139beb93cSSam Leffler /* 239beb93cSSam Leffler * WPA/RSN - Shared functions for supplicant and authenticator 3*85732ac8SCy Schubert * Copyright (c) 2002-2018, Jouni Malinen <j@w1.fi> 439beb93cSSam Leffler * 5f05cddf9SRui Paulo * This software may be distributed under the terms of the BSD license. 6f05cddf9SRui Paulo * See README for more details. 739beb93cSSam Leffler */ 839beb93cSSam Leffler 939beb93cSSam Leffler #include "includes.h" 1039beb93cSSam Leffler 1139beb93cSSam Leffler #include "common.h" 12e28a4053SRui Paulo #include "crypto/md5.h" 13e28a4053SRui Paulo #include "crypto/sha1.h" 14e28a4053SRui Paulo #include "crypto/sha256.h" 155b9c547cSRui Paulo #include "crypto/sha384.h" 16*85732ac8SCy Schubert #include "crypto/sha512.h" 17e28a4053SRui Paulo #include "crypto/aes_wrap.h" 18e28a4053SRui Paulo #include "crypto/crypto.h" 1939beb93cSSam Leffler #include "ieee802_11_defs.h" 2039beb93cSSam Leffler #include "defs.h" 2139beb93cSSam Leffler #include "wpa_common.h" 2239beb93cSSam Leffler 2339beb93cSSam Leffler 24*85732ac8SCy Schubert static unsigned int wpa_kck_len(int akmp, size_t pmk_len) 255b9c547cSRui Paulo { 26*85732ac8SCy Schubert switch (akmp) { 27*85732ac8SCy Schubert case WPA_KEY_MGMT_IEEE8021X_SUITE_B_192: 28*85732ac8SCy Schubert case WPA_KEY_MGMT_FT_IEEE8021X_SHA384: 295b9c547cSRui Paulo return 24; 30*85732ac8SCy Schubert case WPA_KEY_MGMT_FILS_SHA256: 31*85732ac8SCy Schubert case WPA_KEY_MGMT_FT_FILS_SHA256: 32*85732ac8SCy Schubert case WPA_KEY_MGMT_FILS_SHA384: 33*85732ac8SCy Schubert case WPA_KEY_MGMT_FT_FILS_SHA384: 34*85732ac8SCy Schubert return 0; 35*85732ac8SCy Schubert case WPA_KEY_MGMT_DPP: 36*85732ac8SCy Schubert return pmk_len / 2; 37*85732ac8SCy Schubert case WPA_KEY_MGMT_OWE: 38*85732ac8SCy Schubert return pmk_len / 2; 39*85732ac8SCy Schubert default: 405b9c547cSRui Paulo return 16; 415b9c547cSRui Paulo } 42*85732ac8SCy Schubert } 435b9c547cSRui Paulo 445b9c547cSRui Paulo 45*85732ac8SCy Schubert #ifdef CONFIG_IEEE80211R 46*85732ac8SCy Schubert static unsigned int wpa_kck2_len(int akmp) 475b9c547cSRui Paulo { 48*85732ac8SCy Schubert switch (akmp) { 49*85732ac8SCy Schubert case WPA_KEY_MGMT_FT_FILS_SHA256: 50*85732ac8SCy Schubert return 16; 51*85732ac8SCy Schubert case WPA_KEY_MGMT_FT_FILS_SHA384: 52*85732ac8SCy Schubert return 24; 53*85732ac8SCy Schubert default: 54*85732ac8SCy Schubert return 0; 55*85732ac8SCy Schubert } 56*85732ac8SCy Schubert } 57*85732ac8SCy Schubert #endif /* CONFIG_IEEE80211R */ 58*85732ac8SCy Schubert 59*85732ac8SCy Schubert 60*85732ac8SCy Schubert static unsigned int wpa_kek_len(int akmp, size_t pmk_len) 61*85732ac8SCy Schubert { 62*85732ac8SCy Schubert switch (akmp) { 63*85732ac8SCy Schubert case WPA_KEY_MGMT_FILS_SHA384: 64*85732ac8SCy Schubert case WPA_KEY_MGMT_FT_FILS_SHA384: 65*85732ac8SCy Schubert return 64; 66*85732ac8SCy Schubert case WPA_KEY_MGMT_IEEE8021X_SUITE_B_192: 67*85732ac8SCy Schubert case WPA_KEY_MGMT_FILS_SHA256: 68*85732ac8SCy Schubert case WPA_KEY_MGMT_FT_FILS_SHA256: 69*85732ac8SCy Schubert case WPA_KEY_MGMT_FT_IEEE8021X_SHA384: 705b9c547cSRui Paulo return 32; 71*85732ac8SCy Schubert case WPA_KEY_MGMT_DPP: 72*85732ac8SCy Schubert return pmk_len <= 32 ? 16 : 32; 73*85732ac8SCy Schubert case WPA_KEY_MGMT_OWE: 74*85732ac8SCy Schubert return pmk_len <= 32 ? 16 : 32; 75*85732ac8SCy Schubert default: 765b9c547cSRui Paulo return 16; 775b9c547cSRui Paulo } 78*85732ac8SCy Schubert } 795b9c547cSRui Paulo 805b9c547cSRui Paulo 81*85732ac8SCy Schubert #ifdef CONFIG_IEEE80211R 82*85732ac8SCy Schubert static unsigned int wpa_kek2_len(int akmp) 835b9c547cSRui Paulo { 84*85732ac8SCy Schubert switch (akmp) { 85*85732ac8SCy Schubert case WPA_KEY_MGMT_FT_FILS_SHA256: 865b9c547cSRui Paulo return 16; 87*85732ac8SCy Schubert case WPA_KEY_MGMT_FT_FILS_SHA384: 88*85732ac8SCy Schubert return 32; 89*85732ac8SCy Schubert default: 90*85732ac8SCy Schubert return 0; 91*85732ac8SCy Schubert } 92*85732ac8SCy Schubert } 93*85732ac8SCy Schubert #endif /* CONFIG_IEEE80211R */ 94*85732ac8SCy Schubert 95*85732ac8SCy Schubert 96*85732ac8SCy Schubert unsigned int wpa_mic_len(int akmp, size_t pmk_len) 97*85732ac8SCy Schubert { 98*85732ac8SCy Schubert switch (akmp) { 99*85732ac8SCy Schubert case WPA_KEY_MGMT_IEEE8021X_SUITE_B_192: 100*85732ac8SCy Schubert case WPA_KEY_MGMT_FT_IEEE8021X_SHA384: 101*85732ac8SCy Schubert return 24; 102*85732ac8SCy Schubert case WPA_KEY_MGMT_FILS_SHA256: 103*85732ac8SCy Schubert case WPA_KEY_MGMT_FILS_SHA384: 104*85732ac8SCy Schubert case WPA_KEY_MGMT_FT_FILS_SHA256: 105*85732ac8SCy Schubert case WPA_KEY_MGMT_FT_FILS_SHA384: 106*85732ac8SCy Schubert return 0; 107*85732ac8SCy Schubert case WPA_KEY_MGMT_DPP: 108*85732ac8SCy Schubert return pmk_len / 2; 109*85732ac8SCy Schubert case WPA_KEY_MGMT_OWE: 110*85732ac8SCy Schubert return pmk_len / 2; 111*85732ac8SCy Schubert default: 112*85732ac8SCy Schubert return 16; 113*85732ac8SCy Schubert } 114*85732ac8SCy Schubert } 115*85732ac8SCy Schubert 116*85732ac8SCy Schubert 117*85732ac8SCy Schubert /** 118*85732ac8SCy Schubert * wpa_use_akm_defined - Is AKM-defined Key Descriptor Version used 119*85732ac8SCy Schubert * @akmp: WPA_KEY_MGMT_* used in key derivation 120*85732ac8SCy Schubert * Returns: 1 if AKM-defined Key Descriptor Version is used; 0 otherwise 121*85732ac8SCy Schubert */ 122*85732ac8SCy Schubert int wpa_use_akm_defined(int akmp) 123*85732ac8SCy Schubert { 124*85732ac8SCy Schubert return akmp == WPA_KEY_MGMT_OSEN || 125*85732ac8SCy Schubert akmp == WPA_KEY_MGMT_OWE || 126*85732ac8SCy Schubert akmp == WPA_KEY_MGMT_DPP || 127*85732ac8SCy Schubert akmp == WPA_KEY_MGMT_FT_IEEE8021X_SHA384 || 128*85732ac8SCy Schubert wpa_key_mgmt_sae(akmp) || 129*85732ac8SCy Schubert wpa_key_mgmt_suite_b(akmp) || 130*85732ac8SCy Schubert wpa_key_mgmt_fils(akmp); 131*85732ac8SCy Schubert } 132*85732ac8SCy Schubert 133*85732ac8SCy Schubert 134*85732ac8SCy Schubert /** 135*85732ac8SCy Schubert * wpa_use_cmac - Is CMAC integrity algorithm used for EAPOL-Key MIC 136*85732ac8SCy Schubert * @akmp: WPA_KEY_MGMT_* used in key derivation 137*85732ac8SCy Schubert * Returns: 1 if CMAC is used; 0 otherwise 138*85732ac8SCy Schubert */ 139*85732ac8SCy Schubert int wpa_use_cmac(int akmp) 140*85732ac8SCy Schubert { 141*85732ac8SCy Schubert return akmp == WPA_KEY_MGMT_OSEN || 142*85732ac8SCy Schubert akmp == WPA_KEY_MGMT_OWE || 143*85732ac8SCy Schubert akmp == WPA_KEY_MGMT_DPP || 144*85732ac8SCy Schubert wpa_key_mgmt_ft(akmp) || 145*85732ac8SCy Schubert wpa_key_mgmt_sha256(akmp) || 146*85732ac8SCy Schubert wpa_key_mgmt_sae(akmp) || 147*85732ac8SCy Schubert wpa_key_mgmt_suite_b(akmp); 148*85732ac8SCy Schubert } 149*85732ac8SCy Schubert 150*85732ac8SCy Schubert 151*85732ac8SCy Schubert /** 152*85732ac8SCy Schubert * wpa_use_aes_key_wrap - Is AES Keywrap algorithm used for EAPOL-Key Key Data 153*85732ac8SCy Schubert * @akmp: WPA_KEY_MGMT_* used in key derivation 154*85732ac8SCy Schubert * Returns: 1 if AES Keywrap is used; 0 otherwise 155*85732ac8SCy Schubert * 156*85732ac8SCy Schubert * Note: AKM 00-0F-AC:1 and 00-0F-AC:2 have special rules for selecting whether 157*85732ac8SCy Schubert * to use AES Keywrap based on the negotiated pairwise cipher. This function 158*85732ac8SCy Schubert * does not cover those special cases. 159*85732ac8SCy Schubert */ 160*85732ac8SCy Schubert int wpa_use_aes_key_wrap(int akmp) 161*85732ac8SCy Schubert { 162*85732ac8SCy Schubert return akmp == WPA_KEY_MGMT_OSEN || 163*85732ac8SCy Schubert akmp == WPA_KEY_MGMT_OWE || 164*85732ac8SCy Schubert akmp == WPA_KEY_MGMT_DPP || 165*85732ac8SCy Schubert wpa_key_mgmt_ft(akmp) || 166*85732ac8SCy Schubert wpa_key_mgmt_sha256(akmp) || 167*85732ac8SCy Schubert wpa_key_mgmt_sae(akmp) || 168*85732ac8SCy Schubert wpa_key_mgmt_suite_b(akmp); 1695b9c547cSRui Paulo } 1705b9c547cSRui Paulo 1715b9c547cSRui Paulo 17239beb93cSSam Leffler /** 17339beb93cSSam Leffler * wpa_eapol_key_mic - Calculate EAPOL-Key MIC 17439beb93cSSam Leffler * @key: EAPOL-Key Key Confirmation Key (KCK) 1755b9c547cSRui Paulo * @key_len: KCK length in octets 1765b9c547cSRui Paulo * @akmp: WPA_KEY_MGMT_* used in key derivation 17739beb93cSSam Leffler * @ver: Key descriptor version (WPA_KEY_INFO_TYPE_*) 17839beb93cSSam Leffler * @buf: Pointer to the beginning of the EAPOL header (version field) 17939beb93cSSam Leffler * @len: Length of the EAPOL frame (from EAPOL header to the end of the frame) 18039beb93cSSam Leffler * @mic: Pointer to the buffer to which the EAPOL-Key MIC is written 18139beb93cSSam Leffler * Returns: 0 on success, -1 on failure 18239beb93cSSam Leffler * 18339beb93cSSam Leffler * Calculate EAPOL-Key MIC for an EAPOL-Key packet. The EAPOL-Key MIC field has 18439beb93cSSam Leffler * to be cleared (all zeroes) when calling this function. 18539beb93cSSam Leffler * 18639beb93cSSam Leffler * Note: 'IEEE Std 802.11i-2004 - 8.5.2 EAPOL-Key frames' has an error in the 18739beb93cSSam Leffler * description of the Key MIC calculation. It includes packet data from the 18839beb93cSSam Leffler * beginning of the EAPOL-Key header, not EAPOL header. This incorrect change 18939beb93cSSam Leffler * happened during final editing of the standard and the correct behavior is 19039beb93cSSam Leffler * defined in the last draft (IEEE 802.11i/D10). 19139beb93cSSam Leffler */ 1925b9c547cSRui Paulo int wpa_eapol_key_mic(const u8 *key, size_t key_len, int akmp, int ver, 1935b9c547cSRui Paulo const u8 *buf, size_t len, u8 *mic) 19439beb93cSSam Leffler { 195*85732ac8SCy Schubert u8 hash[SHA512_MAC_LEN]; 196*85732ac8SCy Schubert 197*85732ac8SCy Schubert if (key_len == 0) { 198*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, 199*85732ac8SCy Schubert "WPA: KCK not set - cannot calculate MIC"); 200*85732ac8SCy Schubert return -1; 201*85732ac8SCy Schubert } 20239beb93cSSam Leffler 20339beb93cSSam Leffler switch (ver) { 204f05cddf9SRui Paulo #ifndef CONFIG_FIPS 20539beb93cSSam Leffler case WPA_KEY_INFO_TYPE_HMAC_MD5_RC4: 206*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "WPA: EAPOL-Key MIC using HMAC-MD5"); 2075b9c547cSRui Paulo return hmac_md5(key, key_len, buf, len, mic); 208f05cddf9SRui Paulo #endif /* CONFIG_FIPS */ 20939beb93cSSam Leffler case WPA_KEY_INFO_TYPE_HMAC_SHA1_AES: 210*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "WPA: EAPOL-Key MIC using HMAC-SHA1"); 2115b9c547cSRui Paulo if (hmac_sha1(key, key_len, buf, len, hash)) 212e28a4053SRui Paulo return -1; 21339beb93cSSam Leffler os_memcpy(mic, hash, MD5_MAC_LEN); 21439beb93cSSam Leffler break; 2153157ba21SRui Paulo #if defined(CONFIG_IEEE80211R) || defined(CONFIG_IEEE80211W) 21639beb93cSSam Leffler case WPA_KEY_INFO_TYPE_AES_128_CMAC: 217*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "WPA: EAPOL-Key MIC using AES-CMAC"); 21839beb93cSSam Leffler return omac1_aes_128(key, buf, len, mic); 2193157ba21SRui Paulo #endif /* CONFIG_IEEE80211R || CONFIG_IEEE80211W */ 2205b9c547cSRui Paulo case WPA_KEY_INFO_TYPE_AKM_DEFINED: 2215b9c547cSRui Paulo switch (akmp) { 222*85732ac8SCy Schubert #ifdef CONFIG_SAE 223*85732ac8SCy Schubert case WPA_KEY_MGMT_SAE: 224*85732ac8SCy Schubert case WPA_KEY_MGMT_FT_SAE: 225*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, 226*85732ac8SCy Schubert "WPA: EAPOL-Key MIC using AES-CMAC (AKM-defined - SAE)"); 227*85732ac8SCy Schubert return omac1_aes_128(key, buf, len, mic); 228*85732ac8SCy Schubert #endif /* CONFIG_SAE */ 2295b9c547cSRui Paulo #ifdef CONFIG_HS20 2305b9c547cSRui Paulo case WPA_KEY_MGMT_OSEN: 231*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, 232*85732ac8SCy Schubert "WPA: EAPOL-Key MIC using AES-CMAC (AKM-defined - OSEN)"); 2335b9c547cSRui Paulo return omac1_aes_128(key, buf, len, mic); 2345b9c547cSRui Paulo #endif /* CONFIG_HS20 */ 2355b9c547cSRui Paulo #ifdef CONFIG_SUITEB 2365b9c547cSRui Paulo case WPA_KEY_MGMT_IEEE8021X_SUITE_B: 237*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, 238*85732ac8SCy Schubert "WPA: EAPOL-Key MIC using HMAC-SHA256 (AKM-defined - Suite B)"); 2395b9c547cSRui Paulo if (hmac_sha256(key, key_len, buf, len, hash)) 2405b9c547cSRui Paulo return -1; 2415b9c547cSRui Paulo os_memcpy(mic, hash, MD5_MAC_LEN); 2425b9c547cSRui Paulo break; 2435b9c547cSRui Paulo #endif /* CONFIG_SUITEB */ 2445b9c547cSRui Paulo #ifdef CONFIG_SUITEB192 2455b9c547cSRui Paulo case WPA_KEY_MGMT_IEEE8021X_SUITE_B_192: 246*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, 247*85732ac8SCy Schubert "WPA: EAPOL-Key MIC using HMAC-SHA384 (AKM-defined - Suite B 192-bit)"); 2485b9c547cSRui Paulo if (hmac_sha384(key, key_len, buf, len, hash)) 2495b9c547cSRui Paulo return -1; 2505b9c547cSRui Paulo os_memcpy(mic, hash, 24); 2515b9c547cSRui Paulo break; 2525b9c547cSRui Paulo #endif /* CONFIG_SUITEB192 */ 253*85732ac8SCy Schubert #ifdef CONFIG_OWE 254*85732ac8SCy Schubert case WPA_KEY_MGMT_OWE: 255*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, 256*85732ac8SCy Schubert "WPA: EAPOL-Key MIC using HMAC-SHA%u (AKM-defined - OWE)", 257*85732ac8SCy Schubert (unsigned int) key_len * 8 * 2); 258*85732ac8SCy Schubert if (key_len == 128 / 8) { 259*85732ac8SCy Schubert if (hmac_sha256(key, key_len, buf, len, hash)) 260*85732ac8SCy Schubert return -1; 261*85732ac8SCy Schubert } else if (key_len == 192 / 8) { 262*85732ac8SCy Schubert if (hmac_sha384(key, key_len, buf, len, hash)) 263*85732ac8SCy Schubert return -1; 264*85732ac8SCy Schubert } else if (key_len == 256 / 8) { 265*85732ac8SCy Schubert if (hmac_sha512(key, key_len, buf, len, hash)) 266*85732ac8SCy Schubert return -1; 267*85732ac8SCy Schubert } else { 268*85732ac8SCy Schubert wpa_printf(MSG_INFO, 269*85732ac8SCy Schubert "OWE: Unsupported KCK length: %u", 270*85732ac8SCy Schubert (unsigned int) key_len); 271*85732ac8SCy Schubert return -1; 272*85732ac8SCy Schubert } 273*85732ac8SCy Schubert os_memcpy(mic, hash, key_len); 274*85732ac8SCy Schubert break; 275*85732ac8SCy Schubert #endif /* CONFIG_OWE */ 276*85732ac8SCy Schubert #ifdef CONFIG_DPP 277*85732ac8SCy Schubert case WPA_KEY_MGMT_DPP: 278*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, 279*85732ac8SCy Schubert "WPA: EAPOL-Key MIC using HMAC-SHA%u (AKM-defined - DPP)", 280*85732ac8SCy Schubert (unsigned int) key_len * 8 * 2); 281*85732ac8SCy Schubert if (key_len == 128 / 8) { 282*85732ac8SCy Schubert if (hmac_sha256(key, key_len, buf, len, hash)) 283*85732ac8SCy Schubert return -1; 284*85732ac8SCy Schubert } else if (key_len == 192 / 8) { 285*85732ac8SCy Schubert if (hmac_sha384(key, key_len, buf, len, hash)) 286*85732ac8SCy Schubert return -1; 287*85732ac8SCy Schubert } else if (key_len == 256 / 8) { 288*85732ac8SCy Schubert if (hmac_sha512(key, key_len, buf, len, hash)) 289*85732ac8SCy Schubert return -1; 290*85732ac8SCy Schubert } else { 291*85732ac8SCy Schubert wpa_printf(MSG_INFO, 292*85732ac8SCy Schubert "DPP: Unsupported KCK length: %u", 293*85732ac8SCy Schubert (unsigned int) key_len); 294*85732ac8SCy Schubert return -1; 295*85732ac8SCy Schubert } 296*85732ac8SCy Schubert os_memcpy(mic, hash, key_len); 297*85732ac8SCy Schubert break; 298*85732ac8SCy Schubert #endif /* CONFIG_DPP */ 299*85732ac8SCy Schubert #if defined(CONFIG_IEEE80211R) && defined(CONFIG_SHA384) 300*85732ac8SCy Schubert case WPA_KEY_MGMT_FT_IEEE8021X_SHA384: 301*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, 302*85732ac8SCy Schubert "WPA: EAPOL-Key MIC using HMAC-SHA384 (AKM-defined - FT 802.1X SHA384)"); 303*85732ac8SCy Schubert if (hmac_sha384(key, key_len, buf, len, hash)) 304*85732ac8SCy Schubert return -1; 305*85732ac8SCy Schubert os_memcpy(mic, hash, 24); 306*85732ac8SCy Schubert break; 307*85732ac8SCy Schubert #endif /* CONFIG_IEEE80211R && CONFIG_SHA384 */ 3085b9c547cSRui Paulo default: 309*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, 310*85732ac8SCy Schubert "WPA: EAPOL-Key MIC algorithm not known (AKM-defined - akmp=0x%x)", 311*85732ac8SCy Schubert akmp); 3125b9c547cSRui Paulo return -1; 3135b9c547cSRui Paulo } 3145b9c547cSRui Paulo break; 31539beb93cSSam Leffler default: 316*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, 317*85732ac8SCy Schubert "WPA: EAPOL-Key MIC algorithm not known (ver=%d)", 318*85732ac8SCy Schubert ver); 31939beb93cSSam Leffler return -1; 32039beb93cSSam Leffler } 32139beb93cSSam Leffler 32239beb93cSSam Leffler return 0; 32339beb93cSSam Leffler } 32439beb93cSSam Leffler 32539beb93cSSam Leffler 32639beb93cSSam Leffler /** 32739beb93cSSam Leffler * wpa_pmk_to_ptk - Calculate PTK from PMK, addresses, and nonces 32839beb93cSSam Leffler * @pmk: Pairwise master key 32939beb93cSSam Leffler * @pmk_len: Length of PMK 33039beb93cSSam Leffler * @label: Label to use in derivation 33139beb93cSSam Leffler * @addr1: AA or SA 33239beb93cSSam Leffler * @addr2: SA or AA 33339beb93cSSam Leffler * @nonce1: ANonce or SNonce 33439beb93cSSam Leffler * @nonce2: SNonce or ANonce 33539beb93cSSam Leffler * @ptk: Buffer for pairwise transient key 3365b9c547cSRui Paulo * @akmp: Negotiated AKM 3375b9c547cSRui Paulo * @cipher: Negotiated pairwise cipher 3385b9c547cSRui Paulo * Returns: 0 on success, -1 on failure 33939beb93cSSam Leffler * 34039beb93cSSam Leffler * IEEE Std 802.11i-2004 - 8.5.1.2 Pairwise key hierarchy 34139beb93cSSam Leffler * PTK = PRF-X(PMK, "Pairwise key expansion", 34239beb93cSSam Leffler * Min(AA, SA) || Max(AA, SA) || 34339beb93cSSam Leffler * Min(ANonce, SNonce) || Max(ANonce, SNonce)) 34439beb93cSSam Leffler */ 3455b9c547cSRui Paulo int wpa_pmk_to_ptk(const u8 *pmk, size_t pmk_len, const char *label, 34639beb93cSSam Leffler const u8 *addr1, const u8 *addr2, 34739beb93cSSam Leffler const u8 *nonce1, const u8 *nonce2, 3485b9c547cSRui Paulo struct wpa_ptk *ptk, int akmp, int cipher) 34939beb93cSSam Leffler { 35039beb93cSSam Leffler u8 data[2 * ETH_ALEN + 2 * WPA_NONCE_LEN]; 3515b9c547cSRui Paulo u8 tmp[WPA_KCK_MAX_LEN + WPA_KEK_MAX_LEN + WPA_TK_MAX_LEN]; 3525b9c547cSRui Paulo size_t ptk_len; 35339beb93cSSam Leffler 354*85732ac8SCy Schubert if (pmk_len == 0) { 355*85732ac8SCy Schubert wpa_printf(MSG_ERROR, "WPA: No PMK set for PTK derivation"); 356*85732ac8SCy Schubert return -1; 357*85732ac8SCy Schubert } 358*85732ac8SCy Schubert 35939beb93cSSam Leffler if (os_memcmp(addr1, addr2, ETH_ALEN) < 0) { 36039beb93cSSam Leffler os_memcpy(data, addr1, ETH_ALEN); 36139beb93cSSam Leffler os_memcpy(data + ETH_ALEN, addr2, ETH_ALEN); 36239beb93cSSam Leffler } else { 36339beb93cSSam Leffler os_memcpy(data, addr2, ETH_ALEN); 36439beb93cSSam Leffler os_memcpy(data + ETH_ALEN, addr1, ETH_ALEN); 36539beb93cSSam Leffler } 36639beb93cSSam Leffler 36739beb93cSSam Leffler if (os_memcmp(nonce1, nonce2, WPA_NONCE_LEN) < 0) { 36839beb93cSSam Leffler os_memcpy(data + 2 * ETH_ALEN, nonce1, WPA_NONCE_LEN); 36939beb93cSSam Leffler os_memcpy(data + 2 * ETH_ALEN + WPA_NONCE_LEN, nonce2, 37039beb93cSSam Leffler WPA_NONCE_LEN); 37139beb93cSSam Leffler } else { 37239beb93cSSam Leffler os_memcpy(data + 2 * ETH_ALEN, nonce2, WPA_NONCE_LEN); 37339beb93cSSam Leffler os_memcpy(data + 2 * ETH_ALEN + WPA_NONCE_LEN, nonce1, 37439beb93cSSam Leffler WPA_NONCE_LEN); 37539beb93cSSam Leffler } 37639beb93cSSam Leffler 377*85732ac8SCy Schubert ptk->kck_len = wpa_kck_len(akmp, pmk_len); 378*85732ac8SCy Schubert ptk->kek_len = wpa_kek_len(akmp, pmk_len); 3795b9c547cSRui Paulo ptk->tk_len = wpa_cipher_key_len(cipher); 380*85732ac8SCy Schubert if (ptk->tk_len == 0) { 381*85732ac8SCy Schubert wpa_printf(MSG_ERROR, 382*85732ac8SCy Schubert "WPA: Unsupported cipher (0x%x) used in PTK derivation", 383*85732ac8SCy Schubert cipher); 384*85732ac8SCy Schubert return -1; 385*85732ac8SCy Schubert } 3865b9c547cSRui Paulo ptk_len = ptk->kck_len + ptk->kek_len + ptk->tk_len; 3875b9c547cSRui Paulo 388*85732ac8SCy Schubert if (wpa_key_mgmt_sha384(akmp)) { 389*85732ac8SCy Schubert #if defined(CONFIG_SUITEB192) || defined(CONFIG_FILS) 390*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "WPA: PTK derivation using PRF(SHA384)"); 391*85732ac8SCy Schubert if (sha384_prf(pmk, pmk_len, label, data, sizeof(data), 392*85732ac8SCy Schubert tmp, ptk_len) < 0) 393*85732ac8SCy Schubert return -1; 394*85732ac8SCy Schubert #else /* CONFIG_SUITEB192 || CONFIG_FILS */ 395*85732ac8SCy Schubert return -1; 396*85732ac8SCy Schubert #endif /* CONFIG_SUITEB192 || CONFIG_FILS */ 397*85732ac8SCy Schubert } else if (wpa_key_mgmt_sha256(akmp) || akmp == WPA_KEY_MGMT_OWE) { 398*85732ac8SCy Schubert #if defined(CONFIG_IEEE80211W) || defined(CONFIG_SAE) || defined(CONFIG_FILS) 399*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "WPA: PTK derivation using PRF(SHA256)"); 400*85732ac8SCy Schubert if (sha256_prf(pmk, pmk_len, label, data, sizeof(data), 401*85732ac8SCy Schubert tmp, ptk_len) < 0) 402*85732ac8SCy Schubert return -1; 403*85732ac8SCy Schubert #else /* CONFIG_IEEE80211W or CONFIG_SAE or CONFIG_FILS */ 404*85732ac8SCy Schubert return -1; 405*85732ac8SCy Schubert #endif /* CONFIG_IEEE80211W or CONFIG_SAE or CONFIG_FILS */ 406*85732ac8SCy Schubert #ifdef CONFIG_DPP 407*85732ac8SCy Schubert } else if (akmp == WPA_KEY_MGMT_DPP && pmk_len == 32) { 408*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "WPA: PTK derivation using PRF(SHA256)"); 409*85732ac8SCy Schubert if (sha256_prf(pmk, pmk_len, label, data, sizeof(data), 410*85732ac8SCy Schubert tmp, ptk_len) < 0) 411*85732ac8SCy Schubert return -1; 412*85732ac8SCy Schubert } else if (akmp == WPA_KEY_MGMT_DPP && pmk_len == 48) { 413*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "WPA: PTK derivation using PRF(SHA384)"); 414*85732ac8SCy Schubert if (sha384_prf(pmk, pmk_len, label, data, sizeof(data), 415*85732ac8SCy Schubert tmp, ptk_len) < 0) 416*85732ac8SCy Schubert return -1; 417*85732ac8SCy Schubert } else if (akmp == WPA_KEY_MGMT_DPP && pmk_len == 64) { 418*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "WPA: PTK derivation using PRF(SHA512)"); 419*85732ac8SCy Schubert if (sha512_prf(pmk, pmk_len, label, data, sizeof(data), 420*85732ac8SCy Schubert tmp, ptk_len) < 0) 421*85732ac8SCy Schubert return -1; 422*85732ac8SCy Schubert } else if (akmp == WPA_KEY_MGMT_DPP) { 423*85732ac8SCy Schubert wpa_printf(MSG_INFO, "DPP: Unknown PMK length %u", 424*85732ac8SCy Schubert (unsigned int) pmk_len); 425*85732ac8SCy Schubert return -1; 426*85732ac8SCy Schubert #endif /* CONFIG_DPP */ 427*85732ac8SCy Schubert } else { 428*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "WPA: PTK derivation using PRF(SHA1)"); 429*85732ac8SCy Schubert if (sha1_prf(pmk, pmk_len, label, data, sizeof(data), tmp, 430*85732ac8SCy Schubert ptk_len) < 0) 431*85732ac8SCy Schubert return -1; 432*85732ac8SCy Schubert } 43339beb93cSSam Leffler 43439beb93cSSam Leffler wpa_printf(MSG_DEBUG, "WPA: PTK derivation - A1=" MACSTR " A2=" MACSTR, 43539beb93cSSam Leffler MAC2STR(addr1), MAC2STR(addr2)); 436f05cddf9SRui Paulo wpa_hexdump(MSG_DEBUG, "WPA: Nonce1", nonce1, WPA_NONCE_LEN); 437f05cddf9SRui Paulo wpa_hexdump(MSG_DEBUG, "WPA: Nonce2", nonce2, WPA_NONCE_LEN); 43839beb93cSSam Leffler wpa_hexdump_key(MSG_DEBUG, "WPA: PMK", pmk, pmk_len); 4395b9c547cSRui Paulo wpa_hexdump_key(MSG_DEBUG, "WPA: PTK", tmp, ptk_len); 4405b9c547cSRui Paulo 4415b9c547cSRui Paulo os_memcpy(ptk->kck, tmp, ptk->kck_len); 4425b9c547cSRui Paulo wpa_hexdump_key(MSG_DEBUG, "WPA: KCK", ptk->kck, ptk->kck_len); 4435b9c547cSRui Paulo 4445b9c547cSRui Paulo os_memcpy(ptk->kek, tmp + ptk->kck_len, ptk->kek_len); 4455b9c547cSRui Paulo wpa_hexdump_key(MSG_DEBUG, "WPA: KEK", ptk->kek, ptk->kek_len); 4465b9c547cSRui Paulo 4475b9c547cSRui Paulo os_memcpy(ptk->tk, tmp + ptk->kck_len + ptk->kek_len, ptk->tk_len); 4485b9c547cSRui Paulo wpa_hexdump_key(MSG_DEBUG, "WPA: TK", ptk->tk, ptk->tk_len); 4495b9c547cSRui Paulo 450*85732ac8SCy Schubert ptk->kek2_len = 0; 451*85732ac8SCy Schubert ptk->kck2_len = 0; 452*85732ac8SCy Schubert 4535b9c547cSRui Paulo os_memset(tmp, 0, sizeof(tmp)); 4545b9c547cSRui Paulo return 0; 45539beb93cSSam Leffler } 45639beb93cSSam Leffler 457*85732ac8SCy Schubert #ifdef CONFIG_FILS 458*85732ac8SCy Schubert 459*85732ac8SCy Schubert int fils_rmsk_to_pmk(int akmp, const u8 *rmsk, size_t rmsk_len, 460*85732ac8SCy Schubert const u8 *snonce, const u8 *anonce, const u8 *dh_ss, 461*85732ac8SCy Schubert size_t dh_ss_len, u8 *pmk, size_t *pmk_len) 462*85732ac8SCy Schubert { 463*85732ac8SCy Schubert u8 nonces[2 * FILS_NONCE_LEN]; 464*85732ac8SCy Schubert const u8 *addr[2]; 465*85732ac8SCy Schubert size_t len[2]; 466*85732ac8SCy Schubert size_t num_elem; 467*85732ac8SCy Schubert int res; 468*85732ac8SCy Schubert 469*85732ac8SCy Schubert /* PMK = HMAC-Hash(SNonce || ANonce, rMSK [ || DHss ]) */ 470*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "FILS: rMSK to PMK derivation"); 471*85732ac8SCy Schubert 472*85732ac8SCy Schubert if (wpa_key_mgmt_sha384(akmp)) 473*85732ac8SCy Schubert *pmk_len = SHA384_MAC_LEN; 474*85732ac8SCy Schubert else if (wpa_key_mgmt_sha256(akmp)) 475*85732ac8SCy Schubert *pmk_len = SHA256_MAC_LEN; 476*85732ac8SCy Schubert else 477*85732ac8SCy Schubert return -1; 478*85732ac8SCy Schubert 479*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FILS: rMSK", rmsk, rmsk_len); 480*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FILS: SNonce", snonce, FILS_NONCE_LEN); 481*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FILS: ANonce", anonce, FILS_NONCE_LEN); 482*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FILS: DHss", dh_ss, dh_ss_len); 483*85732ac8SCy Schubert 484*85732ac8SCy Schubert os_memcpy(nonces, snonce, FILS_NONCE_LEN); 485*85732ac8SCy Schubert os_memcpy(&nonces[FILS_NONCE_LEN], anonce, FILS_NONCE_LEN); 486*85732ac8SCy Schubert addr[0] = rmsk; 487*85732ac8SCy Schubert len[0] = rmsk_len; 488*85732ac8SCy Schubert num_elem = 1; 489*85732ac8SCy Schubert if (dh_ss) { 490*85732ac8SCy Schubert addr[1] = dh_ss; 491*85732ac8SCy Schubert len[1] = dh_ss_len; 492*85732ac8SCy Schubert num_elem++; 493*85732ac8SCy Schubert } 494*85732ac8SCy Schubert if (wpa_key_mgmt_sha384(akmp)) 495*85732ac8SCy Schubert res = hmac_sha384_vector(nonces, 2 * FILS_NONCE_LEN, num_elem, 496*85732ac8SCy Schubert addr, len, pmk); 497*85732ac8SCy Schubert else 498*85732ac8SCy Schubert res = hmac_sha256_vector(nonces, 2 * FILS_NONCE_LEN, num_elem, 499*85732ac8SCy Schubert addr, len, pmk); 500*85732ac8SCy Schubert if (res == 0) 501*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FILS: PMK", pmk, *pmk_len); 502*85732ac8SCy Schubert else 503*85732ac8SCy Schubert *pmk_len = 0; 504*85732ac8SCy Schubert return res; 505*85732ac8SCy Schubert } 506*85732ac8SCy Schubert 507*85732ac8SCy Schubert 508*85732ac8SCy Schubert int fils_pmkid_erp(int akmp, const u8 *reauth, size_t reauth_len, 509*85732ac8SCy Schubert u8 *pmkid) 510*85732ac8SCy Schubert { 511*85732ac8SCy Schubert const u8 *addr[1]; 512*85732ac8SCy Schubert size_t len[1]; 513*85732ac8SCy Schubert u8 hash[SHA384_MAC_LEN]; 514*85732ac8SCy Schubert int res; 515*85732ac8SCy Schubert 516*85732ac8SCy Schubert /* PMKID = Truncate-128(Hash(EAP-Initiate/Reauth)) */ 517*85732ac8SCy Schubert addr[0] = reauth; 518*85732ac8SCy Schubert len[0] = reauth_len; 519*85732ac8SCy Schubert if (wpa_key_mgmt_sha384(akmp)) 520*85732ac8SCy Schubert res = sha384_vector(1, addr, len, hash); 521*85732ac8SCy Schubert else if (wpa_key_mgmt_sha256(akmp)) 522*85732ac8SCy Schubert res = sha256_vector(1, addr, len, hash); 523*85732ac8SCy Schubert else 524*85732ac8SCy Schubert return -1; 525*85732ac8SCy Schubert if (res) 526*85732ac8SCy Schubert return res; 527*85732ac8SCy Schubert os_memcpy(pmkid, hash, PMKID_LEN); 528*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FILS: PMKID", pmkid, PMKID_LEN); 529*85732ac8SCy Schubert return 0; 530*85732ac8SCy Schubert } 531*85732ac8SCy Schubert 532*85732ac8SCy Schubert 533*85732ac8SCy Schubert int fils_pmk_to_ptk(const u8 *pmk, size_t pmk_len, const u8 *spa, const u8 *aa, 534*85732ac8SCy Schubert const u8 *snonce, const u8 *anonce, const u8 *dhss, 535*85732ac8SCy Schubert size_t dhss_len, struct wpa_ptk *ptk, 536*85732ac8SCy Schubert u8 *ick, size_t *ick_len, int akmp, int cipher, 537*85732ac8SCy Schubert u8 *fils_ft, size_t *fils_ft_len) 538*85732ac8SCy Schubert { 539*85732ac8SCy Schubert u8 *data, *pos; 540*85732ac8SCy Schubert size_t data_len; 541*85732ac8SCy Schubert u8 tmp[FILS_ICK_MAX_LEN + WPA_KEK_MAX_LEN + WPA_TK_MAX_LEN + 542*85732ac8SCy Schubert FILS_FT_MAX_LEN]; 543*85732ac8SCy Schubert size_t key_data_len; 544*85732ac8SCy Schubert const char *label = "FILS PTK Derivation"; 545*85732ac8SCy Schubert int ret = -1; 546*85732ac8SCy Schubert 547*85732ac8SCy Schubert /* 548*85732ac8SCy Schubert * FILS-Key-Data = PRF-X(PMK, "FILS PTK Derivation", 549*85732ac8SCy Schubert * SPA || AA || SNonce || ANonce [ || DHss ]) 550*85732ac8SCy Schubert * ICK = L(FILS-Key-Data, 0, ICK_bits) 551*85732ac8SCy Schubert * KEK = L(FILS-Key-Data, ICK_bits, KEK_bits) 552*85732ac8SCy Schubert * TK = L(FILS-Key-Data, ICK_bits + KEK_bits, TK_bits) 553*85732ac8SCy Schubert * If doing FT initial mobility domain association: 554*85732ac8SCy Schubert * FILS-FT = L(FILS-Key-Data, ICK_bits + KEK_bits + TK_bits, 555*85732ac8SCy Schubert * FILS-FT_bits) 556*85732ac8SCy Schubert */ 557*85732ac8SCy Schubert data_len = 2 * ETH_ALEN + 2 * FILS_NONCE_LEN + dhss_len; 558*85732ac8SCy Schubert data = os_malloc(data_len); 559*85732ac8SCy Schubert if (!data) 560*85732ac8SCy Schubert goto err; 561*85732ac8SCy Schubert pos = data; 562*85732ac8SCy Schubert os_memcpy(pos, spa, ETH_ALEN); 563*85732ac8SCy Schubert pos += ETH_ALEN; 564*85732ac8SCy Schubert os_memcpy(pos, aa, ETH_ALEN); 565*85732ac8SCy Schubert pos += ETH_ALEN; 566*85732ac8SCy Schubert os_memcpy(pos, snonce, FILS_NONCE_LEN); 567*85732ac8SCy Schubert pos += FILS_NONCE_LEN; 568*85732ac8SCy Schubert os_memcpy(pos, anonce, FILS_NONCE_LEN); 569*85732ac8SCy Schubert pos += FILS_NONCE_LEN; 570*85732ac8SCy Schubert if (dhss) 571*85732ac8SCy Schubert os_memcpy(pos, dhss, dhss_len); 572*85732ac8SCy Schubert 573*85732ac8SCy Schubert ptk->kck_len = 0; 574*85732ac8SCy Schubert ptk->kek_len = wpa_kek_len(akmp, pmk_len); 575*85732ac8SCy Schubert ptk->tk_len = wpa_cipher_key_len(cipher); 576*85732ac8SCy Schubert if (wpa_key_mgmt_sha384(akmp)) 577*85732ac8SCy Schubert *ick_len = 48; 578*85732ac8SCy Schubert else if (wpa_key_mgmt_sha256(akmp)) 579*85732ac8SCy Schubert *ick_len = 32; 580*85732ac8SCy Schubert else 581*85732ac8SCy Schubert goto err; 582*85732ac8SCy Schubert key_data_len = *ick_len + ptk->kek_len + ptk->tk_len; 583*85732ac8SCy Schubert 584*85732ac8SCy Schubert if (fils_ft && fils_ft_len) { 585*85732ac8SCy Schubert if (akmp == WPA_KEY_MGMT_FT_FILS_SHA256) { 586*85732ac8SCy Schubert *fils_ft_len = 32; 587*85732ac8SCy Schubert } else if (akmp == WPA_KEY_MGMT_FT_FILS_SHA384) { 588*85732ac8SCy Schubert *fils_ft_len = 48; 589*85732ac8SCy Schubert } else { 590*85732ac8SCy Schubert *fils_ft_len = 0; 591*85732ac8SCy Schubert fils_ft = NULL; 592*85732ac8SCy Schubert } 593*85732ac8SCy Schubert key_data_len += *fils_ft_len; 594*85732ac8SCy Schubert } 595*85732ac8SCy Schubert 596*85732ac8SCy Schubert if (wpa_key_mgmt_sha384(akmp)) { 597*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "FILS: PTK derivation using PRF(SHA384)"); 598*85732ac8SCy Schubert if (sha384_prf(pmk, pmk_len, label, data, data_len, 599*85732ac8SCy Schubert tmp, key_data_len) < 0) 600*85732ac8SCy Schubert goto err; 601*85732ac8SCy Schubert } else { 602*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "FILS: PTK derivation using PRF(SHA256)"); 603*85732ac8SCy Schubert if (sha256_prf(pmk, pmk_len, label, data, data_len, 604*85732ac8SCy Schubert tmp, key_data_len) < 0) 605*85732ac8SCy Schubert goto err; 606*85732ac8SCy Schubert } 607*85732ac8SCy Schubert 608*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "FILS: PTK derivation - SPA=" MACSTR 609*85732ac8SCy Schubert " AA=" MACSTR, MAC2STR(spa), MAC2STR(aa)); 610*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FILS: SNonce", snonce, FILS_NONCE_LEN); 611*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FILS: ANonce", anonce, FILS_NONCE_LEN); 612*85732ac8SCy Schubert if (dhss) 613*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FILS: DHss", dhss, dhss_len); 614*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FILS: PMK", pmk, pmk_len); 615*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FILS: FILS-Key-Data", tmp, key_data_len); 616*85732ac8SCy Schubert 617*85732ac8SCy Schubert os_memcpy(ick, tmp, *ick_len); 618*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FILS: ICK", ick, *ick_len); 619*85732ac8SCy Schubert 620*85732ac8SCy Schubert os_memcpy(ptk->kek, tmp + *ick_len, ptk->kek_len); 621*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FILS: KEK", ptk->kek, ptk->kek_len); 622*85732ac8SCy Schubert 623*85732ac8SCy Schubert os_memcpy(ptk->tk, tmp + *ick_len + ptk->kek_len, ptk->tk_len); 624*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FILS: TK", ptk->tk, ptk->tk_len); 625*85732ac8SCy Schubert 626*85732ac8SCy Schubert if (fils_ft && fils_ft_len) { 627*85732ac8SCy Schubert os_memcpy(fils_ft, tmp + *ick_len + ptk->kek_len + ptk->tk_len, 628*85732ac8SCy Schubert *fils_ft_len); 629*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FILS: FILS-FT", 630*85732ac8SCy Schubert fils_ft, *fils_ft_len); 631*85732ac8SCy Schubert } 632*85732ac8SCy Schubert 633*85732ac8SCy Schubert ptk->kek2_len = 0; 634*85732ac8SCy Schubert ptk->kck2_len = 0; 635*85732ac8SCy Schubert 636*85732ac8SCy Schubert os_memset(tmp, 0, sizeof(tmp)); 637*85732ac8SCy Schubert ret = 0; 638*85732ac8SCy Schubert err: 639*85732ac8SCy Schubert bin_clear_free(data, data_len); 640*85732ac8SCy Schubert return ret; 641*85732ac8SCy Schubert } 642*85732ac8SCy Schubert 643*85732ac8SCy Schubert 644*85732ac8SCy Schubert int fils_key_auth_sk(const u8 *ick, size_t ick_len, const u8 *snonce, 645*85732ac8SCy Schubert const u8 *anonce, const u8 *sta_addr, const u8 *bssid, 646*85732ac8SCy Schubert const u8 *g_sta, size_t g_sta_len, 647*85732ac8SCy Schubert const u8 *g_ap, size_t g_ap_len, 648*85732ac8SCy Schubert int akmp, u8 *key_auth_sta, u8 *key_auth_ap, 649*85732ac8SCy Schubert size_t *key_auth_len) 650*85732ac8SCy Schubert { 651*85732ac8SCy Schubert const u8 *addr[6]; 652*85732ac8SCy Schubert size_t len[6]; 653*85732ac8SCy Schubert size_t num_elem = 4; 654*85732ac8SCy Schubert int res; 655*85732ac8SCy Schubert 656*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "FILS: Key-Auth derivation: STA-MAC=" MACSTR 657*85732ac8SCy Schubert " AP-BSSID=" MACSTR, MAC2STR(sta_addr), MAC2STR(bssid)); 658*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FILS: ICK", ick, ick_len); 659*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FILS: SNonce", snonce, FILS_NONCE_LEN); 660*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FILS: ANonce", anonce, FILS_NONCE_LEN); 661*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FILS: gSTA", g_sta, g_sta_len); 662*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FILS: gAP", g_ap, g_ap_len); 663*85732ac8SCy Schubert 664*85732ac8SCy Schubert /* 665*85732ac8SCy Schubert * For (Re)Association Request frame (STA->AP): 666*85732ac8SCy Schubert * Key-Auth = HMAC-Hash(ICK, SNonce || ANonce || STA-MAC || AP-BSSID 667*85732ac8SCy Schubert * [ || gSTA || gAP ]) 668*85732ac8SCy Schubert */ 669*85732ac8SCy Schubert addr[0] = snonce; 670*85732ac8SCy Schubert len[0] = FILS_NONCE_LEN; 671*85732ac8SCy Schubert addr[1] = anonce; 672*85732ac8SCy Schubert len[1] = FILS_NONCE_LEN; 673*85732ac8SCy Schubert addr[2] = sta_addr; 674*85732ac8SCy Schubert len[2] = ETH_ALEN; 675*85732ac8SCy Schubert addr[3] = bssid; 676*85732ac8SCy Schubert len[3] = ETH_ALEN; 677*85732ac8SCy Schubert if (g_sta && g_ap_len && g_ap && g_ap_len) { 678*85732ac8SCy Schubert addr[4] = g_sta; 679*85732ac8SCy Schubert len[4] = g_sta_len; 680*85732ac8SCy Schubert addr[5] = g_ap; 681*85732ac8SCy Schubert len[5] = g_ap_len; 682*85732ac8SCy Schubert num_elem = 6; 683*85732ac8SCy Schubert } 684*85732ac8SCy Schubert 685*85732ac8SCy Schubert if (wpa_key_mgmt_sha384(akmp)) { 686*85732ac8SCy Schubert *key_auth_len = 48; 687*85732ac8SCy Schubert res = hmac_sha384_vector(ick, ick_len, num_elem, addr, len, 688*85732ac8SCy Schubert key_auth_sta); 689*85732ac8SCy Schubert } else if (wpa_key_mgmt_sha256(akmp)) { 690*85732ac8SCy Schubert *key_auth_len = 32; 691*85732ac8SCy Schubert res = hmac_sha256_vector(ick, ick_len, num_elem, addr, len, 692*85732ac8SCy Schubert key_auth_sta); 693*85732ac8SCy Schubert } else { 694*85732ac8SCy Schubert return -1; 695*85732ac8SCy Schubert } 696*85732ac8SCy Schubert if (res < 0) 697*85732ac8SCy Schubert return res; 698*85732ac8SCy Schubert 699*85732ac8SCy Schubert /* 700*85732ac8SCy Schubert * For (Re)Association Response frame (AP->STA): 701*85732ac8SCy Schubert * Key-Auth = HMAC-Hash(ICK, ANonce || SNonce || AP-BSSID || STA-MAC 702*85732ac8SCy Schubert * [ || gAP || gSTA ]) 703*85732ac8SCy Schubert */ 704*85732ac8SCy Schubert addr[0] = anonce; 705*85732ac8SCy Schubert addr[1] = snonce; 706*85732ac8SCy Schubert addr[2] = bssid; 707*85732ac8SCy Schubert addr[3] = sta_addr; 708*85732ac8SCy Schubert if (g_sta && g_ap_len && g_ap && g_ap_len) { 709*85732ac8SCy Schubert addr[4] = g_ap; 710*85732ac8SCy Schubert len[4] = g_ap_len; 711*85732ac8SCy Schubert addr[5] = g_sta; 712*85732ac8SCy Schubert len[5] = g_sta_len; 713*85732ac8SCy Schubert } 714*85732ac8SCy Schubert 715*85732ac8SCy Schubert if (wpa_key_mgmt_sha384(akmp)) 716*85732ac8SCy Schubert res = hmac_sha384_vector(ick, ick_len, num_elem, addr, len, 717*85732ac8SCy Schubert key_auth_ap); 718*85732ac8SCy Schubert else if (wpa_key_mgmt_sha256(akmp)) 719*85732ac8SCy Schubert res = hmac_sha256_vector(ick, ick_len, num_elem, addr, len, 720*85732ac8SCy Schubert key_auth_ap); 721*85732ac8SCy Schubert if (res < 0) 722*85732ac8SCy Schubert return res; 723*85732ac8SCy Schubert 724*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FILS: Key-Auth (STA)", 725*85732ac8SCy Schubert key_auth_sta, *key_auth_len); 726*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FILS: Key-Auth (AP)", 727*85732ac8SCy Schubert key_auth_ap, *key_auth_len); 728*85732ac8SCy Schubert 729*85732ac8SCy Schubert return 0; 730*85732ac8SCy Schubert } 731*85732ac8SCy Schubert 732*85732ac8SCy Schubert #endif /* CONFIG_FILS */ 733*85732ac8SCy Schubert 73439beb93cSSam Leffler 73539beb93cSSam Leffler #ifdef CONFIG_IEEE80211R 7365b9c547cSRui Paulo int wpa_ft_mic(const u8 *kck, size_t kck_len, const u8 *sta_addr, 7375b9c547cSRui Paulo const u8 *ap_addr, u8 transaction_seqnum, 7385b9c547cSRui Paulo const u8 *mdie, size_t mdie_len, 73939beb93cSSam Leffler const u8 *ftie, size_t ftie_len, 74039beb93cSSam Leffler const u8 *rsnie, size_t rsnie_len, 74139beb93cSSam Leffler const u8 *ric, size_t ric_len, u8 *mic) 74239beb93cSSam Leffler { 743325151a3SRui Paulo const u8 *addr[9]; 744325151a3SRui Paulo size_t len[9]; 745325151a3SRui Paulo size_t i, num_elem = 0; 746*85732ac8SCy Schubert u8 zero_mic[24]; 747*85732ac8SCy Schubert size_t mic_len, fte_fixed_len; 74839beb93cSSam Leffler 749*85732ac8SCy Schubert if (kck_len == 16) { 750*85732ac8SCy Schubert mic_len = 16; 751*85732ac8SCy Schubert #ifdef CONFIG_SHA384 752*85732ac8SCy Schubert } else if (kck_len == 24) { 753*85732ac8SCy Schubert mic_len = 24; 754*85732ac8SCy Schubert #endif /* CONFIG_SHA384 */ 755*85732ac8SCy Schubert } else { 7565b9c547cSRui Paulo wpa_printf(MSG_WARNING, "FT: Unsupported KCK length %u", 7575b9c547cSRui Paulo (unsigned int) kck_len); 7585b9c547cSRui Paulo return -1; 7595b9c547cSRui Paulo } 7605b9c547cSRui Paulo 761*85732ac8SCy Schubert fte_fixed_len = sizeof(struct rsn_ftie) - 16 + mic_len; 762*85732ac8SCy Schubert 763325151a3SRui Paulo addr[num_elem] = sta_addr; 764325151a3SRui Paulo len[num_elem] = ETH_ALEN; 765325151a3SRui Paulo num_elem++; 76639beb93cSSam Leffler 767325151a3SRui Paulo addr[num_elem] = ap_addr; 768325151a3SRui Paulo len[num_elem] = ETH_ALEN; 769325151a3SRui Paulo num_elem++; 770325151a3SRui Paulo 771325151a3SRui Paulo addr[num_elem] = &transaction_seqnum; 772325151a3SRui Paulo len[num_elem] = 1; 773325151a3SRui Paulo num_elem++; 774325151a3SRui Paulo 77539beb93cSSam Leffler if (rsnie) { 776325151a3SRui Paulo addr[num_elem] = rsnie; 777325151a3SRui Paulo len[num_elem] = rsnie_len; 778325151a3SRui Paulo num_elem++; 77939beb93cSSam Leffler } 78039beb93cSSam Leffler if (mdie) { 781325151a3SRui Paulo addr[num_elem] = mdie; 782325151a3SRui Paulo len[num_elem] = mdie_len; 783325151a3SRui Paulo num_elem++; 78439beb93cSSam Leffler } 78539beb93cSSam Leffler if (ftie) { 786*85732ac8SCy Schubert if (ftie_len < 2 + fte_fixed_len) 78739beb93cSSam Leffler return -1; 788325151a3SRui Paulo 789325151a3SRui Paulo /* IE hdr and mic_control */ 790325151a3SRui Paulo addr[num_elem] = ftie; 791325151a3SRui Paulo len[num_elem] = 2 + 2; 792325151a3SRui Paulo num_elem++; 793325151a3SRui Paulo 794325151a3SRui Paulo /* MIC field with all zeros */ 795*85732ac8SCy Schubert os_memset(zero_mic, 0, mic_len); 796325151a3SRui Paulo addr[num_elem] = zero_mic; 797*85732ac8SCy Schubert len[num_elem] = mic_len; 798325151a3SRui Paulo num_elem++; 799325151a3SRui Paulo 800325151a3SRui Paulo /* Rest of FTIE */ 801*85732ac8SCy Schubert addr[num_elem] = ftie + 2 + 2 + mic_len; 802*85732ac8SCy Schubert len[num_elem] = ftie_len - (2 + 2 + mic_len); 803325151a3SRui Paulo num_elem++; 80439beb93cSSam Leffler } 80539beb93cSSam Leffler if (ric) { 806325151a3SRui Paulo addr[num_elem] = ric; 807325151a3SRui Paulo len[num_elem] = ric_len; 808325151a3SRui Paulo num_elem++; 80939beb93cSSam Leffler } 81039beb93cSSam Leffler 811325151a3SRui Paulo for (i = 0; i < num_elem; i++) 812325151a3SRui Paulo wpa_hexdump(MSG_MSGDUMP, "FT: MIC data", addr[i], len[i]); 813*85732ac8SCy Schubert #ifdef CONFIG_SHA384 814*85732ac8SCy Schubert if (kck_len == 24) { 815*85732ac8SCy Schubert u8 hash[SHA384_MAC_LEN]; 816*85732ac8SCy Schubert 817*85732ac8SCy Schubert if (hmac_sha384_vector(kck, kck_len, num_elem, addr, len, hash)) 818*85732ac8SCy Schubert return -1; 819*85732ac8SCy Schubert os_memcpy(mic, hash, 24); 820*85732ac8SCy Schubert } 821*85732ac8SCy Schubert #endif /* CONFIG_SHA384 */ 822*85732ac8SCy Schubert if (kck_len == 16 && 823*85732ac8SCy Schubert omac1_aes_128_vector(kck, num_elem, addr, len, mic)) 82439beb93cSSam Leffler return -1; 82539beb93cSSam Leffler 82639beb93cSSam Leffler return 0; 82739beb93cSSam Leffler } 828f05cddf9SRui Paulo 829f05cddf9SRui Paulo 830f05cddf9SRui Paulo static int wpa_ft_parse_ftie(const u8 *ie, size_t ie_len, 831*85732ac8SCy Schubert struct wpa_ft_ies *parse, int use_sha384) 832f05cddf9SRui Paulo { 833f05cddf9SRui Paulo const u8 *end, *pos; 834f05cddf9SRui Paulo 835f05cddf9SRui Paulo parse->ftie = ie; 836f05cddf9SRui Paulo parse->ftie_len = ie_len; 837f05cddf9SRui Paulo 838*85732ac8SCy Schubert pos = ie + (use_sha384 ? sizeof(struct rsn_ftie_sha384) : 839*85732ac8SCy Schubert sizeof(struct rsn_ftie)); 840f05cddf9SRui Paulo end = ie + ie_len; 841*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FT: Parse FTE subelements", pos, end - pos); 842f05cddf9SRui Paulo 843780fb4a2SCy Schubert while (end - pos >= 2) { 844780fb4a2SCy Schubert u8 id, len; 845780fb4a2SCy Schubert 846780fb4a2SCy Schubert id = *pos++; 847780fb4a2SCy Schubert len = *pos++; 848*85732ac8SCy Schubert if (len > end - pos) { 849*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "FT: Truncated subelement"); 850780fb4a2SCy Schubert break; 851*85732ac8SCy Schubert } 852780fb4a2SCy Schubert 853780fb4a2SCy Schubert switch (id) { 854f05cddf9SRui Paulo case FTIE_SUBELEM_R1KH_ID: 855780fb4a2SCy Schubert if (len != FT_R1KH_ID_LEN) { 856780fb4a2SCy Schubert wpa_printf(MSG_DEBUG, 857780fb4a2SCy Schubert "FT: Invalid R1KH-ID length in FTIE: %d", 858780fb4a2SCy Schubert len); 859f05cddf9SRui Paulo return -1; 860f05cddf9SRui Paulo } 861780fb4a2SCy Schubert parse->r1kh_id = pos; 862f05cddf9SRui Paulo break; 863f05cddf9SRui Paulo case FTIE_SUBELEM_GTK: 864780fb4a2SCy Schubert parse->gtk = pos; 865780fb4a2SCy Schubert parse->gtk_len = len; 866f05cddf9SRui Paulo break; 867f05cddf9SRui Paulo case FTIE_SUBELEM_R0KH_ID: 868780fb4a2SCy Schubert if (len < 1 || len > FT_R0KH_ID_MAX_LEN) { 869780fb4a2SCy Schubert wpa_printf(MSG_DEBUG, 870780fb4a2SCy Schubert "FT: Invalid R0KH-ID length in FTIE: %d", 871780fb4a2SCy Schubert len); 872f05cddf9SRui Paulo return -1; 873f05cddf9SRui Paulo } 874780fb4a2SCy Schubert parse->r0kh_id = pos; 875780fb4a2SCy Schubert parse->r0kh_id_len = len; 876f05cddf9SRui Paulo break; 877f05cddf9SRui Paulo #ifdef CONFIG_IEEE80211W 878f05cddf9SRui Paulo case FTIE_SUBELEM_IGTK: 879780fb4a2SCy Schubert parse->igtk = pos; 880780fb4a2SCy Schubert parse->igtk_len = len; 881f05cddf9SRui Paulo break; 882f05cddf9SRui Paulo #endif /* CONFIG_IEEE80211W */ 883*85732ac8SCy Schubert default: 884*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "FT: Unknown subelem id %u", id); 885*85732ac8SCy Schubert break; 886f05cddf9SRui Paulo } 887f05cddf9SRui Paulo 888780fb4a2SCy Schubert pos += len; 889f05cddf9SRui Paulo } 890f05cddf9SRui Paulo 891f05cddf9SRui Paulo return 0; 892f05cddf9SRui Paulo } 893f05cddf9SRui Paulo 894f05cddf9SRui Paulo 895f05cddf9SRui Paulo int wpa_ft_parse_ies(const u8 *ies, size_t ies_len, 896*85732ac8SCy Schubert struct wpa_ft_ies *parse, int use_sha384) 897f05cddf9SRui Paulo { 898f05cddf9SRui Paulo const u8 *end, *pos; 899f05cddf9SRui Paulo struct wpa_ie_data data; 900f05cddf9SRui Paulo int ret; 901f05cddf9SRui Paulo const struct rsn_ftie *ftie; 902f05cddf9SRui Paulo int prot_ie_count = 0; 903*85732ac8SCy Schubert int update_use_sha384 = 0; 904*85732ac8SCy Schubert 905*85732ac8SCy Schubert if (use_sha384 < 0) { 906*85732ac8SCy Schubert use_sha384 = 0; 907*85732ac8SCy Schubert update_use_sha384 = 1; 908*85732ac8SCy Schubert } 909f05cddf9SRui Paulo 910f05cddf9SRui Paulo os_memset(parse, 0, sizeof(*parse)); 911f05cddf9SRui Paulo if (ies == NULL) 912f05cddf9SRui Paulo return 0; 913f05cddf9SRui Paulo 914f05cddf9SRui Paulo pos = ies; 915f05cddf9SRui Paulo end = ies + ies_len; 916780fb4a2SCy Schubert while (end - pos >= 2) { 917780fb4a2SCy Schubert u8 id, len; 918780fb4a2SCy Schubert 919780fb4a2SCy Schubert id = *pos++; 920780fb4a2SCy Schubert len = *pos++; 921780fb4a2SCy Schubert if (len > end - pos) 922780fb4a2SCy Schubert break; 923780fb4a2SCy Schubert 924780fb4a2SCy Schubert switch (id) { 925f05cddf9SRui Paulo case WLAN_EID_RSN: 926*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FT: RSNE", pos, len); 927780fb4a2SCy Schubert parse->rsn = pos; 928780fb4a2SCy Schubert parse->rsn_len = len; 929f05cddf9SRui Paulo ret = wpa_parse_wpa_ie_rsn(parse->rsn - 2, 930f05cddf9SRui Paulo parse->rsn_len + 2, 931f05cddf9SRui Paulo &data); 932f05cddf9SRui Paulo if (ret < 0) { 933f05cddf9SRui Paulo wpa_printf(MSG_DEBUG, "FT: Failed to parse " 934f05cddf9SRui Paulo "RSN IE: %d", ret); 935f05cddf9SRui Paulo return -1; 936f05cddf9SRui Paulo } 937f05cddf9SRui Paulo if (data.num_pmkid == 1 && data.pmkid) 938f05cddf9SRui Paulo parse->rsn_pmkid = data.pmkid; 939*85732ac8SCy Schubert parse->key_mgmt = data.key_mgmt; 940*85732ac8SCy Schubert parse->pairwise_cipher = data.pairwise_cipher; 941*85732ac8SCy Schubert if (update_use_sha384) { 942*85732ac8SCy Schubert use_sha384 = 943*85732ac8SCy Schubert wpa_key_mgmt_sha384(parse->key_mgmt); 944*85732ac8SCy Schubert update_use_sha384 = 0; 945*85732ac8SCy Schubert } 946f05cddf9SRui Paulo break; 947f05cddf9SRui Paulo case WLAN_EID_MOBILITY_DOMAIN: 948*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FT: MDE", pos, len); 949780fb4a2SCy Schubert if (len < sizeof(struct rsn_mdie)) 950325151a3SRui Paulo return -1; 951780fb4a2SCy Schubert parse->mdie = pos; 952780fb4a2SCy Schubert parse->mdie_len = len; 953f05cddf9SRui Paulo break; 954f05cddf9SRui Paulo case WLAN_EID_FAST_BSS_TRANSITION: 955*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FT: FTE", pos, len); 956*85732ac8SCy Schubert if (use_sha384) { 957*85732ac8SCy Schubert const struct rsn_ftie_sha384 *ftie_sha384; 958*85732ac8SCy Schubert 959*85732ac8SCy Schubert if (len < sizeof(*ftie_sha384)) 960*85732ac8SCy Schubert return -1; 961*85732ac8SCy Schubert ftie_sha384 = 962*85732ac8SCy Schubert (const struct rsn_ftie_sha384 *) pos; 963*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FT: FTE-MIC Control", 964*85732ac8SCy Schubert ftie_sha384->mic_control, 2); 965*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FT: FTE-MIC", 966*85732ac8SCy Schubert ftie_sha384->mic, 967*85732ac8SCy Schubert sizeof(ftie_sha384->mic)); 968*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FT: FTE-ANonce", 969*85732ac8SCy Schubert ftie_sha384->anonce, 970*85732ac8SCy Schubert WPA_NONCE_LEN); 971*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FT: FTE-SNonce", 972*85732ac8SCy Schubert ftie_sha384->snonce, 973*85732ac8SCy Schubert WPA_NONCE_LEN); 974*85732ac8SCy Schubert prot_ie_count = ftie_sha384->mic_control[1]; 975*85732ac8SCy Schubert if (wpa_ft_parse_ftie(pos, len, parse, 1) < 0) 976*85732ac8SCy Schubert return -1; 977*85732ac8SCy Schubert break; 978*85732ac8SCy Schubert } 979*85732ac8SCy Schubert 980780fb4a2SCy Schubert if (len < sizeof(*ftie)) 981f05cddf9SRui Paulo return -1; 982780fb4a2SCy Schubert ftie = (const struct rsn_ftie *) pos; 983*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FT: FTE-MIC Control", 984*85732ac8SCy Schubert ftie->mic_control, 2); 985*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FT: FTE-MIC", 986*85732ac8SCy Schubert ftie->mic, sizeof(ftie->mic)); 987*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FT: FTE-ANonce", 988*85732ac8SCy Schubert ftie->anonce, WPA_NONCE_LEN); 989*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FT: FTE-SNonce", 990*85732ac8SCy Schubert ftie->snonce, WPA_NONCE_LEN); 991f05cddf9SRui Paulo prot_ie_count = ftie->mic_control[1]; 992*85732ac8SCy Schubert if (wpa_ft_parse_ftie(pos, len, parse, 0) < 0) 993f05cddf9SRui Paulo return -1; 994f05cddf9SRui Paulo break; 995f05cddf9SRui Paulo case WLAN_EID_TIMEOUT_INTERVAL: 996*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FT: Timeout Interval", 997*85732ac8SCy Schubert pos, len); 998780fb4a2SCy Schubert if (len != 5) 999325151a3SRui Paulo break; 1000780fb4a2SCy Schubert parse->tie = pos; 1001780fb4a2SCy Schubert parse->tie_len = len; 1002f05cddf9SRui Paulo break; 1003f05cddf9SRui Paulo case WLAN_EID_RIC_DATA: 1004f05cddf9SRui Paulo if (parse->ric == NULL) 1005780fb4a2SCy Schubert parse->ric = pos - 2; 1006f05cddf9SRui Paulo break; 1007f05cddf9SRui Paulo } 1008f05cddf9SRui Paulo 1009780fb4a2SCy Schubert pos += len; 1010f05cddf9SRui Paulo } 1011f05cddf9SRui Paulo 1012f05cddf9SRui Paulo if (prot_ie_count == 0) 1013f05cddf9SRui Paulo return 0; /* no MIC */ 1014f05cddf9SRui Paulo 1015f05cddf9SRui Paulo /* 1016f05cddf9SRui Paulo * Check that the protected IE count matches with IEs included in the 1017f05cddf9SRui Paulo * frame. 1018f05cddf9SRui Paulo */ 1019f05cddf9SRui Paulo if (parse->rsn) 1020f05cddf9SRui Paulo prot_ie_count--; 1021f05cddf9SRui Paulo if (parse->mdie) 1022f05cddf9SRui Paulo prot_ie_count--; 1023f05cddf9SRui Paulo if (parse->ftie) 1024f05cddf9SRui Paulo prot_ie_count--; 1025f05cddf9SRui Paulo if (prot_ie_count < 0) { 1026f05cddf9SRui Paulo wpa_printf(MSG_DEBUG, "FT: Some required IEs not included in " 1027f05cddf9SRui Paulo "the protected IE count"); 1028f05cddf9SRui Paulo return -1; 1029f05cddf9SRui Paulo } 1030f05cddf9SRui Paulo 1031f05cddf9SRui Paulo if (prot_ie_count == 0 && parse->ric) { 1032f05cddf9SRui Paulo wpa_printf(MSG_DEBUG, "FT: RIC IE(s) in the frame, but not " 1033f05cddf9SRui Paulo "included in protected IE count"); 1034f05cddf9SRui Paulo return -1; 1035f05cddf9SRui Paulo } 1036f05cddf9SRui Paulo 1037f05cddf9SRui Paulo /* Determine the end of the RIC IE(s) */ 1038780fb4a2SCy Schubert if (parse->ric) { 1039f05cddf9SRui Paulo pos = parse->ric; 1040780fb4a2SCy Schubert while (end - pos >= 2 && 2 + pos[1] <= end - pos && 1041f05cddf9SRui Paulo prot_ie_count) { 1042f05cddf9SRui Paulo prot_ie_count--; 1043f05cddf9SRui Paulo pos += 2 + pos[1]; 1044f05cddf9SRui Paulo } 1045f05cddf9SRui Paulo parse->ric_len = pos - parse->ric; 1046780fb4a2SCy Schubert } 1047f05cddf9SRui Paulo if (prot_ie_count) { 1048f05cddf9SRui Paulo wpa_printf(MSG_DEBUG, "FT: %d protected IEs missing from " 1049f05cddf9SRui Paulo "frame", (int) prot_ie_count); 1050f05cddf9SRui Paulo return -1; 1051f05cddf9SRui Paulo } 1052f05cddf9SRui Paulo 1053f05cddf9SRui Paulo return 0; 1054f05cddf9SRui Paulo } 105539beb93cSSam Leffler #endif /* CONFIG_IEEE80211R */ 105639beb93cSSam Leffler 105739beb93cSSam Leffler 105839beb93cSSam Leffler static int rsn_selector_to_bitfield(const u8 *s) 105939beb93cSSam Leffler { 106039beb93cSSam Leffler if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_NONE) 106139beb93cSSam Leffler return WPA_CIPHER_NONE; 106239beb93cSSam Leffler if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_TKIP) 106339beb93cSSam Leffler return WPA_CIPHER_TKIP; 106439beb93cSSam Leffler if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_CCMP) 106539beb93cSSam Leffler return WPA_CIPHER_CCMP; 106639beb93cSSam Leffler #ifdef CONFIG_IEEE80211W 106739beb93cSSam Leffler if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_AES_128_CMAC) 106839beb93cSSam Leffler return WPA_CIPHER_AES_128_CMAC; 106939beb93cSSam Leffler #endif /* CONFIG_IEEE80211W */ 1070f05cddf9SRui Paulo if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_GCMP) 1071f05cddf9SRui Paulo return WPA_CIPHER_GCMP; 10725b9c547cSRui Paulo if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_CCMP_256) 10735b9c547cSRui Paulo return WPA_CIPHER_CCMP_256; 10745b9c547cSRui Paulo if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_GCMP_256) 10755b9c547cSRui Paulo return WPA_CIPHER_GCMP_256; 10765b9c547cSRui Paulo if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_BIP_GMAC_128) 10775b9c547cSRui Paulo return WPA_CIPHER_BIP_GMAC_128; 10785b9c547cSRui Paulo if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_BIP_GMAC_256) 10795b9c547cSRui Paulo return WPA_CIPHER_BIP_GMAC_256; 10805b9c547cSRui Paulo if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_BIP_CMAC_256) 10815b9c547cSRui Paulo return WPA_CIPHER_BIP_CMAC_256; 10825b9c547cSRui Paulo if (RSN_SELECTOR_GET(s) == RSN_CIPHER_SUITE_NO_GROUP_ADDRESSED) 10835b9c547cSRui Paulo return WPA_CIPHER_GTK_NOT_USED; 108439beb93cSSam Leffler return 0; 108539beb93cSSam Leffler } 108639beb93cSSam Leffler 108739beb93cSSam Leffler 108839beb93cSSam Leffler static int rsn_key_mgmt_to_bitfield(const u8 *s) 108939beb93cSSam Leffler { 109039beb93cSSam Leffler if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_UNSPEC_802_1X) 109139beb93cSSam Leffler return WPA_KEY_MGMT_IEEE8021X; 109239beb93cSSam Leffler if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_PSK_OVER_802_1X) 109339beb93cSSam Leffler return WPA_KEY_MGMT_PSK; 109439beb93cSSam Leffler #ifdef CONFIG_IEEE80211R 109539beb93cSSam Leffler if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_FT_802_1X) 109639beb93cSSam Leffler return WPA_KEY_MGMT_FT_IEEE8021X; 109739beb93cSSam Leffler if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_FT_PSK) 109839beb93cSSam Leffler return WPA_KEY_MGMT_FT_PSK; 1099*85732ac8SCy Schubert #ifdef CONFIG_SHA384 1100*85732ac8SCy Schubert if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_FT_802_1X_SHA384) 1101*85732ac8SCy Schubert return WPA_KEY_MGMT_FT_IEEE8021X_SHA384; 1102*85732ac8SCy Schubert #endif /* CONFIG_SHA384 */ 110339beb93cSSam Leffler #endif /* CONFIG_IEEE80211R */ 110439beb93cSSam Leffler #ifdef CONFIG_IEEE80211W 110539beb93cSSam Leffler if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_802_1X_SHA256) 110639beb93cSSam Leffler return WPA_KEY_MGMT_IEEE8021X_SHA256; 110739beb93cSSam Leffler if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_PSK_SHA256) 110839beb93cSSam Leffler return WPA_KEY_MGMT_PSK_SHA256; 110939beb93cSSam Leffler #endif /* CONFIG_IEEE80211W */ 1110f05cddf9SRui Paulo #ifdef CONFIG_SAE 1111f05cddf9SRui Paulo if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_SAE) 1112f05cddf9SRui Paulo return WPA_KEY_MGMT_SAE; 1113f05cddf9SRui Paulo if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_FT_SAE) 1114f05cddf9SRui Paulo return WPA_KEY_MGMT_FT_SAE; 1115f05cddf9SRui Paulo #endif /* CONFIG_SAE */ 11165b9c547cSRui Paulo if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_802_1X_SUITE_B) 11175b9c547cSRui Paulo return WPA_KEY_MGMT_IEEE8021X_SUITE_B; 11185b9c547cSRui Paulo if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_802_1X_SUITE_B_192) 11195b9c547cSRui Paulo return WPA_KEY_MGMT_IEEE8021X_SUITE_B_192; 1120*85732ac8SCy Schubert if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_FILS_SHA256) 1121*85732ac8SCy Schubert return WPA_KEY_MGMT_FILS_SHA256; 1122*85732ac8SCy Schubert if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_FILS_SHA384) 1123*85732ac8SCy Schubert return WPA_KEY_MGMT_FILS_SHA384; 1124*85732ac8SCy Schubert if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_FT_FILS_SHA256) 1125*85732ac8SCy Schubert return WPA_KEY_MGMT_FT_FILS_SHA256; 1126*85732ac8SCy Schubert if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_FT_FILS_SHA384) 1127*85732ac8SCy Schubert return WPA_KEY_MGMT_FT_FILS_SHA384; 1128*85732ac8SCy Schubert #ifdef CONFIG_OWE 1129*85732ac8SCy Schubert if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_OWE) 1130*85732ac8SCy Schubert return WPA_KEY_MGMT_OWE; 1131*85732ac8SCy Schubert #endif /* CONFIG_OWE */ 1132*85732ac8SCy Schubert #ifdef CONFIG_DPP 1133*85732ac8SCy Schubert if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_DPP) 1134*85732ac8SCy Schubert return WPA_KEY_MGMT_DPP; 1135*85732ac8SCy Schubert #endif /* CONFIG_DPP */ 1136325151a3SRui Paulo if (RSN_SELECTOR_GET(s) == RSN_AUTH_KEY_MGMT_OSEN) 1137325151a3SRui Paulo return WPA_KEY_MGMT_OSEN; 113839beb93cSSam Leffler return 0; 113939beb93cSSam Leffler } 11405b9c547cSRui Paulo 11415b9c547cSRui Paulo 1142325151a3SRui Paulo int wpa_cipher_valid_group(int cipher) 11435b9c547cSRui Paulo { 11445b9c547cSRui Paulo return wpa_cipher_valid_pairwise(cipher) || 11455b9c547cSRui Paulo cipher == WPA_CIPHER_GTK_NOT_USED; 11465b9c547cSRui Paulo } 11475b9c547cSRui Paulo 11485b9c547cSRui Paulo 11495b9c547cSRui Paulo #ifdef CONFIG_IEEE80211W 11505b9c547cSRui Paulo int wpa_cipher_valid_mgmt_group(int cipher) 11515b9c547cSRui Paulo { 11525b9c547cSRui Paulo return cipher == WPA_CIPHER_AES_128_CMAC || 11535b9c547cSRui Paulo cipher == WPA_CIPHER_BIP_GMAC_128 || 11545b9c547cSRui Paulo cipher == WPA_CIPHER_BIP_GMAC_256 || 11555b9c547cSRui Paulo cipher == WPA_CIPHER_BIP_CMAC_256; 11565b9c547cSRui Paulo } 11575b9c547cSRui Paulo #endif /* CONFIG_IEEE80211W */ 115839beb93cSSam Leffler 115939beb93cSSam Leffler 116039beb93cSSam Leffler /** 116139beb93cSSam Leffler * wpa_parse_wpa_ie_rsn - Parse RSN IE 116239beb93cSSam Leffler * @rsn_ie: Buffer containing RSN IE 116339beb93cSSam Leffler * @rsn_ie_len: RSN IE buffer length (including IE number and length octets) 116439beb93cSSam Leffler * @data: Pointer to structure that will be filled in with parsed data 116539beb93cSSam Leffler * Returns: 0 on success, <0 on failure 116639beb93cSSam Leffler */ 116739beb93cSSam Leffler int wpa_parse_wpa_ie_rsn(const u8 *rsn_ie, size_t rsn_ie_len, 116839beb93cSSam Leffler struct wpa_ie_data *data) 116939beb93cSSam Leffler { 117039beb93cSSam Leffler const u8 *pos; 117139beb93cSSam Leffler int left; 117239beb93cSSam Leffler int i, count; 117339beb93cSSam Leffler 117439beb93cSSam Leffler os_memset(data, 0, sizeof(*data)); 117539beb93cSSam Leffler data->proto = WPA_PROTO_RSN; 117639beb93cSSam Leffler data->pairwise_cipher = WPA_CIPHER_CCMP; 117739beb93cSSam Leffler data->group_cipher = WPA_CIPHER_CCMP; 117839beb93cSSam Leffler data->key_mgmt = WPA_KEY_MGMT_IEEE8021X; 117939beb93cSSam Leffler data->capabilities = 0; 118039beb93cSSam Leffler data->pmkid = NULL; 118139beb93cSSam Leffler data->num_pmkid = 0; 118239beb93cSSam Leffler #ifdef CONFIG_IEEE80211W 118339beb93cSSam Leffler data->mgmt_group_cipher = WPA_CIPHER_AES_128_CMAC; 118439beb93cSSam Leffler #else /* CONFIG_IEEE80211W */ 118539beb93cSSam Leffler data->mgmt_group_cipher = 0; 118639beb93cSSam Leffler #endif /* CONFIG_IEEE80211W */ 118739beb93cSSam Leffler 118839beb93cSSam Leffler if (rsn_ie_len == 0) { 118939beb93cSSam Leffler /* No RSN IE - fail silently */ 119039beb93cSSam Leffler return -1; 119139beb93cSSam Leffler } 119239beb93cSSam Leffler 119339beb93cSSam Leffler if (rsn_ie_len < sizeof(struct rsn_ie_hdr)) { 119439beb93cSSam Leffler wpa_printf(MSG_DEBUG, "%s: ie len too short %lu", 119539beb93cSSam Leffler __func__, (unsigned long) rsn_ie_len); 119639beb93cSSam Leffler return -1; 119739beb93cSSam Leffler } 119839beb93cSSam Leffler 1199325151a3SRui Paulo if (rsn_ie_len >= 6 && rsn_ie[1] >= 4 && 1200325151a3SRui Paulo rsn_ie[1] == rsn_ie_len - 2 && 1201325151a3SRui Paulo WPA_GET_BE32(&rsn_ie[2]) == OSEN_IE_VENDOR_TYPE) { 1202325151a3SRui Paulo pos = rsn_ie + 6; 1203325151a3SRui Paulo left = rsn_ie_len - 6; 1204325151a3SRui Paulo 1205*85732ac8SCy Schubert data->group_cipher = WPA_CIPHER_GTK_NOT_USED; 1206*85732ac8SCy Schubert data->key_mgmt = WPA_KEY_MGMT_OSEN; 1207325151a3SRui Paulo data->proto = WPA_PROTO_OSEN; 1208325151a3SRui Paulo } else { 1209325151a3SRui Paulo const struct rsn_ie_hdr *hdr; 1210325151a3SRui Paulo 121139beb93cSSam Leffler hdr = (const struct rsn_ie_hdr *) rsn_ie; 121239beb93cSSam Leffler 121339beb93cSSam Leffler if (hdr->elem_id != WLAN_EID_RSN || 121439beb93cSSam Leffler hdr->len != rsn_ie_len - 2 || 121539beb93cSSam Leffler WPA_GET_LE16(hdr->version) != RSN_VERSION) { 121639beb93cSSam Leffler wpa_printf(MSG_DEBUG, "%s: malformed ie or unknown version", 121739beb93cSSam Leffler __func__); 121839beb93cSSam Leffler return -2; 121939beb93cSSam Leffler } 122039beb93cSSam Leffler 122139beb93cSSam Leffler pos = (const u8 *) (hdr + 1); 122239beb93cSSam Leffler left = rsn_ie_len - sizeof(*hdr); 1223325151a3SRui Paulo } 122439beb93cSSam Leffler 122539beb93cSSam Leffler if (left >= RSN_SELECTOR_LEN) { 122639beb93cSSam Leffler data->group_cipher = rsn_selector_to_bitfield(pos); 12275b9c547cSRui Paulo if (!wpa_cipher_valid_group(data->group_cipher)) { 1228780fb4a2SCy Schubert wpa_printf(MSG_DEBUG, 1229780fb4a2SCy Schubert "%s: invalid group cipher 0x%x (%08x)", 1230780fb4a2SCy Schubert __func__, data->group_cipher, 1231780fb4a2SCy Schubert WPA_GET_BE32(pos)); 123239beb93cSSam Leffler return -1; 123339beb93cSSam Leffler } 123439beb93cSSam Leffler pos += RSN_SELECTOR_LEN; 123539beb93cSSam Leffler left -= RSN_SELECTOR_LEN; 123639beb93cSSam Leffler } else if (left > 0) { 123739beb93cSSam Leffler wpa_printf(MSG_DEBUG, "%s: ie length mismatch, %u too much", 123839beb93cSSam Leffler __func__, left); 123939beb93cSSam Leffler return -3; 124039beb93cSSam Leffler } 124139beb93cSSam Leffler 124239beb93cSSam Leffler if (left >= 2) { 124339beb93cSSam Leffler data->pairwise_cipher = 0; 124439beb93cSSam Leffler count = WPA_GET_LE16(pos); 124539beb93cSSam Leffler pos += 2; 124639beb93cSSam Leffler left -= 2; 12475b9c547cSRui Paulo if (count == 0 || count > left / RSN_SELECTOR_LEN) { 124839beb93cSSam Leffler wpa_printf(MSG_DEBUG, "%s: ie count botch (pairwise), " 124939beb93cSSam Leffler "count %u left %u", __func__, count, left); 125039beb93cSSam Leffler return -4; 125139beb93cSSam Leffler } 125239beb93cSSam Leffler for (i = 0; i < count; i++) { 125339beb93cSSam Leffler data->pairwise_cipher |= rsn_selector_to_bitfield(pos); 125439beb93cSSam Leffler pos += RSN_SELECTOR_LEN; 125539beb93cSSam Leffler left -= RSN_SELECTOR_LEN; 125639beb93cSSam Leffler } 125739beb93cSSam Leffler #ifdef CONFIG_IEEE80211W 125839beb93cSSam Leffler if (data->pairwise_cipher & WPA_CIPHER_AES_128_CMAC) { 125939beb93cSSam Leffler wpa_printf(MSG_DEBUG, "%s: AES-128-CMAC used as " 126039beb93cSSam Leffler "pairwise cipher", __func__); 126139beb93cSSam Leffler return -1; 126239beb93cSSam Leffler } 126339beb93cSSam Leffler #endif /* CONFIG_IEEE80211W */ 126439beb93cSSam Leffler } else if (left == 1) { 126539beb93cSSam Leffler wpa_printf(MSG_DEBUG, "%s: ie too short (for key mgmt)", 126639beb93cSSam Leffler __func__); 126739beb93cSSam Leffler return -5; 126839beb93cSSam Leffler } 126939beb93cSSam Leffler 127039beb93cSSam Leffler if (left >= 2) { 127139beb93cSSam Leffler data->key_mgmt = 0; 127239beb93cSSam Leffler count = WPA_GET_LE16(pos); 127339beb93cSSam Leffler pos += 2; 127439beb93cSSam Leffler left -= 2; 12755b9c547cSRui Paulo if (count == 0 || count > left / RSN_SELECTOR_LEN) { 127639beb93cSSam Leffler wpa_printf(MSG_DEBUG, "%s: ie count botch (key mgmt), " 127739beb93cSSam Leffler "count %u left %u", __func__, count, left); 127839beb93cSSam Leffler return -6; 127939beb93cSSam Leffler } 128039beb93cSSam Leffler for (i = 0; i < count; i++) { 128139beb93cSSam Leffler data->key_mgmt |= rsn_key_mgmt_to_bitfield(pos); 128239beb93cSSam Leffler pos += RSN_SELECTOR_LEN; 128339beb93cSSam Leffler left -= RSN_SELECTOR_LEN; 128439beb93cSSam Leffler } 128539beb93cSSam Leffler } else if (left == 1) { 128639beb93cSSam Leffler wpa_printf(MSG_DEBUG, "%s: ie too short (for capabilities)", 128739beb93cSSam Leffler __func__); 128839beb93cSSam Leffler return -7; 128939beb93cSSam Leffler } 129039beb93cSSam Leffler 129139beb93cSSam Leffler if (left >= 2) { 129239beb93cSSam Leffler data->capabilities = WPA_GET_LE16(pos); 129339beb93cSSam Leffler pos += 2; 129439beb93cSSam Leffler left -= 2; 129539beb93cSSam Leffler } 129639beb93cSSam Leffler 129739beb93cSSam Leffler if (left >= 2) { 12985b9c547cSRui Paulo u16 num_pmkid = WPA_GET_LE16(pos); 129939beb93cSSam Leffler pos += 2; 130039beb93cSSam Leffler left -= 2; 13015b9c547cSRui Paulo if (num_pmkid > (unsigned int) left / PMKID_LEN) { 130239beb93cSSam Leffler wpa_printf(MSG_DEBUG, "%s: PMKID underflow " 13035b9c547cSRui Paulo "(num_pmkid=%u left=%d)", 13045b9c547cSRui Paulo __func__, num_pmkid, left); 130539beb93cSSam Leffler data->num_pmkid = 0; 130639beb93cSSam Leffler return -9; 130739beb93cSSam Leffler } else { 13085b9c547cSRui Paulo data->num_pmkid = num_pmkid; 130939beb93cSSam Leffler data->pmkid = pos; 131039beb93cSSam Leffler pos += data->num_pmkid * PMKID_LEN; 131139beb93cSSam Leffler left -= data->num_pmkid * PMKID_LEN; 131239beb93cSSam Leffler } 131339beb93cSSam Leffler } 131439beb93cSSam Leffler 131539beb93cSSam Leffler #ifdef CONFIG_IEEE80211W 131639beb93cSSam Leffler if (left >= 4) { 131739beb93cSSam Leffler data->mgmt_group_cipher = rsn_selector_to_bitfield(pos); 13185b9c547cSRui Paulo if (!wpa_cipher_valid_mgmt_group(data->mgmt_group_cipher)) { 1319780fb4a2SCy Schubert wpa_printf(MSG_DEBUG, 1320780fb4a2SCy Schubert "%s: Unsupported management group cipher 0x%x (%08x)", 1321780fb4a2SCy Schubert __func__, data->mgmt_group_cipher, 1322780fb4a2SCy Schubert WPA_GET_BE32(pos)); 132339beb93cSSam Leffler return -10; 132439beb93cSSam Leffler } 132539beb93cSSam Leffler pos += RSN_SELECTOR_LEN; 132639beb93cSSam Leffler left -= RSN_SELECTOR_LEN; 132739beb93cSSam Leffler } 132839beb93cSSam Leffler #endif /* CONFIG_IEEE80211W */ 132939beb93cSSam Leffler 133039beb93cSSam Leffler if (left > 0) { 13315b9c547cSRui Paulo wpa_hexdump(MSG_DEBUG, 13325b9c547cSRui Paulo "wpa_parse_wpa_ie_rsn: ignore trailing bytes", 13335b9c547cSRui Paulo pos, left); 133439beb93cSSam Leffler } 133539beb93cSSam Leffler 133639beb93cSSam Leffler return 0; 133739beb93cSSam Leffler } 133839beb93cSSam Leffler 133939beb93cSSam Leffler 1340f05cddf9SRui Paulo static int wpa_selector_to_bitfield(const u8 *s) 1341f05cddf9SRui Paulo { 1342f05cddf9SRui Paulo if (RSN_SELECTOR_GET(s) == WPA_CIPHER_SUITE_NONE) 1343f05cddf9SRui Paulo return WPA_CIPHER_NONE; 1344f05cddf9SRui Paulo if (RSN_SELECTOR_GET(s) == WPA_CIPHER_SUITE_TKIP) 1345f05cddf9SRui Paulo return WPA_CIPHER_TKIP; 1346f05cddf9SRui Paulo if (RSN_SELECTOR_GET(s) == WPA_CIPHER_SUITE_CCMP) 1347f05cddf9SRui Paulo return WPA_CIPHER_CCMP; 1348f05cddf9SRui Paulo return 0; 1349f05cddf9SRui Paulo } 1350f05cddf9SRui Paulo 1351f05cddf9SRui Paulo 1352f05cddf9SRui Paulo static int wpa_key_mgmt_to_bitfield(const u8 *s) 1353f05cddf9SRui Paulo { 1354f05cddf9SRui Paulo if (RSN_SELECTOR_GET(s) == WPA_AUTH_KEY_MGMT_UNSPEC_802_1X) 1355f05cddf9SRui Paulo return WPA_KEY_MGMT_IEEE8021X; 1356f05cddf9SRui Paulo if (RSN_SELECTOR_GET(s) == WPA_AUTH_KEY_MGMT_PSK_OVER_802_1X) 1357f05cddf9SRui Paulo return WPA_KEY_MGMT_PSK; 1358f05cddf9SRui Paulo if (RSN_SELECTOR_GET(s) == WPA_AUTH_KEY_MGMT_NONE) 1359f05cddf9SRui Paulo return WPA_KEY_MGMT_WPA_NONE; 1360f05cddf9SRui Paulo return 0; 1361f05cddf9SRui Paulo } 1362f05cddf9SRui Paulo 1363f05cddf9SRui Paulo 1364f05cddf9SRui Paulo int wpa_parse_wpa_ie_wpa(const u8 *wpa_ie, size_t wpa_ie_len, 1365f05cddf9SRui Paulo struct wpa_ie_data *data) 1366f05cddf9SRui Paulo { 1367f05cddf9SRui Paulo const struct wpa_ie_hdr *hdr; 1368f05cddf9SRui Paulo const u8 *pos; 1369f05cddf9SRui Paulo int left; 1370f05cddf9SRui Paulo int i, count; 1371f05cddf9SRui Paulo 1372f05cddf9SRui Paulo os_memset(data, 0, sizeof(*data)); 1373f05cddf9SRui Paulo data->proto = WPA_PROTO_WPA; 1374f05cddf9SRui Paulo data->pairwise_cipher = WPA_CIPHER_TKIP; 1375f05cddf9SRui Paulo data->group_cipher = WPA_CIPHER_TKIP; 1376f05cddf9SRui Paulo data->key_mgmt = WPA_KEY_MGMT_IEEE8021X; 1377f05cddf9SRui Paulo data->capabilities = 0; 1378f05cddf9SRui Paulo data->pmkid = NULL; 1379f05cddf9SRui Paulo data->num_pmkid = 0; 1380f05cddf9SRui Paulo data->mgmt_group_cipher = 0; 1381f05cddf9SRui Paulo 1382f05cddf9SRui Paulo if (wpa_ie_len < sizeof(struct wpa_ie_hdr)) { 1383f05cddf9SRui Paulo wpa_printf(MSG_DEBUG, "%s: ie len too short %lu", 1384f05cddf9SRui Paulo __func__, (unsigned long) wpa_ie_len); 1385f05cddf9SRui Paulo return -1; 1386f05cddf9SRui Paulo } 1387f05cddf9SRui Paulo 1388f05cddf9SRui Paulo hdr = (const struct wpa_ie_hdr *) wpa_ie; 1389f05cddf9SRui Paulo 1390f05cddf9SRui Paulo if (hdr->elem_id != WLAN_EID_VENDOR_SPECIFIC || 1391f05cddf9SRui Paulo hdr->len != wpa_ie_len - 2 || 1392f05cddf9SRui Paulo RSN_SELECTOR_GET(hdr->oui) != WPA_OUI_TYPE || 1393f05cddf9SRui Paulo WPA_GET_LE16(hdr->version) != WPA_VERSION) { 1394f05cddf9SRui Paulo wpa_printf(MSG_DEBUG, "%s: malformed ie or unknown version", 1395f05cddf9SRui Paulo __func__); 1396f05cddf9SRui Paulo return -2; 1397f05cddf9SRui Paulo } 1398f05cddf9SRui Paulo 1399f05cddf9SRui Paulo pos = (const u8 *) (hdr + 1); 1400f05cddf9SRui Paulo left = wpa_ie_len - sizeof(*hdr); 1401f05cddf9SRui Paulo 1402f05cddf9SRui Paulo if (left >= WPA_SELECTOR_LEN) { 1403f05cddf9SRui Paulo data->group_cipher = wpa_selector_to_bitfield(pos); 1404f05cddf9SRui Paulo pos += WPA_SELECTOR_LEN; 1405f05cddf9SRui Paulo left -= WPA_SELECTOR_LEN; 1406f05cddf9SRui Paulo } else if (left > 0) { 1407f05cddf9SRui Paulo wpa_printf(MSG_DEBUG, "%s: ie length mismatch, %u too much", 1408f05cddf9SRui Paulo __func__, left); 1409f05cddf9SRui Paulo return -3; 1410f05cddf9SRui Paulo } 1411f05cddf9SRui Paulo 1412f05cddf9SRui Paulo if (left >= 2) { 1413f05cddf9SRui Paulo data->pairwise_cipher = 0; 1414f05cddf9SRui Paulo count = WPA_GET_LE16(pos); 1415f05cddf9SRui Paulo pos += 2; 1416f05cddf9SRui Paulo left -= 2; 14175b9c547cSRui Paulo if (count == 0 || count > left / WPA_SELECTOR_LEN) { 1418f05cddf9SRui Paulo wpa_printf(MSG_DEBUG, "%s: ie count botch (pairwise), " 1419f05cddf9SRui Paulo "count %u left %u", __func__, count, left); 1420f05cddf9SRui Paulo return -4; 1421f05cddf9SRui Paulo } 1422f05cddf9SRui Paulo for (i = 0; i < count; i++) { 1423f05cddf9SRui Paulo data->pairwise_cipher |= wpa_selector_to_bitfield(pos); 1424f05cddf9SRui Paulo pos += WPA_SELECTOR_LEN; 1425f05cddf9SRui Paulo left -= WPA_SELECTOR_LEN; 1426f05cddf9SRui Paulo } 1427f05cddf9SRui Paulo } else if (left == 1) { 1428f05cddf9SRui Paulo wpa_printf(MSG_DEBUG, "%s: ie too short (for key mgmt)", 1429f05cddf9SRui Paulo __func__); 1430f05cddf9SRui Paulo return -5; 1431f05cddf9SRui Paulo } 1432f05cddf9SRui Paulo 1433f05cddf9SRui Paulo if (left >= 2) { 1434f05cddf9SRui Paulo data->key_mgmt = 0; 1435f05cddf9SRui Paulo count = WPA_GET_LE16(pos); 1436f05cddf9SRui Paulo pos += 2; 1437f05cddf9SRui Paulo left -= 2; 14385b9c547cSRui Paulo if (count == 0 || count > left / WPA_SELECTOR_LEN) { 1439f05cddf9SRui Paulo wpa_printf(MSG_DEBUG, "%s: ie count botch (key mgmt), " 1440f05cddf9SRui Paulo "count %u left %u", __func__, count, left); 1441f05cddf9SRui Paulo return -6; 1442f05cddf9SRui Paulo } 1443f05cddf9SRui Paulo for (i = 0; i < count; i++) { 1444f05cddf9SRui Paulo data->key_mgmt |= wpa_key_mgmt_to_bitfield(pos); 1445f05cddf9SRui Paulo pos += WPA_SELECTOR_LEN; 1446f05cddf9SRui Paulo left -= WPA_SELECTOR_LEN; 1447f05cddf9SRui Paulo } 1448f05cddf9SRui Paulo } else if (left == 1) { 1449f05cddf9SRui Paulo wpa_printf(MSG_DEBUG, "%s: ie too short (for capabilities)", 1450f05cddf9SRui Paulo __func__); 1451f05cddf9SRui Paulo return -7; 1452f05cddf9SRui Paulo } 1453f05cddf9SRui Paulo 1454f05cddf9SRui Paulo if (left >= 2) { 1455f05cddf9SRui Paulo data->capabilities = WPA_GET_LE16(pos); 1456f05cddf9SRui Paulo pos += 2; 1457f05cddf9SRui Paulo left -= 2; 1458f05cddf9SRui Paulo } 1459f05cddf9SRui Paulo 1460f05cddf9SRui Paulo if (left > 0) { 14615b9c547cSRui Paulo wpa_hexdump(MSG_DEBUG, 14625b9c547cSRui Paulo "wpa_parse_wpa_ie_wpa: ignore trailing bytes", 14635b9c547cSRui Paulo pos, left); 1464f05cddf9SRui Paulo } 1465f05cddf9SRui Paulo 1466f05cddf9SRui Paulo return 0; 1467f05cddf9SRui Paulo } 1468f05cddf9SRui Paulo 1469f05cddf9SRui Paulo 147039beb93cSSam Leffler #ifdef CONFIG_IEEE80211R 147139beb93cSSam Leffler 147239beb93cSSam Leffler /** 147339beb93cSSam Leffler * wpa_derive_pmk_r0 - Derive PMK-R0 and PMKR0Name 147439beb93cSSam Leffler * 147539beb93cSSam Leffler * IEEE Std 802.11r-2008 - 8.5.1.5.3 147639beb93cSSam Leffler */ 1477*85732ac8SCy Schubert int wpa_derive_pmk_r0(const u8 *xxkey, size_t xxkey_len, 147839beb93cSSam Leffler const u8 *ssid, size_t ssid_len, 147939beb93cSSam Leffler const u8 *mdid, const u8 *r0kh_id, size_t r0kh_id_len, 1480*85732ac8SCy Schubert const u8 *s0kh_id, u8 *pmk_r0, u8 *pmk_r0_name, 1481*85732ac8SCy Schubert int use_sha384) 148239beb93cSSam Leffler { 1483325151a3SRui Paulo u8 buf[1 + SSID_MAX_LEN + MOBILITY_DOMAIN_ID_LEN + 1 + 148439beb93cSSam Leffler FT_R0KH_ID_MAX_LEN + ETH_ALEN]; 1485*85732ac8SCy Schubert u8 *pos, r0_key_data[64], hash[48]; 148639beb93cSSam Leffler const u8 *addr[2]; 148739beb93cSSam Leffler size_t len[2]; 1488*85732ac8SCy Schubert size_t q = use_sha384 ? 48 : 32; 1489*85732ac8SCy Schubert size_t r0_key_data_len = q + 16; 149039beb93cSSam Leffler 149139beb93cSSam Leffler /* 149239beb93cSSam Leffler * R0-Key-Data = KDF-384(XXKey, "FT-R0", 149339beb93cSSam Leffler * SSIDlength || SSID || MDID || R0KHlength || 149439beb93cSSam Leffler * R0KH-ID || S0KH-ID) 1495*85732ac8SCy Schubert * XXKey is either the second 256 bits of MSK or PSK; or the first 1496*85732ac8SCy Schubert * 384 bits of MSK for FT-EAP-SHA384. 1497*85732ac8SCy Schubert * PMK-R0 = L(R0-Key-Data, 0, Q) 1498*85732ac8SCy Schubert * PMK-R0Name-Salt = L(R0-Key-Data, Q, 128) 1499*85732ac8SCy Schubert * Q = 384 for FT-EAP-SHA384; otherwise, 256 150039beb93cSSam Leffler */ 1501325151a3SRui Paulo if (ssid_len > SSID_MAX_LEN || r0kh_id_len > FT_R0KH_ID_MAX_LEN) 1502*85732ac8SCy Schubert return -1; 1503*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "FT: Derive PMK-R0 using KDF-%s", 1504*85732ac8SCy Schubert use_sha384 ? "SHA384" : "SHA256"); 1505*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FT: XXKey", xxkey, xxkey_len); 1506*85732ac8SCy Schubert wpa_hexdump_ascii(MSG_DEBUG, "FT: SSID", ssid, ssid_len); 1507*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FT: MDID", mdid, MOBILITY_DOMAIN_ID_LEN); 1508*85732ac8SCy Schubert wpa_hexdump_ascii(MSG_DEBUG, "FT: R0KH-ID", r0kh_id, r0kh_id_len); 1509*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "FT: S0KH-ID: " MACSTR, MAC2STR(s0kh_id)); 151039beb93cSSam Leffler pos = buf; 151139beb93cSSam Leffler *pos++ = ssid_len; 151239beb93cSSam Leffler os_memcpy(pos, ssid, ssid_len); 151339beb93cSSam Leffler pos += ssid_len; 151439beb93cSSam Leffler os_memcpy(pos, mdid, MOBILITY_DOMAIN_ID_LEN); 151539beb93cSSam Leffler pos += MOBILITY_DOMAIN_ID_LEN; 151639beb93cSSam Leffler *pos++ = r0kh_id_len; 151739beb93cSSam Leffler os_memcpy(pos, r0kh_id, r0kh_id_len); 151839beb93cSSam Leffler pos += r0kh_id_len; 151939beb93cSSam Leffler os_memcpy(pos, s0kh_id, ETH_ALEN); 152039beb93cSSam Leffler pos += ETH_ALEN; 152139beb93cSSam Leffler 1522*85732ac8SCy Schubert #ifdef CONFIG_SHA384 1523*85732ac8SCy Schubert if (use_sha384) { 1524*85732ac8SCy Schubert if (xxkey_len != SHA384_MAC_LEN) { 1525*85732ac8SCy Schubert wpa_printf(MSG_ERROR, 1526*85732ac8SCy Schubert "FT: Unexpected XXKey length %d (expected %d)", 1527*85732ac8SCy Schubert (int) xxkey_len, SHA384_MAC_LEN); 1528*85732ac8SCy Schubert return -1; 1529*85732ac8SCy Schubert } 1530*85732ac8SCy Schubert if (sha384_prf(xxkey, xxkey_len, "FT-R0", buf, pos - buf, 1531*85732ac8SCy Schubert r0_key_data, r0_key_data_len) < 0) 1532*85732ac8SCy Schubert return -1; 1533*85732ac8SCy Schubert } 1534*85732ac8SCy Schubert #endif /* CONFIG_SHA384 */ 1535*85732ac8SCy Schubert if (!use_sha384) { 1536*85732ac8SCy Schubert if (xxkey_len != PMK_LEN) { 1537*85732ac8SCy Schubert wpa_printf(MSG_ERROR, 1538*85732ac8SCy Schubert "FT: Unexpected XXKey length %d (expected %d)", 1539*85732ac8SCy Schubert (int) xxkey_len, PMK_LEN); 1540*85732ac8SCy Schubert return -1; 1541*85732ac8SCy Schubert } 1542*85732ac8SCy Schubert if (sha256_prf(xxkey, xxkey_len, "FT-R0", buf, pos - buf, 1543*85732ac8SCy Schubert r0_key_data, r0_key_data_len) < 0) 1544*85732ac8SCy Schubert return -1; 1545*85732ac8SCy Schubert } 1546*85732ac8SCy Schubert os_memcpy(pmk_r0, r0_key_data, q); 1547*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FT: PMK-R0", pmk_r0, q); 1548*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FT: PMK-R0Name-Salt", &r0_key_data[q], 16); 154939beb93cSSam Leffler 155039beb93cSSam Leffler /* 1551*85732ac8SCy Schubert * PMKR0Name = Truncate-128(Hash("FT-R0N" || PMK-R0Name-Salt) 155239beb93cSSam Leffler */ 155339beb93cSSam Leffler addr[0] = (const u8 *) "FT-R0N"; 155439beb93cSSam Leffler len[0] = 6; 1555*85732ac8SCy Schubert addr[1] = &r0_key_data[q]; 155639beb93cSSam Leffler len[1] = 16; 155739beb93cSSam Leffler 1558*85732ac8SCy Schubert #ifdef CONFIG_SHA384 1559*85732ac8SCy Schubert if (use_sha384 && sha384_vector(2, addr, len, hash) < 0) 1560*85732ac8SCy Schubert return -1; 1561*85732ac8SCy Schubert #endif /* CONFIG_SHA384 */ 1562*85732ac8SCy Schubert if (!use_sha384 && sha256_vector(2, addr, len, hash) < 0) 1563*85732ac8SCy Schubert return -1; 156439beb93cSSam Leffler os_memcpy(pmk_r0_name, hash, WPA_PMK_NAME_LEN); 1565*85732ac8SCy Schubert os_memset(r0_key_data, 0, sizeof(r0_key_data)); 1566*85732ac8SCy Schubert return 0; 156739beb93cSSam Leffler } 156839beb93cSSam Leffler 156939beb93cSSam Leffler 157039beb93cSSam Leffler /** 157139beb93cSSam Leffler * wpa_derive_pmk_r1_name - Derive PMKR1Name 157239beb93cSSam Leffler * 157339beb93cSSam Leffler * IEEE Std 802.11r-2008 - 8.5.1.5.4 157439beb93cSSam Leffler */ 1575*85732ac8SCy Schubert int wpa_derive_pmk_r1_name(const u8 *pmk_r0_name, const u8 *r1kh_id, 1576*85732ac8SCy Schubert const u8 *s1kh_id, u8 *pmk_r1_name, int use_sha384) 157739beb93cSSam Leffler { 1578*85732ac8SCy Schubert u8 hash[48]; 157939beb93cSSam Leffler const u8 *addr[4]; 158039beb93cSSam Leffler size_t len[4]; 158139beb93cSSam Leffler 158239beb93cSSam Leffler /* 1583*85732ac8SCy Schubert * PMKR1Name = Truncate-128(Hash("FT-R1N" || PMKR0Name || 158439beb93cSSam Leffler * R1KH-ID || S1KH-ID)) 158539beb93cSSam Leffler */ 158639beb93cSSam Leffler addr[0] = (const u8 *) "FT-R1N"; 158739beb93cSSam Leffler len[0] = 6; 158839beb93cSSam Leffler addr[1] = pmk_r0_name; 158939beb93cSSam Leffler len[1] = WPA_PMK_NAME_LEN; 159039beb93cSSam Leffler addr[2] = r1kh_id; 159139beb93cSSam Leffler len[2] = FT_R1KH_ID_LEN; 159239beb93cSSam Leffler addr[3] = s1kh_id; 159339beb93cSSam Leffler len[3] = ETH_ALEN; 159439beb93cSSam Leffler 1595*85732ac8SCy Schubert #ifdef CONFIG_SHA384 1596*85732ac8SCy Schubert if (use_sha384 && sha384_vector(4, addr, len, hash) < 0) 1597*85732ac8SCy Schubert return -1; 1598*85732ac8SCy Schubert #endif /* CONFIG_SHA384 */ 1599*85732ac8SCy Schubert if (!use_sha384 && sha256_vector(4, addr, len, hash) < 0) 1600*85732ac8SCy Schubert return -1; 160139beb93cSSam Leffler os_memcpy(pmk_r1_name, hash, WPA_PMK_NAME_LEN); 1602*85732ac8SCy Schubert return 0; 160339beb93cSSam Leffler } 160439beb93cSSam Leffler 160539beb93cSSam Leffler 160639beb93cSSam Leffler /** 160739beb93cSSam Leffler * wpa_derive_pmk_r1 - Derive PMK-R1 and PMKR1Name from PMK-R0 160839beb93cSSam Leffler * 160939beb93cSSam Leffler * IEEE Std 802.11r-2008 - 8.5.1.5.4 161039beb93cSSam Leffler */ 1611*85732ac8SCy Schubert int wpa_derive_pmk_r1(const u8 *pmk_r0, size_t pmk_r0_len, 1612*85732ac8SCy Schubert const u8 *pmk_r0_name, 161339beb93cSSam Leffler const u8 *r1kh_id, const u8 *s1kh_id, 161439beb93cSSam Leffler u8 *pmk_r1, u8 *pmk_r1_name) 161539beb93cSSam Leffler { 161639beb93cSSam Leffler u8 buf[FT_R1KH_ID_LEN + ETH_ALEN]; 161739beb93cSSam Leffler u8 *pos; 161839beb93cSSam Leffler 161939beb93cSSam Leffler /* PMK-R1 = KDF-256(PMK-R0, "FT-R1", R1KH-ID || S1KH-ID) */ 1620*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "FT: Derive PMK-R1 using KDF-%s", 1621*85732ac8SCy Schubert pmk_r0_len == SHA384_MAC_LEN ? "SHA384" : "SHA256"); 1622*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FT: PMK-R0", pmk_r0, pmk_r0_len); 1623*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FT: R1KH-ID", r1kh_id, FT_R1KH_ID_LEN); 1624*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "FT: S1KH-ID: " MACSTR, MAC2STR(s1kh_id)); 162539beb93cSSam Leffler pos = buf; 162639beb93cSSam Leffler os_memcpy(pos, r1kh_id, FT_R1KH_ID_LEN); 162739beb93cSSam Leffler pos += FT_R1KH_ID_LEN; 162839beb93cSSam Leffler os_memcpy(pos, s1kh_id, ETH_ALEN); 162939beb93cSSam Leffler pos += ETH_ALEN; 163039beb93cSSam Leffler 1631*85732ac8SCy Schubert #ifdef CONFIG_SHA384 1632*85732ac8SCy Schubert if (pmk_r0_len == SHA384_MAC_LEN && 1633*85732ac8SCy Schubert sha384_prf(pmk_r0, pmk_r0_len, "FT-R1", 1634*85732ac8SCy Schubert buf, pos - buf, pmk_r1, pmk_r0_len) < 0) 1635*85732ac8SCy Schubert return -1; 1636*85732ac8SCy Schubert #endif /* CONFIG_SHA384 */ 1637*85732ac8SCy Schubert if (pmk_r0_len == PMK_LEN && 1638*85732ac8SCy Schubert sha256_prf(pmk_r0, pmk_r0_len, "FT-R1", 1639*85732ac8SCy Schubert buf, pos - buf, pmk_r1, pmk_r0_len) < 0) 1640*85732ac8SCy Schubert return -1; 1641*85732ac8SCy Schubert if (pmk_r0_len != SHA384_MAC_LEN && pmk_r0_len != PMK_LEN) { 1642*85732ac8SCy Schubert wpa_printf(MSG_ERROR, "FT: Unexpected PMK-R0 length %d", 1643*85732ac8SCy Schubert (int) pmk_r0_len); 1644*85732ac8SCy Schubert return -1; 1645*85732ac8SCy Schubert } 1646*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FT: PMK-R1", pmk_r1, pmk_r0_len); 164739beb93cSSam Leffler 1648*85732ac8SCy Schubert return wpa_derive_pmk_r1_name(pmk_r0_name, r1kh_id, s1kh_id, 1649*85732ac8SCy Schubert pmk_r1_name, 1650*85732ac8SCy Schubert pmk_r0_len == SHA384_MAC_LEN); 165139beb93cSSam Leffler } 165239beb93cSSam Leffler 165339beb93cSSam Leffler 165439beb93cSSam Leffler /** 165539beb93cSSam Leffler * wpa_pmk_r1_to_ptk - Derive PTK and PTKName from PMK-R1 165639beb93cSSam Leffler * 165739beb93cSSam Leffler * IEEE Std 802.11r-2008 - 8.5.1.5.5 165839beb93cSSam Leffler */ 1659*85732ac8SCy Schubert int wpa_pmk_r1_to_ptk(const u8 *pmk_r1, size_t pmk_r1_len, 1660*85732ac8SCy Schubert const u8 *snonce, const u8 *anonce, 166139beb93cSSam Leffler const u8 *sta_addr, const u8 *bssid, 166239beb93cSSam Leffler const u8 *pmk_r1_name, 16635b9c547cSRui Paulo struct wpa_ptk *ptk, u8 *ptk_name, int akmp, int cipher) 166439beb93cSSam Leffler { 166539beb93cSSam Leffler u8 buf[2 * WPA_NONCE_LEN + 2 * ETH_ALEN]; 166639beb93cSSam Leffler u8 *pos, hash[32]; 166739beb93cSSam Leffler const u8 *addr[6]; 166839beb93cSSam Leffler size_t len[6]; 1669*85732ac8SCy Schubert u8 tmp[2 * WPA_KCK_MAX_LEN + 2 * WPA_KEK_MAX_LEN + WPA_TK_MAX_LEN]; 1670*85732ac8SCy Schubert size_t ptk_len, offset; 1671*85732ac8SCy Schubert int use_sha384 = wpa_key_mgmt_sha384(akmp); 167239beb93cSSam Leffler 167339beb93cSSam Leffler /* 167439beb93cSSam Leffler * PTK = KDF-PTKLen(PMK-R1, "FT-PTK", SNonce || ANonce || 167539beb93cSSam Leffler * BSSID || STA-ADDR) 167639beb93cSSam Leffler */ 1677*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "FT: Derive PTK using KDF-%s", 1678*85732ac8SCy Schubert use_sha384 ? "SHA384" : "SHA256"); 1679*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FT: PMK-R1", pmk_r1, pmk_r1_len); 1680*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FT: SNonce", snonce, WPA_NONCE_LEN); 1681*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FT: ANonce", anonce, WPA_NONCE_LEN); 1682*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "FT: BSSID=" MACSTR " STA-ADDR=" MACSTR, 1683*85732ac8SCy Schubert MAC2STR(bssid), MAC2STR(sta_addr)); 168439beb93cSSam Leffler pos = buf; 168539beb93cSSam Leffler os_memcpy(pos, snonce, WPA_NONCE_LEN); 168639beb93cSSam Leffler pos += WPA_NONCE_LEN; 168739beb93cSSam Leffler os_memcpy(pos, anonce, WPA_NONCE_LEN); 168839beb93cSSam Leffler pos += WPA_NONCE_LEN; 168939beb93cSSam Leffler os_memcpy(pos, bssid, ETH_ALEN); 169039beb93cSSam Leffler pos += ETH_ALEN; 169139beb93cSSam Leffler os_memcpy(pos, sta_addr, ETH_ALEN); 169239beb93cSSam Leffler pos += ETH_ALEN; 169339beb93cSSam Leffler 1694*85732ac8SCy Schubert ptk->kck_len = wpa_kck_len(akmp, PMK_LEN); 1695*85732ac8SCy Schubert ptk->kck2_len = wpa_kck2_len(akmp); 1696*85732ac8SCy Schubert ptk->kek_len = wpa_kek_len(akmp, PMK_LEN); 1697*85732ac8SCy Schubert ptk->kek2_len = wpa_kek2_len(akmp); 16985b9c547cSRui Paulo ptk->tk_len = wpa_cipher_key_len(cipher); 1699*85732ac8SCy Schubert ptk_len = ptk->kck_len + ptk->kek_len + ptk->tk_len + 1700*85732ac8SCy Schubert ptk->kck2_len + ptk->kek2_len; 17015b9c547cSRui Paulo 1702*85732ac8SCy Schubert #ifdef CONFIG_SHA384 1703*85732ac8SCy Schubert if (use_sha384) { 1704*85732ac8SCy Schubert if (pmk_r1_len != SHA384_MAC_LEN) { 1705*85732ac8SCy Schubert wpa_printf(MSG_ERROR, 1706*85732ac8SCy Schubert "FT: Unexpected PMK-R1 length %d (expected %d)", 1707*85732ac8SCy Schubert (int) pmk_r1_len, SHA384_MAC_LEN); 1708*85732ac8SCy Schubert return -1; 1709*85732ac8SCy Schubert } 1710*85732ac8SCy Schubert if (sha384_prf(pmk_r1, pmk_r1_len, "FT-PTK", 1711*85732ac8SCy Schubert buf, pos - buf, tmp, ptk_len) < 0) 1712*85732ac8SCy Schubert return -1; 1713*85732ac8SCy Schubert } 1714*85732ac8SCy Schubert #endif /* CONFIG_SHA384 */ 1715*85732ac8SCy Schubert if (!use_sha384) { 1716*85732ac8SCy Schubert if (pmk_r1_len != PMK_LEN) { 1717*85732ac8SCy Schubert wpa_printf(MSG_ERROR, 1718*85732ac8SCy Schubert "FT: Unexpected PMK-R1 length %d (expected %d)", 1719*85732ac8SCy Schubert (int) pmk_r1_len, PMK_LEN); 1720*85732ac8SCy Schubert return -1; 1721*85732ac8SCy Schubert } 1722*85732ac8SCy Schubert if (sha256_prf(pmk_r1, pmk_r1_len, "FT-PTK", 1723*85732ac8SCy Schubert buf, pos - buf, tmp, ptk_len) < 0) 1724*85732ac8SCy Schubert return -1; 1725*85732ac8SCy Schubert } 1726*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FT: PTK", tmp, ptk_len); 172739beb93cSSam Leffler 172839beb93cSSam Leffler /* 172939beb93cSSam Leffler * PTKName = Truncate-128(SHA-256(PMKR1Name || "FT-PTKN" || SNonce || 173039beb93cSSam Leffler * ANonce || BSSID || STA-ADDR)) 173139beb93cSSam Leffler */ 1732*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "FT: PMKR1Name", pmk_r1_name, WPA_PMK_NAME_LEN); 173339beb93cSSam Leffler addr[0] = pmk_r1_name; 173439beb93cSSam Leffler len[0] = WPA_PMK_NAME_LEN; 173539beb93cSSam Leffler addr[1] = (const u8 *) "FT-PTKN"; 173639beb93cSSam Leffler len[1] = 7; 173739beb93cSSam Leffler addr[2] = snonce; 173839beb93cSSam Leffler len[2] = WPA_NONCE_LEN; 173939beb93cSSam Leffler addr[3] = anonce; 174039beb93cSSam Leffler len[3] = WPA_NONCE_LEN; 174139beb93cSSam Leffler addr[4] = bssid; 174239beb93cSSam Leffler len[4] = ETH_ALEN; 174339beb93cSSam Leffler addr[5] = sta_addr; 174439beb93cSSam Leffler len[5] = ETH_ALEN; 174539beb93cSSam Leffler 1746*85732ac8SCy Schubert if (sha256_vector(6, addr, len, hash) < 0) 1747*85732ac8SCy Schubert return -1; 174839beb93cSSam Leffler os_memcpy(ptk_name, hash, WPA_PMK_NAME_LEN); 17495b9c547cSRui Paulo 17505b9c547cSRui Paulo os_memcpy(ptk->kck, tmp, ptk->kck_len); 1751*85732ac8SCy Schubert offset = ptk->kck_len; 1752*85732ac8SCy Schubert os_memcpy(ptk->kek, tmp + offset, ptk->kek_len); 1753*85732ac8SCy Schubert offset += ptk->kek_len; 1754*85732ac8SCy Schubert os_memcpy(ptk->tk, tmp + offset, ptk->tk_len); 1755*85732ac8SCy Schubert offset += ptk->tk_len; 1756*85732ac8SCy Schubert os_memcpy(ptk->kck2, tmp + offset, ptk->kck2_len); 1757*85732ac8SCy Schubert offset = ptk->kck2_len; 1758*85732ac8SCy Schubert os_memcpy(ptk->kek2, tmp + offset, ptk->kek2_len); 17595b9c547cSRui Paulo 17605b9c547cSRui Paulo wpa_hexdump_key(MSG_DEBUG, "FT: KCK", ptk->kck, ptk->kck_len); 17615b9c547cSRui Paulo wpa_hexdump_key(MSG_DEBUG, "FT: KEK", ptk->kek, ptk->kek_len); 1762*85732ac8SCy Schubert if (ptk->kck2_len) 1763*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FT: KCK2", 1764*85732ac8SCy Schubert ptk->kck2, ptk->kck2_len); 1765*85732ac8SCy Schubert if (ptk->kek2_len) 1766*85732ac8SCy Schubert wpa_hexdump_key(MSG_DEBUG, "FT: KEK2", 1767*85732ac8SCy Schubert ptk->kek2, ptk->kek2_len); 17685b9c547cSRui Paulo wpa_hexdump_key(MSG_DEBUG, "FT: TK", ptk->tk, ptk->tk_len); 17695b9c547cSRui Paulo wpa_hexdump(MSG_DEBUG, "FT: PTKName", ptk_name, WPA_PMK_NAME_LEN); 17705b9c547cSRui Paulo 17715b9c547cSRui Paulo os_memset(tmp, 0, sizeof(tmp)); 17725b9c547cSRui Paulo 17735b9c547cSRui Paulo return 0; 177439beb93cSSam Leffler } 177539beb93cSSam Leffler 177639beb93cSSam Leffler #endif /* CONFIG_IEEE80211R */ 1777e28a4053SRui Paulo 1778e28a4053SRui Paulo 1779e28a4053SRui Paulo /** 1780e28a4053SRui Paulo * rsn_pmkid - Calculate PMK identifier 1781e28a4053SRui Paulo * @pmk: Pairwise master key 1782e28a4053SRui Paulo * @pmk_len: Length of pmk in bytes 1783e28a4053SRui Paulo * @aa: Authenticator address 1784e28a4053SRui Paulo * @spa: Supplicant address 1785e28a4053SRui Paulo * @pmkid: Buffer for PMKID 1786*85732ac8SCy Schubert * @akmp: Negotiated key management protocol 1787e28a4053SRui Paulo * 1788*85732ac8SCy Schubert * IEEE Std 802.11-2016 - 12.7.1.3 Pairwise key hierarchy 1789*85732ac8SCy Schubert * AKM: 00-0F-AC:5, 00-0F-AC:6, 00-0F-AC:14, 00-0F-AC:16 1790*85732ac8SCy Schubert * PMKID = Truncate-128(HMAC-SHA-256(PMK, "PMK Name" || AA || SPA)) 1791*85732ac8SCy Schubert * AKM: 00-0F-AC:11 1792*85732ac8SCy Schubert * See rsn_pmkid_suite_b() 1793*85732ac8SCy Schubert * AKM: 00-0F-AC:12 1794*85732ac8SCy Schubert * See rsn_pmkid_suite_b_192() 1795*85732ac8SCy Schubert * AKM: 00-0F-AC:13, 00-0F-AC:15, 00-0F-AC:17 1796*85732ac8SCy Schubert * PMKID = Truncate-128(HMAC-SHA-384(PMK, "PMK Name" || AA || SPA)) 1797*85732ac8SCy Schubert * Otherwise: 1798*85732ac8SCy Schubert * PMKID = Truncate-128(HMAC-SHA-1(PMK, "PMK Name" || AA || SPA)) 1799e28a4053SRui Paulo */ 1800e28a4053SRui Paulo void rsn_pmkid(const u8 *pmk, size_t pmk_len, const u8 *aa, const u8 *spa, 1801*85732ac8SCy Schubert u8 *pmkid, int akmp) 1802e28a4053SRui Paulo { 1803e28a4053SRui Paulo char *title = "PMK Name"; 1804e28a4053SRui Paulo const u8 *addr[3]; 1805e28a4053SRui Paulo const size_t len[3] = { 8, ETH_ALEN, ETH_ALEN }; 1806*85732ac8SCy Schubert unsigned char hash[SHA384_MAC_LEN]; 1807e28a4053SRui Paulo 1808e28a4053SRui Paulo addr[0] = (u8 *) title; 1809e28a4053SRui Paulo addr[1] = aa; 1810e28a4053SRui Paulo addr[2] = spa; 1811e28a4053SRui Paulo 1812*85732ac8SCy Schubert if (0) { 1813*85732ac8SCy Schubert #if defined(CONFIG_FILS) || defined(CONFIG_SHA384) 1814*85732ac8SCy Schubert } else if (wpa_key_mgmt_sha384(akmp)) { 1815*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "RSN: Derive PMKID using HMAC-SHA-384"); 1816*85732ac8SCy Schubert hmac_sha384_vector(pmk, pmk_len, 3, addr, len, hash); 1817*85732ac8SCy Schubert #endif /* CONFIG_FILS || CONFIG_SHA384 */ 1818*85732ac8SCy Schubert #if defined(CONFIG_IEEE80211W) || defined(CONFIG_FILS) 1819*85732ac8SCy Schubert } else if (wpa_key_mgmt_sha256(akmp)) { 1820*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "RSN: Derive PMKID using HMAC-SHA-256"); 1821e28a4053SRui Paulo hmac_sha256_vector(pmk, pmk_len, 3, addr, len, hash); 1822*85732ac8SCy Schubert #endif /* CONFIG_IEEE80211W || CONFIG_FILS */ 1823*85732ac8SCy Schubert } else { 1824*85732ac8SCy Schubert wpa_printf(MSG_DEBUG, "RSN: Derive PMKID using HMAC-SHA-1"); 1825e28a4053SRui Paulo hmac_sha1_vector(pmk, pmk_len, 3, addr, len, hash); 1826*85732ac8SCy Schubert } 1827*85732ac8SCy Schubert wpa_hexdump(MSG_DEBUG, "RSN: Derived PMKID", hash, PMKID_LEN); 1828e28a4053SRui Paulo os_memcpy(pmkid, hash, PMKID_LEN); 1829e28a4053SRui Paulo } 1830e28a4053SRui Paulo 1831e28a4053SRui Paulo 18325b9c547cSRui Paulo #ifdef CONFIG_SUITEB 18335b9c547cSRui Paulo /** 18345b9c547cSRui Paulo * rsn_pmkid_suite_b - Calculate PMK identifier for Suite B AKM 18355b9c547cSRui Paulo * @kck: Key confirmation key 18365b9c547cSRui Paulo * @kck_len: Length of kck in bytes 18375b9c547cSRui Paulo * @aa: Authenticator address 18385b9c547cSRui Paulo * @spa: Supplicant address 18395b9c547cSRui Paulo * @pmkid: Buffer for PMKID 18405b9c547cSRui Paulo * Returns: 0 on success, -1 on failure 18415b9c547cSRui Paulo * 18425b9c547cSRui Paulo * IEEE Std 802.11ac-2013 - 11.6.1.3 Pairwise key hierarchy 18435b9c547cSRui Paulo * PMKID = Truncate(HMAC-SHA-256(KCK, "PMK Name" || AA || SPA)) 18445b9c547cSRui Paulo */ 18455b9c547cSRui Paulo int rsn_pmkid_suite_b(const u8 *kck, size_t kck_len, const u8 *aa, 18465b9c547cSRui Paulo const u8 *spa, u8 *pmkid) 18475b9c547cSRui Paulo { 18485b9c547cSRui Paulo char *title = "PMK Name"; 18495b9c547cSRui Paulo const u8 *addr[3]; 18505b9c547cSRui Paulo const size_t len[3] = { 8, ETH_ALEN, ETH_ALEN }; 18515b9c547cSRui Paulo unsigned char hash[SHA256_MAC_LEN]; 18525b9c547cSRui Paulo 18535b9c547cSRui Paulo addr[0] = (u8 *) title; 18545b9c547cSRui Paulo addr[1] = aa; 18555b9c547cSRui Paulo addr[2] = spa; 18565b9c547cSRui Paulo 18575b9c547cSRui Paulo if (hmac_sha256_vector(kck, kck_len, 3, addr, len, hash) < 0) 18585b9c547cSRui Paulo return -1; 18595b9c547cSRui Paulo os_memcpy(pmkid, hash, PMKID_LEN); 18605b9c547cSRui Paulo return 0; 18615b9c547cSRui Paulo } 18625b9c547cSRui Paulo #endif /* CONFIG_SUITEB */ 18635b9c547cSRui Paulo 18645b9c547cSRui Paulo 18655b9c547cSRui Paulo #ifdef CONFIG_SUITEB192 18665b9c547cSRui Paulo /** 18675b9c547cSRui Paulo * rsn_pmkid_suite_b_192 - Calculate PMK identifier for Suite B AKM 18685b9c547cSRui Paulo * @kck: Key confirmation key 18695b9c547cSRui Paulo * @kck_len: Length of kck in bytes 18705b9c547cSRui Paulo * @aa: Authenticator address 18715b9c547cSRui Paulo * @spa: Supplicant address 18725b9c547cSRui Paulo * @pmkid: Buffer for PMKID 18735b9c547cSRui Paulo * Returns: 0 on success, -1 on failure 18745b9c547cSRui Paulo * 18755b9c547cSRui Paulo * IEEE Std 802.11ac-2013 - 11.6.1.3 Pairwise key hierarchy 18765b9c547cSRui Paulo * PMKID = Truncate(HMAC-SHA-384(KCK, "PMK Name" || AA || SPA)) 18775b9c547cSRui Paulo */ 18785b9c547cSRui Paulo int rsn_pmkid_suite_b_192(const u8 *kck, size_t kck_len, const u8 *aa, 18795b9c547cSRui Paulo const u8 *spa, u8 *pmkid) 18805b9c547cSRui Paulo { 18815b9c547cSRui Paulo char *title = "PMK Name"; 18825b9c547cSRui Paulo const u8 *addr[3]; 18835b9c547cSRui Paulo const size_t len[3] = { 8, ETH_ALEN, ETH_ALEN }; 18845b9c547cSRui Paulo unsigned char hash[SHA384_MAC_LEN]; 18855b9c547cSRui Paulo 18865b9c547cSRui Paulo addr[0] = (u8 *) title; 18875b9c547cSRui Paulo addr[1] = aa; 18885b9c547cSRui Paulo addr[2] = spa; 18895b9c547cSRui Paulo 18905b9c547cSRui Paulo if (hmac_sha384_vector(kck, kck_len, 3, addr, len, hash) < 0) 18915b9c547cSRui Paulo return -1; 18925b9c547cSRui Paulo os_memcpy(pmkid, hash, PMKID_LEN); 18935b9c547cSRui Paulo return 0; 18945b9c547cSRui Paulo } 18955b9c547cSRui Paulo #endif /* CONFIG_SUITEB192 */ 18965b9c547cSRui Paulo 18975b9c547cSRui Paulo 1898e28a4053SRui Paulo /** 1899e28a4053SRui Paulo * wpa_cipher_txt - Convert cipher suite to a text string 1900e28a4053SRui Paulo * @cipher: Cipher suite (WPA_CIPHER_* enum) 1901e28a4053SRui Paulo * Returns: Pointer to a text string of the cipher suite name 1902e28a4053SRui Paulo */ 1903e28a4053SRui Paulo const char * wpa_cipher_txt(int cipher) 1904e28a4053SRui Paulo { 1905e28a4053SRui Paulo switch (cipher) { 1906e28a4053SRui Paulo case WPA_CIPHER_NONE: 1907e28a4053SRui Paulo return "NONE"; 1908e28a4053SRui Paulo case WPA_CIPHER_WEP40: 1909e28a4053SRui Paulo return "WEP-40"; 1910e28a4053SRui Paulo case WPA_CIPHER_WEP104: 1911e28a4053SRui Paulo return "WEP-104"; 1912e28a4053SRui Paulo case WPA_CIPHER_TKIP: 1913e28a4053SRui Paulo return "TKIP"; 1914e28a4053SRui Paulo case WPA_CIPHER_CCMP: 1915e28a4053SRui Paulo return "CCMP"; 1916e28a4053SRui Paulo case WPA_CIPHER_CCMP | WPA_CIPHER_TKIP: 1917e28a4053SRui Paulo return "CCMP+TKIP"; 1918f05cddf9SRui Paulo case WPA_CIPHER_GCMP: 1919f05cddf9SRui Paulo return "GCMP"; 19205b9c547cSRui Paulo case WPA_CIPHER_GCMP_256: 19215b9c547cSRui Paulo return "GCMP-256"; 19225b9c547cSRui Paulo case WPA_CIPHER_CCMP_256: 19235b9c547cSRui Paulo return "CCMP-256"; 1924*85732ac8SCy Schubert case WPA_CIPHER_AES_128_CMAC: 1925*85732ac8SCy Schubert return "BIP"; 1926*85732ac8SCy Schubert case WPA_CIPHER_BIP_GMAC_128: 1927*85732ac8SCy Schubert return "BIP-GMAC-128"; 1928*85732ac8SCy Schubert case WPA_CIPHER_BIP_GMAC_256: 1929*85732ac8SCy Schubert return "BIP-GMAC-256"; 1930*85732ac8SCy Schubert case WPA_CIPHER_BIP_CMAC_256: 1931*85732ac8SCy Schubert return "BIP-CMAC-256"; 19325b9c547cSRui Paulo case WPA_CIPHER_GTK_NOT_USED: 19335b9c547cSRui Paulo return "GTK_NOT_USED"; 1934e28a4053SRui Paulo default: 1935e28a4053SRui Paulo return "UNKNOWN"; 1936e28a4053SRui Paulo } 1937e28a4053SRui Paulo } 1938e28a4053SRui Paulo 1939e28a4053SRui Paulo 1940e28a4053SRui Paulo /** 1941e28a4053SRui Paulo * wpa_key_mgmt_txt - Convert key management suite to a text string 1942e28a4053SRui Paulo * @key_mgmt: Key management suite (WPA_KEY_MGMT_* enum) 1943e28a4053SRui Paulo * @proto: WPA/WPA2 version (WPA_PROTO_*) 1944e28a4053SRui Paulo * Returns: Pointer to a text string of the key management suite name 1945e28a4053SRui Paulo */ 1946e28a4053SRui Paulo const char * wpa_key_mgmt_txt(int key_mgmt, int proto) 1947e28a4053SRui Paulo { 1948e28a4053SRui Paulo switch (key_mgmt) { 1949e28a4053SRui Paulo case WPA_KEY_MGMT_IEEE8021X: 1950e28a4053SRui Paulo if (proto == (WPA_PROTO_RSN | WPA_PROTO_WPA)) 1951e28a4053SRui Paulo return "WPA2+WPA/IEEE 802.1X/EAP"; 1952e28a4053SRui Paulo return proto == WPA_PROTO_RSN ? 1953e28a4053SRui Paulo "WPA2/IEEE 802.1X/EAP" : "WPA/IEEE 802.1X/EAP"; 1954e28a4053SRui Paulo case WPA_KEY_MGMT_PSK: 1955e28a4053SRui Paulo if (proto == (WPA_PROTO_RSN | WPA_PROTO_WPA)) 1956e28a4053SRui Paulo return "WPA2-PSK+WPA-PSK"; 1957e28a4053SRui Paulo return proto == WPA_PROTO_RSN ? 1958e28a4053SRui Paulo "WPA2-PSK" : "WPA-PSK"; 1959e28a4053SRui Paulo case WPA_KEY_MGMT_NONE: 1960e28a4053SRui Paulo return "NONE"; 1961780fb4a2SCy Schubert case WPA_KEY_MGMT_WPA_NONE: 1962780fb4a2SCy Schubert return "WPA-NONE"; 1963e28a4053SRui Paulo case WPA_KEY_MGMT_IEEE8021X_NO_WPA: 1964e28a4053SRui Paulo return "IEEE 802.1X (no WPA)"; 1965e28a4053SRui Paulo #ifdef CONFIG_IEEE80211R 1966e28a4053SRui Paulo case WPA_KEY_MGMT_FT_IEEE8021X: 1967e28a4053SRui Paulo return "FT-EAP"; 1968*85732ac8SCy Schubert case WPA_KEY_MGMT_FT_IEEE8021X_SHA384: 1969*85732ac8SCy Schubert return "FT-EAP-SHA384"; 1970e28a4053SRui Paulo case WPA_KEY_MGMT_FT_PSK: 1971e28a4053SRui Paulo return "FT-PSK"; 1972e28a4053SRui Paulo #endif /* CONFIG_IEEE80211R */ 1973e28a4053SRui Paulo #ifdef CONFIG_IEEE80211W 1974e28a4053SRui Paulo case WPA_KEY_MGMT_IEEE8021X_SHA256: 1975e28a4053SRui Paulo return "WPA2-EAP-SHA256"; 1976e28a4053SRui Paulo case WPA_KEY_MGMT_PSK_SHA256: 1977e28a4053SRui Paulo return "WPA2-PSK-SHA256"; 1978e28a4053SRui Paulo #endif /* CONFIG_IEEE80211W */ 19795b9c547cSRui Paulo case WPA_KEY_MGMT_WPS: 19805b9c547cSRui Paulo return "WPS"; 19815b9c547cSRui Paulo case WPA_KEY_MGMT_SAE: 19825b9c547cSRui Paulo return "SAE"; 19835b9c547cSRui Paulo case WPA_KEY_MGMT_FT_SAE: 19845b9c547cSRui Paulo return "FT-SAE"; 19855b9c547cSRui Paulo case WPA_KEY_MGMT_OSEN: 19865b9c547cSRui Paulo return "OSEN"; 19875b9c547cSRui Paulo case WPA_KEY_MGMT_IEEE8021X_SUITE_B: 19885b9c547cSRui Paulo return "WPA2-EAP-SUITE-B"; 19895b9c547cSRui Paulo case WPA_KEY_MGMT_IEEE8021X_SUITE_B_192: 19905b9c547cSRui Paulo return "WPA2-EAP-SUITE-B-192"; 1991*85732ac8SCy Schubert case WPA_KEY_MGMT_FILS_SHA256: 1992*85732ac8SCy Schubert return "FILS-SHA256"; 1993*85732ac8SCy Schubert case WPA_KEY_MGMT_FILS_SHA384: 1994*85732ac8SCy Schubert return "FILS-SHA384"; 1995*85732ac8SCy Schubert case WPA_KEY_MGMT_FT_FILS_SHA256: 1996*85732ac8SCy Schubert return "FT-FILS-SHA256"; 1997*85732ac8SCy Schubert case WPA_KEY_MGMT_FT_FILS_SHA384: 1998*85732ac8SCy Schubert return "FT-FILS-SHA384"; 1999*85732ac8SCy Schubert case WPA_KEY_MGMT_OWE: 2000*85732ac8SCy Schubert return "OWE"; 2001*85732ac8SCy Schubert case WPA_KEY_MGMT_DPP: 2002*85732ac8SCy Schubert return "DPP"; 2003e28a4053SRui Paulo default: 2004e28a4053SRui Paulo return "UNKNOWN"; 2005e28a4053SRui Paulo } 2006e28a4053SRui Paulo } 2007e28a4053SRui Paulo 2008e28a4053SRui Paulo 20095b9c547cSRui Paulo u32 wpa_akm_to_suite(int akm) 20105b9c547cSRui Paulo { 2011*85732ac8SCy Schubert if (akm & WPA_KEY_MGMT_FT_IEEE8021X_SHA384) 2012*85732ac8SCy Schubert return RSN_AUTH_KEY_MGMT_FT_802_1X_SHA384; 20135b9c547cSRui Paulo if (akm & WPA_KEY_MGMT_FT_IEEE8021X) 2014*85732ac8SCy Schubert return RSN_AUTH_KEY_MGMT_FT_802_1X; 20155b9c547cSRui Paulo if (akm & WPA_KEY_MGMT_FT_PSK) 2016*85732ac8SCy Schubert return RSN_AUTH_KEY_MGMT_FT_PSK; 20175b9c547cSRui Paulo if (akm & WPA_KEY_MGMT_IEEE8021X_SHA256) 2018*85732ac8SCy Schubert return RSN_AUTH_KEY_MGMT_802_1X_SHA256; 20195b9c547cSRui Paulo if (akm & WPA_KEY_MGMT_IEEE8021X) 2020*85732ac8SCy Schubert return RSN_AUTH_KEY_MGMT_UNSPEC_802_1X; 20215b9c547cSRui Paulo if (akm & WPA_KEY_MGMT_PSK_SHA256) 2022*85732ac8SCy Schubert return RSN_AUTH_KEY_MGMT_PSK_SHA256; 20235b9c547cSRui Paulo if (akm & WPA_KEY_MGMT_PSK) 2024*85732ac8SCy Schubert return RSN_AUTH_KEY_MGMT_PSK_OVER_802_1X; 20255b9c547cSRui Paulo if (akm & WPA_KEY_MGMT_CCKM) 2026*85732ac8SCy Schubert return RSN_AUTH_KEY_MGMT_CCKM; 20275b9c547cSRui Paulo if (akm & WPA_KEY_MGMT_OSEN) 2028*85732ac8SCy Schubert return RSN_AUTH_KEY_MGMT_OSEN; 20295b9c547cSRui Paulo if (akm & WPA_KEY_MGMT_IEEE8021X_SUITE_B) 2030*85732ac8SCy Schubert return RSN_AUTH_KEY_MGMT_802_1X_SUITE_B; 20315b9c547cSRui Paulo if (akm & WPA_KEY_MGMT_IEEE8021X_SUITE_B_192) 2032*85732ac8SCy Schubert return RSN_AUTH_KEY_MGMT_802_1X_SUITE_B_192; 2033*85732ac8SCy Schubert if (akm & WPA_KEY_MGMT_FILS_SHA256) 2034*85732ac8SCy Schubert return RSN_AUTH_KEY_MGMT_FILS_SHA256; 2035*85732ac8SCy Schubert if (akm & WPA_KEY_MGMT_FILS_SHA384) 2036*85732ac8SCy Schubert return RSN_AUTH_KEY_MGMT_FILS_SHA384; 2037*85732ac8SCy Schubert if (akm & WPA_KEY_MGMT_FT_FILS_SHA256) 2038*85732ac8SCy Schubert return RSN_AUTH_KEY_MGMT_FT_FILS_SHA256; 2039*85732ac8SCy Schubert if (akm & WPA_KEY_MGMT_FT_FILS_SHA384) 2040*85732ac8SCy Schubert return RSN_AUTH_KEY_MGMT_FT_FILS_SHA384; 20415b9c547cSRui Paulo return 0; 20425b9c547cSRui Paulo } 20435b9c547cSRui Paulo 20445b9c547cSRui Paulo 2045e28a4053SRui Paulo int wpa_compare_rsn_ie(int ft_initial_assoc, 2046e28a4053SRui Paulo const u8 *ie1, size_t ie1len, 2047e28a4053SRui Paulo const u8 *ie2, size_t ie2len) 2048e28a4053SRui Paulo { 2049e28a4053SRui Paulo if (ie1 == NULL || ie2 == NULL) 2050e28a4053SRui Paulo return -1; 2051e28a4053SRui Paulo 2052e28a4053SRui Paulo if (ie1len == ie2len && os_memcmp(ie1, ie2, ie1len) == 0) 2053e28a4053SRui Paulo return 0; /* identical IEs */ 2054e28a4053SRui Paulo 2055e28a4053SRui Paulo #ifdef CONFIG_IEEE80211R 2056e28a4053SRui Paulo if (ft_initial_assoc) { 2057e28a4053SRui Paulo struct wpa_ie_data ie1d, ie2d; 2058e28a4053SRui Paulo /* 2059e28a4053SRui Paulo * The PMKID-List in RSN IE is different between Beacon/Probe 2060e28a4053SRui Paulo * Response/(Re)Association Request frames and EAPOL-Key 2061e28a4053SRui Paulo * messages in FT initial mobility domain association. Allow 2062e28a4053SRui Paulo * for this, but verify that other parts of the RSN IEs are 2063e28a4053SRui Paulo * identical. 2064e28a4053SRui Paulo */ 2065e28a4053SRui Paulo if (wpa_parse_wpa_ie_rsn(ie1, ie1len, &ie1d) < 0 || 2066e28a4053SRui Paulo wpa_parse_wpa_ie_rsn(ie2, ie2len, &ie2d) < 0) 2067e28a4053SRui Paulo return -1; 2068e28a4053SRui Paulo if (ie1d.proto == ie2d.proto && 2069e28a4053SRui Paulo ie1d.pairwise_cipher == ie2d.pairwise_cipher && 2070e28a4053SRui Paulo ie1d.group_cipher == ie2d.group_cipher && 2071e28a4053SRui Paulo ie1d.key_mgmt == ie2d.key_mgmt && 2072e28a4053SRui Paulo ie1d.capabilities == ie2d.capabilities && 2073e28a4053SRui Paulo ie1d.mgmt_group_cipher == ie2d.mgmt_group_cipher) 2074e28a4053SRui Paulo return 0; 2075e28a4053SRui Paulo } 2076e28a4053SRui Paulo #endif /* CONFIG_IEEE80211R */ 2077e28a4053SRui Paulo 2078e28a4053SRui Paulo return -1; 2079e28a4053SRui Paulo } 2080e28a4053SRui Paulo 2081e28a4053SRui Paulo 2082*85732ac8SCy Schubert #if defined(CONFIG_IEEE80211R) || defined(CONFIG_FILS) 2083780fb4a2SCy Schubert int wpa_insert_pmkid(u8 *ies, size_t *ies_len, const u8 *pmkid) 2084e28a4053SRui Paulo { 2085e28a4053SRui Paulo u8 *start, *end, *rpos, *rend; 2086e28a4053SRui Paulo int added = 0; 2087e28a4053SRui Paulo 2088e28a4053SRui Paulo start = ies; 2089780fb4a2SCy Schubert end = ies + *ies_len; 2090e28a4053SRui Paulo 2091e28a4053SRui Paulo while (start < end) { 2092e28a4053SRui Paulo if (*start == WLAN_EID_RSN) 2093e28a4053SRui Paulo break; 2094e28a4053SRui Paulo start += 2 + start[1]; 2095e28a4053SRui Paulo } 2096e28a4053SRui Paulo if (start >= end) { 2097e28a4053SRui Paulo wpa_printf(MSG_ERROR, "FT: Could not find RSN IE in " 2098e28a4053SRui Paulo "IEs data"); 2099e28a4053SRui Paulo return -1; 2100e28a4053SRui Paulo } 2101e28a4053SRui Paulo wpa_hexdump(MSG_DEBUG, "FT: RSN IE before modification", 2102e28a4053SRui Paulo start, 2 + start[1]); 2103e28a4053SRui Paulo 2104e28a4053SRui Paulo /* Find start of PMKID-Count */ 2105e28a4053SRui Paulo rpos = start + 2; 2106e28a4053SRui Paulo rend = rpos + start[1]; 2107e28a4053SRui Paulo 2108e28a4053SRui Paulo /* Skip Version and Group Data Cipher Suite */ 2109e28a4053SRui Paulo rpos += 2 + 4; 2110e28a4053SRui Paulo /* Skip Pairwise Cipher Suite Count and List */ 2111e28a4053SRui Paulo rpos += 2 + WPA_GET_LE16(rpos) * RSN_SELECTOR_LEN; 2112e28a4053SRui Paulo /* Skip AKM Suite Count and List */ 2113e28a4053SRui Paulo rpos += 2 + WPA_GET_LE16(rpos) * RSN_SELECTOR_LEN; 2114e28a4053SRui Paulo 2115e28a4053SRui Paulo if (rpos == rend) { 2116e28a4053SRui Paulo /* Add RSN Capabilities */ 2117e28a4053SRui Paulo os_memmove(rpos + 2, rpos, end - rpos); 2118e28a4053SRui Paulo *rpos++ = 0; 2119e28a4053SRui Paulo *rpos++ = 0; 2120325151a3SRui Paulo added += 2; 2121325151a3SRui Paulo start[1] += 2; 2122325151a3SRui Paulo rend = rpos; 2123e28a4053SRui Paulo } else { 2124e28a4053SRui Paulo /* Skip RSN Capabilities */ 2125e28a4053SRui Paulo rpos += 2; 2126e28a4053SRui Paulo if (rpos > rend) { 2127e28a4053SRui Paulo wpa_printf(MSG_ERROR, "FT: Could not parse RSN IE in " 2128e28a4053SRui Paulo "IEs data"); 2129e28a4053SRui Paulo return -1; 2130e28a4053SRui Paulo } 2131e28a4053SRui Paulo } 2132e28a4053SRui Paulo 2133e28a4053SRui Paulo if (rpos == rend) { 2134e28a4053SRui Paulo /* No PMKID-Count field included; add it */ 2135325151a3SRui Paulo os_memmove(rpos + 2 + PMKID_LEN, rpos, end + added - rpos); 2136e28a4053SRui Paulo WPA_PUT_LE16(rpos, 1); 2137e28a4053SRui Paulo rpos += 2; 2138e28a4053SRui Paulo os_memcpy(rpos, pmkid, PMKID_LEN); 2139e28a4053SRui Paulo added += 2 + PMKID_LEN; 2140e28a4053SRui Paulo start[1] += 2 + PMKID_LEN; 2141e28a4053SRui Paulo } else { 2142780fb4a2SCy Schubert u16 num_pmkid; 2143780fb4a2SCy Schubert 2144780fb4a2SCy Schubert if (rend - rpos < 2) 2145e28a4053SRui Paulo return -1; 2146780fb4a2SCy Schubert num_pmkid = WPA_GET_LE16(rpos); 2147780fb4a2SCy Schubert /* PMKID-Count was included; use it */ 2148780fb4a2SCy Schubert if (num_pmkid != 0) { 2149780fb4a2SCy Schubert u8 *after; 2150780fb4a2SCy Schubert 2151780fb4a2SCy Schubert if (num_pmkid * PMKID_LEN > rend - rpos - 2) 2152780fb4a2SCy Schubert return -1; 2153780fb4a2SCy Schubert /* 2154780fb4a2SCy Schubert * PMKID may have been included in RSN IE in 2155780fb4a2SCy Schubert * (Re)Association Request frame, so remove the old 2156780fb4a2SCy Schubert * PMKID(s) first before adding the new one. 2157780fb4a2SCy Schubert */ 2158780fb4a2SCy Schubert wpa_printf(MSG_DEBUG, 2159780fb4a2SCy Schubert "FT: Remove %u old PMKID(s) from RSN IE", 2160780fb4a2SCy Schubert num_pmkid); 2161780fb4a2SCy Schubert after = rpos + 2 + num_pmkid * PMKID_LEN; 2162780fb4a2SCy Schubert os_memmove(rpos + 2, after, rend - after); 2163780fb4a2SCy Schubert start[1] -= num_pmkid * PMKID_LEN; 2164780fb4a2SCy Schubert added -= num_pmkid * PMKID_LEN; 2165e28a4053SRui Paulo } 2166e28a4053SRui Paulo WPA_PUT_LE16(rpos, 1); 2167e28a4053SRui Paulo rpos += 2; 2168325151a3SRui Paulo os_memmove(rpos + PMKID_LEN, rpos, end + added - rpos); 2169e28a4053SRui Paulo os_memcpy(rpos, pmkid, PMKID_LEN); 2170e28a4053SRui Paulo added += PMKID_LEN; 2171e28a4053SRui Paulo start[1] += PMKID_LEN; 2172e28a4053SRui Paulo } 2173e28a4053SRui Paulo 2174e28a4053SRui Paulo wpa_hexdump(MSG_DEBUG, "FT: RSN IE after modification " 2175e28a4053SRui Paulo "(PMKID inserted)", start, 2 + start[1]); 2176e28a4053SRui Paulo 2177780fb4a2SCy Schubert *ies_len += added; 2178780fb4a2SCy Schubert 2179780fb4a2SCy Schubert return 0; 2180e28a4053SRui Paulo } 2181*85732ac8SCy Schubert #endif /* CONFIG_IEEE80211R || CONFIG_FILS */ 2182f05cddf9SRui Paulo 2183f05cddf9SRui Paulo 2184f05cddf9SRui Paulo int wpa_cipher_key_len(int cipher) 2185f05cddf9SRui Paulo { 2186f05cddf9SRui Paulo switch (cipher) { 21875b9c547cSRui Paulo case WPA_CIPHER_CCMP_256: 21885b9c547cSRui Paulo case WPA_CIPHER_GCMP_256: 21895b9c547cSRui Paulo case WPA_CIPHER_BIP_GMAC_256: 21905b9c547cSRui Paulo case WPA_CIPHER_BIP_CMAC_256: 21915b9c547cSRui Paulo return 32; 2192f05cddf9SRui Paulo case WPA_CIPHER_CCMP: 2193f05cddf9SRui Paulo case WPA_CIPHER_GCMP: 21945b9c547cSRui Paulo case WPA_CIPHER_AES_128_CMAC: 21955b9c547cSRui Paulo case WPA_CIPHER_BIP_GMAC_128: 2196f05cddf9SRui Paulo return 16; 2197f05cddf9SRui Paulo case WPA_CIPHER_TKIP: 2198f05cddf9SRui Paulo return 32; 2199f05cddf9SRui Paulo } 2200f05cddf9SRui Paulo 2201f05cddf9SRui Paulo return 0; 2202f05cddf9SRui Paulo } 2203f05cddf9SRui Paulo 2204f05cddf9SRui Paulo 2205f05cddf9SRui Paulo int wpa_cipher_rsc_len(int cipher) 2206f05cddf9SRui Paulo { 2207f05cddf9SRui Paulo switch (cipher) { 22085b9c547cSRui Paulo case WPA_CIPHER_CCMP_256: 22095b9c547cSRui Paulo case WPA_CIPHER_GCMP_256: 2210f05cddf9SRui Paulo case WPA_CIPHER_CCMP: 2211f05cddf9SRui Paulo case WPA_CIPHER_GCMP: 2212f05cddf9SRui Paulo case WPA_CIPHER_TKIP: 2213f05cddf9SRui Paulo return 6; 2214f05cddf9SRui Paulo } 2215f05cddf9SRui Paulo 2216f05cddf9SRui Paulo return 0; 2217f05cddf9SRui Paulo } 2218f05cddf9SRui Paulo 2219f05cddf9SRui Paulo 2220*85732ac8SCy Schubert enum wpa_alg wpa_cipher_to_alg(int cipher) 2221f05cddf9SRui Paulo { 2222f05cddf9SRui Paulo switch (cipher) { 22235b9c547cSRui Paulo case WPA_CIPHER_CCMP_256: 22245b9c547cSRui Paulo return WPA_ALG_CCMP_256; 22255b9c547cSRui Paulo case WPA_CIPHER_GCMP_256: 22265b9c547cSRui Paulo return WPA_ALG_GCMP_256; 2227f05cddf9SRui Paulo case WPA_CIPHER_CCMP: 2228f05cddf9SRui Paulo return WPA_ALG_CCMP; 2229f05cddf9SRui Paulo case WPA_CIPHER_GCMP: 2230f05cddf9SRui Paulo return WPA_ALG_GCMP; 2231f05cddf9SRui Paulo case WPA_CIPHER_TKIP: 2232f05cddf9SRui Paulo return WPA_ALG_TKIP; 22335b9c547cSRui Paulo case WPA_CIPHER_AES_128_CMAC: 22345b9c547cSRui Paulo return WPA_ALG_IGTK; 22355b9c547cSRui Paulo case WPA_CIPHER_BIP_GMAC_128: 22365b9c547cSRui Paulo return WPA_ALG_BIP_GMAC_128; 22375b9c547cSRui Paulo case WPA_CIPHER_BIP_GMAC_256: 22385b9c547cSRui Paulo return WPA_ALG_BIP_GMAC_256; 22395b9c547cSRui Paulo case WPA_CIPHER_BIP_CMAC_256: 22405b9c547cSRui Paulo return WPA_ALG_BIP_CMAC_256; 2241f05cddf9SRui Paulo } 2242f05cddf9SRui Paulo return WPA_ALG_NONE; 2243f05cddf9SRui Paulo } 2244f05cddf9SRui Paulo 2245f05cddf9SRui Paulo 2246f05cddf9SRui Paulo int wpa_cipher_valid_pairwise(int cipher) 2247f05cddf9SRui Paulo { 22485b9c547cSRui Paulo return cipher == WPA_CIPHER_CCMP_256 || 22495b9c547cSRui Paulo cipher == WPA_CIPHER_GCMP_256 || 22505b9c547cSRui Paulo cipher == WPA_CIPHER_CCMP || 2251f05cddf9SRui Paulo cipher == WPA_CIPHER_GCMP || 2252f05cddf9SRui Paulo cipher == WPA_CIPHER_TKIP; 2253f05cddf9SRui Paulo } 2254f05cddf9SRui Paulo 2255f05cddf9SRui Paulo 2256f05cddf9SRui Paulo u32 wpa_cipher_to_suite(int proto, int cipher) 2257f05cddf9SRui Paulo { 22585b9c547cSRui Paulo if (cipher & WPA_CIPHER_CCMP_256) 22595b9c547cSRui Paulo return RSN_CIPHER_SUITE_CCMP_256; 22605b9c547cSRui Paulo if (cipher & WPA_CIPHER_GCMP_256) 22615b9c547cSRui Paulo return RSN_CIPHER_SUITE_GCMP_256; 2262f05cddf9SRui Paulo if (cipher & WPA_CIPHER_CCMP) 2263f05cddf9SRui Paulo return (proto == WPA_PROTO_RSN ? 2264f05cddf9SRui Paulo RSN_CIPHER_SUITE_CCMP : WPA_CIPHER_SUITE_CCMP); 2265f05cddf9SRui Paulo if (cipher & WPA_CIPHER_GCMP) 2266f05cddf9SRui Paulo return RSN_CIPHER_SUITE_GCMP; 2267f05cddf9SRui Paulo if (cipher & WPA_CIPHER_TKIP) 2268f05cddf9SRui Paulo return (proto == WPA_PROTO_RSN ? 2269f05cddf9SRui Paulo RSN_CIPHER_SUITE_TKIP : WPA_CIPHER_SUITE_TKIP); 2270f05cddf9SRui Paulo if (cipher & WPA_CIPHER_NONE) 2271f05cddf9SRui Paulo return (proto == WPA_PROTO_RSN ? 2272f05cddf9SRui Paulo RSN_CIPHER_SUITE_NONE : WPA_CIPHER_SUITE_NONE); 22735b9c547cSRui Paulo if (cipher & WPA_CIPHER_GTK_NOT_USED) 22745b9c547cSRui Paulo return RSN_CIPHER_SUITE_NO_GROUP_ADDRESSED; 22755b9c547cSRui Paulo if (cipher & WPA_CIPHER_AES_128_CMAC) 22765b9c547cSRui Paulo return RSN_CIPHER_SUITE_AES_128_CMAC; 22775b9c547cSRui Paulo if (cipher & WPA_CIPHER_BIP_GMAC_128) 22785b9c547cSRui Paulo return RSN_CIPHER_SUITE_BIP_GMAC_128; 22795b9c547cSRui Paulo if (cipher & WPA_CIPHER_BIP_GMAC_256) 22805b9c547cSRui Paulo return RSN_CIPHER_SUITE_BIP_GMAC_256; 22815b9c547cSRui Paulo if (cipher & WPA_CIPHER_BIP_CMAC_256) 22825b9c547cSRui Paulo return RSN_CIPHER_SUITE_BIP_CMAC_256; 2283f05cddf9SRui Paulo return 0; 2284f05cddf9SRui Paulo } 2285f05cddf9SRui Paulo 2286f05cddf9SRui Paulo 22875b9c547cSRui Paulo int rsn_cipher_put_suites(u8 *start, int ciphers) 2288f05cddf9SRui Paulo { 22895b9c547cSRui Paulo u8 *pos = start; 2290f05cddf9SRui Paulo 22915b9c547cSRui Paulo if (ciphers & WPA_CIPHER_CCMP_256) { 22925b9c547cSRui Paulo RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_CCMP_256); 22935b9c547cSRui Paulo pos += RSN_SELECTOR_LEN; 22945b9c547cSRui Paulo } 22955b9c547cSRui Paulo if (ciphers & WPA_CIPHER_GCMP_256) { 22965b9c547cSRui Paulo RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_GCMP_256); 22975b9c547cSRui Paulo pos += RSN_SELECTOR_LEN; 22985b9c547cSRui Paulo } 2299f05cddf9SRui Paulo if (ciphers & WPA_CIPHER_CCMP) { 2300f05cddf9SRui Paulo RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_CCMP); 2301f05cddf9SRui Paulo pos += RSN_SELECTOR_LEN; 2302f05cddf9SRui Paulo } 2303f05cddf9SRui Paulo if (ciphers & WPA_CIPHER_GCMP) { 2304f05cddf9SRui Paulo RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_GCMP); 2305f05cddf9SRui Paulo pos += RSN_SELECTOR_LEN; 2306f05cddf9SRui Paulo } 2307f05cddf9SRui Paulo if (ciphers & WPA_CIPHER_TKIP) { 2308f05cddf9SRui Paulo RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_TKIP); 2309f05cddf9SRui Paulo pos += RSN_SELECTOR_LEN; 2310f05cddf9SRui Paulo } 2311f05cddf9SRui Paulo if (ciphers & WPA_CIPHER_NONE) { 2312f05cddf9SRui Paulo RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_NONE); 2313f05cddf9SRui Paulo pos += RSN_SELECTOR_LEN; 2314f05cddf9SRui Paulo } 2315f05cddf9SRui Paulo 23165b9c547cSRui Paulo return (pos - start) / RSN_SELECTOR_LEN; 2317f05cddf9SRui Paulo } 2318f05cddf9SRui Paulo 2319f05cddf9SRui Paulo 23205b9c547cSRui Paulo int wpa_cipher_put_suites(u8 *start, int ciphers) 2321f05cddf9SRui Paulo { 23225b9c547cSRui Paulo u8 *pos = start; 2323f05cddf9SRui Paulo 2324f05cddf9SRui Paulo if (ciphers & WPA_CIPHER_CCMP) { 2325f05cddf9SRui Paulo RSN_SELECTOR_PUT(pos, WPA_CIPHER_SUITE_CCMP); 2326f05cddf9SRui Paulo pos += WPA_SELECTOR_LEN; 2327f05cddf9SRui Paulo } 2328f05cddf9SRui Paulo if (ciphers & WPA_CIPHER_TKIP) { 2329f05cddf9SRui Paulo RSN_SELECTOR_PUT(pos, WPA_CIPHER_SUITE_TKIP); 2330f05cddf9SRui Paulo pos += WPA_SELECTOR_LEN; 2331f05cddf9SRui Paulo } 2332f05cddf9SRui Paulo if (ciphers & WPA_CIPHER_NONE) { 2333f05cddf9SRui Paulo RSN_SELECTOR_PUT(pos, WPA_CIPHER_SUITE_NONE); 2334f05cddf9SRui Paulo pos += WPA_SELECTOR_LEN; 2335f05cddf9SRui Paulo } 2336f05cddf9SRui Paulo 23375b9c547cSRui Paulo return (pos - start) / RSN_SELECTOR_LEN; 23385b9c547cSRui Paulo } 23395b9c547cSRui Paulo 23405b9c547cSRui Paulo 23415b9c547cSRui Paulo int wpa_pick_pairwise_cipher(int ciphers, int none_allowed) 23425b9c547cSRui Paulo { 23435b9c547cSRui Paulo if (ciphers & WPA_CIPHER_CCMP_256) 23445b9c547cSRui Paulo return WPA_CIPHER_CCMP_256; 23455b9c547cSRui Paulo if (ciphers & WPA_CIPHER_GCMP_256) 23465b9c547cSRui Paulo return WPA_CIPHER_GCMP_256; 23475b9c547cSRui Paulo if (ciphers & WPA_CIPHER_CCMP) 23485b9c547cSRui Paulo return WPA_CIPHER_CCMP; 23495b9c547cSRui Paulo if (ciphers & WPA_CIPHER_GCMP) 23505b9c547cSRui Paulo return WPA_CIPHER_GCMP; 23515b9c547cSRui Paulo if (ciphers & WPA_CIPHER_TKIP) 23525b9c547cSRui Paulo return WPA_CIPHER_TKIP; 23535b9c547cSRui Paulo if (none_allowed && (ciphers & WPA_CIPHER_NONE)) 23545b9c547cSRui Paulo return WPA_CIPHER_NONE; 23555b9c547cSRui Paulo return -1; 23565b9c547cSRui Paulo } 23575b9c547cSRui Paulo 23585b9c547cSRui Paulo 23595b9c547cSRui Paulo int wpa_pick_group_cipher(int ciphers) 23605b9c547cSRui Paulo { 23615b9c547cSRui Paulo if (ciphers & WPA_CIPHER_CCMP_256) 23625b9c547cSRui Paulo return WPA_CIPHER_CCMP_256; 23635b9c547cSRui Paulo if (ciphers & WPA_CIPHER_GCMP_256) 23645b9c547cSRui Paulo return WPA_CIPHER_GCMP_256; 23655b9c547cSRui Paulo if (ciphers & WPA_CIPHER_CCMP) 23665b9c547cSRui Paulo return WPA_CIPHER_CCMP; 23675b9c547cSRui Paulo if (ciphers & WPA_CIPHER_GCMP) 23685b9c547cSRui Paulo return WPA_CIPHER_GCMP; 23695b9c547cSRui Paulo if (ciphers & WPA_CIPHER_GTK_NOT_USED) 23705b9c547cSRui Paulo return WPA_CIPHER_GTK_NOT_USED; 23715b9c547cSRui Paulo if (ciphers & WPA_CIPHER_TKIP) 23725b9c547cSRui Paulo return WPA_CIPHER_TKIP; 23735b9c547cSRui Paulo return -1; 23745b9c547cSRui Paulo } 23755b9c547cSRui Paulo 23765b9c547cSRui Paulo 23775b9c547cSRui Paulo int wpa_parse_cipher(const char *value) 23785b9c547cSRui Paulo { 23795b9c547cSRui Paulo int val = 0, last; 23805b9c547cSRui Paulo char *start, *end, *buf; 23815b9c547cSRui Paulo 23825b9c547cSRui Paulo buf = os_strdup(value); 23835b9c547cSRui Paulo if (buf == NULL) 23845b9c547cSRui Paulo return -1; 23855b9c547cSRui Paulo start = buf; 23865b9c547cSRui Paulo 23875b9c547cSRui Paulo while (*start != '\0') { 23885b9c547cSRui Paulo while (*start == ' ' || *start == '\t') 23895b9c547cSRui Paulo start++; 23905b9c547cSRui Paulo if (*start == '\0') 23915b9c547cSRui Paulo break; 23925b9c547cSRui Paulo end = start; 23935b9c547cSRui Paulo while (*end != ' ' && *end != '\t' && *end != '\0') 23945b9c547cSRui Paulo end++; 23955b9c547cSRui Paulo last = *end == '\0'; 23965b9c547cSRui Paulo *end = '\0'; 23975b9c547cSRui Paulo if (os_strcmp(start, "CCMP-256") == 0) 23985b9c547cSRui Paulo val |= WPA_CIPHER_CCMP_256; 23995b9c547cSRui Paulo else if (os_strcmp(start, "GCMP-256") == 0) 24005b9c547cSRui Paulo val |= WPA_CIPHER_GCMP_256; 24015b9c547cSRui Paulo else if (os_strcmp(start, "CCMP") == 0) 24025b9c547cSRui Paulo val |= WPA_CIPHER_CCMP; 24035b9c547cSRui Paulo else if (os_strcmp(start, "GCMP") == 0) 24045b9c547cSRui Paulo val |= WPA_CIPHER_GCMP; 24055b9c547cSRui Paulo else if (os_strcmp(start, "TKIP") == 0) 24065b9c547cSRui Paulo val |= WPA_CIPHER_TKIP; 24075b9c547cSRui Paulo else if (os_strcmp(start, "WEP104") == 0) 24085b9c547cSRui Paulo val |= WPA_CIPHER_WEP104; 24095b9c547cSRui Paulo else if (os_strcmp(start, "WEP40") == 0) 24105b9c547cSRui Paulo val |= WPA_CIPHER_WEP40; 24115b9c547cSRui Paulo else if (os_strcmp(start, "NONE") == 0) 24125b9c547cSRui Paulo val |= WPA_CIPHER_NONE; 24135b9c547cSRui Paulo else if (os_strcmp(start, "GTK_NOT_USED") == 0) 24145b9c547cSRui Paulo val |= WPA_CIPHER_GTK_NOT_USED; 2415*85732ac8SCy Schubert else if (os_strcmp(start, "AES-128-CMAC") == 0) 2416*85732ac8SCy Schubert val |= WPA_CIPHER_AES_128_CMAC; 2417*85732ac8SCy Schubert else if (os_strcmp(start, "BIP-GMAC-128") == 0) 2418*85732ac8SCy Schubert val |= WPA_CIPHER_BIP_GMAC_128; 2419*85732ac8SCy Schubert else if (os_strcmp(start, "BIP-GMAC-256") == 0) 2420*85732ac8SCy Schubert val |= WPA_CIPHER_BIP_GMAC_256; 2421*85732ac8SCy Schubert else if (os_strcmp(start, "BIP-CMAC-256") == 0) 2422*85732ac8SCy Schubert val |= WPA_CIPHER_BIP_CMAC_256; 24235b9c547cSRui Paulo else { 24245b9c547cSRui Paulo os_free(buf); 24255b9c547cSRui Paulo return -1; 24265b9c547cSRui Paulo } 24275b9c547cSRui Paulo 24285b9c547cSRui Paulo if (last) 24295b9c547cSRui Paulo break; 24305b9c547cSRui Paulo start = end + 1; 24315b9c547cSRui Paulo } 24325b9c547cSRui Paulo os_free(buf); 24335b9c547cSRui Paulo 24345b9c547cSRui Paulo return val; 24355b9c547cSRui Paulo } 24365b9c547cSRui Paulo 24375b9c547cSRui Paulo 24385b9c547cSRui Paulo int wpa_write_ciphers(char *start, char *end, int ciphers, const char *delim) 24395b9c547cSRui Paulo { 24405b9c547cSRui Paulo char *pos = start; 24415b9c547cSRui Paulo int ret; 24425b9c547cSRui Paulo 24435b9c547cSRui Paulo if (ciphers & WPA_CIPHER_CCMP_256) { 24445b9c547cSRui Paulo ret = os_snprintf(pos, end - pos, "%sCCMP-256", 24455b9c547cSRui Paulo pos == start ? "" : delim); 24465b9c547cSRui Paulo if (os_snprintf_error(end - pos, ret)) 24475b9c547cSRui Paulo return -1; 24485b9c547cSRui Paulo pos += ret; 24495b9c547cSRui Paulo } 24505b9c547cSRui Paulo if (ciphers & WPA_CIPHER_GCMP_256) { 24515b9c547cSRui Paulo ret = os_snprintf(pos, end - pos, "%sGCMP-256", 24525b9c547cSRui Paulo pos == start ? "" : delim); 24535b9c547cSRui Paulo if (os_snprintf_error(end - pos, ret)) 24545b9c547cSRui Paulo return -1; 24555b9c547cSRui Paulo pos += ret; 24565b9c547cSRui Paulo } 24575b9c547cSRui Paulo if (ciphers & WPA_CIPHER_CCMP) { 24585b9c547cSRui Paulo ret = os_snprintf(pos, end - pos, "%sCCMP", 24595b9c547cSRui Paulo pos == start ? "" : delim); 24605b9c547cSRui Paulo if (os_snprintf_error(end - pos, ret)) 24615b9c547cSRui Paulo return -1; 24625b9c547cSRui Paulo pos += ret; 24635b9c547cSRui Paulo } 24645b9c547cSRui Paulo if (ciphers & WPA_CIPHER_GCMP) { 24655b9c547cSRui Paulo ret = os_snprintf(pos, end - pos, "%sGCMP", 24665b9c547cSRui Paulo pos == start ? "" : delim); 24675b9c547cSRui Paulo if (os_snprintf_error(end - pos, ret)) 24685b9c547cSRui Paulo return -1; 24695b9c547cSRui Paulo pos += ret; 24705b9c547cSRui Paulo } 24715b9c547cSRui Paulo if (ciphers & WPA_CIPHER_TKIP) { 24725b9c547cSRui Paulo ret = os_snprintf(pos, end - pos, "%sTKIP", 24735b9c547cSRui Paulo pos == start ? "" : delim); 24745b9c547cSRui Paulo if (os_snprintf_error(end - pos, ret)) 24755b9c547cSRui Paulo return -1; 24765b9c547cSRui Paulo pos += ret; 24775b9c547cSRui Paulo } 2478*85732ac8SCy Schubert if (ciphers & WPA_CIPHER_AES_128_CMAC) { 2479*85732ac8SCy Schubert ret = os_snprintf(pos, end - pos, "%sAES-128-CMAC", 2480*85732ac8SCy Schubert pos == start ? "" : delim); 2481*85732ac8SCy Schubert if (os_snprintf_error(end - pos, ret)) 2482*85732ac8SCy Schubert return -1; 2483*85732ac8SCy Schubert pos += ret; 2484*85732ac8SCy Schubert } 2485*85732ac8SCy Schubert if (ciphers & WPA_CIPHER_BIP_GMAC_128) { 2486*85732ac8SCy Schubert ret = os_snprintf(pos, end - pos, "%sBIP-GMAC-128", 2487*85732ac8SCy Schubert pos == start ? "" : delim); 2488*85732ac8SCy Schubert if (os_snprintf_error(end - pos, ret)) 2489*85732ac8SCy Schubert return -1; 2490*85732ac8SCy Schubert pos += ret; 2491*85732ac8SCy Schubert } 2492*85732ac8SCy Schubert if (ciphers & WPA_CIPHER_BIP_GMAC_256) { 2493*85732ac8SCy Schubert ret = os_snprintf(pos, end - pos, "%sBIP-GMAC-256", 2494*85732ac8SCy Schubert pos == start ? "" : delim); 2495*85732ac8SCy Schubert if (os_snprintf_error(end - pos, ret)) 2496*85732ac8SCy Schubert return -1; 2497*85732ac8SCy Schubert pos += ret; 2498*85732ac8SCy Schubert } 2499*85732ac8SCy Schubert if (ciphers & WPA_CIPHER_BIP_CMAC_256) { 2500*85732ac8SCy Schubert ret = os_snprintf(pos, end - pos, "%sBIP-CMAC-256", 2501*85732ac8SCy Schubert pos == start ? "" : delim); 2502*85732ac8SCy Schubert if (os_snprintf_error(end - pos, ret)) 2503*85732ac8SCy Schubert return -1; 2504*85732ac8SCy Schubert pos += ret; 2505*85732ac8SCy Schubert } 25065b9c547cSRui Paulo if (ciphers & WPA_CIPHER_NONE) { 25075b9c547cSRui Paulo ret = os_snprintf(pos, end - pos, "%sNONE", 25085b9c547cSRui Paulo pos == start ? "" : delim); 25095b9c547cSRui Paulo if (os_snprintf_error(end - pos, ret)) 25105b9c547cSRui Paulo return -1; 25115b9c547cSRui Paulo pos += ret; 25125b9c547cSRui Paulo } 25135b9c547cSRui Paulo 25145b9c547cSRui Paulo return pos - start; 25155b9c547cSRui Paulo } 25165b9c547cSRui Paulo 25175b9c547cSRui Paulo 25185b9c547cSRui Paulo int wpa_select_ap_group_cipher(int wpa, int wpa_pairwise, int rsn_pairwise) 25195b9c547cSRui Paulo { 25205b9c547cSRui Paulo int pairwise = 0; 25215b9c547cSRui Paulo 25225b9c547cSRui Paulo /* Select group cipher based on the enabled pairwise cipher suites */ 25235b9c547cSRui Paulo if (wpa & 1) 25245b9c547cSRui Paulo pairwise |= wpa_pairwise; 25255b9c547cSRui Paulo if (wpa & 2) 25265b9c547cSRui Paulo pairwise |= rsn_pairwise; 25275b9c547cSRui Paulo 25285b9c547cSRui Paulo if (pairwise & WPA_CIPHER_TKIP) 25295b9c547cSRui Paulo return WPA_CIPHER_TKIP; 25305b9c547cSRui Paulo if ((pairwise & (WPA_CIPHER_CCMP | WPA_CIPHER_GCMP)) == WPA_CIPHER_GCMP) 25315b9c547cSRui Paulo return WPA_CIPHER_GCMP; 25325b9c547cSRui Paulo if ((pairwise & (WPA_CIPHER_GCMP_256 | WPA_CIPHER_CCMP | 25335b9c547cSRui Paulo WPA_CIPHER_GCMP)) == WPA_CIPHER_GCMP_256) 25345b9c547cSRui Paulo return WPA_CIPHER_GCMP_256; 25355b9c547cSRui Paulo if ((pairwise & (WPA_CIPHER_CCMP_256 | WPA_CIPHER_CCMP | 25365b9c547cSRui Paulo WPA_CIPHER_GCMP)) == WPA_CIPHER_CCMP_256) 25375b9c547cSRui Paulo return WPA_CIPHER_CCMP_256; 25385b9c547cSRui Paulo return WPA_CIPHER_CCMP; 2539f05cddf9SRui Paulo } 2540*85732ac8SCy Schubert 2541*85732ac8SCy Schubert 2542*85732ac8SCy Schubert #ifdef CONFIG_FILS 2543*85732ac8SCy Schubert int fils_domain_name_hash(const char *domain, u8 *hash) 2544*85732ac8SCy Schubert { 2545*85732ac8SCy Schubert char buf[255], *wpos = buf; 2546*85732ac8SCy Schubert const char *pos = domain; 2547*85732ac8SCy Schubert size_t len; 2548*85732ac8SCy Schubert const u8 *addr[1]; 2549*85732ac8SCy Schubert u8 mac[SHA256_MAC_LEN]; 2550*85732ac8SCy Schubert 2551*85732ac8SCy Schubert for (len = 0; len < sizeof(buf) && *pos; len++) { 2552*85732ac8SCy Schubert if (isalpha(*pos) && isupper(*pos)) 2553*85732ac8SCy Schubert *wpos++ = tolower(*pos); 2554*85732ac8SCy Schubert else 2555*85732ac8SCy Schubert *wpos++ = *pos; 2556*85732ac8SCy Schubert pos++; 2557*85732ac8SCy Schubert } 2558*85732ac8SCy Schubert 2559*85732ac8SCy Schubert addr[0] = (const u8 *) buf; 2560*85732ac8SCy Schubert if (sha256_vector(1, addr, &len, mac) < 0) 2561*85732ac8SCy Schubert return -1; 2562*85732ac8SCy Schubert os_memcpy(hash, mac, 2); 2563*85732ac8SCy Schubert return 0; 2564*85732ac8SCy Schubert } 2565*85732ac8SCy Schubert #endif /* CONFIG_FILS */ 2566