]> git.ipfire.org Git - thirdparty/hostap.git/commit
EAP-SIM/AKA: Add support for anonymous@realm
authorHai Shalom <haishalom@google.com>
Wed, 29 May 2019 03:30:41 +0000 (20:30 -0700)
committerJouni Malinen <j@w1.fi>
Fri, 31 May 2019 13:52:15 +0000 (16:52 +0300)
commit4df4133917ab45b055f3f3dd80e22ec99fda9045
treea0df91c2b067399b3843e8e4df0f3ef30ced3a1e
parent14d85a5af7fe74682033dbe50891c42e9ffa8c0d
EAP-SIM/AKA: Add support for anonymous@realm

SIM-based EAP authentication with IMSI encryption requires a special EAP
Identity response: anonymous@realm. Then the server sends AKA-Identity
request which is answered with the encrypted IMSI. Add logic that
indicates if the special anonymous identity is used. Otherwise, this
field is used for storing the pseudonym.

Test: Connect to Carrier Wi-Fi, verify correct behavior from captures
Test: Connect to non IMSI encrypted EAP-AKA AP, verify pseudonym usage
Signed-off-by: Hai Shalom <haishalom@google.com>
src/eap_common/eap_sim_common.c
src/eap_common/eap_sim_common.h
src/eap_peer/eap_aka.c
src/eap_peer/eap_sim.c