crypto: Implement crypto_derive_pmk_r1

This commit is contained in:
Andrew Zaborowski 2016-09-06 23:43:40 +02:00 committed by Denis Kenzior
parent 994ffd94c5
commit efbbe9870b
2 changed files with 48 additions and 0 deletions

View File

@ -535,3 +535,46 @@ exit:
return r;
}
/* Defined in 802.11-2012, Section 11.6.1.7.4 PMK-R1 */
bool crypto_derive_pmk_r1(const uint8_t *pmk_r0,
const uint8_t *r1khid, const uint8_t *s1khid,
const uint8_t *pmk_r0_name,
uint8_t *out_pmk_r1,
uint8_t *out_pmk_r1_name)
{
uint8_t context[2 * ETH_ALEN];
struct l_checksum *sha256;
bool r = false;
struct iovec iov[3] = {
[0] = { .iov_base = "FT-R1N", .iov_len = 6 },
[1] = { .iov_base = (uint8_t *) pmk_r0_name, .iov_len = 16 },
[2] = { .iov_base = context, .iov_len = sizeof(context) },
};
memcpy(context, r1khid, ETH_ALEN);
memcpy(context + ETH_ALEN, s1khid, ETH_ALEN);
if (!kdf_sha256(pmk_r0, 32, "FT-R1", 5, context, sizeof(context),
out_pmk_r1, 32))
goto exit;
sha256 = l_checksum_new(L_CHECKSUM_SHA256);
if (!sha256) {
memset(out_pmk_r1, 0, 32);
goto exit;
}
l_checksum_updatev(sha256, iov, 3);
l_checksum_get_digest(sha256, out_pmk_r1_name, 16);
l_checksum_free(sha256);
r = true;
exit:
memset(context, 0, sizeof(context));
return r;
}

View File

@ -86,3 +86,8 @@ bool crypto_derive_pmk_r0(const uint8_t *xxkey,
const uint8_t *r0khid, size_t r0kh_len,
const uint8_t *s0khid, uint8_t *out_pmk_r0,
uint8_t *out_pmk_r0_name);
bool crypto_derive_pmk_r1(const uint8_t *pmk_r0,
const uint8_t *r1khid, const uint8_t *s1khid,
const uint8_t *pmk_r0_name,
uint8_t *out_pmk_r1,
uint8_t *out_pmk_r1_name);