Kernel/iwd
3
0
Fork 0
mirror of https://git.kernel.org/pub/scm/network/wireless/iwd.git synced 2024-11-24 16:49:25 +01:00
Code Releases Activity
94ebc9d90b
iwd/unit/test-eapol.c

4053 lines
142 KiB
C
Raw Normal View History

unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
/*
*
* Wireless daemon for Linux
*
treewide: Move the Intel copyright forward to 2019
2019-10-25 00:43:08 +02:00
* Copyright (C) 2013-2019 Intel Corporation. All rights reserved.
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
*
* This library is free software; you can redistribute it and/or
* modify it under the terms of the GNU Lesser General Public
* License as published by the Free Software Foundation; either
* version 2.1 of the License, or (at your option) any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public
* License along with this library; if not, write to the Free Software
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
*
*/
#ifdef HAVE_CONFIG_H
#include <config.h>
#endif
#include <stdio.h>
#include <string.h>
#include <assert.h>
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
#include <linux/if_ether.h>
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
#include <ell/ell.h>
build: Use include "" instead of include <> for ell/tls-private.h
2018-10-19 08:24:57 +02:00
unit: Update to the new API
2018-06-22 02:32:56 +02:00
#include "src/util.h"
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
#include "src/eapol.h"
unit: Add MIC calculation test
2014-12-28 05:29:12 +01:00
#include "src/crypto.h"
unit: WPA+TKIP EAPOL-Key frame tests.
2015-05-18 13:31:42 +02:00
#include "src/ie.h"
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
#include "src/eap.h"
unit: Update to the new EAP API
2018-06-15 03:01:22 +02:00
#include "src/eap-private.h"
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
#include "src/handshake.h"
unit: Add MIC calculation test
2014-12-28 05:29:12 +01:00
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
/* Our nonce to use + its size */
unit: Unify snonce funcs The snonce function will just copy the nonce value from snonce global variable. This lets us avoid multiple functions that do essentially the same thing.
2015-05-15 04:54:01 +02:00
static const uint8_t *snonce;
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
/* Whether step2 was called with the right info */
static bool verify_step2_called;
/* PTK Handshake 2-of-4 frame we are expected to generate + its size */
static const uint8_t *expected_step2_frame;
static size_t expected_step2_frame_size;
/* Whether step4 was called with the right info */
static bool verify_step4_called;
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
/* Whether install_tk was called with the right info */
static bool verify_install_tk_called;
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
static bool verify_install_gtk_called;
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
/* PTK Handshake 4-of-4 frame we are expected to generate + its size */
static const uint8_t *expected_step4_frame;
static size_t expected_step4_frame_size;
/* Whether GTK step2 was called with the right info */
static bool verify_gtk_step2_called;
/* GTK Handshake 2-of-2 frame we are expected to generate + its size */
static const uint8_t *expected_gtk_step2_frame;
static size_t expected_gtk_step2_frame_size;
/* Authenticator Address */
unit: FT 4-Way Handshake eapol test This also tests that the FT crypto functions work. For the record these are the values of the intermediate keys in this test: ANonce: 33 b2 74 a0 ae c9 e8 5d 61 11 8f 1b 6b 97 77 4e 5b 75 08 37 45 77 dc 14 08 a5 f1 80 c5 d2 e9 fd SNonce: ac 1e b2 c7 0b 20 8c e6 0a e2 07 b2 38 9e 44 1f ff 39 86 3d 44 9f 81 24 6f e3 6e de 0f 1f 56 ce PMK-R0: ad b8 81 bf 50 11 1c fd 0b 5c 87 23 42 bf 3b 54 3e 81 d6 3f 3e 18 cf 0a 8d 3d 85 4f d8 07 ad d5 PMKR0Name: cc 62 4a e8 6e 0c 85 25 06 02 22 15 f7 3d 0d 01 PMK-R1: 17 6a 37 92 25 28 72 9f 40 18 06 20 b4 2d 34 2a 7b 8d da 09 4c a9 cf 84 bd 55 4a 39 bc 5d c1 61 PMKR1Name: de ce 50 a0 9e f0 8c 4e be f2 f1 db e9 67 b4 d4 KCK: e4 2d ee 98 f9 9d fb f8 32 9f 50 41 05 58 35 a2 KEK: 34 5e 22 4e 91 73 8a 97 dd c4 19 53 c5 c8 d7 29 TK: 7c ff bd 35 ce 11 c5 75 1d 4c c6 7a df c2 a2 78 PTKName: 31 e4 94 a6 96 a5 c3 7e 2f 33 9c 47 04 dc ae 05
2016-11-02 23:46:15 +01:00
static const uint8_t *aa;
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
/* Supplicant Address */
unit: FT 4-Way Handshake eapol test This also tests that the FT crypto functions work. For the record these are the values of the intermediate keys in this test: ANonce: 33 b2 74 a0 ae c9 e8 5d 61 11 8f 1b 6b 97 77 4e 5b 75 08 37 45 77 dc 14 08 a5 f1 80 c5 d2 e9 fd SNonce: ac 1e b2 c7 0b 20 8c e6 0a e2 07 b2 38 9e 44 1f ff 39 86 3d 44 9f 81 24 6f e3 6e de 0f 1f 56 ce PMK-R0: ad b8 81 bf 50 11 1c fd 0b 5c 87 23 42 bf 3b 54 3e 81 d6 3f 3e 18 cf 0a 8d 3d 85 4f d8 07 ad d5 PMKR0Name: cc 62 4a e8 6e 0c 85 25 06 02 22 15 f7 3d 0d 01 PMK-R1: 17 6a 37 92 25 28 72 9f 40 18 06 20 b4 2d 34 2a 7b 8d da 09 4c a9 cf 84 bd 55 4a 39 bc 5d c1 61 PMKR1Name: de ce 50 a0 9e f0 8c 4e be f2 f1 db e9 67 b4 d4 KCK: e4 2d ee 98 f9 9d fb f8 32 9f 50 41 05 58 35 a2 KEK: 34 5e 22 4e 91 73 8a 97 dd c4 19 53 c5 c8 d7 29 TK: 7c ff bd 35 ce 11 c5 75 1d 4c c6 7a df c2 a2 78 PTKName: 31 e4 94 a6 96 a5 c3 7e 2f 33 9c 47 04 dc ae 05
2016-11-02 23:46:15 +01:00
static const uint8_t *spa;
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
unit: Add IWD_TLS_DEBUG environment variable handling
2019-02-22 21:48:44 +01:00
static void tls_debug(const char *str, void *user_data)
{
l_info("%s", str);
}
unit: Update to the new API
2018-06-22 02:32:56 +02:00
struct test_handshake_state {
struct handshake_state super;
const uint8_t *tk;
unit: Store handshake_failed in test_handshake_state Instead of using a global variable
2018-06-28 00:01:22 +02:00
bool handshake_failed;
unit: Update to the new API
2018-06-22 02:32:56 +02:00
};
static void test_handshake_state_free(struct handshake_state *hs)
{
struct test_handshake_state *ths =
unit: Use l_container_of
2019-04-03 18:47:51 +02:00
l_container_of(hs, struct test_handshake_state, super);
unit: Update to the new API
2018-06-22 02:32:56 +02:00
l_free(ths);
}
static struct handshake_state *test_handshake_state_new(uint32_t ifindex)
{
struct test_handshake_state *ths;
ths = l_new(struct test_handshake_state, 1);
ths->super.ifindex = ifindex;
ths->super.free = test_handshake_state_free;
return &ths->super;
}
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
struct eapol_key_data {
const unsigned char *frame;
size_t frame_len;
enum eapol_protocol_version protocol_version;
uint16_t packet_len;
enum eapol_descriptor_type descriptor_type;
enum eapol_key_descriptor_version key_descriptor_version;
bool key_type:1;
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
uint8_t wpa_key_id:2;
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
bool install:1;
bool key_ack:1;
bool key_mic:1;
bool secure:1;
bool error:1;
bool request:1;
bool encrypted_key_data:1;
bool smk_message:1;
uint16_t key_length;
unit: Handle key_replay_counter as a uint64_t
2015-02-13 20:55:05 +01:00
uint64_t key_replay_counter;
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
uint8_t key_nonce[32];
uint8_t eapol_key_iv[16];
unit: Add rsc field to unit test
2014-12-19 22:45:40 +01:00
uint8_t key_rsc[8];
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
uint8_t key_mic_data[16];
uint16_t key_data_len;
};
unit: Better describe test data
2015-02-13 05:04:09 +01:00
/* Random WPA EAPoL frame, using 2001 protocol */
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
static const unsigned char eapol_key_data_1[] = {
0x01, 0x03, 0x00, 0x5f, 0xfe, 0x00, 0x89, 0x00, 0x20, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x01, 0xd5, 0xe2, 0x13, 0x9b, 0x1b, 0x1c, 0x1e,
0xcb, 0xf4, 0xc7, 0x9d, 0xb3, 0x70, 0xcd, 0x1c, 0xea, 0x07, 0xf1, 0x61,
0x76, 0xed, 0xa6, 0x78, 0x8a, 0xc6, 0x8c, 0x2c, 0xf4, 0xd7, 0x6f, 0x2b,
0xf7, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00,
};
static struct eapol_key_data eapol_key_test_1 = {
.frame = eapol_key_data_1,
.frame_len = sizeof(eapol_key_data_1),
.protocol_version = EAPOL_PROTOCOL_VERSION_2001,
.packet_len = 95,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_WPA,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
.key_type = true,
.install = false,
.key_ack = true,
.key_mic = false,
.secure = false,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 32,
unit: Handle key_replay_counter as a uint64_t
2015-02-13 20:55:05 +01:00
.key_replay_counter = 1,
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
.key_nonce = { 0xd5, 0xe2, 0x13, 0x9b, 0x1b, 0x1c, 0x1e, 0xcb, 0xf4,
0xc7, 0x9d, 0xb3, 0x70, 0xcd, 0x1c, 0xea, 0x07, 0xf1,
0x61, 0x76, 0xed, 0xa6, 0x78, 0x8a, 0xc6, 0x8c, 0x2c,
0xf4, 0xd7, 0x6f, 0x2b, 0xf7 },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
unit: Add rsc field to unit test
2014-12-19 22:45:40 +01:00
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
.key_mic_data = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_data_len = 0,
};
unit: Better describe test data
2015-02-13 05:04:09 +01:00
/* Random WPA2 EAPoL frame, using 2004 protocol */
unit: Add another EAPoL-Key frame test
2014-12-19 22:45:59 +01:00
static const unsigned char eapol_key_data_2[] = {
0x02, 0x03, 0x00, 0x75, 0x02, 0x00, 0x8a, 0x00, 0x10, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x12, 0x6a, 0xce, 0x64, 0xc1, 0xa6, 0x44,
0xd2, 0x7b, 0x84, 0xe0, 0x39, 0x26, 0x3b, 0x63, 0x3b, 0xc3, 0x74, 0xe3,
0x29, 0x9d, 0x7d, 0x45, 0xe1, 0xc4, 0x25, 0x44, 0x05, 0x48, 0x05, 0xbf,
0xe5, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x16, 0xdd, 0x14, 0x00, 0x0f, 0xac, 0x04, 0x05, 0xb1, 0xb6,
0x8b, 0x5a, 0x91, 0xfc, 0x04, 0x06, 0x83, 0x84, 0x06, 0xe8, 0xd1, 0x5f,
0xdb,
};
static struct eapol_key_data eapol_key_test_2 = {
.frame = eapol_key_data_2,
.frame_len = sizeof(eapol_key_data_2),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 117,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_SHA1_AES,
.key_type = true,
.install = false,
.key_ack = true,
.key_mic = false,
.secure = false,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 16,
unit: Handle key_replay_counter as a uint64_t
2015-02-13 20:55:05 +01:00
.key_replay_counter = 0,
unit: Add another EAPoL-Key frame test
2014-12-19 22:45:59 +01:00
.key_nonce = { 0x12, 0x6a, 0xce, 0x64, 0xc1, 0xa6, 0x44, 0xd2, 0x7b,
0x84, 0xe0, 0x39, 0x26, 0x3b, 0x63, 0x3b, 0xc3, 0x74,
0xe3, 0x29, 0x9d, 0x7d, 0x45, 0xe1, 0xc4, 0x25, 0x44,
0x05, 0x48, 0x05, 0xbf, 0xe5 },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_data_len = 22,
};
unit: Better describe test data
2015-02-13 05:04:09 +01:00
/* WPA2 frame, 1 of 4. For parameters see eapol_4way_test */
unit: Add another EAPoL-Key frame test
2014-12-24 20:44:38 +01:00
static const unsigned char eapol_key_data_3[] = {
0x02, 0x03, 0x00, 0x5f, 0x02, 0x00, 0x8a, 0x00, 0x10, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0xc2, 0xbb, 0x57, 0xab, 0x58, 0x8f, 0x92,
0xeb, 0xbd, 0x44, 0xe8, 0x11, 0x09, 0x4f, 0x60, 0x1c, 0x08, 0x79, 0x86,
0x03, 0x0c, 0x3a, 0xc7, 0x49, 0xcc, 0x61, 0xd6, 0x3e, 0x33, 0x83, 0x2e,
0x50, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00
};
static struct eapol_key_data eapol_key_test_3 = {
.frame = eapol_key_data_3,
.frame_len = sizeof(eapol_key_data_3),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 95,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_SHA1_AES,
.key_type = true,
.install = false,
.key_ack = true,
.key_mic = false,
.secure = false,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 16,
unit: Handle key_replay_counter as a uint64_t
2015-02-13 20:55:05 +01:00
.key_replay_counter = 0,
unit: Add another EAPoL-Key frame test
2014-12-24 20:44:38 +01:00
.key_nonce = { 0xc2, 0xbb, 0x57, 0xab, 0x58, 0x8f, 0x92, 0xeb, 0xbd,
0x44, 0xe8, 0x11, 0x09, 0x4f, 0x60, 0x1c, 0x08, 0x79,
0x86, 0x03, 0x0c, 0x3a, 0xc7, 0x49, 0xcc, 0x61, 0xd6,
0x3e, 0x33, 0x83, 0x2e, 0x50, },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_data_len = 0,
};
unit: Better describe test data
2015-02-13 05:04:09 +01:00
/* WPA2 frame, 2 of 4. For parameters see eapol_4way_test */
unit: Add another EAPoL test frame This one is 2 of 4
2014-12-24 22:21:48 +01:00
static const unsigned char eapol_key_data_4[] = {
0x01, 0x03, 0x00, 0x75, 0x02, 0x01, 0x0a, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x32, 0x89, 0xe9, 0x15, 0x65, 0x09, 0x4f,
0x32, 0x9a, 0x9c, 0xd5, 0x4a, 0x4a, 0x09, 0x0d, 0x2c, 0xf4, 0x34, 0x46,
0x83, 0xbf, 0x50, 0xef, 0xee, 0x36, 0x08, 0xb6, 0x48, 0x56, 0x80, 0x0e,
0x84, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0xc3, 0x1b,
0x82, 0xff, 0x62, 0xa3, 0x79, 0xb0, 0x8d, 0xd1, 0xfc, 0x82, 0xc2, 0xf7,
0x68, 0x00, 0x16, 0x30, 0x14, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x04, 0x01,
0x00, 0x00, 0x0f, 0xac, 0x04, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x02, 0x00,
0x00
};
static struct eapol_key_data eapol_key_test_4 = {
.frame = eapol_key_data_4,
.frame_len = sizeof(eapol_key_data_4),
.protocol_version = EAPOL_PROTOCOL_VERSION_2001,
.packet_len = 117,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_SHA1_AES,
.key_type = true,
.install = false,
.key_ack = false,
.key_mic = true,
.secure = false,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 0,
unit: Handle key_replay_counter as a uint64_t
2015-02-13 20:55:05 +01:00
.key_replay_counter = 0,
unit: Add another EAPoL test frame This one is 2 of 4
2014-12-24 22:21:48 +01:00
.key_nonce = { 0x32, 0x89, 0xe9, 0x15, 0x65, 0x09, 0x4f, 0x32, 0x9a,
0x9c, 0xd5, 0x4a, 0x4a, 0x09, 0x0d, 0x2c, 0xf4, 0x34,
0x46, 0x83, 0xbf, 0x50, 0xef, 0xee, 0x36, 0x08, 0xb6,
0x48, 0x56, 0x80, 0x0e, 0x84, },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x01, 0xc3, 0x1b, 0x82, 0xff, 0x62, 0xa3, 0x79, 0xb0,
0x8d, 0xd1, 0xfc, 0x82, 0xc2, 0xf7, 0x68 },
.key_data_len = 22,
};
unit: Add EAPoL WPA2 Step 3 of 4 Frame
2015-02-13 18:23:54 +01:00
/* WPA2 frame, 3 of 4. For parameters see eapol_4way_test */
static const unsigned char eapol_key_data_5[] = {
0x02, 0x03, 0x00, 0x97, 0x02, 0x13, 0xca, 0x00, 0x10, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x01, 0xc2, 0xbb, 0x57, 0xab, 0x58, 0x8f, 0x92,
0xeb, 0xbd, 0x44, 0xe8, 0x11, 0x09, 0x4f, 0x60, 0x1c, 0x08, 0x79, 0x86,
0x03, 0x0c, 0x3a, 0xc7, 0x49, 0xcc, 0x61, 0xd6, 0x3e, 0x33, 0x83, 0x2e,
0x50, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xf5, 0x35, 0xd9,
0x18, 0x09, 0x73, 0x1a, 0x1d, 0x29, 0x08, 0x94, 0x70, 0x5e, 0x91, 0x9c,
0x8e, 0x00, 0x38, 0x19, 0x18, 0xdf, 0x1e, 0xf0, 0xe7, 0x69, 0x66, 0x52,
0xe2, 0x57, 0x93, 0x80, 0x34, 0xe1, 0x70, 0x38, 0xb9, 0x8b, 0x4c, 0x45,
0xa9, 0x23, 0xb7, 0xb6, 0xfa, 0x8c, 0x33, 0xe3, 0x7b, 0xdc, 0xd4, 0x7f,
0xea, 0xb1, 0x1c, 0x22, 0x6a, 0x2c, 0x5e, 0x38, 0xd5, 0xad, 0x79, 0x94,
0x05, 0xd6, 0x10, 0xa6, 0x95, 0x51, 0xd6, 0x0b, 0xe6, 0x0a, 0x5b,
};
static struct eapol_key_data eapol_key_test_5 = {
.frame = eapol_key_data_5,
.frame_len = sizeof(eapol_key_data_5),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 151,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_SHA1_AES,
.key_type = true,
.install = true,
.key_ack = true,
.key_mic = true,
.secure = true,
.error = false,
.request = false,
.encrypted_key_data = true,
.smk_message = false,
.key_length = 16,
unit: Handle key_replay_counter as a uint64_t
2015-02-13 20:55:05 +01:00
.key_replay_counter = 1,
unit: Add EAPoL WPA2 Step 3 of 4 Frame
2015-02-13 18:23:54 +01:00
.key_nonce = { 0xc2, 0xbb, 0x57, 0xab, 0x58, 0x8f, 0x92, 0xeb, 0xbd,
0x44, 0xe8, 0x11, 0x09, 0x4f, 0x60, 0x1c, 0x08, 0x79,
0x86, 0x03, 0x0c, 0x3a, 0xc7, 0x49, 0xcc, 0x61, 0xd6,
0x3e, 0x33, 0x83, 0x2e, 0x50, },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0xf5, 0x35, 0xd9, 0x18, 0x09, 0x73, 0x1a, 0x1d, 0x29,
0x08, 0x94, 0x70, 0x5e, 0x91, 0x9c, 0x8e },
.key_data_len = 56,
};
unit: Add EAPoL WPA2 Step 4 of 4 Frame
2015-02-13 20:49:02 +01:00
/* WPA2 frame, 4 of 4. For parameters see eapol_4way_test */
static const unsigned char eapol_key_data_6[] = {
0x01, 0x03, 0x00, 0x5f, 0x02, 0x03, 0x0a, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x9e, 0x57, 0xa4,
0xc0, 0x9b, 0xaf, 0xb3, 0x37, 0x5e, 0x46, 0xd3, 0x86, 0xcf, 0x87, 0x27,
0x53, 0x00, 0x00,
};
static struct eapol_key_data eapol_key_test_6 = {
.frame = eapol_key_data_6,
.frame_len = sizeof(eapol_key_data_6),
.protocol_version = EAPOL_PROTOCOL_VERSION_2001,
.packet_len = 95,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_SHA1_AES,
.key_type = true,
.install = false,
.key_ack = false,
.key_mic = true,
.secure = true,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 0,
unit: Handle key_replay_counter as a uint64_t
2015-02-13 20:55:05 +01:00
.key_replay_counter = 1,
unit: Add EAPoL WPA2 Step 4 of 4 Frame
2015-02-13 20:49:02 +01:00
.key_nonce = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x9e, 0x57, 0xa4, 0xc0, 0x9b, 0xaf, 0xb3, 0x37, 0x5e,
0x46, 0xd3, 0x86, 0xcf, 0x87, 0x27, 0x53, },
.key_data_len = 0,
};
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
/* WPA2 frame, 1 of 4. For parameters see eapol_wpa2_handshake_test */
static const unsigned char eapol_key_data_7[] = {
0x02, 0x03, 0x00, 0x5f, 0x02, 0x00, 0x8a, 0x00, 0x10, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x01, 0x2b, 0x58, 0x52, 0xb8, 0x8e, 0x4c, 0xa3,
0x4d, 0xc5, 0x99, 0xed, 0x20, 0x2c, 0x63, 0x95, 0x7c, 0x53, 0x5e, 0x3e,
0xfa, 0x92, 0x89, 0x87, 0x34, 0x11, 0x12, 0x7c, 0xba, 0xf3, 0x58, 0x84,
0x25, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00
};
static struct eapol_key_data eapol_key_test_7 = {
.frame = eapol_key_data_7,
.frame_len = sizeof(eapol_key_data_7),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 95,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_SHA1_AES,
.key_type = true,
.wpa_key_id = 0,
.install = false,
.key_ack = true,
.key_mic = false,
.secure = false,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 16,
.key_replay_counter = 1,
.key_nonce = { 0x2b, 0x58, 0x52, 0xb8, 0x8e, 0x4c, 0xa3, 0x4d, 0xc5,
0x99, 0xed, 0x20, 0x2c, 0x63, 0x95, 0x7c, 0x53, 0x5e,
0x3e, 0xfa, 0x92, 0x89, 0x87, 0x34, 0x11, 0x12, 0x7c,
0xba, 0xf3, 0x58, 0x84, 0x25 },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_data_len = 0,
};
/* WPA2 frame, 2 of 4. For parameters see eapol_wpa2_handshake_test */
static const unsigned char eapol_key_data_8[] = {
0x02, 0x03, 0x00, 0x73, 0x02, 0x01, 0x0a, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x01, 0x72, 0x7c, 0x65, 0x6c, 0x5e, 0xd6, 0x42,
0xd7, 0xf4, 0x7f, 0x48, 0x43, 0x51, 0xd8, 0x08, 0x94, 0x51, 0x18, 0xda,
0x6a, 0x49, 0x33, 0xac, 0x7e, 0x29, 0x3f, 0x2f, 0x2a, 0xc0, 0x88, 0x34,
0x8c, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x7d, 0x7c, 0x45,
0x98, 0x9f, 0x49, 0x2b, 0x4a, 0x36, 0x58, 0x35, 0x29, 0x28, 0x2d, 0x8f,
0xed, 0x00, 0x14, 0x30, 0x12, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x04, 0x01,
0x00, 0x00, 0x0f, 0xac, 0x04, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x02
};
static struct eapol_key_data eapol_key_test_8 = {
.frame = eapol_key_data_8,
.frame_len = sizeof(eapol_key_data_8),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 115,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_SHA1_AES,
.key_type = true,
.wpa_key_id = 0,
.install = false,
.key_ack = false,
.key_mic = true,
.secure = false,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 0,
.key_replay_counter = 1,
.key_nonce = { 0x72, 0x7c, 0x65, 0x6c, 0x5e, 0xd6, 0x42, 0xd7, 0xf4,
0x7f, 0x48, 0x43, 0x51, 0xd8, 0x08, 0x94, 0x51, 0x18,
0xda, 0x6a, 0x49, 0x33, 0xac, 0x7e, 0x29, 0x3f, 0x2f,
0x2a, 0xc0, 0x88, 0x34, 0x8c },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x7d, 0x7c, 0x45, 0x98, 0x9f, 0x49, 0x2b, 0x4a,
0x36, 0x58, 0x35, 0x29, 0x28, 0x2d, 0x8f, 0xed },
.key_data_len = 20,
};
/* WPA2 frame, 3 of 4. For parameters see eapol_wpa2_handshake_test */
static const unsigned char eapol_key_data_9[] = {
0x02, 0x03, 0x00, 0x97, 0x02, 0x13, 0xca, 0x00, 0x10, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x02, 0x2b, 0x58, 0x52, 0xb8, 0x8e, 0x4c, 0xa3,
0x4d, 0xc5, 0x99, 0xed, 0x20, 0x2c, 0x63, 0x95, 0x7c, 0x53, 0x5e, 0x3e,
0xfa, 0x92, 0x89, 0x87, 0x34, 0x11, 0x12, 0x7c, 0xba, 0xf3, 0x58, 0x84,
0x25, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xf8, 0x62, 0x6a,
0x57, 0x76, 0xc7, 0x33, 0xbf, 0xc0, 0x71, 0xde, 0x62, 0xeb, 0xf7, 0xa7,
0xc5, 0x00, 0x38, 0x14, 0xdd, 0x52, 0x80, 0x3d, 0xc8, 0x3d, 0xf7, 0xba,
0x7e, 0xb6, 0x48, 0x29, 0x6d, 0x65, 0x0e, 0x88, 0xcc, 0xc8, 0xdd, 0x67,
0x62, 0x04, 0xa2, 0xc7, 0xc1, 0xf2, 0x65, 0x0b, 0xca, 0xf9, 0x6b, 0x66,
0xf5, 0xb4, 0x3d, 0x99, 0x26, 0xad, 0xc5, 0xce, 0x18, 0xc0, 0xa9, 0x9b,
0xe5, 0x0e, 0x50, 0x85, 0x84, 0xb1, 0x57, 0xe3, 0x7a, 0x5e, 0x0f
};
static struct eapol_key_data eapol_key_test_9 = {
.frame = eapol_key_data_9,
.frame_len = sizeof(eapol_key_data_9),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 151,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_SHA1_AES,
.key_type = true,
.wpa_key_id = 0,
.install = true,
.key_ack = true,
.key_mic = true,
.secure = true,
.error = false,
.request = false,
.encrypted_key_data = true,
.smk_message = false,
.key_length = 16,
.key_replay_counter = 2,
.key_nonce = { 0x2b, 0x58, 0x52, 0xb8, 0x8e, 0x4c, 0xa3, 0x4d, 0xc5,
0x99, 0xed, 0x20, 0x2c, 0x63, 0x95, 0x7c, 0x53, 0x5e,
0x3e, 0xfa, 0x92, 0x89, 0x87, 0x34, 0x11, 0x12, 0x7c,
0xba, 0xf3, 0x58, 0x84, 0x25 },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0xf8, 0x62, 0x6a, 0x57, 0x76, 0xc7, 0x33, 0xbf,
0xc0, 0x71, 0xde, 0x62, 0xeb, 0xf7, 0xa7, 0xc5 },
.key_data_len = 56,
};
/* WPA2 frame, 4 of 4. For parameters see eapol_wpa2_handshake_test */
static const unsigned char eapol_key_data_10[] = {
0x02, 0x03, 0x00, 0x5f, 0x02, 0x03, 0x0a, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x8b, 0x0f, 0x34,
0x23, 0x49, 0xf0, 0x85, 0x03, 0xe5, 0xfc, 0x54, 0xb7, 0x2c, 0xb5, 0x32,
0x66, 0x00, 0x00
};
static struct eapol_key_data eapol_key_test_10 = {
.frame = eapol_key_data_10,
.frame_len = sizeof(eapol_key_data_10),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 95,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_SHA1_AES,
.key_type = true,
.wpa_key_id = 0,
.install = false,
.key_ack = false,
.key_mic = true,
.secure = true,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 0,
.key_replay_counter = 2,
.key_nonce = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x8b, 0x0f, 0x34, 0x23, 0x49, 0xf0, 0x85, 0x03,
0xe5, 0xfc, 0x54, 0xb7, 0x2c, 0xb5, 0x32, 0x66 },
.key_data_len = 0,
};
/* WPA2 frame, 1 of 2. For parameters see eapol_wpa2_handshake_test */
static const unsigned char eapol_key_data_11[] = {
0x02, 0x03, 0x00, 0x7f, 0x02, 0x13, 0x82, 0x00, 0x10, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x03, 0xef, 0x6d, 0xc2, 0x0c, 0x57, 0x27, 0xe8,
0x25, 0x07, 0x75, 0x1e, 0x67, 0x36, 0x9d, 0xc9, 0x1e, 0xf1, 0x71, 0x8e,
0xb1, 0x35, 0xb2, 0x12, 0xdf, 0x9f, 0xcb, 0x0a, 0x65, 0xa2, 0xd5, 0x67,
0x1d, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x0f, 0x6a, 0xb0,
0x75, 0xbc, 0x8e, 0xd1, 0x92, 0x11, 0xcd, 0xc3, 0xb0, 0xe2, 0xd6, 0x7e,
0xcf, 0x00, 0x20, 0xe9, 0x96, 0x5b, 0x46, 0x85, 0xd5, 0x8b, 0x88, 0xbd,
0x57, 0x48, 0x57, 0xe4, 0xf0, 0xdf, 0xdd, 0xf7, 0x2a, 0x7a, 0xa8, 0xeb,
0x68, 0xa9, 0xef, 0x44, 0x04, 0xa6, 0x6f, 0xaa, 0x48, 0x51, 0x1b
};
static struct eapol_key_data eapol_key_test_11 = {
.frame = eapol_key_data_11,
.frame_len = sizeof(eapol_key_data_11),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 127,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_SHA1_AES,
.key_type = false,
.wpa_key_id = 0,
.install = false,
.key_ack = true,
.key_mic = true,
.secure = true,
.error = false,
.request = false,
.encrypted_key_data = true,
.smk_message = false,
.key_length = 16,
.key_replay_counter = 3,
.key_nonce = { 0xef, 0x6d, 0xc2, 0x0c, 0x57, 0x27, 0xe8, 0x25,
0x07, 0x75, 0x1e, 0x67, 0x36, 0x9d, 0xc9, 0x1e,
0xf1, 0x71, 0x8e, 0xb1, 0x35, 0xb2, 0x12, 0xdf,
0x9f, 0xcb, 0x0a, 0x65, 0xa2, 0xd5, 0x67, 0x1d },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x0f, 0x6a, 0xb0, 0x75, 0xbc, 0x8e, 0xd1, 0x92,
0x11, 0xcd, 0xc3, 0xb0, 0xe2, 0xd6, 0x7e, 0xcf },
.key_data_len = 32,
};
/* WPA2 frame, 2 of 2. For parameters see eapol_wpa2_handshake_test */
static const unsigned char eapol_key_data_12[] = {
0x02, 0x03, 0x00, 0x5f, 0x02, 0x03, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x03, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xc9, 0xbd, 0x17,
0xf1, 0x54, 0xb7, 0x32, 0xcf, 0xbc, 0x01, 0xdb, 0x0c, 0x37, 0xe6, 0x33,
0x9f, 0x00, 0x00
};
static struct eapol_key_data eapol_key_test_12 = {
.frame = eapol_key_data_12,
.frame_len = sizeof(eapol_key_data_12),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 95,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_SHA1_AES,
.key_type = false,
.wpa_key_id = 0,
.install = false,
.key_ack = false,
.key_mic = true,
.secure = true,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 0,
.key_replay_counter = 3,
.key_nonce = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0xc9, 0xbd, 0x17, 0xf1, 0x54, 0xb7, 0x32, 0xcf,
0xbc, 0x01, 0xdb, 0x0c, 0x37, 0xe6, 0x33, 0x9f },
.key_data_len = 0,
};
unit: WPA+TKIP EAPOL-Key frame tests.
2015-05-18 13:31:42 +02:00
/* WPA frame, 1 of 4. For parameters see eapol_wpa_handshake_test */
static const unsigned char eapol_key_data_13[] = {
0x02, 0x03, 0x00, 0x5f, 0xfe, 0x00, 0x89, 0x00, 0x20, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x01, 0x66, 0xbe, 0x99, 0x48, 0x44, 0xe0, 0xf5,
0x40, 0x78, 0x13, 0x91, 0x37, 0x6f, 0x47, 0x99, 0x56, 0xa3, 0xec, 0x36,
0x32, 0xe4, 0x12, 0x13, 0x64, 0xec, 0x7e, 0x75, 0x37, 0xef, 0xf6, 0x2a,
0xc5, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00
};
static struct eapol_key_data eapol_key_test_13 = {
.frame = eapol_key_data_13,
.frame_len = sizeof(eapol_key_data_13),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 95,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_WPA,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
.key_type = true,
.wpa_key_id = 0,
.install = false,
.key_ack = true,
.key_mic = false,
.secure = false,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 32,
.key_replay_counter = 1,
.key_nonce = { 0x66, 0xbe, 0x99, 0x48, 0x44, 0xe0, 0xf5, 0x40,
0x78, 0x13, 0x91, 0x37, 0x6f, 0x47, 0x99, 0x56,
0xa3, 0xec, 0x36, 0x32, 0xe4, 0x12, 0x13, 0x64,
0xec, 0x7e, 0x75, 0x37, 0xef, 0xf6, 0x2a, 0xc5 },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_data_len = 0,
};
/* WPA frame, 2 of 4. For parameters see eapol_wpa_handshake_test */
static const unsigned char eapol_key_data_14[] = {
0x02, 0x03, 0x00, 0x77, 0xfe, 0x01, 0x09, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x01, 0x3b, 0x7f, 0x85, 0x0a, 0x03, 0x9c, 0xa4,
0x71, 0x42, 0x9d, 0x0f, 0xc3, 0xce, 0x9f, 0xff, 0x48, 0xdb, 0x89, 0x2e,
0xf7, 0xa7, 0xff, 0x80, 0xf6, 0x22, 0xc4, 0x6e, 0x32, 0x97, 0x05, 0xc3,
0x7d, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0xe6, 0x82,
0x94, 0xdc, 0x88, 0x07, 0x18, 0xa7, 0xd3, 0x08, 0xfa, 0xb4, 0x39, 0x95,
0x36, 0x00, 0x18, 0xdd, 0x16, 0x00, 0x50, 0xf2, 0x01, 0x01, 0x00, 0x00,
0x50, 0xf2, 0x02, 0x01, 0x00, 0x00, 0x50, 0xf2, 0x02, 0x01, 0x00, 0x00,
0x50, 0xf2, 0x02
};
static struct eapol_key_data eapol_key_test_14 = {
.frame = eapol_key_data_14,
.frame_len = sizeof(eapol_key_data_14),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 119,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_WPA,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
.key_type = true,
.wpa_key_id = 0,
.install = false,
.key_ack = false,
.key_mic = true,
.secure = false,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 0,
.key_replay_counter = 1,
.key_nonce = { 0x3b, 0x7f, 0x85, 0x0a, 0x03, 0x9c, 0xa4, 0x71,
0x42, 0x9d, 0x0f, 0xc3, 0xce, 0x9f, 0xff, 0x48,
0xdb, 0x89, 0x2e, 0xf7, 0xa7, 0xff, 0x80, 0xf6,
0x22, 0xc4, 0x6e, 0x32, 0x97, 0x05, 0xc3, 0x7d },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x01, 0xe6, 0x82, 0x94, 0xdc, 0x88, 0x07, 0x18,
0xa7, 0xd3, 0x08, 0xfa, 0xb4, 0x39, 0x95, 0x36 },
.key_data_len = 24,
};
/* WPA frame, 3 of 4. For parameters see eapol_wpa_handshake_test */
static const unsigned char eapol_key_data_15[] = {
0x02, 0x03, 0x00, 0x77, 0xfe, 0x01, 0xc9, 0x00, 0x20, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x02, 0x66, 0xbe, 0x99, 0x48, 0x44, 0xe0, 0xf5,
0x40, 0x78, 0x13, 0x91, 0x37, 0x6f, 0x47, 0x99, 0x56, 0xa3, 0xec, 0x36,
0x32, 0xe4, 0x12, 0x13, 0x64, 0xec, 0x7e, 0x75, 0x37, 0xef, 0xf6, 0x2a,
0xc5, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x96, 0xc2, 0x97,
0xf6, 0xc1, 0x93, 0x72, 0x19, 0x3e, 0x40, 0xd9, 0xc8, 0xb9, 0xaa, 0x7c,
0x94, 0x00, 0x18, 0xdd, 0x16, 0x00, 0x50, 0xf2, 0x01, 0x01, 0x00, 0x00,
0x50, 0xf2, 0x02, 0x01, 0x00, 0x00, 0x50, 0xf2, 0x02, 0x01, 0x00, 0x00,
0x50, 0xf2, 0x02
};
static struct eapol_key_data eapol_key_test_15 = {
.frame = eapol_key_data_15,
.frame_len = sizeof(eapol_key_data_15),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 119,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_WPA,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
.key_type = true,
.wpa_key_id = 0,
.install = true,
.key_ack = true,
.key_mic = true,
.secure = false,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 32,
.key_replay_counter = 2,
.key_nonce = { 0x66, 0xbe, 0x99, 0x48, 0x44, 0xe0, 0xf5, 0x40,
0x78, 0x13, 0x91, 0x37, 0x6f, 0x47, 0x99, 0x56,
0xa3, 0xec, 0x36, 0x32, 0xe4, 0x12, 0x13, 0x64,
0xec, 0x7e, 0x75, 0x37, 0xef, 0xf6, 0x2a, 0xc5 },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x96, 0xc2, 0x97, 0xf6, 0xc1, 0x93, 0x72, 0x19,
0x3e, 0x40, 0xd9, 0xc8, 0xb9, 0xaa, 0x7c, 0x94 },
.key_data_len = 24,
};
/* WPA frame, 4 of 4. For parameters see eapol_wpa_handshake_test */
static const unsigned char eapol_key_data_16[] = {
0x02, 0x03, 0x00, 0x5f, 0xfe, 0x01, 0x09, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xe0, 0x65, 0xf3,
0x33, 0xa3, 0x5b, 0x4f, 0xda, 0xc3, 0x66, 0xb3, 0x1a, 0x43, 0xb5, 0x31,
0x95, 0x00, 0x00
};
static struct eapol_key_data eapol_key_test_16 = {
.frame = eapol_key_data_16,
.frame_len = sizeof(eapol_key_data_16),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 95,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_WPA,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
.key_type = true,
.wpa_key_id = 0,
.install = false,
.key_ack = false,
.key_mic = true,
.secure = false,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 0,
.key_replay_counter = 2,
.key_nonce = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0xe0, 0x65, 0xf3, 0x33, 0xa3, 0x5b, 0x4f, 0xda,
0xc3, 0x66, 0xb3, 0x1a, 0x43, 0xb5, 0x31, 0x95 },
.key_data_len = 0,
};
/* WPA frame, 1 of 2. For parameters see eapol_wpa_handshake_test */
static const unsigned char eapol_key_data_17[] = {
0x02, 0x03, 0x00, 0x7f, 0xfe, 0x03, 0xa1, 0x00, 0x20, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x03, 0xc3, 0xa7, 0xe0, 0x14, 0x10, 0xea, 0xe6,
0xe5, 0xfb, 0x79, 0xfc, 0xf5, 0xe5, 0x55, 0x08, 0x44, 0xd9, 0xbd, 0xd2,
0x80, 0x5d, 0x81, 0x1c, 0x0a, 0x9c, 0x48, 0x0a, 0xe9, 0x86, 0xca, 0x87,
0xa1, 0xd9, 0xbd, 0xd2, 0x80, 0x5d, 0x81, 0x1c, 0x0a, 0x9c, 0x48, 0x0a,
0xe9, 0x86, 0xca, 0x87, 0xa2, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xfb, 0x78, 0xf8,
0xf3, 0xff, 0x1f, 0xec, 0x97, 0x98, 0x67, 0xe8, 0x25, 0x0a, 0xf2, 0x9d,
0x61, 0x00, 0x20, 0x9f, 0x46, 0x72, 0x04, 0x83, 0xd7, 0xf6, 0xa3, 0x5b,
0xbd, 0xa6, 0x80, 0x32, 0xe0, 0x44, 0x92, 0x5e, 0x90, 0xe5, 0x7f, 0xd8,
0x5d, 0xfc, 0xd0, 0xdb, 0xcd, 0x7f, 0xf7, 0x48, 0xdf, 0x33, 0x75
};
static struct eapol_key_data eapol_key_test_17 = {
.frame = eapol_key_data_17,
.frame_len = sizeof(eapol_key_data_17),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 127,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_WPA,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
.key_type = false,
.wpa_key_id = 2,
.install = false,
.key_ack = true,
.key_mic = true,
.secure = true,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 32,
.key_replay_counter = 3,
.key_nonce = { 0xc3, 0xa7, 0xe0, 0x14, 0x10, 0xea, 0xe6, 0xe5,
0xfb, 0x79, 0xfc, 0xf5, 0xe5, 0x55, 0x08, 0x44,
0xd9, 0xbd, 0xd2, 0x80, 0x5d, 0x81, 0x1c, 0x0a,
0x9c, 0x48, 0x0a, 0xe9, 0x86, 0xca, 0x87, 0xa1 },
.eapol_key_iv = { 0xd9, 0xbd, 0xd2, 0x80, 0x5d, 0x81, 0x1c, 0x0a,
0x9c, 0x48, 0x0a, 0xe9, 0x86, 0xca, 0x87, 0xa2 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0xfb, 0x78, 0xf8, 0xf3, 0xff, 0x1f, 0xec, 0x97,
0x98, 0x67, 0xe8, 0x25, 0x0a, 0xf2, 0x9d, 0x61 },
.key_data_len = 32,
};
/* WPA frame, 2 of 2. For parameters see eapol_wpa_handshake_test */
static const unsigned char eapol_key_data_18[] = {
unit: Update to the new API This commit also fixes the unit test data for GTK Step 2 since we now include WPA Key Index in this frame
2015-05-18 21:43:43 +02:00
0x02, 0x03, 0x00, 0x5f, 0xfe, 0x03, 0x21, 0x00, 0x00, 0x00, 0x00, 0x00,
unit: WPA+TKIP EAPOL-Key frame tests.
2015-05-18 13:31:42 +02:00
0x00, 0x00, 0x00, 0x00, 0x03, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
unit: Update to the new API This commit also fixes the unit test data for GTK Step 2 since we now include WPA Key Index in this frame
2015-05-18 21:43:43 +02:00
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xe9, 0x92, 0xb9,
0x33, 0x25, 0xa9, 0xdc, 0x46, 0xe3, 0xb2, 0xa1, 0x5c, 0xf7, 0x2f, 0x82,
0x52, 0x00, 0x00,
unit: WPA+TKIP EAPOL-Key frame tests.
2015-05-18 13:31:42 +02:00
};
static struct eapol_key_data eapol_key_test_18 = {
.frame = eapol_key_data_18,
.frame_len = sizeof(eapol_key_data_18),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 95,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_WPA,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
.key_type = false,
unit: Update to the new API This commit also fixes the unit test data for GTK Step 2 since we now include WPA Key Index in this frame
2015-05-18 21:43:43 +02:00
.wpa_key_id = 2,
unit: WPA+TKIP EAPOL-Key frame tests.
2015-05-18 13:31:42 +02:00
.install = false,
.key_ack = false,
.key_mic = true,
.secure = true,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 0,
.key_replay_counter = 3,
.key_nonce = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
unit: Update to the new API This commit also fixes the unit test data for GTK Step 2 since we now include WPA Key Index in this frame
2015-05-18 21:43:43 +02:00
.key_mic_data = { 0xe9, 0x92, 0xb9, 0x33, 0x25, 0xa9, 0xdc, 0x46, 0xe3,
0xb2, 0xa1, 0x5c, 0xf7, 0x2f, 0x82, 0x52 },
unit: WPA+TKIP EAPOL-Key frame tests.
2015-05-18 13:31:42 +02:00
.key_data_len = 0,
};
unit: Add WPA1 Step 1/4 test data + test
2015-05-18 20:03:26 +02:00
/* WPA frame, 1 of 4. For parameters see eapol_wpa2_handshake_test */
static const unsigned char eapol_key_data_19[] = {
0x01, 0x03, 0x00, 0x5f, 0xfe, 0x00, 0x89, 0x00, 0x20, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x26, 0x56, 0x9b, 0x2a, 0x6e, 0x90, 0xad,
0x21, 0x91, 0x86, 0x6d, 0x86, 0xe9, 0xfd, 0xf8, 0xb7, 0x9a, 0x12, 0xcb,
0xab, 0x1a, 0xc3, 0xe0, 0x2d, 0xa6, 0xa1, 0x22, 0x43, 0x4e, 0x76, 0x9d,
0x75, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00,
};
static struct eapol_key_data eapol_key_test_19 = {
.frame = eapol_key_data_19,
.frame_len = sizeof(eapol_key_data_19),
.protocol_version = EAPOL_PROTOCOL_VERSION_2001,
.packet_len = 95,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_WPA,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
.key_type = true,
.wpa_key_id = 0,
.install = false,
.key_ack = true,
.key_mic = false,
.secure = false,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 32,
.key_replay_counter = 0,
.key_nonce = { 0x26, 0x56, 0x9b, 0x2a, 0x6e, 0x90, 0xad, 0x21, 0x91,
0x86, 0x6d, 0x86, 0xe9, 0xfd, 0xf8, 0xb7, 0x9a, 0x12,
0xcb, 0xab, 0x1a, 0xc3, 0xe0, 0x2d, 0xa6, 0xa1, 0x22,
0x43, 0x4e, 0x76, 0x9d, 0x75 },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_data_len = 0,
};
unit: Add WPA1 Step 2/4 test data + test
2015-05-18 20:04:08 +02:00
/* WPA frame, 2 of 4. For parameters see eapol_wpa2_handshake_test */
static const unsigned char eapol_key_data_20[] = {
0x01, 0x03, 0x00, 0x77, 0xfe, 0x01, 0x09, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x04, 0x88, 0xe2, 0x61, 0x2d, 0xf3, 0xe3,
0x66, 0x3d, 0x35, 0xf7, 0xd3, 0x70, 0x17, 0x87, 0x92, 0x92, 0x4a, 0x35,
0xc8, 0x2d, 0x67, 0x45, 0x56, 0xe6, 0x98, 0x9e, 0x75, 0x79, 0x9e, 0x25,
0x6b, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x32, 0x5c, 0x17,
0xb7, 0xbc, 0x6d, 0x2c, 0x0f, 0x7c, 0xc0, 0x32, 0xec, 0xa6, 0x31, 0xbd,
0x8d, 0x00, 0x18, 0xdd, 0x16, 0x00, 0x50, 0xf2, 0x01, 0x01, 0x00, 0x00,
0x50, 0xf2, 0x02, 0x01, 0x00, 0x00, 0x50, 0xf2, 0x02, 0x01, 0x00, 0x00,
0x50, 0xf2, 0x02,
};
static struct eapol_key_data eapol_key_test_20 = {
.frame = eapol_key_data_20,
.frame_len = sizeof(eapol_key_data_20),
.protocol_version = EAPOL_PROTOCOL_VERSION_2001,
.packet_len = 119,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_WPA,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
.key_type = true,
.wpa_key_id = 0,
.install = false,
.key_ack = false,
.key_mic = true,
.secure = false,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 0,
.key_replay_counter = 0,
.key_nonce = { 0x04, 0x88, 0xe2, 0x61, 0x2d, 0xf3, 0xe3, 0x66, 0x3d,
0x35, 0xf7, 0xd3, 0x70, 0x17, 0x87, 0x92, 0x92, 0x4a,
0x35, 0xc8, 0x2d, 0x67, 0x45, 0x56, 0xe6, 0x98, 0x9e,
0x75, 0x79, 0x9e, 0x25, 0x6b },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x32, 0x5c, 0x17, 0xb7, 0xbc, 0x6d, 0x2c, 0x0f, 0x7c,
0xc0, 0x32, 0xec, 0xa6, 0x31, 0xbd, 0x8d },
.key_data_len = 24,
};
unit: Add WPA1 Step 3/4 test data + test
2015-05-18 20:04:33 +02:00
/* WPA frame, 3 of 4. For parameters see eapol_wpa2_handshake_test */
static const unsigned char eapol_key_data_21[] = {
0x01, 0x03, 0x00, 0x77, 0xfe, 0x01, 0xc9, 0x00, 0x20, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x01, 0x26, 0x56, 0x9b, 0x2a, 0x6e, 0x90, 0xad,
0x21, 0x91, 0x86, 0x6d, 0x86, 0xe9, 0xfd, 0xf8, 0xb7, 0x9a, 0x12, 0xcb,
0xab, 0x1a, 0xc3, 0xe0, 0x2d, 0xa6, 0xa1, 0x22, 0x43, 0x4e, 0x76, 0x9d,
0x75, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xcd, 0x76, 0x63,
0x43, 0xe1, 0xc7, 0x6b, 0x59, 0x34, 0xa4, 0x23, 0x42, 0xc0, 0xb9, 0x98,
0x02, 0x00, 0x18, 0xdd, 0x16, 0x00, 0x50, 0xf2, 0x01, 0x01, 0x00, 0x00,
0x50, 0xf2, 0x02, 0x01, 0x00, 0x00, 0x50, 0xf2, 0x02, 0x01, 0x00, 0x00,
0x50, 0xf2, 0x02,
};
static struct eapol_key_data eapol_key_test_21 = {
.frame = eapol_key_data_21,
.frame_len = sizeof(eapol_key_data_21),
.protocol_version = EAPOL_PROTOCOL_VERSION_2001,
.packet_len = 119,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_WPA,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
.key_type = true,
.wpa_key_id = 0,
.install = true,
.key_ack = true,
.key_mic = true,
.secure = false,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 32,
.key_replay_counter = 1,
.key_nonce = { 0x26, 0x56, 0x9b, 0x2a, 0x6e, 0x90, 0xad, 0x21, 0x91,
0x86, 0x6d, 0x86, 0xe9, 0xfd, 0xf8, 0xb7, 0x9a, 0x12,
0xcb, 0xab, 0x1a, 0xc3, 0xe0, 0x2d, 0xa6, 0xa1, 0x22,
0x43, 0x4e, 0x76, 0x9d, 0x75 },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0xcd, 0x76, 0x63, 0x43, 0xe1, 0xc7, 0x6b, 0x59, 0x34,
0xa4, 0x23, 0x42, 0xc0, 0xb9, 0x98, 0x02 },
.key_data_len = 24,
};
unit: Add WPA1 Step 4/4 test data + test
2015-05-18 20:04:45 +02:00
/* WPA frame, 4 of 4. For parameters see eapol_wpa2_handshake_test */
static const unsigned char eapol_key_data_22[] = {
0x01, 0x03, 0x00, 0x5f, 0xfe, 0x01, 0x09, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x37, 0xbc, 0x08,
0x98, 0x99, 0x33, 0x1a, 0x70, 0xed, 0xa5, 0xb5, 0xb7, 0x54, 0xf5, 0x5f,
0x06, 0x00, 0x00,
};
static struct eapol_key_data eapol_key_test_22 = {
.frame = eapol_key_data_22,
.frame_len = sizeof(eapol_key_data_22),
.protocol_version = EAPOL_PROTOCOL_VERSION_2001,
.packet_len = 95,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_WPA,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
.key_type = true,
.wpa_key_id = 0,
.install = false,
.key_ack = false,
.key_mic = true,
.secure = false,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 0,
.key_replay_counter = 1,
.key_nonce = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x37, 0xbc, 0x08, 0x98, 0x99, 0x33, 0x1a, 0x70, 0xed,
0xa5, 0xb5, 0xb7, 0x54, 0xf5, 0x5f, 0x06 },
.key_data_len = 0,
};
unit: Add WPA1 GTK Step 1/2 test data + test
2015-05-18 20:09:22 +02:00
/*
* WPA Group Handshake frame, 1 of 2. For parameters
* see eapol_wpa2_handshake_test
*/
static const unsigned char eapol_key_data_23[] = {
0x01, 0x03, 0x00, 0x7f, 0xfe, 0x03, 0xa1, 0x00, 0x20, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x02, 0x6a, 0x65, 0xcf, 0x21, 0x0d, 0x51, 0xeb,
0xd6, 0xca, 0x3e, 0xc9, 0xee, 0xc9, 0xd9, 0xad, 0x2f, 0x14, 0x13, 0x8d,
0xb9, 0x33, 0xa1, 0xbb, 0xed, 0x94, 0x26, 0xa1, 0x73, 0x48, 0xc8, 0x4d,
0x4a, 0x0d, 0x8c, 0xe1, 0x3f, 0x1c, 0x0c, 0x52, 0x55, 0x00, 0xe5, 0x04,
0xe5, 0xbd, 0x46, 0x94, 0xdb, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xe5, 0xa3, 0x27,
0x7c, 0x85, 0x47, 0xd5, 0x3f, 0x35, 0xaf, 0x86, 0xc2, 0x2c, 0xcb, 0xb3,
0x87, 0x00, 0x20, 0xc8, 0xb3, 0x61, 0xc0, 0x71, 0x5d, 0x2e, 0x9a, 0x6a,
0x78, 0xdf, 0xfe, 0x0d, 0x64, 0x11, 0x23, 0xd9, 0xcc, 0xc6, 0x44, 0x65,
0x76, 0xba, 0x82, 0xd5, 0x08, 0x4b, 0x4e, 0x51, 0xc2, 0x6a, 0x3f,
};
static struct eapol_key_data eapol_key_test_23 = {
.frame = eapol_key_data_23,
.frame_len = sizeof(eapol_key_data_23),
.protocol_version = EAPOL_PROTOCOL_VERSION_2001,
.packet_len = 127,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_WPA,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
.key_type = false,
.wpa_key_id = 2,
.install = false,
.key_ack = true,
.key_mic = true,
.secure = true,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 32,
.key_replay_counter = 2,
.key_nonce = { 0x6a, 0x65, 0xcf, 0x21, 0x0d, 0x51, 0xeb, 0xd6, 0xca,
0x3e, 0xc9, 0xee, 0xc9, 0xd9, 0xad, 0x2f, 0x14, 0x13,
0x8d, 0xb9, 0x33, 0xa1, 0xbb, 0xed, 0x94, 0x26, 0xa1,
0x73, 0x48, 0xc8, 0x4d, 0x4a },
.eapol_key_iv = { 0x0d, 0x8c, 0xe1, 0x3f, 0x1c, 0x0c, 0x52, 0x55, 0x00,
0xe5, 0x04, 0xe5, 0xbd, 0x46, 0x94, 0xdb },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0xe5, 0xa3, 0x27, 0x7c, 0x85, 0x47, 0xd5, 0x3f, 0x35,
0xaf, 0x86, 0xc2, 0x2c, 0xcb, 0xb3, 0x87 },
.key_data_len = 32,
};
unit: Add WPA1 GTK Step 2/2 test data + test
2015-05-18 20:09:36 +02:00
/*
* WPA Group Handshake frame, 2 of 2. For parameters
* see eapol_wpa2_handshake_test
*/
static const unsigned char eapol_key_data_24[] = {
0x01, 0x03, 0x00, 0x5f, 0xfe, 0x03, 0x21, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x4f, 0x06, 0x47,
0x53, 0x9a, 0x1d, 0x3f, 0x9c, 0x02, 0x50, 0xb5, 0xc0, 0x40, 0x6b, 0x97,
0xf8, 0x00, 0x00,
};
static struct eapol_key_data eapol_key_test_24 = {
.frame = eapol_key_data_24,
.frame_len = sizeof(eapol_key_data_24),
.protocol_version = EAPOL_PROTOCOL_VERSION_2001,
.packet_len = 95,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_WPA,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
.key_type = false,
.wpa_key_id = 2,
.install = false,
.key_ack = false,
.key_mic = true,
.secure = true,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 0,
.key_replay_counter = 2,
.key_nonce = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x4f, 0x06, 0x47, 0x53, 0x9a, 0x1d, 0x3f, 0x9c, 0x02,
0x50, 0xb5, 0xc0, 0x40, 0x6b, 0x97, 0xf8 },
.key_data_len = 0,
};
unit: FT 4-Way Handshake eapol test This also tests that the FT crypto functions work. For the record these are the values of the intermediate keys in this test: ANonce: 33 b2 74 a0 ae c9 e8 5d 61 11 8f 1b 6b 97 77 4e 5b 75 08 37 45 77 dc 14 08 a5 f1 80 c5 d2 e9 fd SNonce: ac 1e b2 c7 0b 20 8c e6 0a e2 07 b2 38 9e 44 1f ff 39 86 3d 44 9f 81 24 6f e3 6e de 0f 1f 56 ce PMK-R0: ad b8 81 bf 50 11 1c fd 0b 5c 87 23 42 bf 3b 54 3e 81 d6 3f 3e 18 cf 0a 8d 3d 85 4f d8 07 ad d5 PMKR0Name: cc 62 4a e8 6e 0c 85 25 06 02 22 15 f7 3d 0d 01 PMK-R1: 17 6a 37 92 25 28 72 9f 40 18 06 20 b4 2d 34 2a 7b 8d da 09 4c a9 cf 84 bd 55 4a 39 bc 5d c1 61 PMKR1Name: de ce 50 a0 9e f0 8c 4e be f2 f1 db e9 67 b4 d4 KCK: e4 2d ee 98 f9 9d fb f8 32 9f 50 41 05 58 35 a2 KEK: 34 5e 22 4e 91 73 8a 97 dd c4 19 53 c5 c8 d7 29 TK: 7c ff bd 35 ce 11 c5 75 1d 4c c6 7a df c2 a2 78 PTKName: 31 e4 94 a6 96 a5 c3 7e 2f 33 9c 47 04 dc ae 05
2016-11-02 23:46:15 +01:00
/* FT frame, 1 of 4. For parameters see eapol_ft_handshake_test */
static const unsigned char eapol_key_data_25[] = {
0x02, 0x03, 0x00, 0x5f, 0x02, 0x00, 0x8b, 0x00, 0x10, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x01, 0x33, 0xb2, 0x74, 0xa0, 0xae, 0xc9, 0xe8,
0x5d, 0x61, 0x11, 0x8f, 0x1b, 0x6b, 0x97, 0x77, 0x4e, 0x5b, 0x75, 0x08,
0x37, 0x45, 0x77, 0xdc, 0x14, 0x08, 0xa5, 0xf1, 0x80, 0xc5, 0xd2, 0xe9,
0xfd, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00,
};
static struct eapol_key_data eapol_key_test_25 = {
.frame = eapol_key_data_25,
.frame_len = sizeof(eapol_key_data_25),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 95,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_AES_128_CMAC_AES,
.key_type = true,
.install = false,
.key_ack = true,
.key_mic = false,
.secure = false,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 16,
.key_replay_counter = 1,
.key_nonce = { 0x33, 0xb2, 0x74, 0xa0, 0xae, 0xc9, 0xe8, 0x5d, 0x61,
0x11, 0x8f, 0x1b, 0x6b, 0x97, 0x77, 0x4e, 0x5b, 0x75,
0x08, 0x37, 0x45, 0x77, 0xdc, 0x14, 0x08, 0xa5, 0xf1,
0x80, 0xc5, 0xd2, 0xe9, 0xfd },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_data_len = 0,
};
/* FT frame, 2 of 4. For parameters see eapol_ft_handshake_test */
static const unsigned char eapol_key_data_26[] = {
0x02, 0x03, 0x00, 0xf0, 0x02, 0x01, 0x0b, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x01, 0xac, 0x1e, 0xb2, 0xc7, 0x0b, 0x20, 0x8c,
0xe6, 0x0a, 0xe2, 0x07, 0xb2, 0x38, 0x9e, 0x44, 0x1f, 0xff, 0x39, 0x86,
0x3d, 0x44, 0x9f, 0x81, 0x24, 0x6f, 0xe3, 0x6e, 0xde, 0x0f, 0x1f, 0x56,
0xce, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x79, 0xa1, 0x95,
0x19, 0xe8, 0x5f, 0xcf, 0x2e, 0x60, 0x7d, 0x6f, 0xfb, 0xd9, 0xe8, 0x04,
0xb0, 0x00, 0x91, 0x30, 0x26, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x04, 0x01,
0x00, 0x00, 0x0f, 0xac, 0x04, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x04, 0x00,
0x00, 0x01, 0x00, 0xde, 0xce, 0x50, 0xa0, 0x9e, 0xf0, 0x8c, 0x4e, 0xbe,
0xf2, 0xf1, 0xdb, 0xe9, 0x67, 0xb4, 0xd4, 0x36, 0x03, 0x12, 0x34, 0x01,
0x37, 0x62, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x01, 0x06, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x03, 0x06, 0x64, 0x75,
0x6d, 0x6d, 0x79, 0x30,
};
static struct eapol_key_data eapol_key_test_26 = {
.frame = eapol_key_data_26,
.frame_len = sizeof(eapol_key_data_26),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 240,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_AES_128_CMAC_AES,
.key_type = true,
.install = false,
.key_ack = false,
.key_mic = true,
.secure = false,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 0,
.key_replay_counter = 1,
.key_nonce = { 0xac, 0x1e, 0xb2, 0xc7, 0x0b, 0x20, 0x8c, 0xe6, 0x0a,
0xe2, 0x07, 0xb2, 0x38, 0x9e, 0x44, 0x1f, 0xff, 0x39,
0x86, 0x3d, 0x44, 0x9f, 0x81, 0x24, 0x6f, 0xe3, 0x6e,
0xde, 0x0f, 0x1f, 0x56, 0xce },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x79, 0xa1, 0x95, 0x19, 0xe8, 0x5f, 0xcf, 0x2e, 0x60,
0x7d, 0x6f, 0xfb, 0xd9, 0xe8, 0x04, 0xb0 },
.key_data_len = 145,
};
/* FT frame, 3 of 4. For parameters see eapol_ft_handshake_test */
static const unsigned char eapol_key_data_27[] = {
0x02, 0x03, 0x01, 0x1f, 0x02, 0x13, 0xcb, 0x00, 0x10, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x02, 0x33, 0xb2, 0x74, 0xa0, 0xae, 0xc9, 0xe8,
0x5d, 0x61, 0x11, 0x8f, 0x1b, 0x6b, 0x97, 0x77, 0x4e, 0x5b, 0x75, 0x08,
0x37, 0x45, 0x77, 0xdc, 0x14, 0x08, 0xa5, 0xf1, 0x80, 0xc5, 0xd2, 0xe9,
0xfd, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x12, 0xe3, 0x6d,
0xef, 0x96, 0x5b, 0x07, 0xaa, 0x58, 0xce, 0xed, 0xb1, 0x57, 0x83, 0x51,
0x7e, 0x00, 0xc0, 0x1d, 0x41, 0x1c, 0xf6, 0x35, 0x4e, 0x5c, 0x0f, 0x4d,
0x03, 0x08, 0xe7, 0x3b, 0x33, 0x04, 0xde, 0x5e, 0x01, 0x77, 0x1c, 0xb8,
0x91, 0xef, 0x4f, 0x24, 0x64, 0x84, 0xaa, 0x94, 0x42, 0xc3, 0xcb, 0x63,
0x2d, 0xed, 0x5e, 0x5f, 0xcb, 0x1a, 0xff, 0x53, 0x58, 0x45, 0xd5, 0xc2,
0x11, 0x52, 0x40, 0x06, 0x08, 0x70, 0xd8, 0xd1, 0xf7, 0x79, 0xfe, 0x37,
0xb8, 0x6d, 0xd6, 0x27, 0x45, 0xbc, 0x11, 0x2a, 0x69, 0x05, 0x2c, 0x40,
0x3a, 0x06, 0x24, 0x5a, 0x7a, 0xa6, 0x79, 0x4b, 0x18, 0xc8, 0xbf, 0x21,
0x10, 0xa0, 0x7d, 0x80, 0x89, 0x77, 0x85, 0x27, 0x88, 0x74, 0x07, 0x00,
0x14, 0xe0, 0x91, 0xa2, 0xe0, 0xa2, 0x25, 0x3c, 0x26, 0xce, 0xd6, 0x9f,
0x33, 0x20, 0x99, 0xc6, 0xc0, 0x46, 0x91, 0x8a, 0x68, 0x5b, 0xa0, 0xa1,
0x30, 0xcd, 0x76, 0x58, 0x26, 0x81, 0x03, 0xe6, 0x79, 0x3b, 0xf6, 0x4b,
0x2f, 0x1d, 0x73, 0x8f, 0x62, 0xda, 0x22, 0xa9, 0xb4, 0xac, 0x77, 0xcc,
0xd4, 0xd4, 0x6f, 0x80, 0x31, 0xfb, 0x3d, 0x21, 0xde, 0x41, 0x09, 0x70,
0xcc, 0x18, 0xa6, 0xa5, 0x3e, 0xda, 0x1b, 0x6b, 0x30, 0xce, 0xd4, 0xde,
0xd4, 0x86, 0x7e, 0x71, 0xd0, 0x97, 0x85, 0xcc, 0xa2, 0xd3, 0x4c, 0x56,
0xcf, 0x1a, 0xd3, 0xff, 0xf8, 0x18, 0xfd, 0x52, 0x77, 0x21, 0xe9, 0x87,
0x3f, 0x14, 0x30,
};
static struct eapol_key_data eapol_key_test_27 = {
.frame = eapol_key_data_27,
.frame_len = sizeof(eapol_key_data_27),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 287,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_AES_128_CMAC_AES,
.key_type = true,
.install = true,
.key_ack = true,
.key_mic = true,
.secure = true,
.error = false,
.request = false,
.encrypted_key_data = true,
.smk_message = false,
.key_length = 16,
.key_replay_counter = 2,
.key_nonce = { 0x33, 0xb2, 0x74, 0xa0, 0xae, 0xc9, 0xe8, 0x5d, 0x61,
0x11, 0x8f, 0x1b, 0x6b, 0x97, 0x77, 0x4e, 0x5b, 0x75,
0x08, 0x37, 0x45, 0x77, 0xdc, 0x14, 0x08, 0xa5, 0xf1,
0x80, 0xc5, 0xd2, 0xe9, 0xfd },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x12, 0xe3, 0x6d, 0xef, 0x96, 0x5b, 0x07, 0xaa, 0x58,
0xce, 0xed, 0xb1, 0x57, 0x83, 0x51, 0x7e },
.key_data_len = 192,
};
/* FT frame, 4 of 4. For parameters see eapol_ft_handshake_test */
static const unsigned char eapol_key_data_28[] = {
0x02, 0x03, 0x00, 0x5f, 0x02, 0x03, 0x0b, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x3e, 0x85, 0x3a,
0x3c, 0x83, 0x71, 0x4a, 0x94, 0xe4, 0x30, 0xdf, 0xb2, 0x06, 0x65, 0xa1,
0xd4, 0x00, 0x00,
};
static struct eapol_key_data eapol_key_test_28 = {
.frame = eapol_key_data_28,
.frame_len = sizeof(eapol_key_data_28),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 95,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_AES_128_CMAC_AES,
.key_type = true,
.install = false,
.key_ack = false,
.key_mic = true,
.secure = true,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 0,
.key_replay_counter = 2,
.key_nonce = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x3e, 0x85, 0x3a, 0x3c, 0x83, 0x71, 0x4a, 0x94, 0xe4,
0x30, 0xdf, 0xb2, 0x06, 0x65, 0xa1, 0xd4 },
.key_data_len = 0,
};
unit/test-eapol: igtk test with mfp enabled This is the first version of the test
2016-12-02 16:18:52 +01:00
/* WPA frame, 1 of 4. For parameters see eapol_sm_test_igtk */
static const unsigned char eapol_key_data_29[] = {
0x02, 0x03, 0x00, 0x5f, 0x02, 0x00, 0x89, 0x00, 0x20, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x30, 0x37, 0x86,
0x8d, 0x6c, 0xd2, 0x38, 0xb2, 0xfe, 0xb4, 0x5b, 0xd3, 0xc6,
0x4b, 0xa1, 0x3e, 0x26, 0xd9, 0xa4, 0x89, 0x8b, 0x43, 0xf6,
0x66, 0x51, 0x26, 0x99, 0x5e, 0x62, 0xce, 0x8e, 0x9d, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
};
static struct eapol_key_data eapol_key_test_29 = {
.frame = eapol_key_data_29,
.frame_len = sizeof(eapol_key_data_29),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 95,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
.key_type = true,
.install = false,
.key_ack = true,
.key_mic = false,
.secure = false,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 32,
.key_replay_counter = 1,
.key_nonce = { 0x30, 0x37, 0x86, 0x8d, 0x6c, 0xd2, 0x38, 0xb2, 0xfe,
0xb4, 0x5b, 0xd3, 0xc6, 0x4b, 0xa1, 0x3e, 0x26, 0xd9,
0xa4, 0x89, 0x8b, 0x43, 0xf6, 0x66, 0x51, 0x26, 0x99,
0x5e, 0x62, 0xce, 0x8e, 0x9d},
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, },
.key_data_len = 0,
};
/* WPA frame, 2 of 4. For parameters see eapol_sm_test_igtk */
static const unsigned char eapol_key_data_30[] = {
0x01, 0x03, 0x00, 0x7b, 0x02, 0x01, 0x09, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x01, 0x3e, 0x5e, 0xb7, 0x47, 0x91, 0xf4, 0x2a,
0x39, 0x3a, 0x6a, 0xbc, 0xeb, 0x9c, 0x25, 0x27, 0x0f, 0x61, 0xb4, 0x24,
0x8c, 0xf2, 0x97, 0xdf, 0x22, 0xef, 0x67, 0x15, 0x87, 0xad, 0x22, 0xc3,
0xd8, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x92, 0x76, 0xec,
0x87, 0x1e, 0x42, 0x7a, 0x66, 0x3f, 0x45, 0xb2, 0x7f, 0x7c, 0xd7, 0xe3,
0xb9, 0x00, 0x1c, 0x30, 0x1a, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x02, 0x01,
0x00, 0x00, 0x0f, 0xac, 0x02, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x02, 0x80,
0x00, 0x00, 0x00, 0x00, 0x0f, 0xac, 0x06,
};
static struct eapol_key_data eapol_key_test_30 = {
.frame = eapol_key_data_30,
.frame_len = sizeof(eapol_key_data_30),
.protocol_version = EAPOL_PROTOCOL_VERSION_2001,
.packet_len = 123,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
.key_type = true,
.install = false,
.key_ack = false,
.key_mic = true,
.secure = false,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 0,
.key_replay_counter = 1,
.key_nonce = { 0x3e, 0x5e, 0xb7, 0x47, 0x91, 0xf4, 0x2a, 0x39, 0x3a,
0x6a, 0xbc, 0xeb, 0x9c, 0x25, 0x27, 0x0f, 0x61, 0xb4,
0x24, 0x8c, 0xf2, 0x97, 0xdf, 0x22, 0xef, 0x67, 0x15,
0x87, 0xad, 0x22, 0xc3, 0xd8 },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x92, 0x76, 0xec, 0x87, 0x1e, 0x42, 0x7a, 0x66, 0x3f,
0x45, 0xb2, 0x7f, 0x7c, 0xd7, 0xe3, 0xb9 },
.key_data_len = 28,
};
/* WPA frame, 3 of 4. For parameters see eapol_sm_test_igtk */
static const unsigned char eapol_key_data_31[] = {
0x02, 0x03, 0x00, 0xd3, 0x02, 0x13, 0xc9, 0x00, 0x20, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x02, 0x30, 0x37, 0x86, 0x8d, 0x6c, 0xd2, 0x38,
0xb2, 0xfe, 0xb4, 0x5b, 0xd3, 0xc6, 0x4b, 0xa1, 0x3e, 0x26, 0xd9, 0xa4,
0x89, 0x8b, 0x43, 0xf6, 0x66, 0x51, 0x26, 0x99, 0x5e, 0x62, 0xce, 0x8e,
0x9d, 0x92, 0xcf, 0x64, 0xa6, 0xf5, 0xea, 0x95, 0xf7, 0xf9, 0xeb, 0x6a,
0x54, 0x8a, 0x85, 0x6c, 0x1c, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x1f, 0x80, 0xb3,
0x14, 0x1f, 0xfa, 0x11, 0x47, 0xcd, 0x6d, 0xd0, 0x20, 0x7e, 0x9e, 0x68,
0x65, 0x00, 0x74, 0x39, 0xf4, 0xc9, 0x3a, 0xf3, 0xac, 0xf5, 0xd3, 0x98,
0xeb, 0xaf, 0x3c, 0x0f, 0xf1, 0xb5, 0x33, 0xff, 0xb2, 0x00, 0x1b, 0xe4,
0x2c, 0x61, 0xaf, 0xff, 0x1c, 0x22, 0x76, 0x07, 0x3b, 0xbc, 0x0d, 0x0c,
0xeb, 0x8a, 0xdc, 0xcd, 0x47, 0x01, 0xa5, 0x6e, 0x76, 0x77, 0x85, 0x6f,
0x09, 0x43, 0x83, 0xee, 0x50, 0x6e, 0x5e, 0xb1, 0x24, 0xe3, 0x47, 0xef,
0x20, 0x5e, 0x5c, 0x10, 0x7a, 0xe3, 0x61, 0x69, 0x7b, 0xb0, 0xf6, 0xdd,
0x42, 0x1a, 0xe1, 0xc9, 0x33, 0xd6, 0xd3, 0x88, 0x40, 0xcc, 0x72, 0x28,
0x86, 0xce, 0xec, 0xea, 0xc0, 0xea, 0xc9, 0xcf, 0xe1, 0x93, 0x8b, 0x15,
0x5e, 0xbb, 0x1f, 0xf9, 0x6f, 0x10, 0x34, 0xa5, 0xfc, 0x61, 0x78, 0x77,
0xa7, 0xb1, 0x4d, 0xc4, 0x36, 0xea, 0x2f, 0x1d, 0xda, 0x31, 0xa1,
};
static struct eapol_key_data eapol_key_test_31 = {
.frame = eapol_key_data_31,
.frame_len = sizeof(eapol_key_data_31),
.protocol_version = EAPOL_PROTOCOL_VERSION_2004,
.packet_len = 211,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
.key_type = true,
.install = true,
.key_ack = true,
.key_mic = true,
.secure = true,
.error = false,
.request = false,
.encrypted_key_data = true,
.smk_message = false,
.key_length = 32,
.key_replay_counter = 2,
.key_nonce = { 0x30, 0x37, 0x86, 0x8d, 0x6c, 0xd2, 0x38, 0xb2, 0xfe,
0xb4, 0x5b, 0xd3, 0xc6, 0x4b, 0xa1, 0x3e, 0x26, 0xd9,
0xa4, 0x89, 0x8b, 0x43, 0xf6, 0x66, 0x51, 0x26, 0x99,
0x5e, 0x62, 0xce, 0x8e, 0x9d },
.eapol_key_iv = { 0x92, 0xcf, 0x64, 0xa6, 0xf5, 0xea, 0x95, 0xf7, 0xf9,
0xeb, 0x6a, 0x54, 0x8a, 0x85, 0x6c, 0x1c},
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x1f, 0x80, 0xb3, 0x14, 0x1f, 0xfa, 0x11, 0x47, 0xcd,
0x6d, 0xd0, 0x20, 0x7e, 0x9e, 0x68, 0x65 },
.key_data_len = 116,
};
/* WPA frame, 4 of 4. For parameters see eapol_sm_test_igtk */
static const unsigned char eapol_key_data_32[] = {
0x01, 0x03, 0x00, 0x5f, 0x02, 0x03, 0x09, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x66, 0x2c, 0x07,
0x9b, 0x73, 0xb6, 0x94, 0xb9, 0x4b, 0x7f, 0xa1, 0x99, 0x2f, 0x7a, 0x92,
0xe2, 0x00, 0x00
};
static struct eapol_key_data eapol_key_test_32 = {
.frame = eapol_key_data_32,
.frame_len = sizeof(eapol_key_data_32),
.protocol_version = EAPOL_PROTOCOL_VERSION_2001,
.packet_len = 95,
.descriptor_type = EAPOL_DESCRIPTOR_TYPE_80211,
.key_descriptor_version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
.key_type = true,
.install = false,
.key_ack = false,
.key_mic = true,
.secure = true,
.error = false,
.request = false,
.encrypted_key_data = false,
.smk_message = false,
.key_length = 0,
.key_replay_counter = 2,
.key_nonce = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.eapol_key_iv = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_rsc = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 },
.key_mic_data = { 0x66, 0x2c, 0x07, 0x9b, 0x73, 0xb6, 0x94, 0xb9,
0x4b, 0x7f, 0xa1, 0x99, 0x2f, 0x7a, 0x92, 0xe2 },
.key_data_len = 0,
};
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
static void eapol_key_test(const void *data)
{
const struct eapol_key_data *test = data;
unit: Update to the new eapol_key_validate API eapol_key_validate will directly return a const pointer if the validation succeeds.
2015-01-22 16:58:24 +01:00
const struct eapol_key *packet;
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
packet = eapol_key_validate(test->frame, test->frame_len, 16);
unit: Update to the new eapol_key_validate API eapol_key_validate will directly return a const pointer if the validation succeeds.
2015-01-22 16:58:24 +01:00
assert(packet);
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
eapol: Separate EAPOL header from struct eapol_key This is needed so we can better handle sending and receiving EAPoL packets other than EAPoL-Key.
2015-10-30 11:12:18 +01:00
assert(packet->header.protocol_version == test->protocol_version);
assert(packet->header.packet_type == 0x03);
assert(L_BE16_TO_CPU(packet->header.packet_len) == test->packet_len);
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
assert(packet->descriptor_type == test->descriptor_type);
assert(packet->key_descriptor_version == test->key_descriptor_version);
assert(packet->key_type == test->key_type);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(packet->wpa_key_id == test->wpa_key_id);
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
assert(packet->install == test->install);
assert(packet->key_ack == test->key_ack);
assert(packet->key_mic == test->key_mic);
assert(packet->secure == test->secure);
assert(packet->error == test->error);
assert(packet->request == test->request);
assert(packet->encrypted_key_data == test->encrypted_key_data);
assert(packet->smk_message == test->smk_message);
assert(L_BE16_TO_CPU(packet->key_length) == test->key_length);
unit: Handle key_replay_counter as a uint64_t
2015-02-13 20:55:05 +01:00
assert(L_BE64_TO_CPU(packet->key_replay_counter) ==
test->key_replay_counter);
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
assert(!memcmp(packet->key_nonce, test->key_nonce,
sizeof(packet->key_nonce)));
assert(!memcmp(packet->eapol_key_iv, test->eapol_key_iv,
sizeof(packet->eapol_key_iv)));
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
assert(!memcmp(EAPOL_KEY_MIC(packet), test->key_mic_data,
sizeof(test->key_mic_data)));
unit: Add rsc field to unit test
2014-12-19 22:45:40 +01:00
assert(!memcmp(packet->key_rsc, test->key_rsc,
sizeof(packet->key_rsc)));
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
assert(EAPOL_KEY_DATA_LEN(packet, 16) == test->key_data_len);
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
}
unit: Add MIC calculation test
2014-12-28 05:29:12 +01:00
struct eapol_key_mic_test {
const uint8_t *frame;
size_t frame_len;
enum eapol_key_descriptor_version version;
const uint8_t *kck;
const uint8_t *mic;
};
static const uint8_t eapol_key_mic_data_1[] = {
0x01, 0x03, 0x00, 0x75, 0x02, 0x01, 0x0a, 0x00,
0x10, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x01, 0x59, 0x16, 0x8b, 0xc3, 0xa5, 0xdf, 0x18,
0xd7, 0x1e, 0xfb, 0x64, 0x23, 0xf3, 0x40, 0x08,
0x8d, 0xab, 0x9e, 0x1b, 0xa2, 0xbb, 0xc5, 0x86,
0x59, 0xe0, 0x7b, 0x37, 0x64, 0xb0, 0xde, 0x85,
0x70, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x16, 0x30, 0x14, 0x01, 0x00, 0x00,
0x0f, 0xac, 0x04, 0x01, 0x00, 0x00, 0x0f, 0xac,
0x04, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x02, 0x01,
0x00,
};
static const uint8_t eapol_key_mic_1[] = {
0x9c, 0xc3, 0xfa, 0xa0, 0xc6, 0x85, 0x96, 0x1d,
0x84, 0x06, 0xbb, 0x65, 0x77, 0x45, 0x13, 0x5d,
};
static unsigned char kck_data_1[] = {
0x9a, 0x75, 0xef, 0x0b, 0xde, 0x7c, 0x20, 0x9c,
0xca, 0xe1, 0x3f, 0x54, 0xb1, 0xb3, 0x3e, 0xa3,
};
static const struct eapol_key_mic_test eapol_key_mic_test_1 = {
.frame = eapol_key_mic_data_1,
.frame_len = sizeof(eapol_key_mic_data_1),
.version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
.kck = kck_data_1,
.mic = eapol_key_mic_1,
};
static const uint8_t eapol_key_mic_2[] = {
0x6f, 0x04, 0x89, 0xcf, 0x74, 0x06, 0xac, 0xf0,
0xae, 0x8f, 0xcb, 0x32, 0xbc, 0xe5, 0x7c, 0x37,
};
static const struct eapol_key_mic_test eapol_key_mic_test_2 = {
.frame = eapol_key_mic_data_1,
.frame_len = sizeof(eapol_key_mic_data_1),
.version = EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_SHA1_AES,
.kck = kck_data_1,
.mic = eapol_key_mic_2,
};
static void eapol_key_mic_test(const void *data)
{
const struct eapol_key_mic_test *test = data;
uint8_t mic[16];
memset(mic, 0, sizeof(mic));
switch (test->version) {
case EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4:
assert(hmac_md5(test->kck, 16, test->frame, test->frame_len,
mic, 16));
break;
case EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_SHA1_AES:
assert(hmac_sha1(test->kck, 16, test->frame, test->frame_len,
mic, 16));
break;
default:
assert(false);
}
assert(!memcmp(test->mic, mic, sizeof(mic)));
}
unit: Add eapol_calculate_mic test
2014-12-28 05:53:14 +01:00
struct eapol_calculate_mic_test {
const uint8_t *frame;
size_t frame_len;
const uint8_t *kck;
const uint8_t *mic;
};
static const struct eapol_calculate_mic_test eapol_calculate_mic_test_1 = {
.frame = eapol_key_mic_data_1,
.frame_len = sizeof(eapol_key_mic_data_1),
.kck = kck_data_1,
.mic = eapol_key_mic_2,
};
static void eapol_calculate_mic_test(const void *data)
{
const struct eapol_calculate_mic_test *test = data;
struct eapol_key *frame;
uint8_t mic[16];
bool ret;
memset(mic, 0, sizeof(mic));
frame = (struct eapol_key *) test->frame;
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
ret = eapol_calculate_mic(IE_RSN_AKM_SUITE_PSK, test->kck, frame,
mic, 16);
unit: Add eapol_calculate_mic test
2014-12-28 05:53:14 +01:00
assert(ret);
assert(!memcmp(test->mic, mic, sizeof(mic)));
}
unit: Add 2 steps of 4-way handshake test
2014-12-28 06:04:30 +01:00
static void eapol_4way_test(const void *data)
{
uint8_t anonce[32];
uint8_t snonce[32];
uint8_t mic[16];
struct eapol_key *frame;
uint8_t aa[] = { 0x24, 0xa2, 0xe1, 0xec, 0x17, 0x04 };
uint8_t spa[] = { 0xa0, 0xa8, 0xcd, 0x1c, 0x7e, 0xc9 };
const char *passphrase = "EasilyGuessedPassword";
const char *ssid = "TestWPA";
const unsigned char expected_psk[] = {
0xbf, 0x9a, 0xa3, 0x15, 0x53, 0x00, 0x12, 0x5e,
0x7a, 0x5e, 0xbb, 0x2a, 0x54, 0x9f, 0x8c, 0xd4,
0xed, 0xab, 0x8e, 0xe1, 0x2e, 0x94, 0xbf, 0xc2,
0x4b, 0x33, 0x57, 0xad, 0x04, 0x96, 0x65, 0xd9 };
unsigned char psk[32];
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
uint8_t *ptk;
unit: Add 2 steps of 4-way handshake test
2014-12-28 06:04:30 +01:00
size_t ptk_len;
bool ret;
unit: Update to the new API
2015-02-13 23:09:45 +01:00
const struct eapol_key *step1;
const struct eapol_key *step2;
unit: Utilize eapol_verify_ptk_3_of_4
2015-02-13 23:50:29 +01:00
const struct eapol_key *step3;
unit: Excercise eapol_verify_ptk_4_of_4
2015-02-14 01:38:29 +01:00
const struct eapol_key *step4;
unit: Decrypt key data and verify RSN is present
2015-02-18 00:41:08 +01:00
uint8_t *decrypted_key_data;
unit: Track the decrypted_key_data_size
2015-02-24 23:00:27 +01:00
size_t decrypted_key_data_len;
unit: Update to the new API
2015-02-13 23:09:45 +01:00
unit: Update to the new API
2015-02-23 22:43:35 +01:00
step1 = eapol_key_validate(eapol_key_data_3,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_3), 16);
unit: Update to the new API
2015-02-13 23:09:45 +01:00
assert(step1);
unit: update test-eapol to use the new ptk verify APIs
2022-06-25 01:07:41 +02:00
assert(eapol_verify_ptk_1_of_4(step1, 16, false));
unit: Update to the new API
2015-02-13 23:09:45 +01:00
memcpy(anonce, step1->key_nonce, sizeof(step1->key_nonce));
unit: Update to the new API
2015-02-23 22:43:35 +01:00
step2 = eapol_key_validate(eapol_key_data_4,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_4), 16);
unit: Update to the new API
2015-02-13 23:09:45 +01:00
assert(step2);
unit: update test-eapol to use the new ptk verify APIs
2022-06-25 01:07:41 +02:00
assert(eapol_verify_ptk_2_of_4(step2, false));
unit: Update to the new API
2015-02-13 23:09:45 +01:00
memcpy(snonce, step2->key_nonce, sizeof(step2->key_nonce));
unit: Add 2 steps of 4-way handshake test
2014-12-28 06:04:30 +01:00
assert(!crypto_psk_from_passphrase(passphrase, (uint8_t *) ssid,
strlen(ssid), psk));
assert(!memcmp(expected_psk, psk, sizeof(psk)));
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
ptk_len = 32 + crypto_cipher_key_len(CRYPTO_CIPHER_CCMP);
unit: Add 2 steps of 4-way handshake test
2014-12-28 06:04:30 +01:00
ptk = l_malloc(ptk_len);
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
ret = crypto_derive_pairwise_ptk(psk, sizeof(psk), aa, spa, anonce,
snonce, ptk, ptk_len,
unit: update test-{crypto,eapol} with PTK changes Updated to use l_checksum_type instead of boolean
2019-04-25 21:52:50 +02:00
L_CHECKSUM_SHA1);
unit: Add 2 steps of 4-way handshake test
2014-12-28 06:04:30 +01:00
assert(ret);
frame = eapol_create_ptk_2_of_4(EAPOL_PROTOCOL_VERSION_2001,
EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_SHA1_AES,
eapol_key_test_4.key_replay_counter,
snonce, eapol_key_test_4.key_data_len,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
eapol_key_data_4 + EAPOL_FRAME_LEN(16),
unit: update test-eapol with API change
2023-01-11 21:15:36 +01:00
false, 16, false);
unit: Add 2 steps of 4-way handshake test
2014-12-28 06:04:30 +01:00
assert(frame);
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
assert(eapol_calculate_mic(IE_RSN_AKM_SUITE_PSK, ptk, frame,
mic, 16));
memcpy(EAPOL_KEY_MIC(frame), mic, sizeof(mic));
unit: Add 2 steps of 4-way handshake test
2014-12-28 06:04:30 +01:00
assert(!memcmp(frame, eapol_key_data_4, sizeof(eapol_key_data_4)));
unit: Utilize eapol_verify_ptk_3_of_4
2015-02-13 23:50:29 +01:00
l_free(frame);
unit: Update to the new API
2015-02-23 22:43:35 +01:00
step3 = eapol_key_validate(eapol_key_data_5,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_5), 16);
unit: Utilize eapol_verify_ptk_3_of_4
2015-02-13 23:50:29 +01:00
assert(step3);
unit: update test-eapol with _verify_ptk_3_of_4 change
2019-04-25 21:52:47 +02:00
assert(eapol_verify_ptk_3_of_4(step3, false, 16));
unit: Utilize eapol_verify_ptk_3_of_4
2015-02-13 23:50:29 +01:00
assert(!memcmp(anonce, step3->key_nonce, sizeof(step3->key_nonce)));
unit: Fix memory leaks
2014-12-28 06:49:03 +01:00
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
assert(eapol_verify_mic(IE_RSN_AKM_SUITE_PSK, ptk, step3, 16));
unit: updated eapol test to reflect API changes verify/calculate_mic and key decryption API's now take the AKM suite
2018-08-09 20:13:56 +02:00
decrypted_key_data = eapol_decrypt_key_data(IE_RSN_AKM_SUITE_PSK,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
ptk + 16, step3,
&decrypted_key_data_len, 16);
unit: Decrypt key data and verify RSN is present
2015-02-18 00:41:08 +01:00
assert(decrypted_key_data[0] == 48); // RSNE
l_free(decrypted_key_data);
unit: Update to the new API
2015-02-23 22:43:35 +01:00
step4 = eapol_key_validate(eapol_key_data_6,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_6), 16);
unit: Excercise eapol_verify_ptk_4_of_4
2015-02-14 01:38:29 +01:00
assert(step4);
unit: Update to new eapol API
2015-05-06 01:48:39 +02:00
assert(eapol_verify_ptk_4_of_4(step4, false));
unit: Excercise eapol_verify_ptk_4_of_4
2015-02-14 01:38:29 +01:00
unit: Fix memory leaks
2014-12-28 06:49:03 +01:00
l_free(ptk);
unit: Add 2 steps of 4-way handshake test
2014-12-28 06:04:30 +01:00
}
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
static void eapol_wpa2_handshake_test(const void *data)
{
uint8_t anonce[32];
uint8_t snonce[32];
uint8_t mic[16];
struct eapol_key *frame;
uint8_t aa[] = { 0x02, 0x00, 0x00, 0x00, 0x00, 0x00 };
uint8_t spa[] = { 0x02, 0x00, 0x00, 0x00, 0x01, 0x00 };
const char *passphrase = "EasilyGuessedPassword";
const char *ssid = "TestWPA";
const unsigned char expected_psk[] = {
0xbf, 0x9a, 0xa3, 0x15, 0x53, 0x00, 0x12, 0x5e,
0x7a, 0x5e, 0xbb, 0x2a, 0x54, 0x9f, 0x8c, 0xd4,
0xed, 0xab, 0x8e, 0xe1, 0x2e, 0x94, 0xbf, 0xc2,
0x4b, 0x33, 0x57, 0xad, 0x04, 0x96, 0x65, 0xd9 };
unsigned char psk[32];
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
uint8_t *ptk;
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
size_t ptk_len;
bool ret;
const struct eapol_key *ptk_step1;
const struct eapol_key *ptk_step2;
const struct eapol_key *ptk_step3;
const struct eapol_key *ptk_step4;
const struct eapol_key *gtk_step1;
const struct eapol_key *gtk_step2;
uint8_t *decrypted_key_data;
size_t decrypted_key_data_len;
ptk_step1 = eapol_key_validate(eapol_key_data_7,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_7), 16);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(ptk_step1);
unit: update test-eapol to use the new ptk verify APIs
2022-06-25 01:07:41 +02:00
assert(eapol_verify_ptk_1_of_4(ptk_step1, 16, false));
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
memcpy(anonce, ptk_step1->key_nonce, sizeof(ptk_step1->key_nonce));
ptk_step2 = eapol_key_validate(eapol_key_data_8,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_8), 16);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(ptk_step2);
unit: update test-eapol to use the new ptk verify APIs
2022-06-25 01:07:41 +02:00
assert(eapol_verify_ptk_2_of_4(ptk_step2, false));
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
memcpy(snonce, ptk_step2->key_nonce, sizeof(ptk_step2->key_nonce));
assert(!crypto_psk_from_passphrase(passphrase, (uint8_t *) ssid,
strlen(ssid), psk));
assert(!memcmp(expected_psk, psk, sizeof(psk)));
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
ptk_len = 32 + crypto_cipher_key_len(CRYPTO_CIPHER_CCMP);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
ptk = l_malloc(ptk_len);
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
ret = crypto_derive_pairwise_ptk(psk, sizeof(psk), aa, spa, anonce,
snonce, ptk, ptk_len,
unit: update test-{crypto,eapol} with PTK changes Updated to use l_checksum_type instead of boolean
2019-04-25 21:52:50 +02:00
L_CHECKSUM_SHA1);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(ret);
frame = eapol_create_ptk_2_of_4(EAPOL_PROTOCOL_VERSION_2004,
EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_SHA1_AES,
eapol_key_test_8.key_replay_counter,
snonce, eapol_key_test_8.key_data_len,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
eapol_key_data_8 + EAPOL_FRAME_LEN(16),
unit: update test-eapol with API change
2023-01-11 21:15:36 +01:00
false, 16, false);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(frame);
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
assert(eapol_calculate_mic(IE_RSN_AKM_SUITE_PSK, ptk, frame,
mic, 16));
memcpy(EAPOL_KEY_MIC(frame), mic, sizeof(mic));
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(!memcmp(frame, eapol_key_data_8, sizeof(eapol_key_data_8)));
l_free(frame);
ptk_step3 = eapol_key_validate(eapol_key_data_9,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_9), 16);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(ptk_step3);
unit: update test-eapol with _verify_ptk_3_of_4 change
2019-04-25 21:52:47 +02:00
assert(eapol_verify_ptk_3_of_4(ptk_step3, false, 16));
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(!memcmp(anonce, ptk_step3->key_nonce,
sizeof(ptk_step3->key_nonce)));
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
assert(eapol_verify_mic(IE_RSN_AKM_SUITE_PSK, ptk, ptk_step3, 16));
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
unit: updated eapol test to reflect API changes verify/calculate_mic and key decryption API's now take the AKM suite
2018-08-09 20:13:56 +02:00
decrypted_key_data = eapol_decrypt_key_data(IE_RSN_AKM_SUITE_PSK,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
ptk + 16, ptk_step3,
&decrypted_key_data_len, 16);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(decrypted_key_data[0] == 48); // RSNE
l_free(decrypted_key_data);
ptk_step4 = eapol_key_validate(eapol_key_data_10,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_10), 16);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(ptk_step4);
assert(eapol_verify_ptk_4_of_4(ptk_step4, false));
frame = eapol_create_ptk_4_of_4(EAPOL_PROTOCOL_VERSION_2004,
EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_SHA1_AES,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
eapol_key_test_10.key_replay_counter,
false, 16);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(frame);
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
assert(eapol_calculate_mic(IE_RSN_AKM_SUITE_PSK, ptk, frame,
mic, 16));
memcpy(EAPOL_KEY_MIC(frame), mic, sizeof(mic));
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(!memcmp(frame, eapol_key_data_10, sizeof(eapol_key_data_10)));
l_free(frame);
gtk_step1 = eapol_key_validate(eapol_key_data_11,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_11), 16);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(gtk_step1);
eapol: pass mic_len in gtk 1/2 verify FILS authentication does away with the MIC, so checking for key_mic in the eapol key frame does not allow FILS to work. Now we pass in the mic_len to eapol_verify_gtk_1_of_2, and if it is non-zero we can check that the MIC is present in the frame.
2019-04-18 00:16:39 +02:00
assert(eapol_verify_gtk_1_of_2(gtk_step1, false, 16));
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
unit: updated eapol test to reflect API changes verify/calculate_mic and key decryption API's now take the AKM suite
2018-08-09 20:13:56 +02:00
decrypted_key_data = eapol_decrypt_key_data(IE_RSN_AKM_SUITE_PSK,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
ptk + 16, gtk_step1,
&decrypted_key_data_len, 16);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(decrypted_key_data[0] == 221); /* GTK KDE */
assert(decrypted_key_data[2] == 0x00);
assert(decrypted_key_data[3] == 0x0f);
assert(decrypted_key_data[4] == 0xac);
assert(decrypted_key_data[5] == 0x01);
l_free(decrypted_key_data);
gtk_step2 = eapol_key_validate(eapol_key_data_12,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_12), 16);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(gtk_step2);
unit: Add call to eapol_verify_gtk_2_of_2
2015-05-06 05:08:06 +02:00
assert(eapol_verify_gtk_2_of_2(gtk_step2, false));
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
frame = eapol_create_gtk_2_of_2(EAPOL_PROTOCOL_VERSION_2004,
EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_SHA1_AES,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
eapol_key_test_12.key_replay_counter,
unit: update test-eapol with GTK API change
2021-09-29 00:25:51 +02:00
0, NULL,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
false, 0, 16);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(frame);
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
assert(eapol_calculate_mic(IE_RSN_AKM_SUITE_PSK, ptk, frame,
mic, 16));
memcpy(EAPOL_KEY_MIC(frame), mic, sizeof(mic));
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(!memcmp(frame, eapol_key_data_12, sizeof(eapol_key_data_12)));
l_free(frame);
l_free(ptk);
}
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
static void eapol_wpa_handshake_test(const void *data)
{
uint8_t anonce[32];
uint8_t snonce[32];
uint8_t mic[16];
struct eapol_key *frame;
uint8_t aa[] = { 0x02, 0x00, 0x00, 0x00, 0x00, 0x00 };
uint8_t spa[] = { 0x02, 0x00, 0x00, 0x00, 0x01, 0x00 };
const char *passphrase = "EasilyGuessedPassword";
const char *ssid = "TestWPA";
const unsigned char expected_psk[] = {
0xbf, 0x9a, 0xa3, 0x15, 0x53, 0x00, 0x12, 0x5e,
0x7a, 0x5e, 0xbb, 0x2a, 0x54, 0x9f, 0x8c, 0xd4,
0xed, 0xab, 0x8e, 0xe1, 0x2e, 0x94, 0xbf, 0xc2,
0x4b, 0x33, 0x57, 0xad, 0x04, 0x96, 0x65, 0xd9 };
unsigned char psk[32];
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
uint8_t *ptk;
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
size_t ptk_len;
bool ret;
const struct eapol_key *ptk_step1;
const struct eapol_key *ptk_step2;
const struct eapol_key *ptk_step3;
const struct eapol_key *ptk_step4;
const struct eapol_key *gtk_step1;
const struct eapol_key *gtk_step2;
uint8_t *decrypted_key_data;
size_t decrypted_key_data_len;
ptk_step1 = eapol_key_validate(eapol_key_data_13,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_13), 16);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
assert(ptk_step1);
unit: update test-eapol to use the new ptk verify APIs
2022-06-25 01:07:41 +02:00
assert(eapol_verify_ptk_1_of_4(ptk_step1, 16, false));
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
memcpy(anonce, ptk_step1->key_nonce, sizeof(ptk_step1->key_nonce));
ptk_step2 = eapol_key_validate(eapol_key_data_14,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_14), 16);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
assert(ptk_step2);
unit: update test-eapol to use the new ptk verify APIs
2022-06-25 01:07:41 +02:00
assert(eapol_verify_ptk_2_of_4(ptk_step2, false));
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
memcpy(snonce, ptk_step2->key_nonce, sizeof(ptk_step2->key_nonce));
assert(!crypto_psk_from_passphrase(passphrase, (uint8_t *) ssid,
strlen(ssid), psk));
assert(!memcmp(expected_psk, psk, sizeof(psk)));
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
ptk_len = 32 + crypto_cipher_key_len(CRYPTO_CIPHER_TKIP);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
ptk = l_malloc(ptk_len);
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
ret = crypto_derive_pairwise_ptk(psk, sizeof(psk), aa, spa, anonce,
snonce, ptk, ptk_len,
unit: update test-{crypto,eapol} with PTK changes Updated to use l_checksum_type instead of boolean
2019-04-25 21:52:50 +02:00
L_CHECKSUM_SHA1);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
assert(ret);
frame = eapol_create_ptk_2_of_4(EAPOL_PROTOCOL_VERSION_2004,
EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
eapol_key_test_14.key_replay_counter,
snonce, eapol_key_test_14.key_data_len,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
eapol_key_data_14 + EAPOL_FRAME_LEN(16),
unit: update test-eapol with API change
2023-01-11 21:15:36 +01:00
true, 16, false);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
assert(frame);
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
assert(eapol_calculate_mic(IE_RSN_AKM_SUITE_PSK, ptk, frame,
mic, 16));
memcpy(EAPOL_KEY_MIC(frame), mic, sizeof(mic));
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
assert(!memcmp(frame, eapol_key_data_14, sizeof(eapol_key_data_14)));
l_free(frame);
ptk_step3 = eapol_key_validate(eapol_key_data_15,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_15), 16);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
assert(ptk_step3);
unit: update test-eapol with _verify_ptk_3_of_4 change
2019-04-25 21:52:47 +02:00
assert(eapol_verify_ptk_3_of_4(ptk_step3, true, 16));
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
assert(!memcmp(anonce, ptk_step3->key_nonce,
sizeof(ptk_step3->key_nonce)));
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
assert(eapol_verify_mic(IE_RSN_AKM_SUITE_PSK, ptk, ptk_step3, 16));
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
assert(EAPOL_KEY_DATA(ptk_step3, 16)[0] == IE_TYPE_VENDOR_SPECIFIC);
assert(is_ie_wpa_ie(EAPOL_KEY_DATA(ptk_step3, 16) + 2,
EAPOL_KEY_DATA_LEN(ptk_step3, 16) - 2));
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
ptk_step4 = eapol_key_validate(eapol_key_data_16,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_16), 16);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
assert(ptk_step4);
assert(eapol_verify_ptk_4_of_4(ptk_step4, true));
frame = eapol_create_ptk_4_of_4(EAPOL_PROTOCOL_VERSION_2004,
EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
eapol_key_test_16.key_replay_counter, true, 16);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
assert(frame);
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
assert(eapol_calculate_mic(IE_RSN_AKM_SUITE_PSK, ptk, frame,
mic, 16));
memcpy(EAPOL_KEY_MIC(frame), mic, sizeof(mic));
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
assert(!memcmp(frame, eapol_key_data_16, sizeof(eapol_key_data_16)));
l_free(frame);
gtk_step1 = eapol_key_validate(eapol_key_data_17,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_17), 16);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
assert(gtk_step1);
eapol: pass mic_len in gtk 1/2 verify FILS authentication does away with the MIC, so checking for key_mic in the eapol key frame does not allow FILS to work. Now we pass in the mic_len to eapol_verify_gtk_1_of_2, and if it is non-zero we can check that the MIC is present in the frame.
2019-04-18 00:16:39 +02:00
assert(eapol_verify_gtk_1_of_2(gtk_step1, true, 16));
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
unit: updated eapol test to reflect API changes verify/calculate_mic and key decryption API's now take the AKM suite
2018-08-09 20:13:56 +02:00
decrypted_key_data = eapol_decrypt_key_data(IE_RSN_AKM_SUITE_PSK,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
ptk + 16, gtk_step1,
&decrypted_key_data_len, 16);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
assert(decrypted_key_data_len == 32);
l_free(decrypted_key_data);
gtk_step2 = eapol_key_validate(eapol_key_data_18,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_18), 16);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
assert(gtk_step2);
assert(eapol_verify_gtk_2_of_2(gtk_step2, true));
frame = eapol_create_gtk_2_of_2(EAPOL_PROTOCOL_VERSION_2004,
EAPOL_KEY_DESCRIPTOR_VERSION_HMAC_MD5_ARC4,
unit: update test-eapol with GTK API change
2021-09-29 00:25:51 +02:00
eapol_key_test_18.key_replay_counter, 0, NULL,
true, gtk_step1->wpa_key_id, 16);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
assert(frame);
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
assert(eapol_calculate_mic(IE_RSN_AKM_SUITE_PSK, ptk, frame,
mic, 16));
memcpy(EAPOL_KEY_MIC(frame), mic, sizeof(mic));
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
assert(!memcmp(frame, eapol_key_data_18, sizeof(eapol_key_data_18)));
l_free(frame);
l_free(ptk);
}
unit: update to the new API
2018-05-01 23:18:28 +02:00
static int verify_step2(uint32_t ifindex,
const uint8_t *aa_addr, uint16_t proto,
const struct eapol_frame *ef, bool noencrypt,
void *user_data)
unit: Add EAPoL state machine test
2015-02-24 18:14:31 +01:00
{
eapol: Separate EAPOL header from struct eapol_key This is needed so we can better handle sending and receiving EAPoL packets other than EAPoL-Key.
2015-10-30 11:12:18 +01:00
const struct eapol_key *ek = (const struct eapol_key *) ef;
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
size_t ek_len = EAPOL_FRAME_LEN(16) + EAPOL_KEY_DATA_LEN(ek, 16);
unit: Add EAPoL state machine test
2015-02-24 18:14:31 +01:00
assert(ifindex == 1);
unit: update to the new API
2018-05-01 23:18:28 +02:00
assert(proto == ETH_P_PAE);
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
assert(!memcmp(aa_addr, aa, 6));
assert(ek_len == expected_step2_frame_size);
assert(!memcmp(ek, expected_step2_frame, expected_step2_frame_size));
unit: Add EAPoL state machine test
2015-02-24 18:14:31 +01:00
verify_step2_called = true;
return 0;
}
unit: update to the new API
2018-05-01 23:18:28 +02:00
static int verify_step4(uint32_t ifindex,
const uint8_t *aa_addr, uint16_t proto,
const struct eapol_frame *ef, bool noencrypt,
void *user_data)
unit: Add EAPoL state machine test
2015-02-24 18:14:31 +01:00
{
eapol: Separate EAPOL header from struct eapol_key This is needed so we can better handle sending and receiving EAPoL packets other than EAPoL-Key.
2015-10-30 11:12:18 +01:00
const struct eapol_key *ek = (const struct eapol_key *) ef;
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
size_t ek_len = EAPOL_FRAME_LEN(16) + EAPOL_KEY_DATA_LEN(ek, 16);
unit: Add EAPoL state machine test
2015-02-24 18:14:31 +01:00
assert(ifindex == 1);
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
assert(!memcmp(aa_addr, aa, 6));
unit: update to the new API
2018-05-01 23:18:28 +02:00
assert(proto == ETH_P_PAE);
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
assert(ek_len == expected_step4_frame_size);
assert(!memcmp(ek, expected_step4_frame, expected_step4_frame_size));
unit: Add EAPoL state machine test
2015-02-24 18:14:31 +01:00
verify_step4_called = true;
return 0;
}
unit: update to the new API
2018-05-01 23:18:28 +02:00
static int verify_step2_gtk(uint32_t ifindex,
const uint8_t *aa_addr, uint16_t proto,
const struct eapol_frame *ef, bool noencrypt,
void *user_data)
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
{
eapol: Separate EAPOL header from struct eapol_key This is needed so we can better handle sending and receiving EAPoL packets other than EAPoL-Key.
2015-10-30 11:12:18 +01:00
const struct eapol_key *ek = (const struct eapol_key *) ef;
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
size_t ek_len = EAPOL_FRAME_LEN(16) + EAPOL_KEY_DATA_LEN(ek, 16);
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
assert(ifindex == 1);
assert(!memcmp(aa_addr, aa, 6));
unit: update to the new API
2018-05-01 23:18:28 +02:00
assert(proto == ETH_P_PAE);
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
assert(ek_len == expected_gtk_step2_frame_size);
assert(!memcmp(ek, expected_gtk_step2_frame,
expected_gtk_step2_frame_size));
verify_gtk_step2_called = true;
return 0;
}
unit: Add EAPoL state machine test
2015-02-24 18:14:31 +01:00
static bool test_nonce(uint8_t nonce[])
{
unit: Unify snonce funcs The snonce function will just copy the nonce value from snonce global variable. This lets us avoid multiple functions that do essentially the same thing.
2015-05-15 04:54:01 +02:00
memcpy(nonce, snonce, 32);
unit: Add EAPoL state machine test
2015-02-24 18:14:31 +01:00
return true;
}
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
static void eapol_sm_test_ptk(const void *data)
unit: Add EAPoL state machine test
2015-02-24 18:14:31 +01:00
{
const unsigned char psk[] = {
0xbf, 0x9a, 0xa3, 0x15, 0x53, 0x00, 0x12, 0x5e,
0x7a, 0x5e, 0xbb, 0x2a, 0x54, 0x9f, 0x8c, 0xd4,
0xed, 0xab, 0x8e, 0xe1, 0x2e, 0x94, 0xbf, 0xc2,
0x4b, 0x33, 0x57, 0xad, 0x04, 0x96, 0x65, 0xd9 };
unit: Add setting of AP RSNE
2015-02-25 05:15:30 +01:00
const unsigned char ap_rsne[] = {
0x30, 0x14, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x04,
0x01, 0x00, 0x00, 0x0f, 0xac, 0x04, 0x01, 0x00,
0x00, 0x0f, 0xac, 0x02, 0x00, 0x00 };
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
static uint8_t ap_address[] = { 0x24, 0xa2, 0xe1, 0xec, 0x17, 0x04 };
static uint8_t sta_address[] = { 0xa0, 0xa8, 0xcd, 0x1c, 0x7e, 0xc9 };
unit: Add additional sanity checks
2015-05-19 07:07:23 +02:00
bool r;
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
struct handshake_state *hs;
unit: Add EAPoL state machine test
2015-02-24 18:14:31 +01:00
struct eapol_sm *sm;
eapol_init();
unit: Unify snonce funcs The snonce function will just copy the nonce value from snonce global variable. This lets us avoid multiple functions that do essentially the same thing.
2015-05-15 04:54:01 +02:00
snonce = eapol_key_test_4.key_nonce;
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
__handshake_set_get_nonce_func(test_nonce);
unit: Unify snonce funcs The snonce function will just copy the nonce value from snonce global variable. This lets us avoid multiple functions that do essentially the same thing.
2015-05-15 04:54:01 +02:00
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
aa = ap_address;
spa = sta_address;
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
verify_step2_called = false;
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
expected_step2_frame = eapol_key_data_4;
expected_step2_frame_size = sizeof(eapol_key_data_4);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
verify_step4_called = false;
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
expected_step4_frame = eapol_key_data_6;
expected_step4_frame_size = sizeof(eapol_key_data_6);
unit: Add EAPoL state machine test
2015-02-24 18:14:31 +01:00
unit: Update to the new API
2018-06-22 02:32:56 +02:00
hs = test_handshake_state_new(1);
unit: Update to the new handshake_state API
2019-07-16 04:45:32 +02:00
/* key_data_3 uses 2004 while key_data_3 uses 2001, so force 2001 */
handshake_state_set_protocol_version(hs, EAPOL_PROTOCOL_VERSION_2001);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
sm = eapol_sm_new(hs);
eapol_register(sm);
unit: Update to eapol's protocol version changes
2016-08-10 23:34:19 +02:00
unit: Update handshake_state_set_pmk parameters
2018-03-15 12:06:55 +01:00
handshake_state_set_pmk(hs, psk, sizeof(psk));
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
handshake_state_set_authenticator_address(hs, aa);
handshake_state_set_supplicant_address(hs, spa);
unit: Add additional sanity checks
2015-05-19 07:07:23 +02:00
unit: update test-eapol with new handshake APIs
2019-06-07 21:17:01 +02:00
r = handshake_state_set_supplicant_ie(hs,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
eapol_key_data_4 + EAPOL_FRAME_LEN(16));
unit: Add additional sanity checks
2015-05-19 07:07:23 +02:00
assert(r);
unit: update test-eapol with new handshake APIs
2019-06-07 21:17:01 +02:00
handshake_state_set_authenticator_ie(hs, ap_rsne);
unit: Update eapol and WSC tests for new eapol calls
2016-10-04 05:48:09 +02:00
eapol_start(sm);
unit: Add EAPoL state machine test
2015-02-24 18:14:31 +01:00
__eapol_set_tx_packet_func(verify_step2);
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, aa, ETH_P_PAE, eapol_key_data_3,
unit: update to the new API
2018-05-01 23:18:28 +02:00
sizeof(eapol_key_data_3), false);
unit: Add EAPoL state machine test
2015-02-24 18:14:31 +01:00
assert(verify_step2_called);
__eapol_set_tx_packet_func(verify_step4);
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, aa, ETH_P_PAE, eapol_key_data_5,
unit: update to the new API
2018-05-01 23:18:28 +02:00
sizeof(eapol_key_data_5), false);
unit: Add EAPoL state machine test
2015-02-24 18:14:31 +01:00
assert(verify_step4_called);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
eapol_sm_free(sm);
handshake_state_free(hs);
unit: Add EAPoL state machine test
2015-02-24 18:14:31 +01:00
eapol_exit();
}
unit/test-eapol: igtk test with mfp enabled This is the first version of the test
2016-12-02 16:18:52 +01:00
static void eapol_sm_test_igtk(const void *data)
{
const unsigned char psk[] = {
0xbf, 0x9a, 0xa3, 0x15, 0x53, 0x00, 0x12, 0x5e,
0x7a, 0x5e, 0xbb, 0x2a, 0x54, 0x9f, 0x8c, 0xd4,
0xed, 0xab, 0x8e, 0xe1, 0x2e, 0x94, 0xbf, 0xc2,
0x4b, 0x33, 0x57, 0xad, 0x04, 0x96, 0x65, 0xd9 };
const unsigned char ap_rsne[] = {
0x30, 0x1a, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x02, 0x01, 0x00,
0x00, 0x0f, 0xac, 0x02, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x02,
0x80, 0x00, 0x00, 0x00, 0x00, 0x0f, 0xac, 0x06 };
static uint8_t ap_address[] = { 0x02, 0x00, 0x00, 0x00, 0x00, 0x00 };
static uint8_t sta_address[] = { 0x02, 0x00, 0x00, 0x00, 0x01, 0x00 };
bool r;
struct handshake_state *hs;
struct eapol_sm *sm;
eapol_init();
snonce = eapol_key_test_30.key_nonce;
__handshake_set_get_nonce_func(test_nonce);
aa = ap_address;
spa = sta_address;
verify_step2_called = false;
expected_step2_frame = eapol_key_data_30;
expected_step2_frame_size = sizeof(eapol_key_data_30);
verify_step4_called = false;
expected_step4_frame = eapol_key_data_32;
expected_step4_frame_size = sizeof(eapol_key_data_32);
unit: Update to the new API
2018-06-22 02:32:56 +02:00
hs = test_handshake_state_new(1);
unit: Update to the new handshake_state API
2019-07-16 04:45:32 +02:00
/* key_data_29 uses 2004 while key_data_30 uses 2001, so force 2001 */
handshake_state_set_protocol_version(hs, EAPOL_PROTOCOL_VERSION_2001);
unit/test-eapol: igtk test with mfp enabled This is the first version of the test
2016-12-02 16:18:52 +01:00
sm = eapol_sm_new(hs);
eapol_register(sm);
unit: Update handshake_state_set_pmk parameters
2018-03-15 12:06:55 +01:00
handshake_state_set_pmk(hs, psk, sizeof(psk));
unit/test-eapol: igtk test with mfp enabled This is the first version of the test
2016-12-02 16:18:52 +01:00
handshake_state_set_authenticator_address(hs, aa);
handshake_state_set_supplicant_address(hs, spa);
unit: update test-eapol with new handshake APIs
2019-06-07 21:17:01 +02:00
r = handshake_state_set_supplicant_ie(hs,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
eapol_key_data_30 + EAPOL_FRAME_LEN(16));
unit/test-eapol: igtk test with mfp enabled This is the first version of the test
2016-12-02 16:18:52 +01:00
assert(r);
unit: update test-eapol with new handshake APIs
2019-06-07 21:17:01 +02:00
handshake_state_set_authenticator_ie(hs, ap_rsne);
unit/test-eapol: igtk test with mfp enabled This is the first version of the test
2016-12-02 16:18:52 +01:00
eapol_start(sm);
__eapol_set_tx_packet_func(verify_step2);
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, aa, ETH_P_PAE, eapol_key_data_29,
unit: update to the new API
2018-05-01 23:18:28 +02:00
sizeof(eapol_key_data_29), false);
unit/test-eapol: igtk test with mfp enabled This is the first version of the test
2016-12-02 16:18:52 +01:00
assert(verify_step2_called);
__eapol_set_tx_packet_func(verify_step4);
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, aa, ETH_P_PAE, eapol_key_data_31,
unit: update to the new API
2018-05-01 23:18:28 +02:00
sizeof(eapol_key_data_31), false);
unit/test-eapol: igtk test with mfp enabled This is the first version of the test
2016-12-02 16:18:52 +01:00
assert(verify_step4_called);
eapol_sm_free(sm);
handshake_state_free(hs);
eapol_exit();
}
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
static void eapol_sm_test_wpa2_ptk_gtk(const void *data)
{
const unsigned char psk[] = {
0xbf, 0x9a, 0xa3, 0x15, 0x53, 0x00, 0x12, 0x5e,
0x7a, 0x5e, 0xbb, 0x2a, 0x54, 0x9f, 0x8c, 0xd4,
0xed, 0xab, 0x8e, 0xe1, 0x2e, 0x94, 0xbf, 0xc2,
0x4b, 0x33, 0x57, 0xad, 0x04, 0x96, 0x65, 0xd9 };
const unsigned char ap_rsne[] = {
0x30, 0x12, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x04,
0x01, 0x00, 0x00, 0x0f, 0xac, 0x04, 0x01, 0x00,
0x00, 0x0f, 0xac, 0x02 };
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
static uint8_t ap_address[] = { 0x02, 0x00, 0x00, 0x00, 0x00, 0x00 };
static uint8_t sta_address[] = { 0x02, 0x00, 0x00, 0x00, 0x01, 0x00 };
unit: Add additional sanity checks
2015-05-19 07:07:23 +02:00
bool r;
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
struct handshake_state *hs;
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
struct eapol_sm *sm;
eapol_init();
unit: Unify snonce funcs The snonce function will just copy the nonce value from snonce global variable. This lets us avoid multiple functions that do essentially the same thing.
2015-05-15 04:54:01 +02:00
snonce = eapol_key_test_8.key_nonce;
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
__handshake_set_get_nonce_func(test_nonce);
unit: Unify snonce funcs The snonce function will just copy the nonce value from snonce global variable. This lets us avoid multiple functions that do essentially the same thing.
2015-05-15 04:54:01 +02:00
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
aa = ap_address;
spa = sta_address;
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
verify_step2_called = false;
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
expected_step2_frame = eapol_key_data_8;
expected_step2_frame_size = sizeof(eapol_key_data_8);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
verify_step4_called = false;
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
expected_step4_frame = eapol_key_data_10;
expected_step4_frame_size = sizeof(eapol_key_data_10);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
verify_gtk_step2_called = false;
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
expected_gtk_step2_frame = eapol_key_data_12;
expected_gtk_step2_frame_size = sizeof(eapol_key_data_12);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
unit: Update to the new API
2018-06-22 02:32:56 +02:00
hs = test_handshake_state_new(1);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
sm = eapol_sm_new(hs);
eapol_register(sm);
unit: Add additional sanity checks
2015-05-19 07:07:23 +02:00
unit: Update handshake_state_set_pmk parameters
2018-03-15 12:06:55 +01:00
handshake_state_set_pmk(hs, psk, sizeof(psk));
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
handshake_state_set_authenticator_address(hs, aa);
handshake_state_set_supplicant_address(hs, spa);
unit: update test-eapol with new handshake APIs
2019-06-07 21:17:01 +02:00
r = handshake_state_set_supplicant_ie(hs,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
eapol_key_data_8 + EAPOL_FRAME_LEN(16));
unit: Add additional sanity checks
2015-05-19 07:07:23 +02:00
assert(r);
unit: update test-eapol with new handshake APIs
2019-06-07 21:17:01 +02:00
handshake_state_set_authenticator_ie(hs, ap_rsne);
unit: Update eapol and WSC tests for new eapol calls
2016-10-04 05:48:09 +02:00
eapol_start(sm);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
__eapol_set_tx_packet_func(verify_step2);
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, aa, ETH_P_PAE, eapol_key_data_7,
unit: update to the new API
2018-05-01 23:18:28 +02:00
sizeof(eapol_key_data_7), false);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(verify_step2_called);
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
__eapol_set_tx_packet_func(verify_step4);
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, aa, ETH_P_PAE, eapol_key_data_9,
unit: update to the new API
2018-05-01 23:18:28 +02:00
sizeof(eapol_key_data_9), false);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(verify_step4_called);
__eapol_set_tx_packet_func(verify_step2_gtk);
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, aa, ETH_P_PAE, eapol_key_data_11,
unit: update to the new API
2018-05-01 23:18:28 +02:00
sizeof(eapol_key_data_11), false);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
assert(verify_gtk_step2_called);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
eapol_sm_free(sm);
handshake_state_free(hs);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
eapol_exit();
}
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
static void eapol_sm_test_wpa_ptk_gtk(const void *data)
{
const unsigned char psk[] = {
0xbf, 0x9a, 0xa3, 0x15, 0x53, 0x00, 0x12, 0x5e,
0x7a, 0x5e, 0xbb, 0x2a, 0x54, 0x9f, 0x8c, 0xd4,
0xed, 0xab, 0x8e, 0xe1, 0x2e, 0x94, 0xbf, 0xc2,
0x4b, 0x33, 0x57, 0xad, 0x04, 0x96, 0x65, 0xd9 };
const unsigned char ap_wpa_ie[] = {
0xdd, 0x16, 0x00, 0x50, 0xf2, 0x01, 0x01, 0x00,
0x00, 0x50, 0xf2, 0x02, 0x01, 0x00, 0x00, 0x50,
0xf2, 0x02, 0x01, 0x00, 0x00, 0x50, 0xf2, 0x02 };
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
static uint8_t ap_address[] = { 0x02, 0x00, 0x00, 0x00, 0x00, 0x00 };
static uint8_t sta_address[] = { 0x02, 0x00, 0x00, 0x00, 0x01, 0x00 };
unit: Add additional sanity checks
2015-05-19 07:07:23 +02:00
bool r;
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
struct handshake_state *hs;
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
struct eapol_sm *sm;
eapol_init();
unit: Unify snonce funcs The snonce function will just copy the nonce value from snonce global variable. This lets us avoid multiple functions that do essentially the same thing.
2015-05-15 04:54:01 +02:00
snonce = eapol_key_test_14.key_nonce;
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
__handshake_set_get_nonce_func(test_nonce);
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
aa = ap_address;
spa = sta_address;
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
verify_step2_called = false;
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
expected_step2_frame = eapol_key_data_14;
expected_step2_frame_size = sizeof(eapol_key_data_14);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
verify_step4_called = false;
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
expected_step4_frame = eapol_key_data_16;
expected_step4_frame_size = sizeof(eapol_key_data_16);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
verify_gtk_step2_called = false;
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
expected_gtk_step2_frame = eapol_key_data_18;
expected_gtk_step2_frame_size = sizeof(eapol_key_data_18);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
unit: Update to the new API
2018-06-22 02:32:56 +02:00
hs = test_handshake_state_new(1);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
sm = eapol_sm_new(hs);
eapol_register(sm);
unit: Update handshake_state_set_pmk parameters
2018-03-15 12:06:55 +01:00
handshake_state_set_pmk(hs, psk, sizeof(psk));
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
handshake_state_set_authenticator_address(hs, ap_address);
handshake_state_set_supplicant_address(hs, sta_address);
unit: update test-eapol with new handshake APIs
2019-06-07 21:17:01 +02:00
r = handshake_state_set_supplicant_ie(hs,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
eapol_key_data_14 + EAPOL_FRAME_LEN(16));
unit: Add additional sanity checks
2015-05-19 07:07:23 +02:00
assert(r);
unit: update test-eapol with new handshake APIs
2019-06-07 21:17:01 +02:00
handshake_state_set_authenticator_ie(hs, ap_wpa_ie);
unit: Update eapol and WSC tests for new eapol calls
2016-10-04 05:48:09 +02:00
eapol_start(sm);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
__eapol_set_tx_packet_func(verify_step2);
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, ap_address, ETH_P_PAE, eapol_key_data_13,
unit: update to the new API
2018-05-01 23:18:28 +02:00
sizeof(eapol_key_data_13), false);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
assert(verify_step2_called);
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
__eapol_set_tx_packet_func(verify_step4);
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, ap_address, ETH_P_PAE, eapol_key_data_15,
unit: update to the new API
2018-05-01 23:18:28 +02:00
sizeof(eapol_key_data_15), false);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
assert(verify_step4_called);
unit: Unify verify_* functions
2015-05-15 05:15:21 +02:00
__eapol_set_tx_packet_func(verify_step2_gtk);
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, ap_address, ETH_P_PAE, eapol_key_data_17,
unit: update to the new API
2018-05-01 23:18:28 +02:00
sizeof(eapol_key_data_17), false);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
assert(verify_gtk_step2_called);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
eapol_sm_free(sm);
handshake_state_free(hs);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
eapol_exit();
}
unit: Add another WPA1 TK/GTK handshake test
2015-05-18 21:56:55 +02:00
static void eapol_sm_test_wpa_ptk_gtk_2(const void *data)
{
const unsigned char psk[] = {
0xbf, 0x9a, 0xa3, 0x15, 0x53, 0x00, 0x12, 0x5e,
0x7a, 0x5e, 0xbb, 0x2a, 0x54, 0x9f, 0x8c, 0xd4,
0xed, 0xab, 0x8e, 0xe1, 0x2e, 0x94, 0xbf, 0xc2,
0x4b, 0x33, 0x57, 0xad, 0x04, 0x96, 0x65, 0xd9 };
const unsigned char ap_wpa_ie[] = {
0xdd, 0x16, 0x00, 0x50, 0xf2, 0x01, 0x01, 0x00,
0x00, 0x50, 0xf2, 0x02, 0x01, 0x00, 0x00, 0x50,
0xf2, 0x02, 0x01, 0x00, 0x00, 0x50, 0xf2, 0x02 };
static uint8_t ap_address[] = { 0x24, 0xa2, 0xe1, 0xec, 0x17, 0x04 };
static uint8_t sta_address[] = { 0xa0, 0xa8, 0xcd, 0x1c, 0x7e, 0xc9 };
unit: Add additional sanity checks
2015-05-19 07:07:23 +02:00
bool r;
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
struct handshake_state *hs;
unit: Add another WPA1 TK/GTK handshake test
2015-05-18 21:56:55 +02:00
struct eapol_sm *sm;
eapol_init();
snonce = eapol_key_test_20.key_nonce;
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
__handshake_set_get_nonce_func(test_nonce);
unit: Add another WPA1 TK/GTK handshake test
2015-05-18 21:56:55 +02:00
aa = ap_address;
spa = sta_address;
verify_step2_called = false;
expected_step2_frame = eapol_key_data_20;
expected_step2_frame_size = sizeof(eapol_key_data_20);
verify_step4_called = false;
expected_step4_frame = eapol_key_data_22;
expected_step4_frame_size = sizeof(eapol_key_data_22);
verify_gtk_step2_called = false;
expected_gtk_step2_frame = eapol_key_data_24;
expected_gtk_step2_frame_size = sizeof(eapol_key_data_24);
unit: Update to the new API
2018-06-22 02:32:56 +02:00
hs = test_handshake_state_new(1);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
sm = eapol_sm_new(hs);
eapol_register(sm);
unit: Add additional sanity checks
2015-05-19 07:07:23 +02:00
unit: Update handshake_state_set_pmk parameters
2018-03-15 12:06:55 +01:00
handshake_state_set_pmk(hs, psk, sizeof(psk));
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
handshake_state_set_authenticator_address(hs, ap_address);
handshake_state_set_supplicant_address(hs, sta_address);
unit: update test-eapol with new handshake APIs
2019-06-07 21:17:01 +02:00
r = handshake_state_set_supplicant_ie(hs,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
eapol_key_data_20 + EAPOL_FRAME_LEN(16));
unit: Add additional sanity checks
2015-05-19 07:07:23 +02:00
assert(r);
unit: update test-eapol with new handshake APIs
2019-06-07 21:17:01 +02:00
handshake_state_set_authenticator_ie(hs, ap_wpa_ie);
unit: Update eapol and WSC tests for new eapol calls
2016-10-04 05:48:09 +02:00
eapol_start(sm);
unit: Add another WPA1 TK/GTK handshake test
2015-05-18 21:56:55 +02:00
__eapol_set_tx_packet_func(verify_step2);
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, ap_address, ETH_P_PAE, eapol_key_data_19,
unit: update to the new API
2018-05-01 23:18:28 +02:00
sizeof(eapol_key_data_19), false);
unit: Add another WPA1 TK/GTK handshake test
2015-05-18 21:56:55 +02:00
assert(verify_step2_called);
__eapol_set_tx_packet_func(verify_step4);
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, ap_address, ETH_P_PAE, eapol_key_data_21,
unit: update to the new API
2018-05-01 23:18:28 +02:00
sizeof(eapol_key_data_21), false);
unit: Add another WPA1 TK/GTK handshake test
2015-05-18 21:56:55 +02:00
assert(verify_step4_called);
__eapol_set_tx_packet_func(verify_step2_gtk);
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, ap_address, ETH_P_PAE, eapol_key_data_23,
unit: update to the new API
2018-05-01 23:18:28 +02:00
sizeof(eapol_key_data_23), false);
unit: Add another WPA1 TK/GTK handshake test
2015-05-18 21:56:55 +02:00
assert(verify_gtk_step2_called);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
eapol_sm_free(sm);
handshake_state_free(hs);
unit: Add another WPA1 TK/GTK handshake test
2015-05-18 21:56:55 +02:00
eapol_exit();
}
unit: update tests with new TK install arguments
2021-10-08 20:07:26 +02:00
static void verify_install_tk(struct handshake_state *hs, uint8_t key_index,
unit: Update to the new API
2018-06-22 02:32:56 +02:00
const uint8_t *tk, uint32_t cipher)
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
{
unit: Update to the new API
2018-06-22 02:32:56 +02:00
struct test_handshake_state *ths =
unit: Use l_container_of
2019-04-03 18:47:51 +02:00
l_container_of(hs, struct test_handshake_state, super);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
unit: Update to the new API
2018-06-22 02:32:56 +02:00
assert(hs->ifindex == 1);
assert(!memcmp(hs->aa, aa, 6));
if (ths->tk) {
assert(!memcmp(tk, ths->tk, 32));
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
assert(cipher == CRYPTO_CIPHER_TKIP);
}
verify_install_tk_called = true;
}
unit: Update to the new handshake API
2020-04-02 07:41:18 +02:00
static void verify_install_gtk(struct handshake_state *hs, uint16_t key_index,
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
const uint8_t *gtk, uint8_t gtk_len,
const uint8_t *rsc, uint8_t rsc_len,
unit: Update to the new API
2018-06-22 02:32:56 +02:00
uint32_t cipher)
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
{
unit: Update to the new API
2018-06-22 02:32:56 +02:00
assert(hs->ifindex == 1);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
verify_install_gtk_called = true;
}
static inline size_t EKL(const struct eapol_key *frame)
{
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
return EAPOL_FRAME_LEN(16) + EAPOL_KEY_DATA_LEN(frame, 16);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
}
static struct eapol_key *UPDATED_REPLAY_COUNTER(const struct eapol_key *frame,
uint64_t replay_counter,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
uint8_t *ptk)
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
{
struct eapol_key *ret = l_memdup(frame, EKL(frame));
uint8_t mic[16];
ret->key_replay_counter = L_CPU_TO_BE64(replay_counter);
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
memset(EAPOL_KEY_MIC(ret), 0, 16);
eapol_calculate_mic(IE_RSN_AKM_SUITE_PSK, ptk, ret, mic, 16);
memcpy(EAPOL_KEY_MIC(ret), mic, sizeof(mic));
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
return ret;
}
static void eapol_sm_wpa2_retransmit_test(const void *data)
{
static uint8_t ap_address[] = { 0x02, 0x00, 0x00, 0x00, 0x00, 0x00 };
static uint8_t sta_address[] = { 0x02, 0x00, 0x00, 0x00, 0x01, 0x00 };
const char *passphrase = "EasilyGuessedPassword";
const char *ssid = "TestWPA";
unsigned char psk[32];
const unsigned char ap_rsne[] = {
0x30, 0x12, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x04,
0x01, 0x00, 0x00, 0x0f, 0xac, 0x04, 0x01, 0x00,
0x00, 0x0f, 0xac, 0x02 };
uint8_t new_snonce[32];
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
uint8_t *ptk;
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
size_t ptk_len;
struct eapol_key *expect;
struct eapol_key *retransmit;
bool r;
const struct eapol_key *ptk_step1;
const struct eapol_key *ptk_step2;
const struct eapol_key *ptk_step3;
const struct eapol_key *ptk_step4;
const struct eapol_key *gtk_step1;
const struct eapol_key *gtk_step2;
struct handshake_state *hs;
struct eapol_sm *sm;
uint64_t replay_counter;
aa = ap_address;
spa = sta_address;
crypto_psk_from_passphrase(passphrase, (uint8_t *) ssid,
strlen(ssid), psk);
eapol_init();
unit: Update to the new API
2018-06-22 02:32:56 +02:00
hs = test_handshake_state_new(1);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
sm = eapol_sm_new(hs);
eapol_register(sm);
unit: Update handshake_state_set_pmk parameters
2018-03-15 12:06:55 +01:00
handshake_state_set_pmk(hs, psk, 32);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
handshake_state_set_authenticator_address(hs, ap_address);
handshake_state_set_supplicant_address(hs, sta_address);
unit: update test-eapol with new handshake APIs
2019-06-07 21:17:01 +02:00
r = handshake_state_set_supplicant_ie(hs,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
eapol_key_data_8 + EAPOL_FRAME_LEN(16));
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
assert(r);
unit: update test-eapol with new handshake APIs
2019-06-07 21:17:01 +02:00
handshake_state_set_authenticator_ie(hs, ap_rsne);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
eapol_start(sm);
ptk_step1 = eapol_key_validate(eapol_key_data_7,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_7), 16);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
assert(ptk_step1);
ptk_step2 = eapol_key_validate(eapol_key_data_8,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_8), 16);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
assert(ptk_step2);
replay_counter = L_BE64_TO_CPU(ptk_step1->key_replay_counter);
snonce = ptk_step2->key_nonce;
__handshake_set_get_nonce_func(test_nonce);
__handshake_set_install_tk_func(verify_install_tk);
__handshake_set_install_gtk_func(verify_install_gtk);
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
ptk_len = 32 + crypto_cipher_key_len(CRYPTO_CIPHER_CCMP);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
ptk = l_malloc(ptk_len);
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
assert(crypto_derive_pairwise_ptk(psk, sizeof(psk), aa, spa,
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
ptk_step1->key_nonce,
ptk_step2->key_nonce,
unit: update test-{crypto,eapol} with PTK changes Updated to use l_checksum_type instead of boolean
2019-04-25 21:52:50 +02:00
ptk, ptk_len, L_CHECKSUM_SHA1));
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
verify_step2_called = false;
expected_step2_frame = (const uint8_t *) ptk_step2;
expected_step2_frame_size = EKL(ptk_step2);
__eapol_set_tx_packet_func(verify_step2);
__eapol_rx_packet(1, ap_address, ETH_P_PAE,
unit: update to the new API
2018-05-01 23:18:28 +02:00
(const uint8_t *) ptk_step1, EKL(ptk_step1),
false);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
assert(verify_step2_called);
/* Detect whether we generate a new snonce when we shouldn't */
memset(new_snonce, 0xff, sizeof(new_snonce));
snonce = new_snonce;
/*
* Now retransmit frame 1 again without updating the counter. This
* seems to be legal since the STA should not update the replay counter
* unless the packet has a MIC.
*/
verify_step2_called = false;
__eapol_rx_packet(1, ap_address, ETH_P_PAE,
unit: update to the new API
2018-05-01 23:18:28 +02:00
(const uint8_t *) ptk_step1, EKL(ptk_step1),
false);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
assert(verify_step2_called);
/* Now retransmit frame 1 with an updated counter */
replay_counter += 1;
retransmit = l_memdup(ptk_step1, EKL(ptk_step1));
retransmit->key_replay_counter = L_CPU_TO_BE64(replay_counter);
expect = UPDATED_REPLAY_COUNTER(ptk_step2, replay_counter, ptk);
verify_step2_called = false;
expected_step2_frame = (const uint8_t *) expect;
expected_step2_frame_size = EKL(expect);
__eapol_rx_packet(1, ap_address, ETH_P_PAE,
unit: update to the new API
2018-05-01 23:18:28 +02:00
(const uint8_t *) retransmit, EKL(retransmit),
false);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
assert(verify_step2_called);
l_free(expect);
l_free(retransmit);
ptk_step3 = eapol_key_validate(eapol_key_data_9,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_9), 16);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
assert(ptk_step3);
ptk_step4 = eapol_key_validate(eapol_key_data_10,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_10), 16);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
assert(ptk_step4);
verify_install_tk_called = false;
verify_step4_called = false;
expected_step4_frame = (const uint8_t *) ptk_step4;
expected_step4_frame_size = EKL(ptk_step4);
__eapol_set_tx_packet_func(verify_step4);
__eapol_rx_packet(1, ap_address, ETH_P_PAE,
unit: update to the new API
2018-05-01 23:18:28 +02:00
(const uint8_t *) ptk_step3, EKL(ptk_step3),
false);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
assert(verify_step4_called);
assert(verify_install_tk_called);
/*
* Now retransmit message 3. Make sure install_tk_called is false
* this time. This prevents KRACK style attacks.
*/
replay_counter += 1;
retransmit = UPDATED_REPLAY_COUNTER(ptk_step3, replay_counter, ptk);
expect = UPDATED_REPLAY_COUNTER(ptk_step4, replay_counter, ptk);
verify_install_tk_called = false;
verify_step4_called = false;
expected_step4_frame = (const uint8_t *) expect;
expected_step4_frame_size = EKL(expect);
__eapol_rx_packet(1, ap_address, ETH_P_PAE,
unit: update to the new API
2018-05-01 23:18:28 +02:00
(const uint8_t *) retransmit, EKL(retransmit),
false);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
assert(verify_step4_called);
assert(!verify_install_tk_called);
l_free(expect);
l_free(retransmit);
gtk_step1 = eapol_key_validate(eapol_key_data_11,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_11), 16);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
assert(gtk_step1);
gtk_step2 = eapol_key_validate(eapol_key_data_12,
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
sizeof(eapol_key_data_12), 16);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
assert(gtk_step2);
/*
* Now run the GTK handshake. Since we retransmitted Step 3 above,
* update the replay counter and perform the initial transmission
*/
replay_counter += 1;
retransmit = UPDATED_REPLAY_COUNTER(gtk_step1, replay_counter, ptk);
expect = UPDATED_REPLAY_COUNTER(gtk_step2, replay_counter, ptk);
verify_install_gtk_called = false;
verify_gtk_step2_called = false;
expected_gtk_step2_frame = (const uint8_t *) expect;
expected_gtk_step2_frame_size = EKL(expect);
__eapol_set_tx_packet_func(verify_step2_gtk);
__eapol_rx_packet(1, ap_address, ETH_P_PAE,
unit: update to the new API
2018-05-01 23:18:28 +02:00
(const uint8_t *) retransmit, EKL(retransmit),
false);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
assert(verify_gtk_step2_called);
assert(verify_install_gtk_called);
l_free(retransmit);
l_free(expect);
/* Now send a retransmit, make sure GTK isn't installed again */
replay_counter += 1;
retransmit = UPDATED_REPLAY_COUNTER(gtk_step1, replay_counter, ptk);
expect = UPDATED_REPLAY_COUNTER(gtk_step2, replay_counter, ptk);
verify_install_gtk_called = false;
verify_gtk_step2_called = false;
expected_gtk_step2_frame = (const uint8_t *) expect;
expected_gtk_step2_frame_size = EKL(expect);
__eapol_set_tx_packet_func(verify_step2_gtk);
__eapol_rx_packet(1, ap_address, ETH_P_PAE,
unit: update to the new API
2018-05-01 23:18:28 +02:00
(const uint8_t *) retransmit, EKL(retransmit),
false);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
assert(verify_gtk_step2_called);
assert(!verify_install_gtk_called);
l_free(retransmit);
l_free(expect);
l_free(ptk);
eapol_sm_free(sm);
handshake_state_free(hs);
eapol_exit();
}
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
static const uint8_t eap_identity_req[] = {
0x02, 0x00, 0x00, 0x05, 0x01, 0x01, 0x00, 0x05, 0x01
};
static const uint8_t eap_identity_resp[] = {
0x02, 0x00, 0x00, 0x14, 0x02, 0x01, 0x00, 0x14, 0x01, 0x61, 0x62, 0x63,
0x40, 0x65, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x2e, 0x63, 0x6f, 0x6d
};
struct eapol_8021x_tls_test_state {
l_tls_write_cb_t app_data_cb;
l_tls_ready_cb_t ready_cb;
l_tls_disconnect_cb_t disconnect_cb;
uint8_t method;
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
bool expect_handshake_fail;
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
struct l_tls *tls;
uint8_t last_id;
bool success;
bool pending_req;
bool tx_ack;
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
bool disconnected;
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
uint8_t tx_buf[16384];
unsigned int tx_buf_len, tx_buf_offset;
uint8_t pmk[32];
};
unit: update to the new API
2018-05-01 23:18:28 +02:00
static int verify_8021x_identity_resp(uint32_t ifindex,
const uint8_t *aa_addr, uint16_t proto,
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
const struct eapol_frame *ef,
unit: update to the new API
2018-05-01 23:18:28 +02:00
bool noencrypt,
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
void *user_data)
{
struct eapol_8021x_tls_test_state *s = user_data;
size_t len = sizeof(struct eapol_header) +
L_BE16_TO_CPU(ef->header.packet_len);
assert(ifindex == 1);
assert(!memcmp(aa_addr, aa, 6));
unit: update to the new API
2018-05-01 23:18:28 +02:00
assert(proto == ETH_P_PAE);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
assert(len == sizeof(eap_identity_resp));
assert(!memcmp(ef, eap_identity_resp, sizeof(eap_identity_resp)));
assert(s->pending_req);
s->pending_req = 0;
return 0;
}
unit: update to the new API
2018-05-01 23:18:28 +02:00
static int verify_8021x_tls_resp(uint32_t ifindex,
const uint8_t *aa_addr, uint16_t proto,
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
const struct eapol_frame *ef,
unit: update to the new API
2018-05-01 23:18:28 +02:00
bool noencrypt,
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
void *user_data)
{
struct eapol_8021x_tls_test_state *s = user_data;
size_t len = sizeof(struct eapol_header) +
L_BE16_TO_CPU(ef->header.packet_len);
size_t fragment_len, header_len;
assert(ifindex == 1);
assert(!memcmp(aa_addr, aa, 6));
unit: update to the new API
2018-05-01 23:18:28 +02:00
assert(proto == ETH_P_PAE);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
assert(len >= 10);
assert(ef->header.protocol_version == EAPOL_PROTOCOL_VERSION_2004);
assert(ef->header.packet_type == 0x00); /* EAPoL-EAP */
assert(ef->data[0] == EAP_CODE_RESPONSE);
assert(ef->data[1] == s->last_id);
assert(ef->data[4] == s->method);
assert((ef->data[5] & 0x3f) == 0); /* Flags */
/* Expecting an ACK? */
if (s->tx_buf_len || s->success) {
assert(ef->data[5] == 0);
assert(len == 10);
}
header_len = 6;
unit: Fix uninitialized variable
2016-08-10 00:32:57 +02:00
fragment_len = l_get_be16(ef->data + 2) - header_len;
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
if (ef->data[5] & 0x80) { /* L flag */
assert(len >= 14);
header_len += 4;
unit: Fix uninitialized variable
2016-08-10 00:32:57 +02:00
fragment_len -= 4;
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
assert(ef->data[5] & 0x40); /* M flag */
assert(l_get_be32(ef->data + 6) > fragment_len);
}
s->tx_ack = !!(ef->data[5] & 0x40); /* M flag */
assert(len == 4 + header_len + fragment_len);
assert(s->pending_req);
s->pending_req = 0;
if (fragment_len)
l_tls_handle_rx(s->tls, ef->data + header_len, fragment_len);
return 0;
}
static void eapol_sm_test_tls_new_data(const uint8_t *data, size_t len,
void *user_data)
{
assert(false);
}
static void eapol_sm_test_tls_test_write(const uint8_t *data, size_t len,
void *user_data)
{
struct eapol_8021x_tls_test_state *s = user_data;
assert(!s->tx_ack);
assert(!s->tx_buf_offset);
memcpy(s->tx_buf + s->tx_buf_len, data, len);
s->tx_buf_len += len;
}
static void eapol_sm_test_tls_test_ready(const char *peer_identity,
void *user_data)
{
struct eapol_8021x_tls_test_state *s = user_data;
assert(!s->tx_ack);
s->success = true;
unit: Update for l_tls API changes
2018-11-17 15:01:33 +01:00
assert(l_tls_prf_get_bytes(s->tls, true, "client EAP encryption",
s->pmk, 32));
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
}
static void eapol_sm_test_tls_test_disconnected(enum l_tls_alert_desc reason,
unit: Fix style
2016-08-10 23:31:35 +02:00
bool remote, void *user_data)
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
{
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
struct eapol_8021x_tls_test_state *s = user_data;
l_info("TLS alert: %s (%d)", l_tls_alert_to_str(reason), reason);
assert(s->expect_handshake_fail);
s->disconnected = true;
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
}
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
static void test_handshake_event(struct handshake_state *hs,
unit: Store handshake_failed in test_handshake_state Instead of using a global variable
2018-06-28 00:01:22 +02:00
enum handshake_event event,
unit: Update event handler in WSC, eapol tests
2019-10-28 15:05:01 +01:00
void *user_data, ...)
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
{
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
struct test_handshake_state *ths =
l_container_of(hs, struct test_handshake_state, super);
unit: updated unit test with eapol deauth removal
2018-06-27 23:45:00 +02:00
switch (event) {
case HANDSHAKE_EVENT_FAILED:
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
ths->handshake_failed = true;
unit: updated unit test with eapol deauth removal
2018-06-27 23:45:00 +02:00
break;
default:
break;
}
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
}
static void eapol_sm_test_tls(struct eapol_8021x_tls_test_state *s,
unit: add test for embedded certs to test-eapol Refactored eapol_sm_test_tls to take a l_settings object rather than a settings string. This lets the caller either load from data or from file (the new test loads the build time generated tls-settings file).
2019-10-07 20:11:58 +02:00
struct l_settings *config)
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
{
static const unsigned char ap_wpa_ie[] = {
0xdd, 0x16, 0x00, 0x50, 0xf2, 0x01, 0x01, 0x00,
0x00, 0x50, 0xf2, 0x02, 0x01, 0x00, 0x00, 0x50,
0xf2, 0x02, 0x01, 0x00, 0x00, 0x50, 0xf2, 0x02 };
static uint8_t ap_address[] = { 0x02, 0x00, 0x00, 0x00, 0x00, 0x00 };
static uint8_t sta_address[] = { 0x02, 0x00, 0x00, 0x00, 0x01, 0x00 };
bool r;
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
struct handshake_state *hs;
unit: Update to the new API
2018-06-22 02:32:56 +02:00
struct test_handshake_state *ths;
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
struct eapol_sm *sm;
uint8_t tx_buf[2000];
size_t header_len, data_len, tx_len;
bool start;
uint8_t step1_buf[256], step2_buf[256], step3_buf[256], step4_buf[256];
struct eapol_key *step1, *step2, *step3, *step4;
uint8_t ptk_buf[64];
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
uint8_t *ptk;
unit: update test-eapol to new ELL APIs
2019-10-01 23:38:09 +02:00
struct l_certchain *server_cert;
struct l_key *server_key;
struct l_queue *ca_cert;
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
aa = ap_address;
spa = sta_address;
unit: update wsc/eapol with new eap_init test-eapol was passing zero as the MTU, so this simply needed to be updated to remove that parameter. test-wsc was actually setting a MTU value so when building the settings we now add the proper value so the MTU can be set with __eap_set_config.
2019-10-11 21:29:32 +02:00
eap_init();
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
eapol_init();
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
__handshake_set_get_nonce_func(test_nonce);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
unit: Update to the new API
2018-06-22 02:32:56 +02:00
hs = test_handshake_state_new(1);
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
ths = l_container_of(hs, struct test_handshake_state, super);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
sm = eapol_sm_new(hs);
eapol_register(sm);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
handshake_state_set_authenticator_address(hs, ap_address);
handshake_state_set_supplicant_address(hs, sta_address);
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
handshake_state_set_event_func(hs, test_handshake_event, NULL);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
__eapol_set_tx_user_data(s);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
unit: update test-eapol with new handshake APIs
2019-06-07 21:17:01 +02:00
r = handshake_state_set_supplicant_ie(hs,
unit: Fix usage of sizeof(struct eapol_key) in test-eapol
2019-01-22 07:16:44 +01:00
eapol_key_data_14 + EAPOL_FRAME_LEN(16));
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
assert(r);
unit: update test-eapol with new handshake APIs
2019-06-07 21:17:01 +02:00
handshake_state_set_authenticator_ie(hs, ap_wpa_ie);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
unit: add test for embedded certs to test-eapol Refactored eapol_sm_test_tls to take a l_settings object rather than a settings string. This lets the caller either load from data or from file (the new test loads the build time generated tls-settings file).
2019-10-07 20:11:58 +02:00
handshake_state_set_8021x_config(hs, config);
unit: Update eapol and WSC tests for new eapol calls
2016-10-04 05:48:09 +02:00
eapol_start(sm);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
__eapol_set_tx_packet_func(verify_8021x_identity_resp);
s->pending_req = 1;
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, ap_address, ETH_P_PAE, eap_identity_req,
unit: update to the new API
2018-05-01 23:18:28 +02:00
sizeof(eap_identity_req), false);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
assert(!s->pending_req);
s->tls = l_tls_new(true, s->app_data_cb, eapol_sm_test_tls_test_write,
s->ready_cb, s->disconnect_cb, s);
assert(s->tls);
unit: Add IWD_TLS_DEBUG environment variable handling
2019-02-22 21:48:44 +01:00
if (getenv("IWD_TLS_DEBUG"))
l_tls_set_debug(s->tls, tls_debug, NULL, NULL);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
s->last_id = 1;
s->success = false;
s->tx_buf_len = 0;
s->tx_buf_offset = 0;
unit: update test-eapol to new ELL APIs
2019-10-01 23:38:09 +02:00
server_cert = l_pem_load_certificate_chain(CERTDIR "cert-server.pem");
assert(server_cert);
server_key = l_pem_load_private_key(CERTDIR "cert-server-key-pkcs8.pem",
NULL, NULL);
assert(server_key);
ca_cert = l_pem_load_certificate_list(CERTDIR "cert-ca.pem");
assert(ca_cert);
assert(l_tls_set_auth_data(s->tls, server_cert, server_key));
assert(l_tls_set_cacert(s->tls, ca_cert));
unit: Call the new l_tls_start in eap-tls test
2018-12-19 02:00:44 +01:00
assert(l_tls_start(s->tls));
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
ths->handshake_failed = false;
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
start = 1;
__eapol_set_tx_packet_func(verify_8021x_tls_resp);
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
while ((!s->success || s->tx_buf_len) &&
!ths->handshake_failed && !s->disconnected) {
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
tx_len = 0;
data_len = 1024 < s->tx_buf_len ? 1024 : s->tx_buf_len;
header_len = 6;
if (data_len < s->tx_buf_len && !s->tx_buf_offset)
header_len += 4;
tx_buf[tx_len++] = EAPOL_PROTOCOL_VERSION_2004;
tx_buf[tx_len++] = 0x00; /* EAPoL-EAP */
tx_buf[tx_len++] = (data_len + header_len) >> 8;
tx_buf[tx_len++] = (data_len + header_len) >> 0;
tx_buf[tx_len++] = EAP_CODE_REQUEST;
tx_buf[tx_len++] = ++s->last_id;
tx_buf[tx_len++] = (data_len + header_len) >> 8;
tx_buf[tx_len++] = (data_len + header_len) >> 0;
tx_buf[tx_len++] = s->method;
tx_buf[tx_len++] = 0x00; /* Flags */
if (start) {
tx_buf[tx_len - 1] |= 0x20; /* S flag */
start = 0;
}
if (data_len < s->tx_buf_len)
tx_buf[tx_len - 1] |= 0x40; /* M flag */
if (data_len < s->tx_buf_len && !s->tx_buf_offset) {
tx_buf[tx_len - 1] |= 0x80; /* L flag */
tx_buf[tx_len++] = s->tx_buf_len >> 24;
tx_buf[tx_len++] = s->tx_buf_len >> 16;
tx_buf[tx_len++] = s->tx_buf_len >> 8;
tx_buf[tx_len++] = s->tx_buf_len >> 0;
}
memcpy(tx_buf + tx_len, s->tx_buf + s->tx_buf_offset, data_len);
tx_len += data_len;
s->tx_buf_offset += data_len;
s->tx_buf_len -= data_len;
if (!s->tx_buf_len)
s->tx_buf_offset = 0;
s->pending_req = 1;
unit: update to the new API
2018-05-01 23:18:28 +02:00
__eapol_rx_packet(1, ap_address, ETH_P_PAE,
tx_buf, tx_len, false);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
if (ths->handshake_failed || s->disconnected)
break;
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
assert(!s->pending_req);
while (s->tx_ack) {
tx_len = 0;
tx_buf[tx_len++] = EAPOL_PROTOCOL_VERSION_2004;
tx_buf[tx_len++] = 0x00; /* EAPoL-EAP */
tx_buf[tx_len++] = 0x00;
tx_buf[tx_len++] = 0x06; /* Length */
tx_buf[tx_len++] = EAP_CODE_REQUEST;
tx_buf[tx_len++] = ++s->last_id;
tx_buf[tx_len++] = 0x00;
tx_buf[tx_len++] = 0x06; /* Length */
tx_buf[tx_len++] = s->method;
tx_buf[tx_len++] = 0x00; /* Flags */
s->pending_req = 1;
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, ap_address, ETH_P_PAE,
unit: update to the new API
2018-05-01 23:18:28 +02:00
tx_buf, tx_len, false);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
if (ths->handshake_failed || s->disconnected)
break;
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
assert(!s->pending_req);
}
}
l_tls_free(s->tls);
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
if (ths->handshake_failed || s->disconnected) {
assert(s->expect_handshake_fail);
if (ths->handshake_failed)
sm = NULL;
goto done;
}
assert(!s->expect_handshake_fail);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
tx_len = 0;
tx_buf[tx_len++] = EAPOL_PROTOCOL_VERSION_2004;
tx_buf[tx_len++] = 0x00; /* EAPoL-EAP */
tx_buf[tx_len++] = 0x00;
tx_buf[tx_len++] = 0x04; /* Length */
tx_buf[tx_len++] = EAP_CODE_SUCCESS;
tx_buf[tx_len++] = s->last_id;
tx_buf[tx_len++] = 0x00;
tx_buf[tx_len++] = 0x04; /* Length */
unit: update to the new API
2018-05-01 23:18:28 +02:00
__eapol_rx_packet(1, ap_address, ETH_P_PAE, tx_buf, tx_len, false);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
memcpy(step1_buf, eapol_key_data_13, sizeof(eapol_key_data_13));
step1 = (struct eapol_key *)
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
eapol_key_validate(step1_buf, sizeof(eapol_key_data_13), 16);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
memcpy(step2_buf, eapol_key_data_14, sizeof(eapol_key_data_14));
step2 = (struct eapol_key *)
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
eapol_key_validate(step2_buf, sizeof(eapol_key_data_14), 16);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
memcpy(step3_buf, eapol_key_data_15, sizeof(eapol_key_data_15));
step3 = (struct eapol_key *)
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
eapol_key_validate(step3_buf, sizeof(eapol_key_data_15), 16);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
memcpy(step4_buf, eapol_key_data_16, sizeof(eapol_key_data_16));
step4 = (struct eapol_key *)
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
eapol_key_validate(step4_buf, sizeof(eapol_key_data_16), 16);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
ptk = ptk_buf;
crypto_derive_pairwise_ptk(s->pmk, sizeof(s->pmk), sta_address,
ap_address, step1->key_nonce,
step2->key_nonce, ptk, 64,
unit: update test-{crypto,eapol} with PTK changes Updated to use l_checksum_type instead of boolean
2019-04-25 21:52:50 +02:00
L_CHECKSUM_SHA1);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
memset(EAPOL_KEY_MIC(step2), 0, 16);
assert(eapol_calculate_mic(IE_RSN_AKM_SUITE_PSK, ptk, step2,
EAPOL_KEY_MIC(step2), 16));
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
memset(EAPOL_KEY_MIC(step3), 0, 16);
assert(eapol_calculate_mic(IE_RSN_AKM_SUITE_PSK, ptk, step3,
EAPOL_KEY_MIC(step3), 16));
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
memset(EAPOL_KEY_MIC(step4), 0, 16);
assert(eapol_calculate_mic(IE_RSN_AKM_SUITE_PSK, ptk, step4,
EAPOL_KEY_MIC(step4), 16));
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
snonce = step2->key_nonce;
verify_step2_called = false;
expected_step2_frame = step2_buf;
expected_step2_frame_size = sizeof(eapol_key_data_14);
__eapol_set_tx_packet_func(verify_step2);
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, ap_address, ETH_P_PAE,
unit: update to the new API
2018-05-01 23:18:28 +02:00
step1_buf, sizeof(eapol_key_data_13), false);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
assert(verify_step2_called);
verify_step4_called = false;
verify_install_tk_called = false;
expected_step4_frame = step4_buf;
expected_step4_frame_size = sizeof(eapol_key_data_16);
__eapol_set_tx_packet_func(verify_step4);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
__handshake_set_install_tk_func(verify_install_tk);
unit: update test-eapol to work with crypto/eapol changes
2019-01-17 21:25:33 +01:00
ths->tk = ptk + 16 + 16;
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, ap_address, ETH_P_PAE,
unit: update to the new API
2018-05-01 23:18:28 +02:00
step3_buf, sizeof(eapol_key_data_15), false);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
assert(verify_step4_called);
assert(verify_install_tk_called);
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
done:
unit: Fix eapol TLS test after handshake_state changes
2016-11-14 18:18:11 +01:00
__handshake_set_install_tk_func(NULL);
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
if (sm)
eapol_sm_free(sm);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
handshake_state_free(hs);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
eapol_exit();
unit: Update to new eap_init API
2016-11-15 23:44:24 +01:00
eap_exit();
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
}
static void eapol_sm_test_eap_tls(const void *data)
{
unit: add test for embedded certs to test-eapol Refactored eapol_sm_test_tls to take a l_settings object rather than a settings string. This lets the caller either load from data or from file (the new test loads the build time generated tls-settings file).
2019-10-07 20:11:58 +02:00
static const char *config_8021x = "[Security]\n"
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
"EAP-Method=TLS\n"
"EAP-Identity=abc@example.com\n"
build: Generate certificates for unit testing locally
2019-05-11 10:11:12 +02:00
"EAP-TLS-CACert=" CERTDIR "cert-ca.pem\n"
"EAP-TLS-ClientCert=" CERTDIR "cert-client.pem\n"
"EAP-TLS-ClientKey=" CERTDIR "cert-client-key-pkcs8.pem";
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
struct eapol_8021x_tls_test_state s = {};
unit: add test for embedded certs to test-eapol Refactored eapol_sm_test_tls to take a l_settings object rather than a settings string. This lets the caller either load from data or from file (the new test loads the build time generated tls-settings file).
2019-10-07 20:11:58 +02:00
struct l_settings* config = l_settings_new();
l_settings_load_from_data(config, config_8021x, strlen(config_8021x));
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
s.app_data_cb = eapol_sm_test_tls_new_data;
s.ready_cb = eapol_sm_test_tls_test_ready;
s.disconnect_cb = eapol_sm_test_tls_test_disconnected;
unit: Rename EAP TLS type
2019-04-02 20:59:33 +02:00
s.method = EAP_TYPE_TLS;
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
unit: add test for embedded certs to test-eapol Refactored eapol_sm_test_tls to take a l_settings object rather than a settings string. This lets the caller either load from data or from file (the new test loads the build time generated tls-settings file).
2019-10-07 20:11:58 +02:00
eapol_sm_test_tls(&s, config);
l_settings_free(config);
}
static void eapol_sm_test_eap_tls_embedded(const void *data)
{
struct eapol_8021x_tls_test_state s = {};
struct l_settings *config;
config = l_settings_new();
unit: assert that l_settings creation/loading succeeds
2019-10-17 19:42:45 +02:00
assert(config);
assert(l_settings_load_from_file(config, CERTDIR "tls-settings.8021x"));
unit: add test for embedded certs to test-eapol Refactored eapol_sm_test_tls to take a l_settings object rather than a settings string. This lets the caller either load from data or from file (the new test loads the build time generated tls-settings file).
2019-10-07 20:11:58 +02:00
s.app_data_cb = eapol_sm_test_tls_new_data;
s.ready_cb = eapol_sm_test_tls_test_ready;
s.disconnect_cb = eapol_sm_test_tls_test_disconnected;
s.method = EAP_TYPE_TLS;
eapol_sm_test_tls(&s, config);
l_settings_free(config);
unit: Add an EAPOL+EAP-TLS test
2015-10-30 11:12:23 +01:00
}
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
static void eapol_sm_test_eap_tls_subject_good(const void *data)
{
unit: add test for embedded certs to test-eapol Refactored eapol_sm_test_tls to take a l_settings object rather than a settings string. This lets the caller either load from data or from file (the new test loads the build time generated tls-settings file).
2019-10-07 20:11:58 +02:00
static const char *config_8021x = "[Security]\n"
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
"EAP-Method=TLS\n"
"EAP-Identity=abc@example.com\n"
"EAP-TLS-CACert=" CERTDIR "cert-ca.pem\n"
"EAP-TLS-ClientCert=" CERTDIR "cert-client.pem\n"
"EAP-TLS-ClientKey=" CERTDIR "cert-client-key-pkcs8.pem\n"
unit: Update values in EAP-TLS-ServerDomainMask tests Use more realistic domain name mask strings to be matched against the DNS Name values in the subjectAltName extension.
2019-08-24 04:10:13 +02:00
"EAP-TLS-ServerDomainMask=bad.example.org;*.example.org";
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
struct eapol_8021x_tls_test_state s = {};
unit: add test for embedded certs to test-eapol Refactored eapol_sm_test_tls to take a l_settings object rather than a settings string. This lets the caller either load from data or from file (the new test loads the build time generated tls-settings file).
2019-10-07 20:11:58 +02:00
struct l_settings* config = l_settings_new();
l_settings_load_from_data(config, config_8021x, strlen(config_8021x));
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
s.app_data_cb = eapol_sm_test_tls_new_data;
s.ready_cb = eapol_sm_test_tls_test_ready;
s.disconnect_cb = eapol_sm_test_tls_test_disconnected;
s.method = EAP_TYPE_TLS;
unit: add test for embedded certs to test-eapol Refactored eapol_sm_test_tls to take a l_settings object rather than a settings string. This lets the caller either load from data or from file (the new test loads the build time generated tls-settings file).
2019-10-07 20:11:58 +02:00
eapol_sm_test_tls(&s, config);
l_settings_free(config);
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
}
static void eapol_sm_test_eap_tls_subject_bad(const void *data)
{
unit: add test for embedded certs to test-eapol Refactored eapol_sm_test_tls to take a l_settings object rather than a settings string. This lets the caller either load from data or from file (the new test loads the build time generated tls-settings file).
2019-10-07 20:11:58 +02:00
static const char *config_8021x = "[Security]\n"
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
"EAP-Method=TLS\n"
"EAP-Identity=abc@example.com\n"
"EAP-TLS-CACert=" CERTDIR "cert-ca.pem\n"
"EAP-TLS-ClientCert=" CERTDIR "cert-client.pem\n"
"EAP-TLS-ClientKey=" CERTDIR "cert-client-key-pkcs8.pem\n"
unit: Update values in EAP-TLS-ServerDomainMask tests Use more realistic domain name mask strings to be matched against the DNS Name values in the subjectAltName extension.
2019-08-24 04:10:13 +02:00
"EAP-TLS-ServerDomainMask=bad.example.org";
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
struct eapol_8021x_tls_test_state s = {};
unit: add test for embedded certs to test-eapol Refactored eapol_sm_test_tls to take a l_settings object rather than a settings string. This lets the caller either load from data or from file (the new test loads the build time generated tls-settings file).
2019-10-07 20:11:58 +02:00
struct l_settings* config = l_settings_new();
l_settings_load_from_data(config, config_8021x, strlen(config_8021x));
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
s.app_data_cb = eapol_sm_test_tls_new_data;
s.ready_cb = eapol_sm_test_tls_test_ready;
s.disconnect_cb = eapol_sm_test_tls_test_disconnected;
s.method = EAP_TYPE_TLS;
s.expect_handshake_fail = true;
unit: add test for embedded certs to test-eapol Refactored eapol_sm_test_tls to take a l_settings object rather than a settings string. This lets the caller either load from data or from file (the new test loads the build time generated tls-settings file).
2019-10-07 20:11:58 +02:00
eapol_sm_test_tls(&s, config);
l_settings_free(config);
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
}
unit: Add an EAPOL+EAP-TTLS+EAP-MD5 scenario test
2015-10-30 11:12:24 +01:00
static const uint8_t eap_ttls_eap_identity_avp[] = {
0x00, 0x00, 0x00, 0x4f, 0x40, 0x00, 0x00, 0x1c, 0x02, 0x00, 0x00, 0x14,
0x01, 0x61, 0x62, 0x63, 0x40, 0x65, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65,
0x2e, 0x63, 0x6f, 0x6d
};
static const uint8_t eap_ttls_eap_md5_challenge_avp[] = {
0x00, 0x00, 0x00, 0x4f, 0x40, 0x00, 0x00, 0x1e, 0x01, 0xbb, 0x00, 0x16,
0x04, 0x10, 0x3a, 0x34, 0x58, 0xc4, 0xf1, 0xa3, 0xdc, 0x45, 0xd0, 0xca,
0x96, 0x33, 0x9b, 0x95, 0xb8, 0xd6, 0x00, 0x00
};
static const uint8_t eap_ttls_eap_md5_response_avp[] = {
0x00, 0x00, 0x00, 0x4f, 0x40, 0x00, 0x00, 0x1e, 0x02, 0xbb, 0x00, 0x16,
0x04, 0x10, 0x10, 0xcc, 0x62, 0x4c, 0x98, 0x2b, 0x82, 0xbd, 0x13, 0x4a,
unit: Fix TTLS test Single AVP should not be padded with zeros as padding is only used to separate AVPs in a sequence. RFC 5281 Section 10.2. AVP Sequences Data encapsulated within the TLS record layer must consist entirely of a sequence of zero or more AVPs. Each AVP must begin on a four- octet boundary relative to the first AVP in the sequence. If an AVP is not a multiple of four octets, it must be padded with zeros to the next four-octet boundary. Note that the AVP Length does not include the padding.
2018-10-11 00:09:14 +02:00
0x81, 0xcb, 0x70, 0x78, 0xcd, 0xc2,
unit: Add an EAPOL+EAP-TTLS+EAP-MD5 scenario test
2015-10-30 11:12:24 +01:00
};
struct eapol_8021x_eap_ttls_test_state {
struct eapol_8021x_tls_test_state tls;
bool challenge_sent;
};
static void eapol_sm_test_eap_ttls_new_data(const uint8_t *data, size_t len,
void *user_data)
{
struct eapol_8021x_eap_ttls_test_state *s = user_data;
if (!s->challenge_sent) {
assert(len == sizeof(eap_ttls_eap_identity_avp));
assert(!memcmp(data, eap_ttls_eap_identity_avp, len));
l_tls_write(s->tls.tls, eap_ttls_eap_md5_challenge_avp,
sizeof(eap_ttls_eap_md5_challenge_avp));
s->challenge_sent = true;
} else {
assert(len == sizeof(eap_ttls_eap_md5_response_avp));
assert(!memcmp(data, eap_ttls_eap_md5_response_avp, len));
s->tls.success = true;
}
}
static void eapol_sm_test_eap_ttls_test_ready(const char *peer_identity,
void *user_data)
{
struct eapol_8021x_eap_ttls_test_state *s = user_data;
assert(!s->tls.tx_ack);
/* TODO: require the right peer_identity */
unit: Update for l_tls API changes
2018-11-17 15:01:33 +01:00
assert(l_tls_prf_get_bytes(s->tls.tls, true, "ttls keying material",
s->tls.pmk, 32));
unit: Add an EAPOL+EAP-TTLS+EAP-MD5 scenario test
2015-10-30 11:12:24 +01:00
s->challenge_sent = false;
}
static void eapol_sm_test_eap_ttls_md5(const void *data)
{
unit: add test for embedded certs to test-eapol Refactored eapol_sm_test_tls to take a l_settings object rather than a settings string. This lets the caller either load from data or from file (the new test loads the build time generated tls-settings file).
2019-10-07 20:11:58 +02:00
static const char *config_8021x = "[Security]\n"
unit: Add an EAPOL+EAP-TTLS+EAP-MD5 scenario test
2015-10-30 11:12:24 +01:00
"EAP-Method=TTLS\n"
"EAP-Identity=abc@example.com\n"
build: Generate certificates for unit testing locally
2019-05-11 10:11:12 +02:00
"EAP-TTLS-CACert=" CERTDIR "cert-ca.pem\n"
"EAP-TTLS-ClientCert=" CERTDIR "cert-client.pem\n"
"EAP-TTLS-ClientKey=" CERTDIR "cert-client-key-pkcs8.pem\n"
unit: Add an EAPOL+EAP-TTLS+EAP-MD5 scenario test
2015-10-30 11:12:24 +01:00
"EAP-TTLS-Phase2-Method=MD5\n"
"EAP-TTLS-Phase2-Identity=abc@example.com\n"
unit: use new setting key name for EAP-MD5
2018-10-29 21:32:26 +01:00
"EAP-TTLS-Phase2-Password=testpasswd";
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
struct eapol_8021x_eap_ttls_test_state s = {};
unit: add test for embedded certs to test-eapol Refactored eapol_sm_test_tls to take a l_settings object rather than a settings string. This lets the caller either load from data or from file (the new test loads the build time generated tls-settings file).
2019-10-07 20:11:58 +02:00
struct l_settings* config = l_settings_new();
l_settings_load_from_data(config, config_8021x, strlen(config_8021x));
unit: Add an EAPOL+EAP-TTLS+EAP-MD5 scenario test
2015-10-30 11:12:24 +01:00
s.tls.app_data_cb = eapol_sm_test_eap_ttls_new_data;
s.tls.ready_cb = eapol_sm_test_eap_ttls_test_ready;
s.tls.disconnect_cb = eapol_sm_test_tls_test_disconnected;
s.tls.method = EAP_TYPE_TTLS;
unit: add test for embedded certs to test-eapol Refactored eapol_sm_test_tls to take a l_settings object rather than a settings string. This lets the caller either load from data or from file (the new test loads the build time generated tls-settings file).
2019-10-07 20:11:58 +02:00
eapol_sm_test_tls(&s.tls, config);
l_settings_free(config);
unit: Add an EAPOL+EAP-TTLS+EAP-MD5 scenario test
2015-10-30 11:12:24 +01:00
}
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
static const uint8_t eap_ttls_start_req[] = {
0x02, 0x00, 0x00, 0x06, 0x01, 0x02, 0x00, 0x06, 0x15, 0x20
};
static const uint8_t eap_nak_tls[] = {
0x02, 0x00, 0x00, 0x06, 0x02, 0x02, 0x00, 0x06, 0x03, 0x0d
};
static const uint8_t eap_failure[] = {
0x02, 0x00, 0x00, 0x04, 0x04, 0x02, 0x00, 0x04
};
unit: update to the new API
2018-05-01 23:18:28 +02:00
static int verify_8021x_eap_nak(uint32_t ifindex,
const uint8_t *aa_addr, uint16_t proto,
const struct eapol_frame *ef, bool noencrypt,
void *user_data)
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
{
struct eapol_8021x_tls_test_state *s = user_data;
size_t len = sizeof(struct eapol_header) +
L_BE16_TO_CPU(ef->header.packet_len);
assert(ifindex == 1);
assert(!memcmp(aa_addr, aa, 6));
unit: update to the new API
2018-05-01 23:18:28 +02:00
assert(proto == ETH_P_PAE);
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
assert(len == sizeof(eap_nak_tls));
assert(!memcmp(ef, eap_nak_tls, sizeof(eap_nak_tls)));
assert(s->pending_req);
s->pending_req = 0;
return 0;
}
static void eapol_sm_test_eap_nak(const void *data)
{
static const char *eapol_8021x_config = "[Security]\n"
"EAP-Method=TLS\n"
"EAP-Identity=abc@example.com\n"
build: Generate certificates for unit testing locally
2019-05-11 10:11:12 +02:00
"EAP-TLS-CACert=" CERTDIR "cert-ca.pem\n"
"EAP-TLS-ClientCert=" CERTDIR "cert-client.pem\n"
"EAP-TLS-ClientKey=" CERTDIR "cert-client-key-pkcs8.pem";
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
static const unsigned char ap_wpa_ie[] = {
0xdd, 0x16, 0x00, 0x50, 0xf2, 0x01, 0x01, 0x00,
0x00, 0x50, 0xf2, 0x02, 0x01, 0x00, 0x00, 0x50,
0xf2, 0x02, 0x01, 0x00, 0x00, 0x50, 0xf2, 0x02 };
static uint8_t ap_address[] = { 0x02, 0x00, 0x00, 0x00, 0x00, 0x00 };
static uint8_t sta_address[] = { 0x02, 0x00, 0x00, 0x00, 0x01, 0x00 };
bool r;
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
struct handshake_state *hs;
unit: Store handshake_failed in test_handshake_state Instead of using a global variable
2018-06-28 00:01:22 +02:00
struct test_handshake_state *ths;
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
struct eapol_sm *sm;
struct l_settings *settings;
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
struct eapol_8021x_tls_test_state s = {};
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
aa = ap_address;
spa = sta_address;
unit: update wsc/eapol with new eap_init test-eapol was passing zero as the MTU, so this simply needed to be updated to remove that parameter. test-wsc was actually setting a MTU value so when building the settings we now add the proper value so the MTU can be set with __eap_set_config.
2019-10-11 21:29:32 +02:00
eap_init();
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
eapol_init();
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
__handshake_set_get_nonce_func(test_nonce);
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
unit: Update to the new API
2018-06-22 02:32:56 +02:00
hs = test_handshake_state_new(1);
unit: Use l_container_of
2019-04-03 18:47:51 +02:00
ths = l_container_of(hs, struct test_handshake_state, super);
unit: Store handshake_failed in test_handshake_state Instead of using a global variable
2018-06-28 00:01:22 +02:00
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
sm = eapol_sm_new(hs);
eapol_register(sm);
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
handshake_state_set_authenticator_address(hs, ap_address);
handshake_state_set_supplicant_address(hs, sta_address);
unit: Store handshake_failed in test_handshake_state Instead of using a global variable
2018-06-28 00:01:22 +02:00
handshake_state_set_event_func(hs, test_handshake_event, NULL);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
__eapol_set_tx_user_data(&s);
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
unit: update test-eapol with new handshake APIs
2019-06-07 21:17:01 +02:00
r = handshake_state_set_supplicant_ie(hs,
unit: Fix usage of sizeof(struct eapol_key) in test-eapol
2019-01-22 07:16:44 +01:00
eapol_key_data_20 + EAPOL_FRAME_LEN(16));
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
assert(r);
unit: update test-eapol with new handshake APIs
2019-06-07 21:17:01 +02:00
handshake_state_set_authenticator_ie(hs, ap_wpa_ie);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
settings = l_settings_new();
l_settings_load_from_data(settings, eapol_8021x_config,
strlen(eapol_8021x_config));
handshake_state_set_8021x_config(hs, settings);
unit: Update eapol and WSC tests for new eapol calls
2016-10-04 05:48:09 +02:00
eapol_start(sm);
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
l_settings_free(settings);
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
__eapol_set_tx_packet_func(verify_8021x_identity_resp);
s.pending_req = 1;
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, ap_address, ETH_P_PAE, eap_identity_req,
unit: update to the new API
2018-05-01 23:18:28 +02:00
sizeof(eap_identity_req), false);
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
assert(!s.pending_req);
s.pending_req = 1;
__eapol_set_tx_packet_func(verify_8021x_eap_nak);
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, ap_address, ETH_P_PAE, eap_ttls_start_req,
unit: update to the new API
2018-05-01 23:18:28 +02:00
sizeof(eap_ttls_start_req), false);
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
assert(!s.pending_req);
unit: Store handshake_failed in test_handshake_state Instead of using a global variable
2018-06-28 00:01:22 +02:00
ths->handshake_failed = false;
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, ap_address, ETH_P_PAE, eap_failure,
unit: update to the new API
2018-05-01 23:18:28 +02:00
sizeof(eap_failure), false);
unit: Store handshake_failed in test_handshake_state Instead of using a global variable
2018-06-28 00:01:22 +02:00
assert(ths->handshake_failed);
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
handshake_state_free(hs);
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
eapol_exit();
unit: Update to new eap_init API
2016-11-15 23:44:24 +01:00
eap_exit();
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
}
unit: FT 4-Way Handshake eapol test This also tests that the FT crypto functions work. For the record these are the values of the intermediate keys in this test: ANonce: 33 b2 74 a0 ae c9 e8 5d 61 11 8f 1b 6b 97 77 4e 5b 75 08 37 45 77 dc 14 08 a5 f1 80 c5 d2 e9 fd SNonce: ac 1e b2 c7 0b 20 8c e6 0a e2 07 b2 38 9e 44 1f ff 39 86 3d 44 9f 81 24 6f e3 6e de 0f 1f 56 ce PMK-R0: ad b8 81 bf 50 11 1c fd 0b 5c 87 23 42 bf 3b 54 3e 81 d6 3f 3e 18 cf 0a 8d 3d 85 4f d8 07 ad d5 PMKR0Name: cc 62 4a e8 6e 0c 85 25 06 02 22 15 f7 3d 0d 01 PMK-R1: 17 6a 37 92 25 28 72 9f 40 18 06 20 b4 2d 34 2a 7b 8d da 09 4c a9 cf 84 bd 55 4a 39 bc 5d c1 61 PMKR1Name: de ce 50 a0 9e f0 8c 4e be f2 f1 db e9 67 b4 d4 KCK: e4 2d ee 98 f9 9d fb f8 32 9f 50 41 05 58 35 a2 KEK: 34 5e 22 4e 91 73 8a 97 dd c4 19 53 c5 c8 d7 29 TK: 7c ff bd 35 ce 11 c5 75 1d 4c c6 7a df c2 a2 78 PTKName: 31 e4 94 a6 96 a5 c3 7e 2f 33 9c 47 04 dc ae 05
2016-11-02 23:46:15 +01:00
static void eapol_ft_handshake_test(const void *data)
{
const unsigned char psk[] = {
0xbc, 0xcd, 0x17, 0x98, 0xef, 0x6c, 0xb8, 0x7f,
0x2b, 0x54, 0x75, 0xfb, 0x98, 0x06, 0x57, 0xd2,
0xea, 0x02, 0x6c, 0xe3, 0x68, 0xef, 0x3f, 0xca,
0xda, 0x31, 0x48, 0x54, 0x3f, 0xee, 0x94, 0xf0 };
const unsigned char ap_rsne[] = {
0x30, 0x14, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x04,
0x01, 0x00, 0x00, 0x0f, 0xac, 0x04, 0x01, 0x00,
0x00, 0x0f, 0xac, 0x04, 0x81, 0x00 };
const unsigned char own_rsne[] = {
0x30, 0x12, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x04,
0x01, 0x00, 0x00, 0x0f, 0xac, 0x04, 0x01, 0x00,
0x00, 0x0f, 0xac, 0x04 };
const uint8_t mde[] = { 0x36, 0x03, 0x12, 0x34, 0x01 };
const uint8_t fte[] = {
0x37, 0x62, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x01, 0x06, 0x02, 0x00,
0x00, 0x00, 0x00, 0x00, 0x03, 0x06, 0x64, 0x75,
0x6d, 0x6d, 0x79, 0x30 };
const uint8_t r0khid[] = "dummy0";
const uint8_t r1khid[] = { 0x02, 0x00, 0x00, 0x00, 0x00, 0x00 };
const uint8_t ap_address[] = { 0x02, 0x00, 0x00, 0x00, 0x00, 0x00 };
const uint8_t sta_address[] = { 0x02, 0x00, 0x00, 0x00, 0x02, 0x00 };
const char *ssid = "TestFT";
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
struct handshake_state *hs;
unit: FT 4-Way Handshake eapol test This also tests that the FT crypto functions work. For the record these are the values of the intermediate keys in this test: ANonce: 33 b2 74 a0 ae c9 e8 5d 61 11 8f 1b 6b 97 77 4e 5b 75 08 37 45 77 dc 14 08 a5 f1 80 c5 d2 e9 fd SNonce: ac 1e b2 c7 0b 20 8c e6 0a e2 07 b2 38 9e 44 1f ff 39 86 3d 44 9f 81 24 6f e3 6e de 0f 1f 56 ce PMK-R0: ad b8 81 bf 50 11 1c fd 0b 5c 87 23 42 bf 3b 54 3e 81 d6 3f 3e 18 cf 0a 8d 3d 85 4f d8 07 ad d5 PMKR0Name: cc 62 4a e8 6e 0c 85 25 06 02 22 15 f7 3d 0d 01 PMK-R1: 17 6a 37 92 25 28 72 9f 40 18 06 20 b4 2d 34 2a 7b 8d da 09 4c a9 cf 84 bd 55 4a 39 bc 5d c1 61 PMKR1Name: de ce 50 a0 9e f0 8c 4e be f2 f1 db e9 67 b4 d4 KCK: e4 2d ee 98 f9 9d fb f8 32 9f 50 41 05 58 35 a2 KEK: 34 5e 22 4e 91 73 8a 97 dd c4 19 53 c5 c8 d7 29 TK: 7c ff bd 35 ce 11 c5 75 1d 4c c6 7a df c2 a2 78 PTKName: 31 e4 94 a6 96 a5 c3 7e 2f 33 9c 47 04 dc ae 05
2016-11-02 23:46:15 +01:00
struct eapol_sm *sm;
eapol_init();
snonce = eapol_key_test_26.key_nonce;
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
__handshake_set_get_nonce_func(test_nonce);
unit: FT 4-Way Handshake eapol test This also tests that the FT crypto functions work. For the record these are the values of the intermediate keys in this test: ANonce: 33 b2 74 a0 ae c9 e8 5d 61 11 8f 1b 6b 97 77 4e 5b 75 08 37 45 77 dc 14 08 a5 f1 80 c5 d2 e9 fd SNonce: ac 1e b2 c7 0b 20 8c e6 0a e2 07 b2 38 9e 44 1f ff 39 86 3d 44 9f 81 24 6f e3 6e de 0f 1f 56 ce PMK-R0: ad b8 81 bf 50 11 1c fd 0b 5c 87 23 42 bf 3b 54 3e 81 d6 3f 3e 18 cf 0a 8d 3d 85 4f d8 07 ad d5 PMKR0Name: cc 62 4a e8 6e 0c 85 25 06 02 22 15 f7 3d 0d 01 PMK-R1: 17 6a 37 92 25 28 72 9f 40 18 06 20 b4 2d 34 2a 7b 8d da 09 4c a9 cf 84 bd 55 4a 39 bc 5d c1 61 PMKR1Name: de ce 50 a0 9e f0 8c 4e be f2 f1 db e9 67 b4 d4 KCK: e4 2d ee 98 f9 9d fb f8 32 9f 50 41 05 58 35 a2 KEK: 34 5e 22 4e 91 73 8a 97 dd c4 19 53 c5 c8 d7 29 TK: 7c ff bd 35 ce 11 c5 75 1d 4c c6 7a df c2 a2 78 PTKName: 31 e4 94 a6 96 a5 c3 7e 2f 33 9c 47 04 dc ae 05
2016-11-02 23:46:15 +01:00
aa = ap_address;
spa = sta_address;
verify_step2_called = false;
expected_step2_frame = eapol_key_data_26;
expected_step2_frame_size = sizeof(eapol_key_data_26);
verify_step4_called = false;
expected_step4_frame = eapol_key_data_28;
expected_step4_frame_size = sizeof(eapol_key_data_28);
unit: Update to the new API
2018-06-22 02:32:56 +02:00
hs = test_handshake_state_new(1);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
sm = eapol_sm_new(hs);
eapol_register(sm);
unit: Update handshake_state_set_pmk parameters
2018-03-15 12:06:55 +01:00
handshake_state_set_pmk(hs, psk, sizeof(psk));
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
handshake_state_set_authenticator_address(hs, aa);
handshake_state_set_supplicant_address(hs, spa);
handshake_state_set_ssid(hs, (void *) ssid, strlen(ssid));
unit: update test-eapol with new handshake APIs
2019-06-07 21:17:01 +02:00
handshake_state_set_supplicant_ie(hs, own_rsne);
handshake_state_set_authenticator_ie(hs, ap_rsne);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
handshake_state_set_mde(hs, mde);
unit: use authenticator_fte
2023-12-06 21:17:55 +01:00
handshake_state_set_authenticator_fte(hs, fte);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
handshake_state_set_kh_ids(hs, r0khid, strlen((void *) r0khid), r1khid);
unit: FT 4-Way Handshake eapol test This also tests that the FT crypto functions work. For the record these are the values of the intermediate keys in this test: ANonce: 33 b2 74 a0 ae c9 e8 5d 61 11 8f 1b 6b 97 77 4e 5b 75 08 37 45 77 dc 14 08 a5 f1 80 c5 d2 e9 fd SNonce: ac 1e b2 c7 0b 20 8c e6 0a e2 07 b2 38 9e 44 1f ff 39 86 3d 44 9f 81 24 6f e3 6e de 0f 1f 56 ce PMK-R0: ad b8 81 bf 50 11 1c fd 0b 5c 87 23 42 bf 3b 54 3e 81 d6 3f 3e 18 cf 0a 8d 3d 85 4f d8 07 ad d5 PMKR0Name: cc 62 4a e8 6e 0c 85 25 06 02 22 15 f7 3d 0d 01 PMK-R1: 17 6a 37 92 25 28 72 9f 40 18 06 20 b4 2d 34 2a 7b 8d da 09 4c a9 cf 84 bd 55 4a 39 bc 5d c1 61 PMKR1Name: de ce 50 a0 9e f0 8c 4e be f2 f1 db e9 67 b4 d4 KCK: e4 2d ee 98 f9 9d fb f8 32 9f 50 41 05 58 35 a2 KEK: 34 5e 22 4e 91 73 8a 97 dd c4 19 53 c5 c8 d7 29 TK: 7c ff bd 35 ce 11 c5 75 1d 4c c6 7a df c2 a2 78 PTKName: 31 e4 94 a6 96 a5 c3 7e 2f 33 9c 47 04 dc ae 05
2016-11-02 23:46:15 +01:00
eapol_start(sm);
__eapol_set_tx_packet_func(verify_step2);
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, aa, ETH_P_PAE,
unit: update to the new API
2018-05-01 23:18:28 +02:00
eapol_key_data_25, sizeof(eapol_key_data_25),
false);
unit: FT 4-Way Handshake eapol test This also tests that the FT crypto functions work. For the record these are the values of the intermediate keys in this test: ANonce: 33 b2 74 a0 ae c9 e8 5d 61 11 8f 1b 6b 97 77 4e 5b 75 08 37 45 77 dc 14 08 a5 f1 80 c5 d2 e9 fd SNonce: ac 1e b2 c7 0b 20 8c e6 0a e2 07 b2 38 9e 44 1f ff 39 86 3d 44 9f 81 24 6f e3 6e de 0f 1f 56 ce PMK-R0: ad b8 81 bf 50 11 1c fd 0b 5c 87 23 42 bf 3b 54 3e 81 d6 3f 3e 18 cf 0a 8d 3d 85 4f d8 07 ad d5 PMKR0Name: cc 62 4a e8 6e 0c 85 25 06 02 22 15 f7 3d 0d 01 PMK-R1: 17 6a 37 92 25 28 72 9f 40 18 06 20 b4 2d 34 2a 7b 8d da 09 4c a9 cf 84 bd 55 4a 39 bc 5d c1 61 PMKR1Name: de ce 50 a0 9e f0 8c 4e be f2 f1 db e9 67 b4 d4 KCK: e4 2d ee 98 f9 9d fb f8 32 9f 50 41 05 58 35 a2 KEK: 34 5e 22 4e 91 73 8a 97 dd c4 19 53 c5 c8 d7 29 TK: 7c ff bd 35 ce 11 c5 75 1d 4c c6 7a df c2 a2 78 PTKName: 31 e4 94 a6 96 a5 c3 7e 2f 33 9c 47 04 dc ae 05
2016-11-02 23:46:15 +01:00
assert(verify_step2_called);
__eapol_set_tx_packet_func(verify_step4);
unit: Update tests to pass ETH_P_PAE to __eapol_rx_packet
2017-04-15 13:58:52 +02:00
__eapol_rx_packet(1, aa, ETH_P_PAE,
unit: update to the new API
2018-05-01 23:18:28 +02:00
eapol_key_data_27, sizeof(eapol_key_data_27),
false);
unit: FT 4-Way Handshake eapol test This also tests that the FT crypto functions work. For the record these are the values of the intermediate keys in this test: ANonce: 33 b2 74 a0 ae c9 e8 5d 61 11 8f 1b 6b 97 77 4e 5b 75 08 37 45 77 dc 14 08 a5 f1 80 c5 d2 e9 fd SNonce: ac 1e b2 c7 0b 20 8c e6 0a e2 07 b2 38 9e 44 1f ff 39 86 3d 44 9f 81 24 6f e3 6e de 0f 1f 56 ce PMK-R0: ad b8 81 bf 50 11 1c fd 0b 5c 87 23 42 bf 3b 54 3e 81 d6 3f 3e 18 cf 0a 8d 3d 85 4f d8 07 ad d5 PMKR0Name: cc 62 4a e8 6e 0c 85 25 06 02 22 15 f7 3d 0d 01 PMK-R1: 17 6a 37 92 25 28 72 9f 40 18 06 20 b4 2d 34 2a 7b 8d da 09 4c a9 cf 84 bd 55 4a 39 bc 5d c1 61 PMKR1Name: de ce 50 a0 9e f0 8c 4e be f2 f1 db e9 67 b4 d4 KCK: e4 2d ee 98 f9 9d fb f8 32 9f 50 41 05 58 35 a2 KEK: 34 5e 22 4e 91 73 8a 97 dd c4 19 53 c5 c8 d7 29 TK: 7c ff bd 35 ce 11 c5 75 1d 4c c6 7a df c2 a2 78 PTKName: 31 e4 94 a6 96 a5 c3 7e 2f 33 9c 47 04 dc ae 05
2016-11-02 23:46:15 +01:00
assert(verify_step4_called);
unit: Update eapol test with eapol API changes
2016-11-02 23:46:20 +01:00
eapol_sm_free(sm);
handshake_state_free(hs);
unit: FT 4-Way Handshake eapol test This also tests that the FT crypto functions work. For the record these are the values of the intermediate keys in this test: ANonce: 33 b2 74 a0 ae c9 e8 5d 61 11 8f 1b 6b 97 77 4e 5b 75 08 37 45 77 dc 14 08 a5 f1 80 c5 d2 e9 fd SNonce: ac 1e b2 c7 0b 20 8c e6 0a e2 07 b2 38 9e 44 1f ff 39 86 3d 44 9f 81 24 6f e3 6e de 0f 1f 56 ce PMK-R0: ad b8 81 bf 50 11 1c fd 0b 5c 87 23 42 bf 3b 54 3e 81 d6 3f 3e 18 cf 0a 8d 3d 85 4f d8 07 ad d5 PMKR0Name: cc 62 4a e8 6e 0c 85 25 06 02 22 15 f7 3d 0d 01 PMK-R1: 17 6a 37 92 25 28 72 9f 40 18 06 20 b4 2d 34 2a 7b 8d da 09 4c a9 cf 84 bd 55 4a 39 bc 5d c1 61 PMKR1Name: de ce 50 a0 9e f0 8c 4e be f2 f1 db e9 67 b4 d4 KCK: e4 2d ee 98 f9 9d fb f8 32 9f 50 41 05 58 35 a2 KEK: 34 5e 22 4e 91 73 8a 97 dd c4 19 53 c5 c8 d7 29 TK: 7c ff bd 35 ce 11 c5 75 1d 4c c6 7a df c2 a2 78 PTKName: 31 e4 94 a6 96 a5 c3 7e 2f 33 9c 47 04 dc ae 05
2016-11-02 23:46:15 +01:00
eapol_exit();
}
unit: Add an authenticator-side 4-Way Handshake test Test the eapol.c code responsible for the access point mode 4-way handshake with correct IEs and PSK on both sides (success scenario).
2020-08-17 12:06:45 +02:00
struct test_ap_sta_data {
struct handshake_state *ap_hs;
struct handshake_state *sta_hs;
const uint8_t ap_address[6];
const uint8_t sta_address[6];
uint8_t to_sta_data[1024];
int to_sta_data_len;
uint8_t ap_tk[32];
uint8_t sta_tk[32];
bool ap_success;
bool sta_success;
int to_sta_msg_cnt;
int to_ap_msg_cnt;
struct eapol_sm *ap_sm;
struct eapol_sm *sta_sm;
};
static int test_ap_sta_eapol_tx(uint32_t ifindex,
const uint8_t *dest, uint16_t proto,
const struct eapol_frame *ef,
bool noencrypt, void *user_data)
{
struct test_ap_sta_data *s = user_data;
size_t len = sizeof(struct eapol_header) +
L_BE16_TO_CPU(ef->header.packet_len);
assert(ifindex == s->ap_hs->ifindex || ifindex == s->sta_hs->ifindex);
assert(proto == ETH_P_PAE && !noencrypt);
if (ifindex == s->ap_hs->ifindex) { /* From AP to STA */
assert(!memcmp(dest, s->sta_address, 6));
assert(len < sizeof(s->to_sta_data));
memcpy(s->to_sta_data, ef, len);
s->to_sta_data_len = len;
s->to_sta_msg_cnt++;
return 0;
}
/* From STA to AP */
assert(!memcmp(dest, s->ap_address, 6));
s->to_ap_msg_cnt++;
__eapol_rx_packet(1, s->sta_address, proto, (const void *) ef, len,
noencrypt);
return 0;
}
static void test_ap_sta_run(struct test_ap_sta_data *s)
{
eap_init();
eapol_init();
__eapol_set_tx_packet_func(test_ap_sta_eapol_tx);
__eapol_set_tx_user_data(s);
s->ap_success = false;
s->sta_success = false;
s->to_sta_msg_cnt = 0;
s->to_ap_msg_cnt = 0;
unit: Fix a typo in test-eapol
2020-08-25 00:34:23 +02:00
s->to_sta_data_len = 0;
unit: Add an authenticator-side 4-Way Handshake test Test the eapol.c code responsible for the access point mode 4-way handshake with correct IEs and PSK on both sides (success scenario).
2020-08-17 12:06:45 +02:00
s->ap_sm = eapol_sm_new(s->ap_hs);
eapol_register(s->ap_sm);
s->sta_sm = eapol_sm_new(s->sta_hs);
eapol_register(s->sta_sm);
eapol_start(s->sta_sm);
eapol_start(s->ap_sm);
while (s->to_sta_data_len) {
int len = s->to_sta_data_len;
s->to_sta_data_len = 0;
__eapol_rx_packet(s->sta_hs->ifindex, s->ap_address, ETH_P_PAE,
s->to_sta_data, len, false);
}
unit: Drop un-needed null checks both ap_sm and sta_sm are passed to eapol_register and eapol_start. No need to check for null here
2021-02-08 21:12:12 +01:00
eapol_sm_free(s->ap_sm);
eapol_sm_free(s->sta_sm);
unit: Add an authenticator-side 4-Way Handshake test Test the eapol.c code responsible for the access point mode 4-way handshake with correct IEs and PSK on both sides (success scenario).
2020-08-17 12:06:45 +02:00
eapol_exit();
eap_exit();
}
struct test_ap_sta_hs {
struct handshake_state super;
struct test_ap_sta_data *s;
};
static struct handshake_state *test_ap_sta_hs_new(struct test_ap_sta_data *s,
uint32_t ifindex)
{
struct test_ap_sta_hs *ths = l_new(struct test_ap_sta_hs, 1);
ths->super.ifindex = ifindex;
ths->super.free = (void (*)(struct handshake_state *s)) l_free;
ths->s = s;
return &ths->super;
}
static bool random_nonce(uint8_t nonce[])
{
return l_getrandom(nonce, 32);
}
static void test_ap_sta_hs_event(struct handshake_state *hs,
enum handshake_event event,
void *user_data, ...)
{
assert(event != HANDSHAKE_EVENT_FAILED);
}
unit: update tests with new TK install arguments
2021-10-08 20:07:26 +02:00
static void test_ap_sta_install_tk(struct handshake_state *hs, uint8_t key_idx,
unit: Add an authenticator-side 4-Way Handshake test Test the eapol.c code responsible for the access point mode 4-way handshake with correct IEs and PSK on both sides (success scenario).
2020-08-17 12:06:45 +02:00
const uint8_t *tk, uint32_t cipher)
{
struct test_ap_sta_hs *ths =
l_container_of(hs, struct test_ap_sta_hs, super);
assert(hs == ths->s->ap_hs || hs == ths->s->sta_hs);
assert(cipher == CRYPTO_CIPHER_CCMP);
if (hs == ths->s->ap_hs) {
assert(!ths->s->ap_success);
memcpy(ths->s->ap_tk, tk, 16);
ths->s->ap_success = true;
} else {
assert(!ths->s->sta_success);
memcpy(ths->s->sta_tk, tk, 16);
ths->s->sta_success = true;
}
}
static void eapol_ap_sta_handshake_test(const void *data)
{
static const unsigned char ap_rsne[] = {
0x30, 0x14, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x04,
0x01, 0x00, 0x00, 0x0f, 0xac, 0x04, 0x01, 0x00,
0x00, 0x0f, 0xac, 0x02, 0x81, 0x00 };
static const unsigned char sta_rsne[] = {
0x30, 0x12, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x04,
0x01, 0x00, 0x00, 0x0f, 0xac, 0x04, 0x01, 0x00,
0x00, 0x0f, 0xac, 0x02 };
static const char *ssid = "TestWPA2PSK";
static const uint8_t psk[32] = { /* secretsecret */
0x6a, 0xa3, 0xf0, 0x0b, 0x68, 0xbd, 0x8b, 0x46,
0x69, 0x83, 0xa5, 0x29, 0xa3, 0xfa, 0x57, 0x1c,
0x6c, 0x7b, 0x72, 0x41, 0x1d, 0xce, 0x33, 0x02,
0xa2, 0x2d, 0xdf, 0x77, 0xd1, 0x93, 0xdb, 0x5f };
struct test_ap_sta_data s = {
.ap_hs = test_ap_sta_hs_new(&s, 1),
.sta_hs = test_ap_sta_hs_new(&s, 2),
.ap_address = { 0x02, 0x03, 0x04, 0x05, 0x06, 0x07 },
.sta_address = { 0x02, 0x03, 0x04, 0x05, 0x06, 0x08 },
};
__handshake_set_get_nonce_func(random_nonce);
__handshake_set_install_tk_func(test_ap_sta_install_tk);
__handshake_set_install_gtk_func(NULL);
handshake_state_set_authenticator(s.ap_hs, true);
handshake_state_set_event_func(s.ap_hs, test_ap_sta_hs_event, &s);
handshake_state_set_authenticator_address(s.ap_hs, s.ap_address);
handshake_state_set_supplicant_address(s.ap_hs, s.sta_address);
handshake_state_set_supplicant_ie(s.ap_hs, sta_rsne);
handshake_state_set_authenticator_ie(s.ap_hs, ap_rsne);
handshake_state_set_ssid(s.ap_hs, (void *) ssid, strlen(ssid));
handshake_state_set_pmk(s.ap_hs, psk, 32);
handshake_state_set_authenticator(s.sta_hs, false);
handshake_state_set_event_func(s.sta_hs, test_ap_sta_hs_event, &s);
handshake_state_set_authenticator_address(s.sta_hs, s.ap_address);
handshake_state_set_supplicant_address(s.sta_hs, s.sta_address);
handshake_state_set_supplicant_ie(s.sta_hs, sta_rsne);
handshake_state_set_authenticator_ie(s.sta_hs, ap_rsne);
handshake_state_set_ssid(s.sta_hs, (void *) ssid, strlen(ssid));
handshake_state_set_pmk(s.sta_hs, psk, 32);
test_ap_sta_run(&s);
handshake_state_free(s.ap_hs);
handshake_state_free(s.sta_hs);
__handshake_set_install_tk_func(NULL);
assert(s.ap_success && s.sta_success);
assert(s.to_ap_msg_cnt == 2 && s.to_sta_msg_cnt == 2);
assert(!memcmp(s.ap_tk, s.sta_tk, 16));
}
unit: Authenticator 4-way handshake error scenario
2020-08-17 12:06:46 +02:00
static void eapol_ap_sta_handshake_bad_psk_test(const void *data)
{
static const unsigned char ap_rsne[] = {
0x30, 0x14, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x04,
0x01, 0x00, 0x00, 0x0f, 0xac, 0x04, 0x01, 0x00,
0x00, 0x0f, 0xac, 0x02, 0x81, 0x00 };
static const unsigned char sta_rsne[] = {
0x30, 0x12, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x04,
0x01, 0x00, 0x00, 0x0f, 0xac, 0x04, 0x01, 0x00,
0x00, 0x0f, 0xac, 0x02 };
static const char *ssid = "TestWPA2PSK";
static const uint8_t psk1[32] = { /* secretsecret */
0x6a, 0xa3, 0xf0, 0x0b, 0x68, 0xbd, 0x8b, 0x46,
0x69, 0x83, 0xa5, 0x29, 0xa3, 0xfa, 0x57, 0x1c,
0x6c, 0x7b, 0x72, 0x41, 0x1d, 0xce, 0x33, 0x02,
0xa2, 0x2d, 0xdf, 0x77, 0xd1, 0x93, 0xdb, 0x5f };
static const uint8_t psk2[32] = { /* wrongpasswd */
0x04, 0x86, 0x45, 0x37, 0x4c, 0x95, 0xdd, 0x1e,
0x96, 0xbb, 0xdf, 0x12, 0x0a, 0x1c, 0x4c, 0x5b,
0x6d, 0x22, 0xc1, 0x1c, 0xa2, 0xe0, 0x15, 0x99,
0xbf, 0x82, 0x10, 0xd3, 0x59, 0x2c, 0xfb, 0x2d };
struct test_ap_sta_data s = {
.ap_hs = test_ap_sta_hs_new(&s, 1),
.sta_hs = test_ap_sta_hs_new(&s, 2),
.ap_address = { 0x02, 0x03, 0x04, 0x05, 0x06, 0x07 },
.sta_address = { 0x02, 0x03, 0x04, 0x05, 0x06, 0x08 },
};
__handshake_set_get_nonce_func(random_nonce);
__handshake_set_install_tk_func(test_ap_sta_install_tk);
__handshake_set_install_gtk_func(NULL);
handshake_state_set_authenticator(s.ap_hs, true);
handshake_state_set_event_func(s.ap_hs, test_ap_sta_hs_event, &s);
handshake_state_set_authenticator_address(s.ap_hs, s.ap_address);
handshake_state_set_supplicant_address(s.ap_hs, s.sta_address);
handshake_state_set_supplicant_ie(s.ap_hs, sta_rsne);
handshake_state_set_authenticator_ie(s.ap_hs, ap_rsne);
handshake_state_set_ssid(s.ap_hs, (void *) ssid, strlen(ssid));
handshake_state_set_pmk(s.ap_hs, psk1, 32);
handshake_state_set_authenticator(s.sta_hs, false);
handshake_state_set_event_func(s.sta_hs, test_ap_sta_hs_event, &s);
handshake_state_set_authenticator_address(s.sta_hs, s.ap_address);
handshake_state_set_supplicant_address(s.sta_hs, s.sta_address);
handshake_state_set_supplicant_ie(s.sta_hs, sta_rsne);
handshake_state_set_authenticator_ie(s.sta_hs, ap_rsne);
handshake_state_set_ssid(s.sta_hs, (void *) ssid, strlen(ssid));
handshake_state_set_pmk(s.sta_hs, psk2, 32);
test_ap_sta_run(&s);
handshake_state_free(s.ap_hs);
handshake_state_free(s.sta_hs);
__handshake_set_install_tk_func(NULL);
/*
* There should have been 2 EAPoL-Key frame exchanged: 1/4 and
* 2/4 after which the AP will have detected wrong MIC and not
* sent any more messages with both sides waiting for the
* timeout.
*/
assert(!s.ap_success && !s.sta_success);
assert(s.to_ap_msg_cnt == 1 && s.to_sta_msg_cnt == 1);
}
unit: Add two EAPOL IP allocation scenarios
2020-09-14 15:51:20 +02:00
static void eapol_ap_sta_handshake_ip_alloc_ok_test(const void *data)
{
static const unsigned char ap_rsne[] = {
0x30, 0x14, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x04,
0x01, 0x00, 0x00, 0x0f, 0xac, 0x04, 0x01, 0x00,
0x00, 0x0f, 0xac, 0x02, 0x81, 0x00 };
static const unsigned char sta_rsne[] = {
0x30, 0x12, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x04,
0x01, 0x00, 0x00, 0x0f, 0xac, 0x04, 0x01, 0x00,
0x00, 0x0f, 0xac, 0x02 };
static const char *ssid = "TestWPA2PSK";
static const uint8_t psk[32] = { /* secretsecret */
0x6a, 0xa3, 0xf0, 0x0b, 0x68, 0xbd, 0x8b, 0x46,
0x69, 0x83, 0xa5, 0x29, 0xa3, 0xfa, 0x57, 0x1c,
0x6c, 0x7b, 0x72, 0x41, 0x1d, 0xce, 0x33, 0x02,
0xa2, 0x2d, 0xdf, 0x77, 0xd1, 0x93, 0xdb, 0x5f };
struct test_ap_sta_data s = {
.ap_hs = test_ap_sta_hs_new(&s, 1),
.sta_hs = test_ap_sta_hs_new(&s, 2),
.ap_address = { 0x02, 0x03, 0x04, 0x05, 0x06, 0x07 },
.sta_address = { 0x02, 0x03, 0x04, 0x05, 0x06, 0x08 },
};
__handshake_set_get_nonce_func(random_nonce);
__handshake_set_install_tk_func(test_ap_sta_install_tk);
__handshake_set_install_gtk_func(NULL);
handshake_state_set_authenticator(s.ap_hs, true);
handshake_state_set_event_func(s.ap_hs, test_ap_sta_hs_event, &s);
handshake_state_set_authenticator_address(s.ap_hs, s.ap_address);
handshake_state_set_supplicant_address(s.ap_hs, s.sta_address);
handshake_state_set_supplicant_ie(s.ap_hs, sta_rsne);
handshake_state_set_authenticator_ie(s.ap_hs, ap_rsne);
handshake_state_set_ssid(s.ap_hs, (void *) ssid, strlen(ssid));
handshake_state_set_pmk(s.ap_hs, psk, 32);
s.ap_hs->support_ip_allocation = true;
unit: Fix eapol IP Allocation test failure This test was failing due to a change introduced in commit 5c9de0cf23f9 which changed handshake state storage of IPs from host order to network byte order. Update the test to set IPs in network byte-order. Fixes: 5c9de0cf23f9 ("eapol: Store IP address in network byte order")
2021-08-23 15:51:35 +02:00
s.ap_hs->client_ip_addr = L_CPU_TO_BE32(0x01020304);
s.ap_hs->subnet_mask = L_CPU_TO_BE32(0xffff0000);
s.ap_hs->go_ip_addr = L_CPU_TO_BE32(0x01020305);
unit: Add two EAPOL IP allocation scenarios
2020-09-14 15:51:20 +02:00
handshake_state_set_authenticator(s.sta_hs, false);
handshake_state_set_event_func(s.sta_hs, test_ap_sta_hs_event, &s);
handshake_state_set_authenticator_address(s.sta_hs, s.ap_address);
handshake_state_set_supplicant_address(s.sta_hs, s.sta_address);
handshake_state_set_supplicant_ie(s.sta_hs, sta_rsne);
handshake_state_set_authenticator_ie(s.sta_hs, ap_rsne);
handshake_state_set_ssid(s.sta_hs, (void *) ssid, strlen(ssid));
handshake_state_set_pmk(s.sta_hs, psk, 32);
s.sta_hs->support_ip_allocation = true;
test_ap_sta_run(&s);
assert(s.ap_hs->support_ip_allocation);
assert(s.sta_hs->support_ip_allocation);
assert(s.sta_hs->client_ip_addr == s.ap_hs->client_ip_addr);
assert(s.sta_hs->subnet_mask == s.ap_hs->subnet_mask);
assert(s.sta_hs->go_ip_addr == s.ap_hs->go_ip_addr);
handshake_state_free(s.ap_hs);
handshake_state_free(s.sta_hs);
__handshake_set_install_tk_func(NULL);
assert(s.ap_success && s.sta_success);
assert(s.to_ap_msg_cnt == 2 && s.to_sta_msg_cnt == 2);
assert(!memcmp(s.ap_tk, s.sta_tk, 16));
}
static void eapol_ap_sta_handshake_ip_alloc_no_req_test(const void *data)
{
static const unsigned char ap_rsne[] = {
0x30, 0x14, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x04,
0x01, 0x00, 0x00, 0x0f, 0xac, 0x04, 0x01, 0x00,
0x00, 0x0f, 0xac, 0x02, 0x81, 0x00 };
static const unsigned char sta_rsne[] = {
0x30, 0x12, 0x01, 0x00, 0x00, 0x0f, 0xac, 0x04,
0x01, 0x00, 0x00, 0x0f, 0xac, 0x04, 0x01, 0x00,
0x00, 0x0f, 0xac, 0x02 };
static const char *ssid = "TestWPA2PSK";
static const uint8_t psk[32] = { /* secretsecret */
0x6a, 0xa3, 0xf0, 0x0b, 0x68, 0xbd, 0x8b, 0x46,
0x69, 0x83, 0xa5, 0x29, 0xa3, 0xfa, 0x57, 0x1c,
0x6c, 0x7b, 0x72, 0x41, 0x1d, 0xce, 0x33, 0x02,
0xa2, 0x2d, 0xdf, 0x77, 0xd1, 0x93, 0xdb, 0x5f };
struct test_ap_sta_data s = {
.ap_hs = test_ap_sta_hs_new(&s, 1),
.sta_hs = test_ap_sta_hs_new(&s, 2),
.ap_address = { 0x02, 0x03, 0x04, 0x05, 0x06, 0x07 },
.sta_address = { 0x02, 0x03, 0x04, 0x05, 0x06, 0x08 },
};
__handshake_set_get_nonce_func(random_nonce);
__handshake_set_install_tk_func(test_ap_sta_install_tk);
__handshake_set_install_gtk_func(NULL);
handshake_state_set_authenticator(s.ap_hs, true);
handshake_state_set_event_func(s.ap_hs, test_ap_sta_hs_event, &s);
handshake_state_set_authenticator_address(s.ap_hs, s.ap_address);
handshake_state_set_supplicant_address(s.ap_hs, s.sta_address);
handshake_state_set_supplicant_ie(s.ap_hs, sta_rsne);
handshake_state_set_authenticator_ie(s.ap_hs, ap_rsne);
handshake_state_set_ssid(s.ap_hs, (void *) ssid, strlen(ssid));
handshake_state_set_pmk(s.ap_hs, psk, 32);
s.ap_hs->support_ip_allocation = true;
unit: Consistently use network-byte-order Commit ed10b00afa3f ("unit: Fix eapol IP Allocation test failure") did not convert all instances of IP allocation settings to network byte order. Fixes: 5c9de0cf23f9 ("eapol: Store IP address in network byte order")
2021-10-25 17:39:00 +02:00
s.ap_hs->client_ip_addr = L_CPU_TO_BE32(0x01020304);
s.ap_hs->subnet_mask = L_CPU_TO_BE32(0xffff0000);
s.ap_hs->go_ip_addr = L_CPU_TO_BE32(0x01020305);
unit: Add two EAPOL IP allocation scenarios
2020-09-14 15:51:20 +02:00
handshake_state_set_authenticator(s.sta_hs, false);
handshake_state_set_event_func(s.sta_hs, test_ap_sta_hs_event, &s);
handshake_state_set_authenticator_address(s.sta_hs, s.ap_address);
handshake_state_set_supplicant_address(s.sta_hs, s.sta_address);
handshake_state_set_supplicant_ie(s.sta_hs, sta_rsne);
handshake_state_set_authenticator_ie(s.sta_hs, ap_rsne);
handshake_state_set_ssid(s.sta_hs, (void *) ssid, strlen(ssid));
handshake_state_set_pmk(s.sta_hs, psk, 32);
s.ap_hs->support_ip_allocation = false;
test_ap_sta_run(&s);
assert(!s.ap_hs->support_ip_allocation);
assert(!s.sta_hs->support_ip_allocation);
handshake_state_free(s.ap_hs);
handshake_state_free(s.sta_hs);
__handshake_set_install_tk_func(NULL);
assert(s.ap_success && s.sta_success);
assert(s.to_ap_msg_cnt == 2 && s.to_sta_msg_cnt == 2);
assert(!memcmp(s.ap_tk, s.sta_tk, 16));
}
build: Hide the PKCS8 unit tests behind MAINTAINER_MODE for now
2019-10-11 08:57:38 +02:00
#define IS_ENABLED(config_macro) _IS_ENABLED1(config_macro)
#define _IS_ENABLED1(config_macro) _IS_ENABLED2(_XXXX##config_macro)
#define _XXXX1 _YYYY,
#define _IS_ENABLED2(one_or_two_args) _IS_ENABLED3(one_or_two_args true, false)
#define _IS_ENABLED3(ignore_this, val, ...) val
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
int main(int argc, char *argv[])
{
l_test_init(&argc, &argv);
l_test_add("/EAPoL Key/Key Frame 1",
eapol_key_test, &eapol_key_test_1);
unit: Add another EAPoL-Key frame test
2014-12-19 22:45:59 +01:00
l_test_add("/EAPoL Key/Key Frame 2",
eapol_key_test, &eapol_key_test_2);
unit: Add another EAPoL-Key frame test
2014-12-24 20:44:38 +01:00
l_test_add("/EAPoL Key/Key Frame 3",
eapol_key_test, &eapol_key_test_3);
unit: Add another EAPoL test frame This one is 2 of 4
2014-12-24 22:21:48 +01:00
l_test_add("/EAPoL Key/Key Frame 4",
eapol_key_test, &eapol_key_test_4);
unit: Add EAPoL WPA2 Step 3 of 4 Frame
2015-02-13 18:23:54 +01:00
l_test_add("/EAPoL Key/Key Frame 5",
eapol_key_test, &eapol_key_test_5);
unit: Add EAPoL WPA2 Step 4 of 4 Frame
2015-02-13 20:49:02 +01:00
l_test_add("/EAPoL Key/Key Frame 6",
eapol_key_test, &eapol_key_test_6);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
l_test_add("/EAPoL Key/Key Frame 7",
eapol_key_test, &eapol_key_test_7);
l_test_add("/EAPoL Key/Key Frame 8",
eapol_key_test, &eapol_key_test_8);
l_test_add("/EAPoL Key/Key Frame 9",
eapol_key_test, &eapol_key_test_9);
l_test_add("/EAPoL Key/Key Frame 10",
eapol_key_test, &eapol_key_test_10);
l_test_add("/EAPoL Key/Key Frame 11",
eapol_key_test, &eapol_key_test_11);
l_test_add("/EAPoL Key/Key Frame 12",
eapol_key_test, &eapol_key_test_12);
unit: WPA+TKIP EAPOL-Key frame tests.
2015-05-18 13:31:42 +02:00
l_test_add("/EAPoL Key/Key Frame 13",
eapol_key_test, &eapol_key_test_13);
l_test_add("/EAPoL Key/Key Frame 14",
eapol_key_test, &eapol_key_test_14);
l_test_add("/EAPoL Key/Key Frame 15",
eapol_key_test, &eapol_key_test_15);
l_test_add("/EAPoL Key/Key Frame 16",
eapol_key_test, &eapol_key_test_16);
l_test_add("/EAPoL Key/Key Frame 17",
eapol_key_test, &eapol_key_test_17);
l_test_add("/EAPoL Key/Key Frame 18",
eapol_key_test, &eapol_key_test_18);
unit: Add WPA1 Step 1/4 test data + test
2015-05-18 20:03:26 +02:00
l_test_add("/EAPoL Key/Key Frame 19",
eapol_key_test, &eapol_key_test_19);
unit: Add WPA1 Step 2/4 test data + test
2015-05-18 20:04:08 +02:00
l_test_add("/EAPoL Key/Key Frame 20",
eapol_key_test, &eapol_key_test_20);
unit: Add WPA1 Step 3/4 test data + test
2015-05-18 20:04:33 +02:00
l_test_add("/EAPoL Key/Key Frame 21",
eapol_key_test, &eapol_key_test_21);
unit: Add WPA1 Step 4/4 test data + test
2015-05-18 20:04:45 +02:00
l_test_add("/EAPoL Key/Key Frame 22",
eapol_key_test, &eapol_key_test_22);
unit: Add WPA1 GTK Step 1/2 test data + test
2015-05-18 20:09:22 +02:00
l_test_add("/EAPoL Key/Key Frame 23",
eapol_key_test, &eapol_key_test_23);
unit: Add WPA1 GTK Step 2/2 test data + test
2015-05-18 20:09:36 +02:00
l_test_add("/EAPoL Key/Key Frame 24",
eapol_key_test, &eapol_key_test_24);
unit: FT 4-Way Handshake eapol test This also tests that the FT crypto functions work. For the record these are the values of the intermediate keys in this test: ANonce: 33 b2 74 a0 ae c9 e8 5d 61 11 8f 1b 6b 97 77 4e 5b 75 08 37 45 77 dc 14 08 a5 f1 80 c5 d2 e9 fd SNonce: ac 1e b2 c7 0b 20 8c e6 0a e2 07 b2 38 9e 44 1f ff 39 86 3d 44 9f 81 24 6f e3 6e de 0f 1f 56 ce PMK-R0: ad b8 81 bf 50 11 1c fd 0b 5c 87 23 42 bf 3b 54 3e 81 d6 3f 3e 18 cf 0a 8d 3d 85 4f d8 07 ad d5 PMKR0Name: cc 62 4a e8 6e 0c 85 25 06 02 22 15 f7 3d 0d 01 PMK-R1: 17 6a 37 92 25 28 72 9f 40 18 06 20 b4 2d 34 2a 7b 8d da 09 4c a9 cf 84 bd 55 4a 39 bc 5d c1 61 PMKR1Name: de ce 50 a0 9e f0 8c 4e be f2 f1 db e9 67 b4 d4 KCK: e4 2d ee 98 f9 9d fb f8 32 9f 50 41 05 58 35 a2 KEK: 34 5e 22 4e 91 73 8a 97 dd c4 19 53 c5 c8 d7 29 TK: 7c ff bd 35 ce 11 c5 75 1d 4c c6 7a df c2 a2 78 PTKName: 31 e4 94 a6 96 a5 c3 7e 2f 33 9c 47 04 dc ae 05
2016-11-02 23:46:15 +01:00
l_test_add("/EAPoL Key/Key Frame 25",
eapol_key_test, &eapol_key_test_25);
l_test_add("/EAPoL Key/Key Frame 26",
eapol_key_test, &eapol_key_test_26);
l_test_add("/EAPoL Key/Key Frame 27",
eapol_key_test, &eapol_key_test_27);
l_test_add("/EAPoL Key/Key Frame 28",
eapol_key_test, &eapol_key_test_28);
unit/test-eapol: igtk test with mfp enabled This is the first version of the test
2016-12-02 16:18:52 +01:00
l_test_add("/EAPoL Key/Key Frame 29",
eapol_key_test, &eapol_key_test_29);
l_test_add("/EAPoL Key/Key Frame 30",
eapol_key_test, &eapol_key_test_30);
l_test_add("/EAPoL Key/Key Frame 31",
eapol_key_test, &eapol_key_test_31);
l_test_add("/EAPoL Key/Key Frame 32",
eapol_key_test, &eapol_key_test_32);
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
unit: Only run tests if checksum is available
2017-06-01 23:30:14 +02:00
if (!l_checksum_is_supported(L_CHECKSUM_MD5, true) ||
!l_checksum_is_supported(L_CHECKSUM_SHA1, true))
goto done;
unit: Add MIC calculation test
2014-12-28 05:29:12 +01:00
l_test_add("/EAPoL Key/MIC Test 1",
eapol_key_mic_test, &eapol_key_mic_test_1);
l_test_add("/EAPoL Key/MIC Test 2",
eapol_key_mic_test, &eapol_key_mic_test_2);
unit: Add eapol_calculate_mic test
2014-12-28 05:53:14 +01:00
l_test_add("/EAPoL Key/Calculate MIC Test 1",
eapol_calculate_mic_test, &eapol_calculate_mic_test_1);
crypto: incorporate C implementation of ARC4 Incorporate the LGPL v2.1 licensed implementation of ARC4, taken from the Nettle project (https://git.lysator.liu.se/nettle/nettle.git, commit 3e7a480a1e351884), and tweak it a bit so we don't have to operate on a skip buffer to fast forward the stream cipher, but can simply invoke it with NULL dst or src arguments to achieve the same. This removes the dependency [via libell] on the OS's implementation of ecb(arc4), which may be going away, and which is not usually accelerated in the first place.
2020-08-03 12:45:09 +02:00
if (!l_cipher_is_supported(L_CIPHER_AES))
unit: Skip EAPoL tests when kernel features are missing
2018-01-23 22:50:35 +01:00
goto done;
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
l_test_add("EAPoL/WPA2 4-Way Handshake",
unit: Add 2 steps of 4-way handshake test
2014-12-28 06:04:30 +01:00
&eapol_4way_test, NULL);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
l_test_add("EAPoL/WPA2 4-Way & GTK Handshake",
&eapol_wpa2_handshake_test, NULL);
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
l_test_add("EAPoL/WPA 4-Way & GTK Handshake",
&eapol_wpa_handshake_test, NULL);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
l_test_add("EAPoL/WPA2 PTK State Machine", &eapol_sm_test_ptk, NULL);
unit/test-eapol: igtk test with mfp enabled This is the first version of the test
2016-12-02 16:18:52 +01:00
l_test_add("EAPoL IGTK & 4-Way Handshake",
&eapol_sm_test_igtk, NULL);
unit: GTK Handshake tests.
2015-05-06 01:48:39 +02:00
l_test_add("EAPoL/WPA2 PTK & GTK State Machine",
&eapol_sm_test_wpa2_ptk_gtk, NULL);
unit: Add EAPoL state machine test
2015-02-24 18:14:31 +01:00
unit: Add another WPA1 TK/GTK handshake test
2015-05-18 21:56:55 +02:00
l_test_add("EAPoL/WPA PTK & GTK State Machine Test 1",
unit: WPA+TKIP handshake logic tests.
2015-05-18 13:31:43 +02:00
&eapol_sm_test_wpa_ptk_gtk, NULL);
unit: Add another WPA1 TK/GTK handshake test
2015-05-18 21:56:55 +02:00
l_test_add("EAPoL/WPA PTK & GTK State Machine Test 2",
&eapol_sm_test_wpa_ptk_gtk_2, NULL);
unit: Add EAPoL retransmission test
2017-10-19 23:43:58 +02:00
l_test_add("EAPoL/WPA2 Retransmit Test",
&eapol_sm_wpa2_retransmit_test, NULL);
build: Hide the PKCS8 unit tests behind MAINTAINER_MODE for now
2019-10-11 08:57:38 +02:00
if (IS_ENABLED(HAVE_PKCS8_SUPPORT) &&
l_cipher_is_supported(L_CIPHER_DES3_EDE_CBC) &&
unit: Skip EAPoL tests when kernel features are missing
2018-01-23 22:50:35 +01:00
l_cipher_is_supported(L_CIPHER_AES_CBC) &&
l_key_is_supported(L_KEY_FEATURE_RESTRICT |
build: Hide the PKCS8 unit tests behind MAINTAINER_MODE for now
2019-10-11 08:57:38 +02:00
L_KEY_FEATURE_CRYPTO)) {
unit: Skip EAPoL tests when kernel features are missing
2018-01-23 22:50:35 +01:00
l_test_add("EAPoL/8021x EAP-TLS & 4-Way Handshake",
&eapol_sm_test_eap_tls, NULL);
l_test_add("EAPoL/8021x EAP-TTLS+EAP-MD5 & 4-Way Handshake",
&eapol_sm_test_eap_ttls_md5, NULL);
l_test_add("EAPoL/8021x EAP NAK",
&eapol_sm_test_eap_nak, NULL);
unit: Test the EAP-TLS-ServerSubjectMatch config option
2019-08-23 03:30:24 +02:00
l_test_add("EAPoL/8021x EAP-TLS subject name match",
&eapol_sm_test_eap_tls_subject_good, NULL);
l_test_add("EAPoL/8021x EAP-TLS subject name mismatch",
&eapol_sm_test_eap_tls_subject_bad, NULL);
unit: add test for embedded certs to test-eapol Refactored eapol_sm_test_tls to take a l_settings object rather than a settings string. This lets the caller either load from data or from file (the new test loads the build time generated tls-settings file).
2019-10-07 20:11:58 +02:00
l_test_add("EAPoL/8021x EAP-TLS embedded certs",
&eapol_sm_test_eap_tls_embedded, NULL);
unit: Skip EAPoL tests when kernel features are missing
2018-01-23 22:50:35 +01:00
}
unit: Add an EAPoL+EAP failure test
2015-10-30 11:12:25 +01:00
unit: FT 4-Way Handshake eapol test This also tests that the FT crypto functions work. For the record these are the values of the intermediate keys in this test: ANonce: 33 b2 74 a0 ae c9 e8 5d 61 11 8f 1b 6b 97 77 4e 5b 75 08 37 45 77 dc 14 08 a5 f1 80 c5 d2 e9 fd SNonce: ac 1e b2 c7 0b 20 8c e6 0a e2 07 b2 38 9e 44 1f ff 39 86 3d 44 9f 81 24 6f e3 6e de 0f 1f 56 ce PMK-R0: ad b8 81 bf 50 11 1c fd 0b 5c 87 23 42 bf 3b 54 3e 81 d6 3f 3e 18 cf 0a 8d 3d 85 4f d8 07 ad d5 PMKR0Name: cc 62 4a e8 6e 0c 85 25 06 02 22 15 f7 3d 0d 01 PMK-R1: 17 6a 37 92 25 28 72 9f 40 18 06 20 b4 2d 34 2a 7b 8d da 09 4c a9 cf 84 bd 55 4a 39 bc 5d c1 61 PMKR1Name: de ce 50 a0 9e f0 8c 4e be f2 f1 db e9 67 b4 d4 KCK: e4 2d ee 98 f9 9d fb f8 32 9f 50 41 05 58 35 a2 KEK: 34 5e 22 4e 91 73 8a 97 dd c4 19 53 c5 c8 d7 29 TK: 7c ff bd 35 ce 11 c5 75 1d 4c c6 7a df c2 a2 78 PTKName: 31 e4 94 a6 96 a5 c3 7e 2f 33 9c 47 04 dc ae 05
2016-11-02 23:46:15 +01:00
l_test_add("EAPoL/FT-Using-PSK 4-Way Handshake",
&eapol_ft_handshake_test, NULL);
unit: Add an authenticator-side 4-Way Handshake test Test the eapol.c code responsible for the access point mode 4-way handshake with correct IEs and PSK on both sides (success scenario).
2020-08-17 12:06:45 +02:00
l_test_add("EAPoL/Supplicant+Authenticator 4-Way Handshake",
&eapol_ap_sta_handshake_test, NULL);
unit: Authenticator 4-way handshake error scenario
2020-08-17 12:06:46 +02:00
l_test_add("EAPoL/Supplicant+Authenticator 4-Way Handshake Bad PSK",
&eapol_ap_sta_handshake_bad_psk_test, NULL);
unit: Add two EAPOL IP allocation scenarios
2020-09-14 15:51:20 +02:00
l_test_add("EAPoL/Supplicant+Authenticator IP Allocation OK",
&eapol_ap_sta_handshake_ip_alloc_ok_test, NULL);
l_test_add("EAPoL/Supplicant+Authenticator IP Allocation no request",
&eapol_ap_sta_handshake_ip_alloc_no_req_test, NULL);
unit: Add an authenticator-side 4-Way Handshake test Test the eapol.c code responsible for the access point mode 4-way handshake with correct IEs and PSK on both sides (success scenario).
2020-08-17 12:06:45 +02:00
unit: Only run tests if checksum is available
2017-06-01 23:30:14 +02:00
done:
unit: Add initial unit test for EAPoL
2014-12-19 01:11:12 +01:00
return l_test_run();
}
Copy Permalink