Kernel
/
iwd
mirror of https://git.kernel.org/pub/scm/network/wireless/iwd.git
3
0
Fork 0
Code Releases Activity

crypto: Expose crypto_sae_hash_from_ecc_prime_len

This commit is contained in:
Denis Kenzior 2021-07-11 20:33:51 -05:00
parent 77e387dd0c
commit 993a934803
2 changed files with 21 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
src/crypto.c
View File

@ -1146,9 +1146,17 @@ bool crypto_derive_pmkid(const uint8_t *pmk,
return hmac_sha1(pmk, 32, data, 20, out_pmkid, 16);
}
/* 802.11-2020, Table 12-1 Hash algorithm based on length of prime */
static enum l_checksum_type ecc_hash_from_prime_len(size_t prime_len)
enum l_checksum_type crypto_sae_hash_from_ecc_prime_len(enum crypto_sae type,
size_t prime_len)
{
/*
* If used with the looping technique described in 12.4.4.2.2 and
* 12.4.4.3.2, H and CN are instantiated with SHA-256.
*/
if (type == CRYPTO_SAE_LOOPING)
return L_CHECKSUM_SHA256;
/* 802.11-2020, Table 12-1 Hash algorithm based on length of prime */
if (prime_len <= 256 / 8)
return L_CHECKSUM_SHA256;
@ -1178,7 +1186,8 @@ struct l_ecc_point *crypto_derive_sae_pt_ecc(unsigned int group,
if (!curve)
return NULL;
hash = ecc_hash_from_prime_len(l_ecc_curve_get_scalar_bytes(curve));
hash = crypto_sae_hash_from_ecc_prime_len(CRYPTO_SAE_HASH_TO_ELEMENT,
l_ecc_curve_get_scalar_bytes(curve));
hash_len = l_checksum_digest_length(hash);
/* pwd-seed = HKDF-Extract(ssid, password [|| identifier]) */
@ -1228,7 +1237,8 @@ struct l_ecc_point *crypto_derive_sae_pwe_from_pt_ecc(const uint8_t *mac1,
if (!pt || !curve)
return false;
hash = ecc_hash_from_prime_len(l_ecc_curve_get_scalar_bytes(curve));
hash = crypto_sae_hash_from_ecc_prime_len(CRYPTO_SAE_HASH_TO_ELEMENT,
l_ecc_curve_get_scalar_bytes(curve));
hash_len = l_checksum_digest_length(hash);
/*

7
src/crypto.h
View File

@ -149,6 +149,13 @@ bool crypto_derive_pmkid(const uint8_t *pmk,
const uint8_t *addr1, const uint8_t *addr2,
uint8_t *out_pmkid, bool use_sha256);
enum crypto_sae {
CRYPTO_SAE_LOOPING,
CRYPTO_SAE_HASH_TO_ELEMENT,
};
enum l_checksum_type crypto_sae_hash_from_ecc_prime_len(enum crypto_sae type,
size_t prime_len);
struct l_ecc_point *crypto_derive_sae_pt_ecc(unsigned int group,
const char *ssid,
const char *password,