert #endif /* CONFIG_SHA384 */
1637*85732ac8SCy Schubert 	if (pmk_r0_len == PMK_LEN &&
1638*85732ac8SCy Schubert 	    sha256_prf(pmk_r0, pmk_r0_len, "FT-R1",
1639*85732ac8SCy Schubert 		       buf, pos - buf, pmk_r1, pmk_r0_len) < 0)
1640*85732ac8SCy Schubert 		return -1;
1641*85732ac8SCy Schubert 	if (pmk_r0_len != SHA384_MAC_LEN && pmk_r0_len != PMK_LEN) {
1642*85732ac8SCy Schubert 		wpa_printf(MSG_ERROR, "FT: Unexpected PMK-R0 length %d",
1643*85732ac8SCy Schubert 			   (int) pmk_r0_len);
1644*85732ac8SCy Schubert 		return -1;
1645*85732ac8SCy Schubert 	}
1646*85732ac8SCy Schubert 	wpa_hexdump_key(MSG_DEBUG, "FT: PMK-R1", pmk_r1, pmk_r0_len);
164739beb93cSSam Leffler 
1648*85732ac8SCy Schubert 	return wpa_derive_pmk_r1_name(pmk_r0_name, r1kh_id, s1kh_id,
1649*85732ac8SCy Schubert 				      pmk_r1_name,
1650*85732ac8SCy Schubert 				      pmk_r0_len == SHA384_MAC_LEN);
165139beb93cSSam Leffler }
165239beb93cSSam Leffler 
165339beb93cSSam Leffler 
165439beb93cSSam Leffler /**
165539beb93cSSam Leffler  * wpa_pmk_r1_to_ptk - Derive PTK and PTKName from PMK-R1
165639beb93cSSam Leffler  *
165739beb93cSSam Leffler  * IEEE Std 802.11r-2008 - 8.5.1.5.5
165839beb93cSSam Leffler  */
1659*85732ac8SCy Schubert int wpa_pmk_r1_to_ptk(const u8 *pmk_r1, size_t pmk_r1_len,
1660*85732ac8SCy Schubert 		      const u8 *snonce, const u8 *anonce,
166139beb93cSSam Leffler 		      const u8 *sta_addr, const u8 *bssid,
166239beb93cSSam Leffler 		      const u8 *pmk_r1_name,
16635b9c547cSRui Paulo 		      struct wpa_ptk *ptk, u8 *ptk_name, int akmp, int cipher)
166439beb93cSSam Leffler {
166539beb93cSSam Leffler 	u8 buf[2 * WPA_NONCE_LEN + 2 * ETH_ALEN];
166639beb93cSSam Leffler 	u8 *pos, hash[32];
166739beb93cSSam Leffler 	const u8 *addr[6];
166839beb93cSSam Leffler 	size_t len[6];
1669*85732ac8SCy Schubert 	u8 tmp[2 * WPA_KCK_MAX_LEN + 2 * WPA_KEK_MAX_LEN + WPA_TK_MAX_LEN];
1670*85732ac8SCy Schubert 	size_t ptk_len, offset;
1671*85732ac8SCy Schubert 	int use_sha384 = wpa_key_mgmt_sha384(akmp);
167239beb93cSSam Leffler 
167339beb93cSSam Leffler 	/*
167439beb93cSSam Leffler 	 * PTK = KDF-PTKLen(PMK-R1, "FT-PTK", SNonce || ANonce ||
167539beb93cSSam Leffler 	 *                  BSSID || STA-ADDR)
167639beb93cSSam Leffler 	 */
1677*85732ac8SCy Schubert 	wpa_printf(MSG_DEBUG, "FT: Derive PTK using KDF-%s",
1678*85732ac8SCy Schubert 		   use_sha384 ? "SHA384" : "SHA256");
1679*85732ac8SCy Schubert 	wpa_hexdump_key(MSG_DEBUG, "FT: PMK-R1", pmk_r1, pmk_r1_len);
1680*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "FT: SNonce", snonce, WPA_NONCE_LEN);
1681*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "FT: ANonce", anonce, WPA_NONCE_LEN);
1682*85732ac8SCy Schubert 	wpa_printf(MSG_DEBUG, "FT: BSSID=" MACSTR " STA-ADDR=" MACSTR,
1683*85732ac8SCy Schubert 		   MAC2STR(bssid), MAC2STR(sta_addr));
168439beb93cSSam Leffler 	pos = buf;
168539beb93cSSam Leffler 	os_memcpy(pos, snonce, WPA_NONCE_LEN);
168639beb93cSSam Leffler 	pos += WPA_NONCE_LEN;
168739beb93cSSam Leffler 	os_memcpy(pos, anonce, WPA_NONCE_LEN);
168839beb93cSSam Leffler 	pos += WPA_NONCE_LEN;
168939beb93cSSam Leffler 	os_memcpy(pos, bssid, ETH_ALEN);
169039beb93cSSam Leffler 	pos += ETH_ALEN;
169139beb93cSSam Leffler 	os_memcpy(pos, sta_addr, ETH_ALEN);
169239beb93cSSam Leffler 	pos += ETH_ALEN;
169339beb93cSSam Leffler 
1694*85732ac8SCy Schubert 	ptk->kck_len = wpa_kck_len(akmp, PMK_LEN);
1695*85732ac8SCy Schubert 	ptk->kck2_len = wpa_kck2_len(akmp);
1696*85732ac8SCy Schubert 	ptk->kek_len = wpa_kek_len(akmp, PMK_LEN);
1697*85732ac8SCy Schubert 	ptk->kek2_len = wpa_kek2_len(akmp);
16985b9c547cSRui Paulo 	ptk->tk_len = wpa_cipher_key_len(cipher);
1699*85732ac8SCy Schubert 	ptk_len = ptk->kck_len + ptk->kek_len + ptk->tk_len +
1700*85732ac8SCy Schubert 		ptk->kck2_len + ptk->kek2_len;
17015b9c547cSRui Paulo 
1702*85732ac8SCy Schubert #ifdef CONFIG_SHA384
1703*85732ac8SCy Schubert 	if (use_sha384) {
1704*85732ac8SCy Schubert 		if (pmk_r1_len != SHA384_MAC_LEN) {
1705*85732ac8SCy Schubert 			wpa_printf(MSG_ERROR,
1706*85732ac8SCy Schubert 				   "FT: Unexpected PMK-R1 length %d (expected %d)",
1707*85732ac8SCy Schubert 				   (int) pmk_r1_len, SHA384_MAC_LEN);
1708*85732ac8SCy Schubert 			return -1;
1709*85732ac8SCy Schubert 		}
1710*85732ac8SCy Schubert 		if (sha384_prf(pmk_r1, pmk_r1_len, "FT-PTK",
1711*85732ac8SCy Schubert 			       buf, pos - buf, tmp, ptk_len) < 0)
1712*85732ac8SCy Schubert 			return -1;
1713*85732ac8SCy Schubert 	}
1714*85732ac8SCy Schubert #endif /* CONFIG_SHA384 */
1715*85732ac8SCy Schubert 	if (!use_sha384) {
1716*85732ac8SCy Schubert 		if (pmk_r1_len != PMK_LEN) {
1717*85732ac8SCy Schubert 			wpa_printf(MSG_ERROR,
1718*85732ac8SCy Schubert 				   "FT: Unexpected PMK-R1 length %d (expected %d)",
1719*85732ac8SCy Schubert 				   (int) pmk_r1_len, PMK_LEN);
1720*85732ac8SCy Schubert 			return -1;
1721*85732ac8SCy Schubert 		}
1722*85732ac8SCy Schubert 		if (sha256_prf(pmk_r1, pmk_r1_len, "FT-PTK",
1723*85732ac8SCy Schubert 			       buf, pos - buf, tmp, ptk_len) < 0)
1724*85732ac8SCy Schubert 			return -1;
1725*85732ac8SCy Schubert 	}
1726*85732ac8SCy Schubert 	wpa_hexdump_key(MSG_DEBUG, "FT: PTK", tmp, ptk_len);
172739beb93cSSam Leffler 
172839beb93cSSam Leffler 	/*
172939beb93cSSam Leffler 	 * PTKName = Truncate-128(SHA-256(PMKR1Name || "FT-PTKN" || SNonce ||
173039beb93cSSam Leffler 	 *                                ANonce || BSSID || STA-ADDR))
173139beb93cSSam Leffler 	 */
1732*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "FT: PMKR1Name", pmk_r1_name, WPA_PMK_NAME_LEN);
173339beb93cSSam Leffler 	addr[0] = pmk_r1_name;
173439beb93cSSam Leffler 	len[0] = WPA_PMK_NAME_LEN;
173539beb93cSSam Leffler 	addr[1] = (const u8 *) "FT-PTKN";
173639beb93cSSam Leffler 	len[1] = 7;
173739beb93cSSam Leffler 	addr[2] = snonce;
173839beb93cSSam Leffler 	len[2] = WPA_NONCE_LEN;
173939beb93cSSam Leffler 	addr[3] = anonce;
174039beb93cSSam Leffler 	len[3] = WPA_NONCE_LEN;
174139beb93cSSam Leffler 	addr[4] = bssid;
174239beb93cSSam Leffler 	len[4] = ETH_ALEN;
174339beb93cSSam Leffler 	addr[5] = sta_addr;
174439beb93cSSam Leffler 	len[5] = ETH_ALEN;
174539beb93cSSam Leffler 
1746*85732ac8SCy Schubert 	if (sha256_vector(6, addr, len, hash) < 0)
1747*85732ac8SCy Schubert 		return -1;
174839beb93cSSam Leffler 	os_memcpy(ptk_name, hash, WPA_PMK_NAME_LEN);
17495b9c547cSRui Paulo 
17505b9c547cSRui Paulo 	os_memcpy(ptk->kck, tmp, ptk->kck_len);
1751*85732ac8SCy Schubert 	offset = ptk->kck_len;
1752*85732ac8SCy Schubert 	os_memcpy(ptk->kek, tmp + offset, ptk->kek_len);
1753*85732ac8SCy Schubert 	offset += ptk->kek_len;
1754*85732ac8SCy Schubert 	os_memcpy(ptk->tk, tmp + offset, ptk->tk_len);
1755*85732ac8SCy Schubert 	offset += ptk->tk_len;
1756*85732ac8SCy Schubert 	os_memcpy(ptk->kck2, tmp + offset, ptk->kck2_len);
1757*85732ac8SCy Schubert 	offset = ptk->kck2_len;
1758*85732ac8SCy Schubert 	os_memcpy(ptk->kek2, tmp + offset, ptk->kek2_len);
17595b9c547cSRui Paulo 
17605b9c547cSRui Paulo 	wpa_hexdump_key(MSG_DEBUG, "FT: KCK", ptk->kck, ptk->kck_len);
17615b9c547cSRui Paulo 	wpa_hexdump_key(MSG_DEBUG, "FT: KEK", ptk->kek, ptk->kek_len);
1762*85732ac8SCy Schubert 	if (ptk->kck2_len)
1763*85732ac8SCy Schubert 		wpa_hexdump_key(MSG_DEBUG, "FT: KCK2",
1764*85732ac8SCy Schubert 				ptk->kck2, ptk->kck2_len);
1765*85732ac8SCy Schubert 	if (ptk->kek2_len)
1766*85732ac8SCy Schubert 		wpa_hexdump_key(MSG_DEBUG, "FT: KEK2",
1767*85732ac8SCy Schubert 				ptk->kek2, ptk->kek2_len);
17685b9c547cSRui Paulo 	wpa_hexdump_key(MSG_DEBUG, "FT: TK", ptk->tk, ptk->tk_len);
17695b9c547cSRui Paulo 	wpa_hexdump(MSG_DEBUG, "FT: PTKName", ptk_name, WPA_PMK_NAME_LEN);
17705b9c547cSRui Paulo 
17715b9c547cSRui Paulo 	os_memset(tmp, 0, sizeof(tmp));
17725b9c547cSRui Paulo 
17735b9c547cSRui Paulo 	return 0;
177439beb93cSSam Leffler }
177539beb93cSSam Leffler 
177639beb93cSSam Leffler #endif /* CONFIG_IEEE80211R */
1777e28a4053SRui Paulo 
1778e28a4053SRui Paulo 
1779e28a4053SRui Paulo /**
1780e28a4053SRui Paulo  * rsn_pmkid - Calculate PMK identifier
1781e28a4053SRui Paulo  * @pmk: Pairwise master key
1782e28a4053SRui Paulo  * @pmk_len: Length of pmk in bytes
1783e28a4053SRui Paulo  * @aa: Authenticator address
1784e28a4053SRui Paulo  * @spa: Supplicant address
1785e28a4053SRui Paulo  * @pmkid: Buffer for PMKID
1786*85732ac8SCy Schubert  * @akmp: Negotiated key management protocol
1787e28a4053SRui Paulo  *
1788*85732ac8SCy Schubert  * IEEE Std 802.11-2016 - 12.7.1.3 Pairwise key hierarchy
1789*85732ac8SCy Schubert  * AKM: 00-0F-AC:5, 00-0F-AC:6, 00-0F-AC:14, 00-0F-AC:16
1790*85732ac8SCy Schubert  * PMKID = Truncate-128(HMAC-SHA-256(PMK, "PMK Name" || AA || SPA))
1791*85732ac8SCy Schubert  * AKM: 00-0F-AC:11
1792*85732ac8SCy Schubert  * See rsn_pmkid_suite_b()
1793*85732ac8SCy Schubert  * AKM: 00-0F-AC:12
1794*85732ac8SCy Schubert  * See rsn_pmkid_suite_b_192()
1795*85732ac8SCy Schubert  * AKM: 00-0F-AC:13, 00-0F-AC:15, 00-0F-AC:17
1796*85732ac8SCy Schubert  * PMKID = Truncate-128(HMAC-SHA-384(PMK, "PMK Name" || AA || SPA))
1797*85732ac8SCy Schubert  * Otherwise:
1798*85732ac8SCy Schubert  * PMKID = Truncate-128(HMAC-SHA-1(PMK, "PMK Name" || AA || SPA))
1799e28a4053SRui Paulo  */
1800e28a4053SRui Paulo void rsn_pmkid(const u8 *pmk, size_t pmk_len, const u8 *aa, const u8 *spa,
1801*85732ac8SCy Schubert 	       u8 *pmkid, int akmp)
1802e28a4053SRui Paulo {
1803e28a4053SRui Paulo 	char *title = "PMK Name";
1804e28a4053SRui Paulo 	const u8 *addr[3];
1805e28a4053SRui Paulo 	const size_t len[3] = { 8, ETH_ALEN, ETH_ALEN };
1806*85732ac8SCy Schubert 	unsigned char hash[SHA384_MAC_LEN];
1807e28a4053SRui Paulo 
1808e28a4053SRui Paulo 	addr[0] = (u8 *) title;
1809e28a4053SRui Paulo 	addr[1] = aa;
1810e28a4053SRui Paulo 	addr[2] = spa;
1811e28a4053SRui Paulo 
1812*85732ac8SCy Schubert 	if (0) {
1813*85732ac8SCy Schubert #if defined(CONFIG_FILS) || defined(CONFIG_SHA384)
1814*85732ac8SCy Schubert 	} else if (wpa_key_mgmt_sha384(akmp)) {
1815*85732ac8SCy Schubert 		wpa_printf(MSG_DEBUG, "RSN: Derive PMKID using HMAC-SHA-384");
1816*85732ac8SCy Schubert 		hmac_sha384_vector(pmk, pmk_len, 3, addr, len, hash);
1817*85732ac8SCy Schubert #endif /* CONFIG_FILS || CONFIG_SHA384 */
1818*85732ac8SCy Schubert #if defined(CONFIG_IEEE80211W) || defined(CONFIG_FILS)
1819*85732ac8SCy Schubert 	} else if (wpa_key_mgmt_sha256(akmp)) {
1820*85732ac8SCy Schubert 		wpa_printf(MSG_DEBUG, "RSN: Derive PMKID using HMAC-SHA-256");
1821e28a4053SRui Paulo 		hmac_sha256_vector(pmk, pmk_len, 3, addr, len, hash);
1822*85732ac8SCy Schubert #endif /* CONFIG_IEEE80211W || CONFIG_FILS */
1823*85732ac8SCy Schubert 	} else {
1824*85732ac8SCy Schubert 		wpa_printf(MSG_DEBUG, "RSN: Derive PMKID using HMAC-SHA-1");
1825e28a4053SRui Paulo 		hmac_sha1_vector(pmk, pmk_len, 3, addr, len, hash);
1826*85732ac8SCy Schubert 	}
1827*85732ac8SCy Schubert 	wpa_hexdump(MSG_DEBUG, "RSN: Derived PMKID", hash, PMKID_LEN);
1828e28a4053SRui Paulo 	os_memcpy(pmkid, hash, PMKID_LEN);
1829e28a4053SRui Paulo }
1830e28a4053SRui Paulo 
1831e28a4053SRui Paulo 
18325b9c547cSRui Paulo #ifdef CONFIG_SUITEB
18335b9c547cSRui Paulo /**
18345b9c547cSRui Paulo  * rsn_pmkid_suite_b - Calculate PMK identifier for Suite B AKM
18355b9c547cSRui Paulo  * @kck: Key confirmation key
18365b9c547cSRui Paulo  * @kck_len: Length of kck in bytes
18375b9c547cSRui Paulo  * @aa: Authenticator address
18385b9c547cSRui Paulo  * @spa: Supplicant address
18395b9c547cSRui Paulo  * @pmkid: Buffer for PMKID
18405b9c547cSRui Paulo  * Returns: 0 on success, -1 on failure
18415b9c547cSRui Paulo  *
18425b9c547cSRui Paulo  * IEEE Std 802.11ac-2013 - 11.6.1.3 Pairwise key hierarchy
18435b9c547cSRui Paulo  * PMKID = Truncate(HMAC-SHA-256(KCK, "PMK Name" || AA || SPA))
18445b9c547cSRui Paulo  */
18455b9c547cSRui Paulo int rsn_pmkid_suite_b(const u8 *kck, size_t kck_len, const u8 *aa,
18465b9c547cSRui Paulo 		      const u8 *spa, u8 *pmkid)
18475b9c547cSRui Paulo {
18485b9c547cSRui Paulo 	char *title = "PMK Name";
18495b9c547cSRui Paulo 	const u8 *addr[3];
18505b9c547cSRui Paulo 	const size_t len[3] = { 8, ETH_ALEN, ETH_ALEN };
18515b9c547cSRui Paulo 	unsigned char hash[SHA256_MAC_LEN];
18525b9c547cSRui Paulo 
18535b9c547cSRui Paulo 	addr[0] = (u8 *) title;
18545b9c547cSRui Paulo 	addr[1] = aa;
18555b9c547cSRui Paulo 	addr[2] = spa;
18565b9c547cSRui Paulo 
18575b9c547cSRui Paulo 	if (hmac_sha256_vector(kck, kck_len, 3, addr, len, hash) < 0)
18585b9c547cSRui Paulo 		return -1;
18595b9c547cSRui Paulo 	os_memcpy(pmkid, hash, PMKID_LEN);
18605b9c547cSRui Paulo 	return 0;
18615b9c547cSRui Paulo }
18625b9c547cSRui Paulo #endif /* CONFIG_SUITEB */
18635b9c547cSRui Paulo 
18645b9c547cSRui Paulo 
18655b9c547cSRui Paulo #ifdef CONFIG_SUITEB192
18665b9c547cSRui Paulo /**
18675b9c547cSRui Paulo  * rsn_pmkid_suite_b_192 - Calculate PMK identifier for Suite B AKM
18685b9c547cSRui Paulo  * @kck: Key confirmation key
18695b9c547cSRui Paulo  * @kck_len: Length of kck in bytes
18705b9c547cSRui Paulo  * @aa: Authenticator address
18715b9c547cSRui Paulo  * @spa: Supplicant address
18725b9c547cSRui Paulo  * @pmkid: Buffer for PMKID
18735b9c547cSRui Paulo  * Returns: 0 on success, -1 on failure
18745b9c547cSRui Paulo  *
18755b9c547cSRui Paulo  * IEEE Std 802.11ac-2013 - 11.6.1.3 Pairwise key hierarchy
18765b9c547cSRui Paulo  * PMKID = Truncate(HMAC-SHA-384(KCK, "PMK Name" || AA || SPA))
18775b9c547cSRui Paulo  */
18785b9c547cSRui Paulo int rsn_pmkid_suite_b_192(const u8 *kck, size_t kck_len, const u8 *aa,
18795b9c547cSRui Paulo 			  const u8 *spa, u8 *pmkid)
18805b9c547cSRui Paulo {
18815b9c547cSRui Paulo 	char *title = "PMK Name";
18825b9c547cSRui Paulo 	const u8 *addr[3];
18835b9c547cSRui Paulo 	const size_t len[3] = { 8, ETH_ALEN, ETH_ALEN };
18845b9c547cSRui Paulo 	unsigned char hash[SHA384_MAC_LEN];
18855b9c547cSRui Paulo 
18865b9c547cSRui Paulo 	addr[0] = (u8 *) title;
18875b9c547cSRui Paulo 	addr[1] = aa;
18885b9c547cSRui Paulo 	addr[2] = spa;
18895b9c547cSRui Paulo 
18905b9c547cSRui Paulo 	if (hmac_sha384_vector(kck, kck_len, 3, addr, len, hash) < 0)
18915b9c547cSRui Paulo 		return -1;
18925b9c547cSRui Paulo 	os_memcpy(pmkid, hash, PMKID_LEN);
18935b9c547cSRui Paulo 	return 0;
18945b9c547cSRui Paulo }
18955b9c547cSRui Paulo #endif /* CONFIG_SUITEB192 */
18965b9c547cSRui Paulo 
18975b9c547cSRui Paulo 
1898e28a4053SRui Paulo /**
1899e28a4053SRui Paulo  * wpa_cipher_txt - Convert cipher suite to a text string
1900e28a4053SRui Paulo  * @cipher: Cipher suite (WPA_CIPHER_* enum)
1901e28a4053SRui Paulo  * Returns: Pointer to a text string of the cipher suite name
1902e28a4053SRui Paulo  */
1903e28a4053SRui Paulo const char * wpa_cipher_txt(int cipher)
1904e28a4053SRui Paulo {
1905e28a4053SRui Paulo 	switch (cipher) {
1906e28a4053SRui Paulo 	case WPA_CIPHER_NONE:
1907e28a4053SRui Paulo 		return "NONE";
1908e28a4053SRui Paulo 	case WPA_CIPHER_WEP40:
1909e28a4053SRui Paulo 		return "WEP-40";
1910e28a4053SRui Paulo 	case WPA_CIPHER_WEP104:
1911e28a4053SRui Paulo 		return "WEP-104";
1912e28a4053SRui Paulo 	case WPA_CIPHER_TKIP:
1913e28a4053SRui Paulo 		return "TKIP";
1914e28a4053SRui Paulo 	case WPA_CIPHER_CCMP:
1915e28a4053SRui Paulo 		return "CCMP";
1916e28a4053SRui Paulo 	case WPA_CIPHER_CCMP | WPA_CIPHER_TKIP:
1917e28a4053SRui Paulo 		return "CCMP+TKIP";
1918f05cddf9SRui Paulo 	case WPA_CIPHER_GCMP:
1919f05cddf9SRui Paulo 		return "GCMP";
19205b9c547cSRui Paulo 	case WPA_CIPHER_GCMP_256:
19215b9c547cSRui Paulo 		return "GCMP-256";
19225b9c547cSRui Paulo 	case WPA_CIPHER_CCMP_256:
19235b9c547cSRui Paulo 		return "CCMP-256";
1924*85732ac8SCy Schubert 	case WPA_CIPHER_AES_128_CMAC:
1925*85732ac8SCy Schubert 		return "BIP";
1926*85732ac8SCy Schubert 	case WPA_CIPHER_BIP_GMAC_128:
1927*85732ac8SCy Schubert 		return "BIP-GMAC-128";
1928*85732ac8SCy Schubert 	case WPA_CIPHER_BIP_GMAC_256:
1929*85732ac8SCy Schubert 		return "BIP-GMAC-256";
1930*85732ac8SCy Schubert 	case WPA_CIPHER_BIP_CMAC_256:
1931*85732ac8SCy Schubert 		return "BIP-CMAC-256";
19325b9c547cSRui Paulo 	case WPA_CIPHER_GTK_NOT_USED:
19335b9c547cSRui Paulo 		return "GTK_NOT_USED";
1934e28a4053SRui Paulo 	default:
1935e28a4053SRui Paulo 		return "UNKNOWN";
1936e28a4053SRui Paulo 	}
1937e28a4053SRui Paulo }
1938e28a4053SRui Paulo 
1939e28a4053SRui Paulo 
1940e28a4053SRui Paulo /**
1941e28a4053SRui Paulo  * wpa_key_mgmt_txt - Convert key management suite to a text string
1942e28a4053SRui Paulo  * @key_mgmt: Key management suite (WPA_KEY_MGMT_* enum)
1943e28a4053SRui Paulo  * @proto: WPA/WPA2 version (WPA_PROTO_*)
1944e28a4053SRui Paulo  * Returns: Pointer to a text string of the key management suite name
1945e28a4053SRui Paulo  */
1946e28a4053SRui Paulo const char * wpa_key_mgmt_txt(int key_mgmt, int proto)
1947e28a4053SRui Paulo {
1948e28a4053SRui Paulo 	switch (key_mgmt) {
1949e28a4053SRui Paulo 	case WPA_KEY_MGMT_IEEE8021X:
1950e28a4053SRui Paulo 		if (proto == (WPA_PROTO_RSN | WPA_PROTO_WPA))
1951e28a4053SRui Paulo 			return "WPA2+WPA/IEEE 802.1X/EAP";
1952e28a4053SRui Paulo 		return proto == WPA_PROTO_RSN ?
1953e28a4053SRui Paulo 			"WPA2/IEEE 802.1X/EAP" : "WPA/IEEE 802.1X/EAP";
1954e28a4053SRui Paulo 	case WPA_KEY_MGMT_PSK:
1955e28a4053SRui Paulo 		if (proto == (WPA_PROTO_RSN | WPA_PROTO_WPA))
1956e28a4053SRui Paulo 			return "WPA2-PSK+WPA-PSK";
1957e28a4053SRui Paulo 		return proto == WPA_PROTO_RSN ?
1958e28a4053SRui Paulo 			"WPA2-PSK" : "WPA-PSK";
1959e28a4053SRui Paulo 	case WPA_KEY_MGMT_NONE:
1960e28a4053SRui Paulo 		return "NONE";
1961780fb4a2SCy Schubert 	case WPA_KEY_MGMT_WPA_NONE:
1962780fb4a2SCy Schubert 		return "WPA-NONE";
1963e28a4053SRui Paulo 	case WPA_KEY_MGMT_IEEE8021X_NO_WPA:
1964e28a4053SRui Paulo 		return "IEEE 802.1X (no WPA)";
1965e28a4053SRui Paulo #ifdef CONFIG_IEEE80211R
1966e28a4053SRui Paulo 	case WPA_KEY_MGMT_FT_IEEE8021X:
1967e28a4053SRui Paulo 		return "FT-EAP";
1968*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FT_IEEE8021X_SHA384:
1969*85732ac8SCy Schubert 		return "FT-EAP-SHA384";
1970e28a4053SRui Paulo 	case WPA_KEY_MGMT_FT_PSK:
1971e28a4053SRui Paulo 		return "FT-PSK";
1972e28a4053SRui Paulo #endif /* CONFIG_IEEE80211R */
1973e28a4053SRui Paulo #ifdef CONFIG_IEEE80211W
1974e28a4053SRui Paulo 	case WPA_KEY_MGMT_IEEE8021X_SHA256:
1975e28a4053SRui Paulo 		return "WPA2-EAP-SHA256";
1976e28a4053SRui Paulo 	case WPA_KEY_MGMT_PSK_SHA256:
1977e28a4053SRui Paulo 		return "WPA2-PSK-SHA256";
1978e28a4053SRui Paulo #endif /* CONFIG_IEEE80211W */
19795b9c547cSRui Paulo 	case WPA_KEY_MGMT_WPS:
19805b9c547cSRui Paulo 		return "WPS";
19815b9c547cSRui Paulo 	case WPA_KEY_MGMT_SAE:
19825b9c547cSRui Paulo 		return "SAE";
19835b9c547cSRui Paulo 	case WPA_KEY_MGMT_FT_SAE:
19845b9c547cSRui Paulo 		return "FT-SAE";
19855b9c547cSRui Paulo 	case WPA_KEY_MGMT_OSEN:
19865b9c547cSRui Paulo 		return "OSEN";
19875b9c547cSRui Paulo 	case WPA_KEY_MGMT_IEEE8021X_SUITE_B:
19885b9c547cSRui Paulo 		return "WPA2-EAP-SUITE-B";
19895b9c547cSRui Paulo 	case WPA_KEY_MGMT_IEEE8021X_SUITE_B_192:
19905b9c547cSRui Paulo 		return "WPA2-EAP-SUITE-B-192";
1991*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FILS_SHA256:
1992*85732ac8SCy Schubert 		return "FILS-SHA256";
1993*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FILS_SHA384:
1994*85732ac8SCy Schubert 		return "FILS-SHA384";
1995*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FT_FILS_SHA256:
1996*85732ac8SCy Schubert 		return "FT-FILS-SHA256";
1997*85732ac8SCy Schubert 	case WPA_KEY_MGMT_FT_FILS_SHA384:
1998*85732ac8SCy Schubert 		return "FT-FILS-SHA384";
1999*85732ac8SCy Schubert 	case WPA_KEY_MGMT_OWE:
2000*85732ac8SCy Schubert 		return "OWE";
2001*85732ac8SCy Schubert 	case WPA_KEY_MGMT_DPP:
2002*85732ac8SCy Schubert 		return "DPP";
2003e28a4053SRui Paulo 	default:
2004e28a4053SRui Paulo 		return "UNKNOWN";
2005e28a4053SRui Paulo 	}
2006e28a4053SRui Paulo }
2007e28a4053SRui Paulo 
2008e28a4053SRui Paulo 
20095b9c547cSRui Paulo u32 wpa_akm_to_suite(int akm)
20105b9c547cSRui Paulo {
2011*85732ac8SCy Schubert 	if (akm & WPA_KEY_MGMT_FT_IEEE8021X_SHA384)
2012*85732ac8SCy Schubert 		return RSN_AUTH_KEY_MGMT_FT_802_1X_SHA384;
20135b9c547cSRui Paulo 	if (akm & WPA_KEY_MGMT_FT_IEEE8021X)
2014*85732ac8SCy Schubert 		return RSN_AUTH_KEY_MGMT_FT_802_1X;
20155b9c547cSRui Paulo 	if (akm & WPA_KEY_MGMT_FT_PSK)
2016*85732ac8SCy Schubert 		return RSN_AUTH_KEY_MGMT_FT_PSK;
20175b9c547cSRui Paulo 	if (akm & WPA_KEY_MGMT_IEEE8021X_SHA256)
2018*85732ac8SCy Schubert 		return RSN_AUTH_KEY_MGMT_802_1X_SHA256;
20195b9c547cSRui Paulo 	if (akm & WPA_KEY_MGMT_IEEE8021X)
2020*85732ac8SCy Schubert 		return RSN_AUTH_KEY_MGMT_UNSPEC_802_1X;
20215b9c547cSRui Paulo 	if (akm & WPA_KEY_MGMT_PSK_SHA256)
2022*85732ac8SCy Schubert 		return RSN_AUTH_KEY_MGMT_PSK_SHA256;
20235b9c547cSRui Paulo 	if (akm & WPA_KEY_MGMT_PSK)
2024*85732ac8SCy Schubert 		return RSN_AUTH_KEY_MGMT_PSK_OVER_802_1X;
20255b9c547cSRui Paulo 	if (akm & WPA_KEY_MGMT_CCKM)
2026*85732ac8SCy Schubert 		return RSN_AUTH_KEY_MGMT_CCKM;
20275b9c547cSRui Paulo 	if (akm & WPA_KEY_MGMT_OSEN)
2028*85732ac8SCy Schubert 		return RSN_AUTH_KEY_MGMT_OSEN;
20295b9c547cSRui Paulo 	if (akm & WPA_KEY_MGMT_IEEE8021X_SUITE_B)
2030*85732ac8SCy Schubert 		return RSN_AUTH_KEY_MGMT_802_1X_SUITE_B;
20315b9c547cSRui Paulo 	if (akm & WPA_KEY_MGMT_IEEE8021X_SUITE_B_192)
2032*85732ac8SCy Schubert 		return RSN_AUTH_KEY_MGMT_802_1X_SUITE_B_192;
2033*85732ac8SCy Schubert 	if (akm & WPA_KEY_MGMT_FILS_SHA256)
2034*85732ac8SCy Schubert 		return RSN_AUTH_KEY_MGMT_FILS_SHA256;
2035*85732ac8SCy Schubert 	if (akm & WPA_KEY_MGMT_FILS_SHA384)
2036*85732ac8SCy Schubert 		return RSN_AUTH_KEY_MGMT_FILS_SHA384;
2037*85732ac8SCy Schubert 	if (akm & WPA_KEY_MGMT_FT_FILS_SHA256)
2038*85732ac8SCy Schubert 		return RSN_AUTH_KEY_MGMT_FT_FILS_SHA256;
2039*85732ac8SCy Schubert 	if (akm & WPA_KEY_MGMT_FT_FILS_SHA384)
2040*85732ac8SCy Schubert 		return RSN_AUTH_KEY_MGMT_FT_FILS_SHA384;
20415b9c547cSRui Paulo 	return 0;
20425b9c547cSRui Paulo }
20435b9c547cSRui Paulo 
20445b9c547cSRui Paulo 
2045e28a4053SRui Paulo int wpa_compare_rsn_ie(int ft_initial_assoc,
2046e28a4053SRui Paulo 		       const u8 *ie1, size_t ie1len,
2047e28a4053SRui Paulo 		       const u8 *ie2, size_t ie2len)
2048e28a4053SRui Paulo {
2049e28a4053SRui Paulo 	if (ie1 == NULL || ie2 == NULL)
2050e28a4053SRui Paulo 		return -1;
2051e28a4053SRui Paulo 
2052e28a4053SRui Paulo 	if (ie1len == ie2len && os_memcmp(ie1, ie2, ie1len) == 0)
2053e28a4053SRui Paulo 		return 0; /* identical IEs */
2054e28a4053SRui Paulo 
2055e28a4053SRui Paulo #ifdef CONFIG_IEEE80211R
2056e28a4053SRui Paulo 	if (ft_initial_assoc) {
2057e28a4053SRui Paulo 		struct wpa_ie_data ie1d, ie2d;
2058e28a4053SRui Paulo 		/*
2059e28a4053SRui Paulo 		 * The PMKID-List in RSN IE is different between Beacon/Probe
2060e28a4053SRui Paulo 		 * Response/(Re)Association Request frames and EAPOL-Key
2061e28a4053SRui Paulo 		 * messages in FT initial mobility domain association. Allow
2062e28a4053SRui Paulo 		 * for this, but verify that other parts of the RSN IEs are
2063e28a4053SRui Paulo 		 * identical.
2064e28a4053SRui Paulo 		 */
2065e28a4053SRui Paulo 		if (wpa_parse_wpa_ie_rsn(ie1, ie1len, &ie1d) < 0 ||
2066e28a4053SRui Paulo 		    wpa_parse_wpa_ie_rsn(ie2, ie2len, &ie2d) < 0)
2067e28a4053SRui Paulo 			return -1;
2068e28a4053SRui Paulo 		if (ie1d.proto == ie2d.proto &&
2069e28a4053SRui Paulo 		    ie1d.pairwise_cipher == ie2d.pairwise_cipher &&
2070e28a4053SRui Paulo 		    ie1d.group_cipher == ie2d.group_cipher &&
2071e28a4053SRui Paulo 		    ie1d.key_mgmt == ie2d.key_mgmt &&
2072e28a4053SRui Paulo 		    ie1d.capabilities == ie2d.capabilities &&
2073e28a4053SRui Paulo 		    ie1d.mgmt_group_cipher == ie2d.mgmt_group_cipher)
2074e28a4053SRui Paulo 			return 0;
2075e28a4053SRui Paulo 	}
2076e28a4053SRui Paulo #endif /* CONFIG_IEEE80211R */
2077e28a4053SRui Paulo 
2078e28a4053SRui Paulo 	return -1;
2079e28a4053SRui Paulo }
2080e28a4053SRui Paulo 
2081e28a4053SRui Paulo 
2082*85732ac8SCy Schubert #if defined(CONFIG_IEEE80211R) || defined(CONFIG_FILS)
2083780fb4a2SCy Schubert int wpa_insert_pmkid(u8 *ies, size_t *ies_len, const u8 *pmkid)
2084e28a4053SRui Paulo {
2085e28a4053SRui Paulo 	u8 *start, *end, *rpos, *rend;
2086e28a4053SRui Paulo 	int added = 0;
2087e28a4053SRui Paulo 
2088e28a4053SRui Paulo 	start = ies;
2089780fb4a2SCy Schubert 	end = ies + *ies_len;
2090e28a4053SRui Paulo 
2091e28a4053SRui Paulo 	while (start < end) {
2092e28a4053SRui Paulo 		if (*start == WLAN_EID_RSN)
2093e28a4053SRui Paulo 			break;
2094e28a4053SRui Paulo 		start += 2 + start[1];
2095e28a4053SRui Paulo 	}
2096e28a4053SRui Paulo 	if (start >= end) {
2097e28a4053SRui Paulo 		wpa_printf(MSG_ERROR, "FT: Could not find RSN IE in "
2098e28a4053SRui Paulo 			   "IEs data");
2099e28a4053SRui Paulo 		return -1;
2100e28a4053SRui Paulo 	}
2101e28a4053SRui Paulo 	wpa_hexdump(MSG_DEBUG, "FT: RSN IE before modification",
2102e28a4053SRui Paulo 		    start, 2 + start[1]);
2103e28a4053SRui Paulo 
2104e28a4053SRui Paulo 	/* Find start of PMKID-Count */
2105e28a4053SRui Paulo 	rpos = start + 2;
2106e28a4053SRui Paulo 	rend = rpos + start[1];
2107e28a4053SRui Paulo 
2108e28a4053SRui Paulo 	/* Skip Version and Group Data Cipher Suite */
2109e28a4053SRui Paulo 	rpos += 2 + 4;
2110e28a4053SRui Paulo 	/* Skip Pairwise Cipher Suite Count and List */
2111e28a4053SRui Paulo 	rpos += 2 + WPA_GET_LE16(rpos) * RSN_SELECTOR_LEN;
2112e28a4053SRui Paulo 	/* Skip AKM Suite Count and List */
2113e28a4053SRui Paulo 	rpos += 2 + WPA_GET_LE16(rpos) * RSN_SELECTOR_LEN;
2114e28a4053SRui Paulo 
2115e28a4053SRui Paulo 	if (rpos == rend) {
2116e28a4053SRui Paulo 		/* Add RSN Capabilities */
2117e28a4053SRui Paulo 		os_memmove(rpos + 2, rpos, end - rpos);
2118e28a4053SRui Paulo 		*rpos++ = 0;
2119e28a4053SRui Paulo 		*rpos++ = 0;
2120325151a3SRui Paulo 		added += 2;
2121325151a3SRui Paulo 		start[1] += 2;
2122325151a3SRui Paulo 		rend = rpos;
2123e28a4053SRui Paulo 	} else {
2124e28a4053SRui Paulo 		/* Skip RSN Capabilities */
2125e28a4053SRui Paulo 		rpos += 2;
2126e28a4053SRui Paulo 		if (rpos > rend) {
2127e28a4053SRui Paulo 			wpa_printf(MSG_ERROR, "FT: Could not parse RSN IE in "
2128e28a4053SRui Paulo 				   "IEs data");
2129e28a4053SRui Paulo 			return -1;
2130e28a4053SRui Paulo 		}
2131e28a4053SRui Paulo 	}
2132e28a4053SRui Paulo 
2133e28a4053SRui Paulo 	if (rpos == rend) {
2134e28a4053SRui Paulo 		/* No PMKID-Count field included; add it */
2135325151a3SRui Paulo 		os_memmove(rpos + 2 + PMKID_LEN, rpos, end + added - rpos);
2136e28a4053SRui Paulo 		WPA_PUT_LE16(rpos, 1);
2137e28a4053SRui Paulo 		rpos += 2;
2138e28a4053SRui Paulo 		os_memcpy(rpos, pmkid, PMKID_LEN);
2139e28a4053SRui Paulo 		added += 2 + PMKID_LEN;
2140e28a4053SRui Paulo 		start[1] += 2 + PMKID_LEN;
2141e28a4053SRui Paulo 	} else {
2142780fb4a2SCy Schubert 		u16 num_pmkid;
2143780fb4a2SCy Schubert 
2144780fb4a2SCy Schubert 		if (rend - rpos < 2)
2145e28a4053SRui Paulo 			return -1;
2146780fb4a2SCy Schubert 		num_pmkid = WPA_GET_LE16(rpos);
2147780fb4a2SCy Schubert 		/* PMKID-Count was included; use it */
2148780fb4a2SCy Schubert 		if (num_pmkid != 0) {
2149780fb4a2SCy Schubert 			u8 *after;
2150780fb4a2SCy Schubert 
2151780fb4a2SCy Schubert 			if (num_pmkid * PMKID_LEN > rend - rpos - 2)
2152780fb4a2SCy Schubert 				return -1;
2153780fb4a2SCy Schubert 			/*
2154780fb4a2SCy Schubert 			 * PMKID may have been included in RSN IE in
2155780fb4a2SCy Schubert 			 * (Re)Association Request frame, so remove the old
2156780fb4a2SCy Schubert 			 * PMKID(s) first before adding the new one.
2157780fb4a2SCy Schubert 			 */
2158780fb4a2SCy Schubert 			wpa_printf(MSG_DEBUG,
2159780fb4a2SCy Schubert 				   "FT: Remove %u old PMKID(s) from RSN IE",
2160780fb4a2SCy Schubert 				   num_pmkid);
2161780fb4a2SCy Schubert 			after = rpos + 2 + num_pmkid * PMKID_LEN;
2162780fb4a2SCy Schubert 			os_memmove(rpos + 2, after, rend - after);
2163780fb4a2SCy Schubert 			start[1] -= num_pmkid * PMKID_LEN;
2164780fb4a2SCy Schubert 			added -= num_pmkid * PMKID_LEN;
2165e28a4053SRui Paulo 		}
2166e28a4053SRui Paulo 		WPA_PUT_LE16(rpos, 1);
2167e28a4053SRui Paulo 		rpos += 2;
2168325151a3SRui Paulo 		os_memmove(rpos + PMKID_LEN, rpos, end + added - rpos);
2169e28a4053SRui Paulo 		os_memcpy(rpos, pmkid, PMKID_LEN);
2170e28a4053SRui Paulo 		added += PMKID_LEN;
2171e28a4053SRui Paulo 		start[1] += PMKID_LEN;
2172e28a4053SRui Paulo 	}
2173e28a4053SRui Paulo 
2174e28a4053SRui Paulo 	wpa_hexdump(MSG_DEBUG, "FT: RSN IE after modification "
2175e28a4053SRui Paulo 		    "(PMKID inserted)", start, 2 + start[1]);
2176e28a4053SRui Paulo 
2177780fb4a2SCy Schubert 	*ies_len += added;
2178780fb4a2SCy Schubert 
2179780fb4a2SCy Schubert 	return 0;
2180e28a4053SRui Paulo }
2181*85732ac8SCy Schubert #endif /* CONFIG_IEEE80211R || CONFIG_FILS */
2182f05cddf9SRui Paulo 
2183f05cddf9SRui Paulo 
2184f05cddf9SRui Paulo int wpa_cipher_key_len(int cipher)
2185f05cddf9SRui Paulo {
2186f05cddf9SRui Paulo 	switch (cipher) {
21875b9c547cSRui Paulo 	case WPA_CIPHER_CCMP_256:
21885b9c547cSRui Paulo 	case WPA_CIPHER_GCMP_256:
21895b9c547cSRui Paulo 	case WPA_CIPHER_BIP_GMAC_256:
21905b9c547cSRui Paulo 	case WPA_CIPHER_BIP_CMAC_256:
21915b9c547cSRui Paulo 		return 32;
2192f05cddf9SRui Paulo 	case WPA_CIPHER_CCMP:
2193f05cddf9SRui Paulo 	case WPA_CIPHER_GCMP:
21945b9c547cSRui Paulo 	case WPA_CIPHER_AES_128_CMAC:
21955b9c547cSRui Paulo 	case WPA_CIPHER_BIP_GMAC_128:
2196f05cddf9SRui Paulo 		return 16;
2197f05cddf9SRui Paulo 	case WPA_CIPHER_TKIP:
2198f05cddf9SRui Paulo 		return 32;
2199f05cddf9SRui Paulo 	}
2200f05cddf9SRui Paulo 
2201f05cddf9SRui Paulo 	return 0;
2202f05cddf9SRui Paulo }
2203f05cddf9SRui Paulo 
2204f05cddf9SRui Paulo 
2205f05cddf9SRui Paulo int wpa_cipher_rsc_len(int cipher)
2206f05cddf9SRui Paulo {
2207f05cddf9SRui Paulo 	switch (cipher) {
22085b9c547cSRui Paulo 	case WPA_CIPHER_CCMP_256:
22095b9c547cSRui Paulo 	case WPA_CIPHER_GCMP_256:
2210f05cddf9SRui Paulo 	case WPA_CIPHER_CCMP:
2211f05cddf9SRui Paulo 	case WPA_CIPHER_GCMP:
2212f05cddf9SRui Paulo 	case WPA_CIPHER_TKIP:
2213f05cddf9SRui Paulo 		return 6;
2214f05cddf9SRui Paulo 	}
2215f05cddf9SRui Paulo 
2216f05cddf9SRui Paulo 	return 0;
2217f05cddf9SRui Paulo }
2218f05cddf9SRui Paulo 
2219f05cddf9SRui Paulo 
2220*85732ac8SCy Schubert enum wpa_alg wpa_cipher_to_alg(int cipher)
2221f05cddf9SRui Paulo {
2222f05cddf9SRui Paulo 	switch (cipher) {
22235b9c547cSRui Paulo 	case WPA_CIPHER_CCMP_256:
22245b9c547cSRui Paulo 		return WPA_ALG_CCMP_256;
22255b9c547cSRui Paulo 	case WPA_CIPHER_GCMP_256:
22265b9c547cSRui Paulo 		return WPA_ALG_GCMP_256;
2227f05cddf9SRui Paulo 	case WPA_CIPHER_CCMP:
2228f05cddf9SRui Paulo 		return WPA_ALG_CCMP;
2229f05cddf9SRui Paulo 	case WPA_CIPHER_GCMP:
2230f05cddf9SRui Paulo 		return WPA_ALG_GCMP;
2231f05cddf9SRui Paulo 	case WPA_CIPHER_TKIP:
2232f05cddf9SRui Paulo 		return WPA_ALG_TKIP;
22335b9c547cSRui Paulo 	case WPA_CIPHER_AES_128_CMAC:
22345b9c547cSRui Paulo 		return WPA_ALG_IGTK;
22355b9c547cSRui Paulo 	case WPA_CIPHER_BIP_GMAC_128:
22365b9c547cSRui Paulo 		return WPA_ALG_BIP_GMAC_128;
22375b9c547cSRui Paulo 	case WPA_CIPHER_BIP_GMAC_256:
22385b9c547cSRui Paulo 		return WPA_ALG_BIP_GMAC_256;
22395b9c547cSRui Paulo 	case WPA_CIPHER_BIP_CMAC_256:
22405b9c547cSRui Paulo 		return WPA_ALG_BIP_CMAC_256;
2241f05cddf9SRui Paulo 	}
2242f05cddf9SRui Paulo 	return WPA_ALG_NONE;
2243f05cddf9SRui Paulo }
2244f05cddf9SRui Paulo 
2245f05cddf9SRui Paulo 
2246f05cddf9SRui Paulo int wpa_cipher_valid_pairwise(int cipher)
2247f05cddf9SRui Paulo {
22485b9c547cSRui Paulo 	return cipher == WPA_CIPHER_CCMP_256 ||
22495b9c547cSRui Paulo 		cipher == WPA_CIPHER_GCMP_256 ||
22505b9c547cSRui Paulo 		cipher == WPA_CIPHER_CCMP ||
2251f05cddf9SRui Paulo 		cipher == WPA_CIPHER_GCMP ||
2252f05cddf9SRui Paulo 		cipher == WPA_CIPHER_TKIP;
2253f05cddf9SRui Paulo }
2254f05cddf9SRui Paulo 
2255f05cddf9SRui Paulo 
2256f05cddf9SRui Paulo u32 wpa_cipher_to_suite(int proto, int cipher)
2257f05cddf9SRui Paulo {
22585b9c547cSRui Paulo 	if (cipher & WPA_CIPHER_CCMP_256)
22595b9c547cSRui Paulo 		return RSN_CIPHER_SUITE_CCMP_256;
22605b9c547cSRui Paulo 	if (cipher & WPA_CIPHER_GCMP_256)
22615b9c547cSRui Paulo 		return RSN_CIPHER_SUITE_GCMP_256;
2262f05cddf9SRui Paulo 	if (cipher & WPA_CIPHER_CCMP)
2263f05cddf9SRui Paulo 		return (proto == WPA_PROTO_RSN ?
2264f05cddf9SRui Paulo 			RSN_CIPHER_SUITE_CCMP : WPA_CIPHER_SUITE_CCMP);
2265f05cddf9SRui Paulo 	if (cipher & WPA_CIPHER_GCMP)
2266f05cddf9SRui Paulo 		return RSN_CIPHER_SUITE_GCMP;
2267f05cddf9SRui Paulo 	if (cipher & WPA_CIPHER_TKIP)
2268f05cddf9SRui Paulo 		return (proto == WPA_PROTO_RSN ?
2269f05cddf9SRui Paulo 			RSN_CIPHER_SUITE_TKIP : WPA_CIPHER_SUITE_TKIP);
2270f05cddf9SRui Paulo 	if (cipher & WPA_CIPHER_NONE)
2271f05cddf9SRui Paulo 		return (proto == WPA_PROTO_RSN ?
2272f05cddf9SRui Paulo 			RSN_CIPHER_SUITE_NONE : WPA_CIPHER_SUITE_NONE);
22735b9c547cSRui Paulo 	if (cipher & WPA_CIPHER_GTK_NOT_USED)
22745b9c547cSRui Paulo 		return RSN_CIPHER_SUITE_NO_GROUP_ADDRESSED;
22755b9c547cSRui Paulo 	if (cipher & WPA_CIPHER_AES_128_CMAC)
22765b9c547cSRui Paulo 		return RSN_CIPHER_SUITE_AES_128_CMAC;
22775b9c547cSRui Paulo 	if (cipher & WPA_CIPHER_BIP_GMAC_128)
22785b9c547cSRui Paulo 		return RSN_CIPHER_SUITE_BIP_GMAC_128;
22795b9c547cSRui Paulo 	if (cipher & WPA_CIPHER_BIP_GMAC_256)
22805b9c547cSRui Paulo 		return RSN_CIPHER_SUITE_BIP_GMAC_256;
22815b9c547cSRui Paulo 	if (cipher & WPA_CIPHER_BIP_CMAC_256)
22825b9c547cSRui Paulo 		return RSN_CIPHER_SUITE_BIP_CMAC_256;
2283f05cddf9SRui Paulo 	return 0;
2284f05cddf9SRui Paulo }
2285f05cddf9SRui Paulo 
2286f05cddf9SRui Paulo 
22875b9c547cSRui Paulo int rsn_cipher_put_suites(u8 *start, int ciphers)
2288f05cddf9SRui Paulo {
22895b9c547cSRui Paulo 	u8 *pos = start;
2290f05cddf9SRui Paulo 
22915b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_CCMP_256) {
22925b9c547cSRui Paulo 		RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_CCMP_256);
22935b9c547cSRui Paulo 		pos += RSN_SELECTOR_LEN;
22945b9c547cSRui Paulo 	}
22955b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_GCMP_256) {
22965b9c547cSRui Paulo 		RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_GCMP_256);
22975b9c547cSRui Paulo 		pos += RSN_SELECTOR_LEN;
22985b9c547cSRui Paulo 	}
2299f05cddf9SRui Paulo 	if (ciphers & WPA_CIPHER_CCMP) {
2300f05cddf9SRui Paulo 		RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_CCMP);
2301f05cddf9SRui Paulo 		pos += RSN_SELECTOR_LEN;
2302f05cddf9SRui Paulo 	}
2303f05cddf9SRui Paulo 	if (ciphers & WPA_CIPHER_GCMP) {
2304f05cddf9SRui Paulo 		RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_GCMP);
2305f05cddf9SRui Paulo 		pos += RSN_SELECTOR_LEN;
2306f05cddf9SRui Paulo 	}
2307f05cddf9SRui Paulo 	if (ciphers & WPA_CIPHER_TKIP) {
2308f05cddf9SRui Paulo 		RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_TKIP);
2309f05cddf9SRui Paulo 		pos += RSN_SELECTOR_LEN;
2310f05cddf9SRui Paulo 	}
2311f05cddf9SRui Paulo 	if (ciphers & WPA_CIPHER_NONE) {
2312f05cddf9SRui Paulo 		RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_NONE);
2313f05cddf9SRui Paulo 		pos += RSN_SELECTOR_LEN;
2314f05cddf9SRui Paulo 	}
2315f05cddf9SRui Paulo 
23165b9c547cSRui Paulo 	return (pos - start) / RSN_SELECTOR_LEN;
2317f05cddf9SRui Paulo }
2318f05cddf9SRui Paulo 
2319f05cddf9SRui Paulo 
23205b9c547cSRui Paulo int wpa_cipher_put_suites(u8 *start, int ciphers)
2321f05cddf9SRui Paulo {
23225b9c547cSRui Paulo 	u8 *pos = start;
2323f05cddf9SRui Paulo 
2324f05cddf9SRui Paulo 	if (ciphers & WPA_CIPHER_CCMP) {
2325f05cddf9SRui Paulo 		RSN_SELECTOR_PUT(pos, WPA_CIPHER_SUITE_CCMP);
2326f05cddf9SRui Paulo 		pos += WPA_SELECTOR_LEN;
2327f05cddf9SRui Paulo 	}
2328f05cddf9SRui Paulo 	if (ciphers & WPA_CIPHER_TKIP) {
2329f05cddf9SRui Paulo 		RSN_SELECTOR_PUT(pos, WPA_CIPHER_SUITE_TKIP);
2330f05cddf9SRui Paulo 		pos += WPA_SELECTOR_LEN;
2331f05cddf9SRui Paulo 	}
2332f05cddf9SRui Paulo 	if (ciphers & WPA_CIPHER_NONE) {
2333f05cddf9SRui Paulo 		RSN_SELECTOR_PUT(pos, WPA_CIPHER_SUITE_NONE);
2334f05cddf9SRui Paulo 		pos += WPA_SELECTOR_LEN;
2335f05cddf9SRui Paulo 	}
2336f05cddf9SRui Paulo 
23375b9c547cSRui Paulo 	return (pos - start) / RSN_SELECTOR_LEN;
23385b9c547cSRui Paulo }
23395b9c547cSRui Paulo 
23405b9c547cSRui Paulo 
23415b9c547cSRui Paulo int wpa_pick_pairwise_cipher(int ciphers, int none_allowed)
23425b9c547cSRui Paulo {
23435b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_CCMP_256)
23445b9c547cSRui Paulo 		return WPA_CIPHER_CCMP_256;
23455b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_GCMP_256)
23465b9c547cSRui Paulo 		return WPA_CIPHER_GCMP_256;
23475b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_CCMP)
23485b9c547cSRui Paulo 		return WPA_CIPHER_CCMP;
23495b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_GCMP)
23505b9c547cSRui Paulo 		return WPA_CIPHER_GCMP;
23515b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_TKIP)
23525b9c547cSRui Paulo 		return WPA_CIPHER_TKIP;
23535b9c547cSRui Paulo 	if (none_allowed && (ciphers & WPA_CIPHER_NONE))
23545b9c547cSRui Paulo 		return WPA_CIPHER_NONE;
23555b9c547cSRui Paulo 	return -1;
23565b9c547cSRui Paulo }
23575b9c547cSRui Paulo 
23585b9c547cSRui Paulo 
23595b9c547cSRui Paulo int wpa_pick_group_cipher(int ciphers)
23605b9c547cSRui Paulo {
23615b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_CCMP_256)
23625b9c547cSRui Paulo 		return WPA_CIPHER_CCMP_256;
23635b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_GCMP_256)
23645b9c547cSRui Paulo 		return WPA_CIPHER_GCMP_256;
23655b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_CCMP)
23665b9c547cSRui Paulo 		return WPA_CIPHER_CCMP;
23675b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_GCMP)
23685b9c547cSRui Paulo 		return WPA_CIPHER_GCMP;
23695b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_GTK_NOT_USED)
23705b9c547cSRui Paulo 		return WPA_CIPHER_GTK_NOT_USED;
23715b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_TKIP)
23725b9c547cSRui Paulo 		return WPA_CIPHER_TKIP;
23735b9c547cSRui Paulo 	return -1;
23745b9c547cSRui Paulo }
23755b9c547cSRui Paulo 
23765b9c547cSRui Paulo 
23775b9c547cSRui Paulo int wpa_parse_cipher(const char *value)
23785b9c547cSRui Paulo {
23795b9c547cSRui Paulo 	int val = 0, last;
23805b9c547cSRui Paulo 	char *start, *end, *buf;
23815b9c547cSRui Paulo 
23825b9c547cSRui Paulo 	buf = os_strdup(value);
23835b9c547cSRui Paulo 	if (buf == NULL)
23845b9c547cSRui Paulo 		return -1;
23855b9c547cSRui Paulo 	start = buf;
23865b9c547cSRui Paulo 
23875b9c547cSRui Paulo 	while (*start != '\0') {
23885b9c547cSRui Paulo 		while (*start == ' ' || *start == '\t')
23895b9c547cSRui Paulo 			start++;
23905b9c547cSRui Paulo 		if (*start == '\0')
23915b9c547cSRui Paulo 			break;
23925b9c547cSRui Paulo 		end = start;
23935b9c547cSRui Paulo 		while (*end != ' ' && *end != '\t' && *end != '\0')
23945b9c547cSRui Paulo 			end++;
23955b9c547cSRui Paulo 		last = *end == '\0';
23965b9c547cSRui Paulo 		*end = '\0';
23975b9c547cSRui Paulo 		if (os_strcmp(start, "CCMP-256") == 0)
23985b9c547cSRui Paulo 			val |= WPA_CIPHER_CCMP_256;
23995b9c547cSRui Paulo 		else if (os_strcmp(start, "GCMP-256") == 0)
24005b9c547cSRui Paulo 			val |= WPA_CIPHER_GCMP_256;
24015b9c547cSRui Paulo 		else if (os_strcmp(start, "CCMP") == 0)
24025b9c547cSRui Paulo 			val |= WPA_CIPHER_CCMP;
24035b9c547cSRui Paulo 		else if (os_strcmp(start, "GCMP") == 0)
24045b9c547cSRui Paulo 			val |= WPA_CIPHER_GCMP;
24055b9c547cSRui Paulo 		else if (os_strcmp(start, "TKIP") == 0)
24065b9c547cSRui Paulo 			val |= WPA_CIPHER_TKIP;
24075b9c547cSRui Paulo 		else if (os_strcmp(start, "WEP104") == 0)
24085b9c547cSRui Paulo 			val |= WPA_CIPHER_WEP104;
24095b9c547cSRui Paulo 		else if (os_strcmp(start, "WEP40") == 0)
24105b9c547cSRui Paulo 			val |= WPA_CIPHER_WEP40;
24115b9c547cSRui Paulo 		else if (os_strcmp(start, "NONE") == 0)
24125b9c547cSRui Paulo 			val |= WPA_CIPHER_NONE;
24135b9c547cSRui Paulo 		else if (os_strcmp(start, "GTK_NOT_USED") == 0)
24145b9c547cSRui Paulo 			val |= WPA_CIPHER_GTK_NOT_USED;
2415*85732ac8SCy Schubert 		else if (os_strcmp(start, "AES-128-CMAC") == 0)
2416*85732ac8SCy Schubert 			val |= WPA_CIPHER_AES_128_CMAC;
2417*85732ac8SCy Schubert 		else if (os_strcmp(start, "BIP-GMAC-128") == 0)
2418*85732ac8SCy Schubert 			val |= WPA_CIPHER_BIP_GMAC_128;
2419*85732ac8SCy Schubert 		else if (os_strcmp(start, "BIP-GMAC-256") == 0)
2420*85732ac8SCy Schubert 			val |= WPA_CIPHER_BIP_GMAC_256;
2421*85732ac8SCy Schubert 		else if (os_strcmp(start, "BIP-CMAC-256") == 0)
2422*85732ac8SCy Schubert 			val |= WPA_CIPHER_BIP_CMAC_256;
24235b9c547cSRui Paulo 		else {
24245b9c547cSRui Paulo 			os_free(buf);
24255b9c547cSRui Paulo 			return -1;
24265b9c547cSRui Paulo 		}
24275b9c547cSRui Paulo 
24285b9c547cSRui Paulo 		if (last)
24295b9c547cSRui Paulo 			break;
24305b9c547cSRui Paulo 		start = end + 1;
24315b9c547cSRui Paulo 	}
24325b9c547cSRui Paulo 	os_free(buf);
24335b9c547cSRui Paulo 
24345b9c547cSRui Paulo 	return val;
24355b9c547cSRui Paulo }
24365b9c547cSRui Paulo 
24375b9c547cSRui Paulo 
24385b9c547cSRui Paulo int wpa_write_ciphers(char *start, char *end, int ciphers, const char *delim)
24395b9c547cSRui Paulo {
24405b9c547cSRui Paulo 	char *pos = start;
24415b9c547cSRui Paulo 	int ret;
24425b9c547cSRui Paulo 
24435b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_CCMP_256) {
24445b9c547cSRui Paulo 		ret = os_snprintf(pos, end - pos, "%sCCMP-256",
24455b9c547cSRui Paulo 				  pos == start ? "" : delim);
24465b9c547cSRui Paulo 		if (os_snprintf_error(end - pos, ret))
24475b9c547cSRui Paulo 			return -1;
24485b9c547cSRui Paulo 		pos += ret;
24495b9c547cSRui Paulo 	}
24505b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_GCMP_256) {
24515b9c547cSRui Paulo 		ret = os_snprintf(pos, end - pos, "%sGCMP-256",
24525b9c547cSRui Paulo 				  pos == start ? "" : delim);
24535b9c547cSRui Paulo 		if (os_snprintf_error(end - pos, ret))
24545b9c547cSRui Paulo 			return -1;
24555b9c547cSRui Paulo 		pos += ret;
24565b9c547cSRui Paulo 	}
24575b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_CCMP) {
24585b9c547cSRui Paulo 		ret = os_snprintf(pos, end - pos, "%sCCMP",
24595b9c547cSRui Paulo 				  pos == start ? "" : delim);
24605b9c547cSRui Paulo 		if (os_snprintf_error(end - pos, ret))
24615b9c547cSRui Paulo 			return -1;
24625b9c547cSRui Paulo 		pos += ret;
24635b9c547cSRui Paulo 	}
24645b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_GCMP) {
24655b9c547cSRui Paulo 		ret = os_snprintf(pos, end - pos, "%sGCMP",
24665b9c547cSRui Paulo 				  pos == start ? "" : delim);
24675b9c547cSRui Paulo 		if (os_snprintf_error(end - pos, ret))
24685b9c547cSRui Paulo 			return -1;
24695b9c547cSRui Paulo 		pos += ret;
24705b9c547cSRui Paulo 	}
24715b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_TKIP) {
24725b9c547cSRui Paulo 		ret = os_snprintf(pos, end - pos, "%sTKIP",
24735b9c547cSRui Paulo 				  pos == start ? "" : delim);
24745b9c547cSRui Paulo 		if (os_snprintf_error(end - pos, ret))
24755b9c547cSRui Paulo 			return -1;
24765b9c547cSRui Paulo 		pos += ret;
24775b9c547cSRui Paulo 	}
2478*85732ac8SCy Schubert 	if (ciphers & WPA_CIPHER_AES_128_CMAC) {
2479*85732ac8SCy Schubert 		ret = os_snprintf(pos, end - pos, "%sAES-128-CMAC",
2480*85732ac8SCy Schubert 				  pos == start ? "" : delim);
2481*85732ac8SCy Schubert 		if (os_snprintf_error(end - pos, ret))
2482*85732ac8SCy Schubert 			return -1;
2483*85732ac8SCy Schubert 		pos += ret;
2484*85732ac8SCy Schubert 	}
2485*85732ac8SCy Schubert 	if (ciphers & WPA_CIPHER_BIP_GMAC_128) {
2486*85732ac8SCy Schubert 		ret = os_snprintf(pos, end - pos, "%sBIP-GMAC-128",
2487*85732ac8SCy Schubert 				  pos == start ? "" : delim);
2488*85732ac8SCy Schubert 		if (os_snprintf_error(end - pos, ret))
2489*85732ac8SCy Schubert 			return -1;
2490*85732ac8SCy Schubert 		pos += ret;
2491*85732ac8SCy Schubert 	}
2492*85732ac8SCy Schubert 	if (ciphers & WPA_CIPHER_BIP_GMAC_256) {
2493*85732ac8SCy Schubert 		ret = os_snprintf(pos, end - pos, "%sBIP-GMAC-256",
2494*85732ac8SCy Schubert 				  pos == start ? "" : delim);
2495*85732ac8SCy Schubert 		if (os_snprintf_error(end - pos, ret))
2496*85732ac8SCy Schubert 			return -1;
2497*85732ac8SCy Schubert 		pos += ret;
2498*85732ac8SCy Schubert 	}
2499*85732ac8SCy Schubert 	if (ciphers & WPA_CIPHER_BIP_CMAC_256) {
2500*85732ac8SCy Schubert 		ret = os_snprintf(pos, end - pos, "%sBIP-CMAC-256",
2501*85732ac8SCy Schubert 				  pos == start ? "" : delim);
2502*85732ac8SCy Schubert 		if (os_snprintf_error(end - pos, ret))
2503*85732ac8SCy Schubert 			return -1;
2504*85732ac8SCy Schubert 		pos += ret;
2505*85732ac8SCy Schubert 	}
25065b9c547cSRui Paulo 	if (ciphers & WPA_CIPHER_NONE) {
25075b9c547cSRui Paulo 		ret = os_snprintf(pos, end - pos, "%sNONE",
25085b9c547cSRui Paulo 				  pos == start ? "" : delim);
25095b9c547cSRui Paulo 		if (os_snprintf_error(end - pos, ret))
25105b9c547cSRui Paulo 			return -1;
25115b9c547cSRui Paulo 		pos += ret;
25125b9c547cSRui Paulo 	}
25135b9c547cSRui Paulo 
25145b9c547cSRui Paulo 	return pos - start;
25155b9c547cSRui Paulo }
25165b9c547cSRui Paulo 
25175b9c547cSRui Paulo 
25185b9c547cSRui Paulo int wpa_select_ap_group_cipher(int wpa, int wpa_pairwise, int rsn_pairwise)
25195b9c547cSRui Paulo {
25205b9c547cSRui Paulo 	int pairwise = 0;
25215b9c547cSRui Paulo 
25225b9c547cSRui Paulo 	/* Select group cipher based on the enabled pairwise cipher suites */
25235b9c547cSRui Paulo 	if (wpa & 1)
25245b9c547cSRui Paulo 		pairwise |= wpa_pairwise;
25255b9c547cSRui Paulo 	if (wpa & 2)
25265b9c547cSRui Paulo 		pairwise |= rsn_pairwise;
25275b9c547cSRui Paulo 
25285b9c547cSRui Paulo 	if (pairwise & WPA_CIPHER_TKIP)
25295b9c547cSRui Paulo 		return WPA_CIPHER_TKIP;
25305b9c547cSRui Paulo 	if ((pairwise & (WPA_CIPHER_CCMP | WPA_CIPHER_GCMP)) == WPA_CIPHER_GCMP)
25315b9c547cSRui Paulo 		return WPA_CIPHER_GCMP;
25325b9c547cSRui Paulo 	if ((pairwise & (WPA_CIPHER_GCMP_256 | WPA_CIPHER_CCMP |
25335b9c547cSRui Paulo 			 WPA_CIPHER_GCMP)) == WPA_CIPHER_GCMP_256)
25345b9c547cSRui Paulo 		return WPA_CIPHER_GCMP_256;
25355b9c547cSRui Paulo 	if ((pairwise & (WPA_CIPHER_CCMP_256 | WPA_CIPHER_CCMP |
25365b9c547cSRui Paulo 			 WPA_CIPHER_GCMP)) == WPA_CIPHER_CCMP_256)
25375b9c547cSRui Paulo 		return WPA_CIPHER_CCMP_256;
25385b9c547cSRui Paulo 	return WPA_CIPHER_CCMP;
2539f05cddf9SRui Paulo }
2540*85732ac8SCy Schubert 
2541*85732ac8SCy Schubert 
2542*85732ac8SCy Schubert #ifdef CONFIG_FILS
2543*85732ac8SCy Schubert int fils_domain_name_hash(const char *domain, u8 *hash)
2544*85732ac8SCy Schubert {
2545*85732ac8SCy Schubert 	char buf[255], *wpos = buf;
2546*85732ac8SCy Schubert 	const char *pos = domain;
2547*85732ac8SCy Schubert 	size_t len;
2548*85732ac8SCy Schubert 	const u8 *addr[1];
2549*85732ac8SCy Schubert 	u8 mac[SHA256_MAC_LEN];
2550*85732ac8SCy Schubert 
2551*85732ac8SCy Schubert 	for (len = 0; len < sizeof(buf) && *pos; len++) {
2552*85732ac8SCy Schubert 		if (isalpha(*pos) && isupper(*pos))
2553*85732ac8SCy Schubert 			*wpos++ = tolower(*pos);
2554*85732ac8SCy Schubert 		else
2555*85732ac8SCy Schubert 			*wpos++ = *pos;
2556*85732ac8SCy Schubert 		pos++;
2557*85732ac8SCy Schubert 	}
2558*85732ac8SCy Schubert 
2559*85732ac8SCy Schubert 	addr[0] = (const u8 *) buf;
2560*85732ac8SCy Schubert 	if (sha256_vector(1, addr, &len, mac) < 0)
2561*85732ac8SCy Schubert 		return -1;
2562*85732ac8SCy Schubert 	os_memcpy(hash, mac, 2);
2563*85732ac8SCy Schubert 	return 0;
2564*85732ac8SCy Schubert }
2565*85732ac8SCy Schubert #endif /* CONFIG_FILS */
2566