]> git.ipfire.org Git - thirdparty/hostap.git/commit
EAP-AKA: Add Session-Id derivation during fast-reauth
authorMohit Sethi <mohit.sethi@aalto.fi>
Fri, 17 May 2019 19:06:12 +0000 (22:06 +0300)
committerJouni Malinen <j@w1.fi>
Sat, 25 May 2019 14:17:00 +0000 (17:17 +0300)
commit5eefa8115b884f8ab45ac6521f66dc68f555dcd0
tree232cabeb5b47917d4e75f288b04ae8959d1e8fa9
parent1c16b257a081e810caf2ca0926ff4f9e2bb9557c
EAP-AKA: Add Session-Id derivation during fast-reauth

The Session-Id derivation for EAP-AKA in RFC 5247 only explained how the
Session-Id is derived for regular authentication. Jouni reported it as
an errata with text explaining how to derive it during fast
reauthentication.

This patch now exports the Session-Id for EAP-AKA during fast
reauthentication based on this Session-Id = 0x17 || NONCE_S || MAC
construction.

Also documented by Alan Dekok in draft-dekok-emu-eap-session-id.

Signed-off-by: Mohit Sethi <mohit.sethi@aalto.fi>
src/eap_peer/eap_aka.c
src/eap_server/eap_server_aka.c