]> git.ipfire.org Git - thirdparty/hostap.git/commit - src/rsn_supp/wpa.c
WPA: Extra defense against PTK reinstalls in 4-way handshake
authorMathy Vanhoef <Mathy.Vanhoef@cs.kuleuven.be>
Thu, 5 Oct 2017 21:53:01 +0000 (23:53 +0200)
committerJouni Malinen <j@w1.fi>
Sun, 15 Oct 2017 23:03:47 +0000 (02:03 +0300)
commita00e946c1c9a1f9cc65c72900d2a444ceb1f872e
tree3c9495c18e3d48f9852d7be0798edd22774d8a08
parentf4528fbf517d40c05a3efbfb4733672dd0b732fa
WPA: Extra defense against PTK reinstalls in 4-way handshake

Currently, reinstallations of the PTK are prevented by (1) assuring the
same TPTK is only set once as the PTK, and (2) that one particular PTK
is only installed once. This patch makes it more explicit that point (1)
is required to prevent key reinstallations. At the same time, this patch
hardens wpa_supplicant such that future changes do not accidentally
break this property.

Signed-off-by: Mathy Vanhoef <Mathy.Vanhoef@cs.kuleuven.be>
src/rsn_supp/wpa.c