]> git.ipfire.org Git - thirdparty/hostap.git/commit
projects / thirdparty / hostap.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 88bf44b) | patch
FILS: Fix KEK2 use in FT-FILS use cases
authorJouni Malinen <j@w1.fi>
Tue, 5 Jun 2018 17:13:34 +0000 (20:13 +0300)
committerJouni Malinen <j@w1.fi>
Tue, 5 Jun 2018 18:04:54 +0000 (21:04 +0300)
commit657b4c45a9323498aba5f288c57b0c2fe2ce2e0f
tree93272a6d841f1bcd3aadd150b61bd63aa39dcf93tree | snapshot
parent88bf44be424c678cb2d153a8b7875134aa2db817commit | diff
FILS: Fix KEK2 use in FT-FILS use cases

When support for KCK2 and KEK2 was added, both keys were derived for
FT-FILS cases, but only KCK2 was actually used. Add similar changes to
use KEK2 to protect GTK/IGTK in FTE with using FT-FILS AKMs.

This fixes AES key wrapping to use the correct key. The change is not
backwards compatible.

Fixes: 2f37387812a5 ("FILS: Add more complete support for FT-FILS use cases")
Signed-off-by: Jouni Malinen <j@w1.fi>
src/ap/wpa_auth_ft.c diff | blob | blame | history
src/rsn_supp/wpa_ft.c diff | blob | blame | history
Unnamed repository; edit this file 'description' to name the repository.