]> git.ipfire.org Git - thirdparty/hostap.git/commit
mka: Check OLPN for exhaustion on SAKuse decode
authorThomas Winter <Thomas.Winter@alliedtelesis.co.nz>
Tue, 27 Aug 2019 03:55:38 +0000 (15:55 +1200)
committerJouni Malinen <j@w1.fi>
Wed, 18 Sep 2019 21:21:47 +0000 (00:21 +0300)
commit6d3dc9ba1ee007a7ee6e377add27d30869e0d841
treee72cc1d01b10138fc2dab57ac412b045e3a4cb16
parent84851007d9b5e75fb7d9ae9893922e19329ecbfa
mka: Check OLPN for exhaustion on SAKuse decode

Most of the time is spent in the CP state machine RETIRE state where LKI
is not set and OKI is the currently used SAK so OLPN needs to be checked
for PN exhaustion.

hostapd/wpa_supplicant implemented an interpretation of the standard as
described in a proposed amendment titled "MKA pending PN exhastion"
which was deemed to be wrong. This amendment was included in IEEE Std
802.1Xck-2018.

Signed-off-by: Thomas Winter <Thomas.Winter@alliedtelesis.co.nz>
src/pae/ieee802_1x_kay.c