]> git.ipfire.org Git - thirdparty/hostap.git/commit
FILS: Fix KEK2 derivation for FILS+FT
authorJouni Malinen <jouni@codeaurora.org>
Wed, 20 Mar 2019 20:26:56 +0000 (22:26 +0200)
committerJouni Malinen <jouni@codeaurora.org>
Wed, 20 Mar 2019 20:26:56 +0000 (22:26 +0200)
commit130444738beab4ddfe9be2d3a232706eb91557c6
tree1a893665ba5f79ad37843233683fa8888b09acc4
parentbf84e78cbce32f4fff0d7a637ea096b85a52b6bf
FILS: Fix KEK2 derivation for FILS+FT

The offset update for copying KEK2 from the extended PTK was overriding
the offset instead of incrementing it (a likely copy-paste error from
the first offset assignment based on KCK). This resulted in KEK2 being
set to incorrect segment of PTK. Fix this by updating the offset
properly so that KEK2 is copied from the correct place at the end of the
PTK.

Fixes: 2f37387812a5 ("FILS: Add more complete support for FT-FILS use cases")
Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
src/common/wpa_common.c