driver: Add option to pass FILS KEK/AAD to the driver for association

This allows the FILS KEK and AAD data (nonces) to be configured to the
driver for association so that the driver can encrypt the
(Re)Association Request frame and decrypt the (Re)Association Response
frame.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>

diff --git a/src/drivers/driver.h b/src/drivers/driver.h
index 7636acae7a1c7b566a8bed6b4141caa7c852ed61..2a4ac875821064e61d7741dfe1f6ed4336d92036 100644 (file)
--- a/src/drivers/driver.h
+++ b/src/drivers/driver.h
@@ -886,6 +886,27 @@ struct wpa_driver_associate_params {
         * AP as usual. Valid for DMG network only.
         */
        int pbss;
+
+       /**
+        * fils_kek - KEK for FILS association frame protection (AES-SIV)
+        */
+       const u8 *fils_kek;
+
+       /**
+        * fils_kek_len: Length of fils_kek in bytes
+        */
+       size_t fils_kek_len;
+
+       /**
+        * fils_nonces - Nonces for FILS association frame protection
+        * (AES-SIV AAD)
+        */
+       const u8 *fils_nonces;
+
+       /**
+        * fils_nonces_len: Length of fils_nonce in bytes
+        */
+       size_t fils_nonces_len;
 };
 
 enum hide_ssid {