]> git.ipfire.org Git - thirdparty/hostap.git/commit
mka: Support for 256-bit SAK generation
authorAndrey Kartashev <andrey.kartashev@afconsult.com>
Fri, 2 Nov 2018 18:02:18 +0000 (19:02 +0100)
committerJouni Malinen <j@w1.fi>
Wed, 26 Dec 2018 14:42:25 +0000 (16:42 +0200)
commitc1576d44a839b4e75c8797b1b44b9463d2dfa189
tree97f1f5b7206c26b8658168eb79026bd615c7a65c
parentc9c93e7a2414c78a0db4008e3c80c2173eb84942
mka: Support for 256-bit SAK generation

There is already partial support of GCM-AES-256. It is possible to
enable this mode by setting 'kay->macsec_csindex = 1;' in
ieee802_1x_kay_init() function, but the generated key contained only 128
bits of data while other 128 bits are in 0.

Enables KaY to generate full 256-bit SAK from the same 128-bit CAK. Note
that this does not support 256-bit CAK or AES-CMAC-256 -based KDF.

Signed-off-by: Andrey Kartashev <andrey.kartashev@afconsult.com>
src/pae/ieee802_1x_kay.c
src/pae/ieee802_1x_key.c
src/pae/ieee802_1x_key.h