3
0
mirror of https://git.kernel.org/pub/scm/network/wireless/iwd.git synced 2024-11-22 23:09:34 +01:00

eapol: On EAP success save the second 256 bits of MSK

This commit is contained in:
Andrew Zaborowski 2016-09-06 23:43:43 +02:00 committed by Denis Kenzior
parent 443e363c20
commit 1b1bf3cf65

View File

@ -1483,8 +1483,18 @@ static void eapol_eap_results_cb(const uint8_t *msk_data, size_t msk_len,
* RFC5247 explains AAA-Key refers to the MSK and confirms the
* first 32 bytes of the MSK are used. MSK is at least 64 octets
* long per RFC3748. Note WEP derives the PTK from MSK differently.
*
* In a Fast Transition initial mobility domain association the PMK
* maps to the XXKey except with EAP:
* 802.11 11.6.1.7.3:
* "If the AKM negotiated is 00-0F-AC:3, then XXKey shall be the
* second 256 bits of the MSK (which is derived from the IEEE
* 802.1X authentication), i.e., XXKey = L(MSK, 256, 256)."
*/
if (sm->akm_suite == IE_RSN_AKM_SUITE_FT_OVER_8021X)
eapol_sm_set_pmk(sm, msk_data + 32);
else
eapol_sm_set_pmk(sm, msk_data);
}