~ubuntu-branches/ubuntu/saucy/wpasupplicant/saucy

Viewing changes to src/eap_server/eap_aka.c

Committer: Bazaar Package Importer
Author(s): Mathieu Trudel-Lapierre
Date: 2010-11-22 09:43:43 UTC
mfrom: (1.1.16 upstream)
Revision ID: james.westby@ubuntu.com-20101122094343-qgsxaojvmswfri77

Tags: 0.7.3-0ubuntu1

* Get wpasupplicant 0.7.3 from Debian's SVN. Leaving 0.7.3-1 as unreleased
for now.
* Build-Depend on debhelper 8, since the packaging from Debian uses compat 8.

files added:
.pc/02_dbus_group_policy.patch/wpa_supplicant/dbus

.pc/02_dbus_group_policy.patch/wpa_supplicant/dbus/dbus-wpa_supplicant.conf

.pc/07_dbus_service_syslog.patch/wpa_supplicant/dbus

.pc/07_dbus_service_syslog.patch/wpa_supplicant/dbus/fi.epitest.hostap.WPASupplicant.service

.pc/07_dbus_service_syslog.patch/wpa_supplicant/dbus/fi.w1.wpa_supplicant1.service

debian/wpasupplicant.lintian-overrides

src/ap

src/ap/Makefile

src/ap/accounting.c

src/ap/accounting.h

src/ap/ap_config.c

src/ap/ap_config.h

src/ap/ap_drv_ops.c

src/ap/ap_drv_ops.h

src/ap/ap_list.c

src/ap/ap_list.h

src/ap/ap_mlme.c

src/ap/ap_mlme.h

src/ap/authsrv.c

src/ap/authsrv.h

src/ap/beacon.c

src/ap/beacon.h

src/ap/ctrl_iface_ap.c

src/ap/ctrl_iface_ap.h

src/ap/drv_callbacks.c

src/ap/hostapd.c

src/ap/hostapd.h

src/ap/hw_features.c

src/ap/hw_features.h

src/ap/iapp.c

src/ap/iapp.h

src/ap/ieee802_11.c

src/ap/ieee802_11.h

src/ap/ieee802_11_auth.c

src/ap/ieee802_11_auth.h

src/ap/ieee802_11_ht.c

src/ap/ieee802_1x.c

src/ap/ieee802_1x.h

src/ap/peerkey_auth.c

src/ap/pmksa_cache_auth.c

src/ap/pmksa_cache_auth.h

src/ap/preauth_auth.c

src/ap/preauth_auth.h

src/ap/sta_info.c

src/ap/sta_info.h

src/ap/tkip_countermeasures.c

src/ap/tkip_countermeasures.h

src/ap/utils.c

src/ap/vlan_init.c

src/ap/vlan_init.h

src/ap/wmm.c

src/ap/wmm.h

src/ap/wpa_auth.c

src/ap/wpa_auth.h

src/ap/wpa_auth_ft.c

src/ap/wpa_auth_glue.c

src/ap/wpa_auth_glue.h

src/ap/wpa_auth_i.h

src/ap/wpa_auth_ie.c

src/ap/wpa_auth_ie.h

src/ap/wps_hostapd.c

src/ap/wps_hostapd.h

src/crypto/.gitignore

src/crypto/aes-cbc.c

src/crypto/aes-ctr.c

src/crypto/aes-eax.c

src/crypto/aes-encblock.c

src/crypto/aes-internal-dec.c

src/crypto/aes-internal-enc.c

src/crypto/aes-internal.c

src/crypto/aes-omac1.c

src/crypto/aes-unwrap.c

src/crypto/aes-wrap.c

src/crypto/aes_i.h

src/crypto/crypto_internal-cipher.c

src/crypto/crypto_internal-modexp.c

src/crypto/crypto_internal-rsa.c

src/crypto/crypto_nss.c

src/crypto/des-internal.c

src/crypto/des_i.h

src/crypto/dh_group5.c

src/crypto/dh_group5.h

src/crypto/fips_prf_cryptoapi.c

src/crypto/fips_prf_gnutls.c

src/crypto/fips_prf_internal.c

src/crypto/fips_prf_nss.c

src/crypto/fips_prf_openssl.c

src/crypto/md4-internal.c

src/crypto/md5-internal.c

src/crypto/md5-non-fips.c

src/crypto/md5_i.h

src/crypto/milenage.c

src/crypto/milenage.h

src/crypto/sha1-internal.c

src/crypto/sha1-pbkdf2.c

src/crypto/sha1-tlsprf.c

src/crypto/sha1-tprf.c

src/crypto/sha1_i.h

src/crypto/sha256-internal.c

src/crypto/tls_nss.c

src/drivers/.gitignore

src/drivers/driver_atheros.c

src/drivers/driver_none.c

src/drivers/drivers.mak

src/drivers/linux_ioctl.c

src/drivers/linux_ioctl.h

src/drivers/netlink.c

src/drivers/netlink.h

src/drivers/nl80211_copy.h

src/drivers/wireless_copy.h

src/eap_server/eap_server.c

src/eap_server/eap_server_aka.c

src/eap_server/eap_server_fast.c

src/eap_server/eap_server_gpsk.c

src/eap_server/eap_server_gtc.c

src/eap_server/eap_server_identity.c

src/eap_server/eap_server_ikev2.c

src/eap_server/eap_server_md5.c

src/eap_server/eap_server_methods.c

src/eap_server/eap_server_mschapv2.c

src/eap_server/eap_server_pax.c

src/eap_server/eap_server_peap.c

src/eap_server/eap_server_psk.c

src/eap_server/eap_server_sake.c

src/eap_server/eap_server_sim.c

src/eap_server/eap_server_tls.c

src/eap_server/eap_server_tls_common.c

src/eap_server/eap_server_tnc.c

src/eap_server/eap_server_ttls.c

src/eap_server/eap_server_vendor_test.c

src/eap_server/eap_server_wsc.c

src/eapol_auth

src/eapol_auth/Makefile

src/eapol_auth/eapol_auth_dump.c

src/eapol_auth/eapol_auth_sm.c

src/eapol_auth/eapol_auth_sm.h

src/eapol_auth/eapol_auth_sm_i.h

src/lib.rules

src/radius/.gitignore

src/tls/.gitignore

src/tls/pkcs1.c

src/tls/pkcs1.h

src/tls/pkcs5.c

src/tls/pkcs5.h

src/tls/pkcs8.c

src/tls/pkcs8.h

src/utils/.gitignore

src/utils/list.h

src/utils/radiotap.c

src/utils/radiotap.h

src/utils/radiotap_iter.h

src/utils/trace.c

src/utils/trace.h

src/wps/http.h

src/wps/http_client.c

src/wps/http_client.h

src/wps/http_server.c

src/wps/http_server.h

src/wps/ndef.c

src/wps/upnp_xml.c

src/wps/upnp_xml.h

src/wps/wps_er.c

src/wps/wps_er.h

src/wps/wps_er_ssdp.c

src/wps/wps_nfc.c

src/wps/wps_nfc_pn531.c

src/wps/wps_ufd.c

src/wps/wps_upnp_ap.c

wpa_supplicant/ap.c

wpa_supplicant/ap.h

wpa_supplicant/bgscan.c

wpa_supplicant/bgscan.h

wpa_supplicant/bgscan_simple.c

wpa_supplicant/bss.c

wpa_supplicant/bss.h

wpa_supplicant/dbus

wpa_supplicant/dbus/.gitignore

wpa_supplicant/dbus/Makefile

wpa_supplicant/dbus/dbus-wpa_supplicant.conf

wpa_supplicant/dbus/dbus_common.c

wpa_supplicant/dbus/dbus_common.h

wpa_supplicant/dbus/dbus_common_i.h

wpa_supplicant/dbus/dbus_dict_helpers.c

wpa_supplicant/dbus/dbus_dict_helpers.h

wpa_supplicant/dbus/dbus_new.c

wpa_supplicant/dbus/dbus_new.h

wpa_supplicant/dbus/dbus_new_handlers.c

wpa_supplicant/dbus/dbus_new_handlers.h

wpa_supplicant/dbus/dbus_new_handlers_wps.c

wpa_supplicant/dbus/dbus_new_helpers.c

wpa_supplicant/dbus/dbus_new_helpers.h

wpa_supplicant/dbus/dbus_new_introspect.c

wpa_supplicant/dbus/dbus_old.c

wpa_supplicant/dbus/dbus_old.h

wpa_supplicant/dbus/dbus_old_handlers.c

wpa_supplicant/dbus/dbus_old_handlers.h

wpa_supplicant/dbus/dbus_old_handlers_wps.c

wpa_supplicant/dbus/fi.epitest.hostap.WPASupplicant.service

wpa_supplicant/dbus/fi.w1.wpa_supplicant1.service

wpa_supplicant/driver_i.h

wpa_supplicant/eap_register.c

wpa_supplicant/examples/60_wpa_supplicant

wpa_supplicant/examples/wpas-dbus-new-getall.py

wpa_supplicant/examples/wpas-dbus-new-signals.py

wpa_supplicant/examples/wpas-dbus-new-wps.py

wpa_supplicant/examples/wpas-dbus-new.py

wpa_supplicant/ibss_rsn.c

wpa_supplicant/ibss_rsn.h

wpa_supplicant/notify.c

wpa_supplicant/notify.h

wpa_supplicant/scan.h

wpa_supplicant/sme.c

wpa_supplicant/sme.h

wpa_supplicant/wpa_gui-qt4/icons/ap.svg

wpa_supplicant/wpa_gui-qt4/icons/laptop.svg

wpa_supplicant/wpa_gui-qt4/lang

wpa_supplicant/wpa_gui-qt4/lang/.gitignore

wpa_supplicant/wpa_gui-qt4/lang/wpa_gui_de.ts

wpa_supplicant/wpa_gui-qt4/peers.cpp

wpa_supplicant/wpa_gui-qt4/peers.h

wpa_supplicant/wpa_gui-qt4/peers.ui

wpa_supplicant/wpa_gui-qt4/stringquery.cpp

wpa_supplicant/wpa_gui-qt4/stringquery.h

wpa_supplicant/xcode

wpa_supplicant/xcode/wpa_supplicant.xcodeproj

wpa_supplicant/xcode/wpa_supplicant.xcodeproj/project.pbxproj

files removed:
.pc/02_dbus_group_policy.patch/wpa_supplicant/dbus-wpa_supplicant.conf

.pc/07_dbus_service_syslog.patch/wpa_supplicant/dbus-wpa_supplicant.service

.pc/11_syslog.patch

.pc/11_syslog.patch/src

.pc/11_syslog.patch/src/utils

.pc/11_syslog.patch/src/utils/wpa_debug.c

.pc/11_syslog.patch/src/utils/wpa_debug.h

.pc/11_syslog.patch/wpa_supplicant

.pc/11_syslog.patch/wpa_supplicant/Makefile

.pc/11_syslog.patch/wpa_supplicant/main.c

.pc/11_syslog.patch/wpa_supplicant/wpa_supplicant.c

.pc/11_syslog.patch/wpa_supplicant/wpa_supplicant_i.h

.pc/18_wpa_gui_wps_ap_avail_annoyance.patch

.pc/18_wpa_gui_wps_ap_avail_annoyance.patch/wpa_supplicant

.pc/18_wpa_gui_wps_ap_avail_annoyance.patch/wpa_supplicant/wpa_gui-qt4

.pc/18_wpa_gui_wps_ap_avail_annoyance.patch/wpa_supplicant/wpa_gui-qt4/wpagui.cpp

.pc/20_wpa_msg_ctrl_wps.patch

.pc/20_wpa_msg_ctrl_wps.patch/wpa_supplicant

.pc/20_wpa_msg_ctrl_wps.patch/wpa_supplicant/wps_supplicant.c

.pc/21_kfreebsd.patch

.pc/21_kfreebsd.patch/src

.pc/21_kfreebsd.patch/src/drivers

.pc/21_kfreebsd.patch/src/drivers/driver_bsd.c

.pc/21_kfreebsd.patch/src/drivers/driver_wired.c

.pc/21_kfreebsd.patch/src/l2_packet

.pc/21_kfreebsd.patch/src/l2_packet/l2_packet_freebsd.c

.pc/21_kfreebsd.patch/src/utils

.pc/21_kfreebsd.patch/src/utils/common.h

.pc/21_kfreebsd.patch/src/wps

.pc/21_kfreebsd.patch/src/wps/wps_upnp.c

.pc/21_kfreebsd.patch/wpa_supplicant

.pc/21_kfreebsd.patch/wpa_supplicant/ctrl_iface_unix.c

.pc/30_cfg80211_association_optimisation.patch

.pc/30_cfg80211_association_optimisation.patch/src

.pc/30_cfg80211_association_optimisation.patch/src/drivers

.pc/30_cfg80211_association_optimisation.patch/src/drivers/driver_wext.c

.pc/30_cfg80211_association_optimisation.patch/src/drivers/driver_wext.h

src/common/nl80211_copy.h

src/common/wireless_copy.h

src/crypto/aes.c

src/crypto/aes_wrap.c

src/crypto/des.c

src/crypto/md4.c

src/crypto/rc4.h

src/drivers/driver_prism54.c

src/drivers/driver_ps3.c

src/drivers/radiotap.c

src/drivers/radiotap.h

src/drivers/radiotap_iter.h

src/drivers/scan_helpers.c

src/eap_server/eap.c

src/eap_server/eap_aka.c

src/eap_server/eap_fast.c

src/eap_server/eap_gpsk.c

src/eap_server/eap_gtc.c

src/eap_server/eap_identity.c

src/eap_server/eap_ikev2.c

src/eap_server/eap_md5.c

src/eap_server/eap_methods.c

src/eap_server/eap_mschapv2.c

src/eap_server/eap_pax.c

src/eap_server/eap_peap.c

src/eap_server/eap_psk.c

src/eap_server/eap_sake.c

src/eap_server/eap_sim.c

src/eap_server/eap_tls.c

src/eap_server/eap_tls_common.c

src/eap_server/eap_tnc.c

src/eap_server/eap_ttls.c

src/eap_server/eap_vendor_test.c

src/eap_server/eap_wsc.c

src/hlr_auc_gw

src/hlr_auc_gw/Makefile

src/hlr_auc_gw/hlr_auc_gw.c

src/hlr_auc_gw/hlr_auc_gw.milenage_db

src/hlr_auc_gw/milenage.c

src/hlr_auc_gw/milenage.h

src/tls/asn1_test.c

wpa_supplicant/ctrl_iface_dbus.c

wpa_supplicant/ctrl_iface_dbus.h

wpa_supplicant/ctrl_iface_dbus_handlers.c

wpa_supplicant/ctrl_iface_dbus_handlers.h

wpa_supplicant/dbus-wpa_supplicant.conf

wpa_supplicant/dbus-wpa_supplicant.service

wpa_supplicant/dbus_dict_helpers.c

wpa_supplicant/dbus_dict_helpers.h

wpa_supplicant/doc/.gitignore

wpa_supplicant/doc/code_structure.doxygen

wpa_supplicant/doc/ctrl_iface.doxygen

wpa_supplicant/doc/doxygen.fast

wpa_supplicant/doc/doxygen.full

wpa_supplicant/doc/driver_wrapper.doxygen

wpa_supplicant/doc/eap.doxygen

wpa_supplicant/doc/kerneldoc2doxygen.pl

wpa_supplicant/doc/mainpage.doxygen

wpa_supplicant/doc/porting.doxygen

wpa_supplicant/doc/testing_tools.doxygen

wpa_supplicant/doc/wpa_supplicant.fig

wpa_supplicant/tests/test_aes.c

wpa_supplicant/tests/test_md4.c

wpa_supplicant/tests/test_md5.c

wpa_supplicant/tests/test_ms_funcs.c

wpa_supplicant/tests/test_sha1.c

wpa_supplicant/tests/test_sha256.c

wpa_supplicant/tests/test_x509v3.c

wpa_supplicant/tests/test_x509v3_nist.sh

wpa_supplicant/tests/test_x509v3_nist2.sh

files modified:
.pc/01_use_pkg-config_for_pcsc-lite_module.patch/wpa_supplicant/Makefile

.pc/applied-patches

debian/changelog

debian/compat

debian/config/kfreebsd

debian/config/linux

debian/control

debian/copyright

debian/ifupdown/action_wpa.sh

debian/ifupdown/functions.sh

debian/ifupdown/wpa_action

debian/patches/01_use_pkg-config_for_pcsc-lite_module.patch

debian/patches/02_dbus_group_policy.patch

debian/patches/07_dbus_service_syslog.patch

debian/patches/series

debian/rules

debian/watch

debian/wpasupplicant.links

src/Makefile

src/common/Makefile

src/common/defs.h

src/common/ieee802_11_common.c

src/common/ieee802_11_common.h

src/common/ieee802_11_defs.h

src/common/privsep_commands.h

src/common/version.h

src/common/wpa_common.c

src/common/wpa_common.h

src/common/wpa_ctrl.h

src/crypto/Makefile

src/crypto/aes.h

src/crypto/crypto.h

src/crypto/crypto_cryptoapi.c

src/crypto/crypto_gnutls.c

src/crypto/crypto_internal.c

src/crypto/crypto_libtomcrypt.c

src/crypto/crypto_none.c

src/crypto/crypto_openssl.c

src/crypto/dh_groups.c

src/crypto/md5.c

src/crypto/md5.h

src/crypto/ms_funcs.c

src/crypto/ms_funcs.h

src/crypto/rc4.c

src/crypto/sha1.c

src/crypto/sha1.h

src/crypto/sha256.c

src/crypto/tls.h

src/crypto/tls_gnutls.c

src/crypto/tls_internal.c

src/crypto/tls_none.c

src/crypto/tls_openssl.c

src/crypto/tls_schannel.c

src/drivers/Makefile

src/drivers/driver.h

src/drivers/driver_atmel.c

src/drivers/driver_broadcom.c

src/drivers/driver_bsd.c

src/drivers/driver_hostap.c

src/drivers/driver_hostap.h

src/drivers/driver_iphone.m

src/drivers/driver_ipw.c

src/drivers/driver_madwifi.c

src/drivers/driver_ndis.c

src/drivers/driver_ndis.h

src/drivers/driver_ndiswrapper.c

src/drivers/driver_nl80211.c

src/drivers/driver_osx.m

src/drivers/driver_privsep.c

src/drivers/driver_ralink.c

src/drivers/driver_ralink.h

src/drivers/driver_roboswitch.c

src/drivers/driver_test.c

src/drivers/driver_wext.c

src/drivers/driver_wext.h

src/drivers/driver_wired.c

src/drivers/drivers.c

src/drivers/priv_netlink.h

src/eap_common/Makefile

src/eap_common/chap.c

src/eap_common/chap.h

src/eap_common/eap_fast_common.c

src/eap_common/eap_gpsk_common.c

src/eap_common/eap_pax_common.c

src/eap_common/eap_peap_common.c

src/eap_common/eap_psk_common.c

src/eap_common/eap_sake_common.c

src/eap_common/eap_sim_common.c

src/eap_common/eap_sim_common.h

src/eap_common/ikev2_common.c

src/eap_peer/Makefile

src/eap_peer/eap.c

src/eap_peer/eap.h

src/eap_peer/eap_aka.c

src/eap_peer/eap_config.h

src/eap_peer/eap_fast.c

src/eap_peer/eap_fast_pac.c

src/eap_peer/eap_leap.c

src/eap_peer/eap_md5.c

src/eap_peer/eap_methods.c

src/eap_peer/eap_methods.h

src/eap_peer/eap_mschapv2.c

src/eap_peer/eap_pax.c

src/eap_peer/eap_peap.c

src/eap_peer/eap_psk.c

src/eap_peer/eap_sim.c

src/eap_peer/eap_tls.c

src/eap_peer/eap_tls_common.c

src/eap_peer/eap_tls_common.h

src/eap_peer/eap_tnc.c

src/eap_peer/eap_ttls.c

src/eap_peer/eap_wsc.c

src/eap_peer/ikev2.c

src/eap_peer/mschapv2.c

src/eap_peer/mschapv2.h

src/eap_server/Makefile

src/eap_server/eap.h

src/eap_server/eap_i.h

src/eap_server/eap_methods.h

src/eap_server/eap_sim_db.c

src/eap_server/eap_sim_db.h

src/eap_server/eap_tls_common.h

src/eap_server/ikev2.c

src/eap_server/tncs.c

src/eapol_supp/Makefile

src/eapol_supp/eapol_supp_sm.c

src/eapol_supp/eapol_supp_sm.h

src/l2_packet/Makefile

src/l2_packet/l2_packet_ndis.c

src/l2_packet/l2_packet_privsep.c

src/radius/Makefile

src/radius/radius.c

src/radius/radius.h

src/radius/radius_client.c

src/radius/radius_client.h

src/radius/radius_server.c

src/radius/radius_server.h

src/rsn_supp/Makefile

src/rsn_supp/peerkey.c

src/rsn_supp/pmksa_cache.c

src/rsn_supp/pmksa_cache.h

src/rsn_supp/preauth.c

src/rsn_supp/preauth.h

src/rsn_supp/wpa.c

src/rsn_supp/wpa.h

src/rsn_supp/wpa_ft.c

src/rsn_supp/wpa_i.h

src/rsn_supp/wpa_ie.c

src/rsn_supp/wpa_ie.h

src/tls/Makefile

src/tls/asn1.c

src/tls/asn1.h

src/tls/rsa.c

src/tls/tlsv1_client.c

src/tls/tlsv1_client_read.c

src/tls/tlsv1_client_write.c

src/tls/tlsv1_common.h

src/tls/tlsv1_cred.c

src/tls/tlsv1_record.c

src/tls/tlsv1_record.h

src/tls/tlsv1_server.c

src/tls/tlsv1_server_read.c

src/tls/tlsv1_server_write.c

src/tls/x509v3.c

src/tls/x509v3.h

src/utils/Makefile

src/utils/base64.c

src/utils/build_config.h

src/utils/common.c

src/utils/common.h

src/utils/eloop.c

src/utils/eloop.h

src/utils/eloop_none.c

src/utils/eloop_win.c

src/utils/ip_addr.h

src/utils/os.h

src/utils/os_internal.c

src/utils/os_unix.c

src/utils/uuid.c

src/utils/uuid.h

src/utils/wpa_debug.c

src/utils/wpabuf.c

src/utils/wpabuf.h

src/wps/Makefile

src/wps/httpread.c

src/wps/httpread.h

src/wps/wps.c

src/wps/wps.h

src/wps/wps_attr_build.c

src/wps/wps_attr_parse.c

src/wps/wps_attr_process.c

src/wps/wps_common.c

src/wps/wps_defs.h

src/wps/wps_dev_attr.c

src/wps/wps_enrollee.c

src/wps/wps_i.h

src/wps/wps_registrar.c

src/wps/wps_upnp.c

src/wps/wps_upnp.h

src/wps/wps_upnp_event.c

src/wps/wps_upnp_i.h

src/wps/wps_upnp_ssdp.c

src/wps/wps_upnp_web.c

wpa_supplicant/ChangeLog

wpa_supplicant/Makefile

wpa_supplicant/README

wpa_supplicant/README-WPS

wpa_supplicant/config.c

wpa_supplicant/config.h

wpa_supplicant/config_file.c

wpa_supplicant/config_ssid.h

wpa_supplicant/config_winreg.c

wpa_supplicant/ctrl_iface.c

wpa_supplicant/ctrl_iface_named_pipe.c

wpa_supplicant/ctrl_iface_udp.c

wpa_supplicant/ctrl_iface_unix.c

wpa_supplicant/defconfig

wpa_supplicant/doc/docbook/wpa_background.8

wpa_supplicant/doc/docbook/wpa_cli.8

wpa_supplicant/doc/docbook/wpa_gui.8

wpa_supplicant/doc/docbook/wpa_passphrase.8

wpa_supplicant/doc/docbook/wpa_priv.8

wpa_supplicant/doc/docbook/wpa_supplicant.8

wpa_supplicant/doc/docbook/wpa_supplicant.conf.5

wpa_supplicant/doc/docbook/wpa_supplicant.sgml

wpa_supplicant/eapol_test.c

wpa_supplicant/events.c

wpa_supplicant/main.c

wpa_supplicant/mlme.c

wpa_supplicant/mlme.h

wpa_supplicant/nmake.mak

wpa_supplicant/preauth_test.c

wpa_supplicant/scan.c

wpa_supplicant/symbian/wpa_supplicant.mmp

wpa_supplicant/tests/test_eap_sim_common.c

wpa_supplicant/tests/test_wpa.c

wpa_supplicant/todo.txt

wpa_supplicant/vs2005/eapol_test/eapol_test.vcproj

wpa_supplicant/vs2005/wpa_cli/wpa_cli.vcproj

wpa_supplicant/vs2005/wpa_passphrase/wpa_passphrase.vcproj

wpa_supplicant/vs2005/wpa_supplicant/wpa_supplicant.vcproj

wpa_supplicant/vs2005/wpasvc/wpasvc.vcproj

wpa_supplicant/wpa_cli.c

wpa_supplicant/wpa_gui-qt4/addinterface.cpp

wpa_supplicant/wpa_gui-qt4/eventhistory.cpp

wpa_supplicant/wpa_gui-qt4/icons.qrc

wpa_supplicant/wpa_gui-qt4/icons/Makefile

wpa_supplicant/wpa_gui-qt4/icons/README

wpa_supplicant/wpa_gui-qt4/icons_png.qrc

wpa_supplicant/wpa_gui-qt4/main.cpp

wpa_supplicant/wpa_gui-qt4/networkconfig.cpp

wpa_supplicant/wpa_gui-qt4/networkconfig.ui

wpa_supplicant/wpa_gui-qt4/userdatarequest.cpp

wpa_supplicant/wpa_gui-qt4/wpa_gui.pro

wpa_supplicant/wpa_gui-qt4/wpagui.cpp

wpa_supplicant/wpa_gui-qt4/wpagui.h

wpa_supplicant/wpa_gui-qt4/wpagui.ui

wpa_supplicant/wpa_gui/scanresults.ui

wpa_supplicant/wpa_gui/userdatarequest.ui

wpa_supplicant/wpa_gui/wpa_gui.pro

wpa_supplicant/wpa_gui/wpagui.ui

wpa_supplicant/wpa_passphrase.c

wpa_supplicant/wpa_priv.c

wpa_supplicant/wpa_supplicant.c

wpa_supplicant/wpa_supplicant.conf

wpa_supplicant/wpa_supplicant.nsi

wpa_supplicant/wpa_supplicant_i.h

wpa_supplicant/wpas_glue.c

wpa_supplicant/wps_supplicant.c

wpa_supplicant/wps_supplicant.h

Show diffs side-by-side

added added

removed removed

src/eap_server/eap_aka.c

* hostapd / EAP-AKA (RFC 4187) and EAP-AKA' (draft-arkko-eap-aka-kdf)

* This program is free software; you can redistribute it and/or modify

* it under the terms of the GNU General Public License version 2 as

* published by the Free Software Foundation.

* Alternatively, this software may be distributed under the terms of BSD

* license.

* See README and COPYING for more details.

#include "includes.h"

#include "common.h"

#include "eap_server/eap_i.h"

#include "eap_common/eap_sim_common.h"

#include "eap_server/eap_sim_db.h"

#include "sha1.h"

#include "sha256.h"

#include "crypto.h"

struct eap_aka_data {

u8 mk[EAP_SIM_MK_LEN];

u8 nonce_s[EAP_SIM_NONCE_S_LEN];

u8 k_aut[EAP_AKA_PRIME_K_AUT_LEN];

u8 k_encr[EAP_SIM_K_ENCR_LEN];

u8 k_re[EAP_AKA_PRIME_K_RE_LEN]; /* EAP-AKA' only */

u8 msk[EAP_SIM_KEYING_DATA_LEN];

u8 emsk[EAP_EMSK_LEN];

u8 rand[EAP_AKA_RAND_LEN];

u8 autn[EAP_AKA_AUTN_LEN];

u8 ck[EAP_AKA_CK_LEN];

u8 ik[EAP_AKA_IK_LEN];

u8 res[EAP_AKA_RES_MAX_LEN];

size_t res_len;

enum {

IDENTITY, CHALLENGE, REAUTH, NOTIFICATION, SUCCESS, FAILURE

} state;

char *next_pseudonym;

char *next_reauth_id;

u16 counter;

struct eap_sim_reauth *reauth;

int auts_reported; /* whether the current AUTS has been reported to the

* eap_sim_db */

u16 notification;

int use_result_ind;

struct wpabuf *id_msgs;

int pending_id;

u8 eap_method;

u8 *network_name;

size_t network_name_len;

u16 kdf;

};

static void eap_aka_determine_identity(struct eap_sm *sm,

struct eap_aka_data *data,

int before_identity, int after_reauth);

static const char * eap_aka_state_txt(int state)

{

switch (state) {

case IDENTITY:

return "IDENTITY";

case CHALLENGE:

return "CHALLENGE";

case REAUTH:

return "REAUTH";

case SUCCESS:

return "SUCCESS";

case FAILURE:

return "FAILURE";

case NOTIFICATION:

return "NOTIFICATION";

default:

return "Unknown?!";

}

static void eap_aka_state(struct eap_aka_data *data, int state)

{

wpa_printf(MSG_DEBUG, "EAP-AKA: %s -> %s",

eap_aka_state_txt(data->state),

eap_aka_state_txt(state));

data->state = state;

}

static void * eap_aka_init(struct eap_sm *sm)

{

struct eap_aka_data *data;

100

if (sm->eap_sim_db_priv == NULL) {

101

wpa_printf(MSG_WARNING, "EAP-AKA: eap_sim_db not configured");

102

return NULL;

103

}

104

105

data = os_zalloc(sizeof(*data));

106

if (data == NULL)

107

return NULL;

108

109

data->eap_method = EAP_TYPE_AKA;

110

111

data->state = IDENTITY;

112

eap_aka_determine_identity(sm, data, 1, 0);

113

data->pending_id = -1;

114

115

return data;

116

}

117

118

119

#ifdef EAP_AKA_PRIME

120

static void * eap_aka_prime_init(struct eap_sm *sm)

121

{

122

struct eap_aka_data *data;

123

/* TODO: make ANID configurable; see 3GPP TS 24.302 */

124

char *network_name = "WLAN";

125

126

if (sm->eap_sim_db_priv == NULL) {

127

wpa_printf(MSG_WARNING, "EAP-AKA: eap_sim_db not configured");

128

return NULL;

129

}

130

131

data = os_zalloc(sizeof(*data));

132

if (data == NULL)

133

return NULL;

134

135

data->eap_method = EAP_TYPE_AKA_PRIME;

136

data->network_name = os_malloc(os_strlen(network_name));

137

if (data->network_name == NULL) {

138

os_free(data);

139

return NULL;

140

}

141

142

data->network_name_len = os_strlen(network_name);

143

os_memcpy(data->network_name, network_name, data->network_name_len);

144

145

data->state = IDENTITY;

146

eap_aka_determine_identity(sm, data, 1, 0);

147

data->pending_id = -1;

148

149

return data;

150

}

151

#endif /* EAP_AKA_PRIME */

152

153

154

static void eap_aka_reset(struct eap_sm *sm, void *priv)

155

{

156

struct eap_aka_data *data = priv;

157

os_free(data->next_pseudonym);

158

os_free(data->next_reauth_id);

159

wpabuf_free(data->id_msgs);

160

os_free(data->network_name);

161

os_free(data);

162

}

163

164

165

static int eap_aka_add_id_msg(struct eap_aka_data *data,

166

const struct wpabuf *msg)

167

{

168

if (msg == NULL)

169

return -1;

170

171

if (data->id_msgs == NULL) {

172

data->id_msgs = wpabuf_dup(msg);

173

return data->id_msgs == NULL ? -1 : 0;

174

}

175

176

if (wpabuf_resize(&data->id_msgs, wpabuf_len(msg)) < 0)

177

return -1;

178

wpabuf_put_buf(data->id_msgs, msg);

179

180

return 0;

181

}

182

183

184

static void eap_aka_add_checkcode(struct eap_aka_data *data,

185

struct eap_sim_msg *msg)

186

{

187

const u8 *addr;

188

size_t len;

189

u8 hash[SHA256_MAC_LEN];

190

191

wpa_printf(MSG_DEBUG, " AT_CHECKCODE");

192

193

if (data->id_msgs == NULL) {

194

195

* No EAP-AKA/Identity packets were exchanged - send empty

196

* checkcode.

197

198

eap_sim_msg_add(msg, EAP_SIM_AT_CHECKCODE, 0, NULL, 0);

199

return;

200

}

201

202

/* Checkcode is SHA1 hash over all EAP-AKA/Identity packets. */

203

addr = wpabuf_head(data->id_msgs);

204

len = wpabuf_len(data->id_msgs);

205

wpa_hexdump(MSG_MSGDUMP, "EAP-AKA: AT_CHECKCODE data", addr, len);

206

if (data->eap_method == EAP_TYPE_AKA_PRIME)

207

sha256_vector(1, &addr, &len, hash);

208

else

209

sha1_vector(1, &addr, &len, hash);

210

211

eap_sim_msg_add(msg, EAP_SIM_AT_CHECKCODE, 0, hash,

212

data->eap_method == EAP_TYPE_AKA_PRIME ?

213

EAP_AKA_PRIME_CHECKCODE_LEN : EAP_AKA_CHECKCODE_LEN);

214

}

215

216

217

static int eap_aka_verify_checkcode(struct eap_aka_data *data,

218

const u8 *checkcode, size_t checkcode_len)

219

{

220

const u8 *addr;

221

size_t len;

222

u8 hash[SHA256_MAC_LEN];

223

size_t hash_len;

224

225

if (checkcode == NULL)

226

return -1;

227

228

if (data->id_msgs == NULL) {

229

if (checkcode_len != 0) {

230

wpa_printf(MSG_DEBUG, "EAP-AKA: Checkcode from peer "

231

"indicates that AKA/Identity messages were "

232

"used, but they were not");

233

return -1;

234

}

235

return 0;

236

}

237

238

hash_len = data->eap_method == EAP_TYPE_AKA_PRIME ?

239

EAP_AKA_PRIME_CHECKCODE_LEN : EAP_AKA_CHECKCODE_LEN;

240

241

if (checkcode_len != hash_len) {

242

wpa_printf(MSG_DEBUG, "EAP-AKA: Checkcode from peer indicates "

243

"that AKA/Identity message were not used, but they "

244

"were");

245

return -1;

246

}

247

248

/* Checkcode is SHA1 hash over all EAP-AKA/Identity packets. */

249

addr = wpabuf_head(data->id_msgs);

250

len = wpabuf_len(data->id_msgs);

251

if (data->eap_method == EAP_TYPE_AKA_PRIME)

252

sha256_vector(1, &addr, &len, hash);

253

else

254

sha1_vector(1, &addr, &len, hash);

255

256

if (os_memcmp(hash, checkcode, hash_len) != 0) {

257

wpa_printf(MSG_DEBUG, "EAP-AKA: Mismatch in AT_CHECKCODE");

258

return -1;

259

}

260

261

return 0;

262

}

263

264

265

static struct wpabuf * eap_aka_build_identity(struct eap_sm *sm,

266

struct eap_aka_data *data, u8 id)

267

{

268

struct eap_sim_msg *msg;

269

struct wpabuf *buf;

270

271

wpa_printf(MSG_DEBUG, "EAP-AKA: Generating Identity");

272

msg = eap_sim_msg_init(EAP_CODE_REQUEST, id, data->eap_method,

273

EAP_AKA_SUBTYPE_IDENTITY);

274

if (eap_sim_db_identity_known(sm->eap_sim_db_priv, sm->identity,

275

sm->identity_len)) {

276

wpa_printf(MSG_DEBUG, " AT_PERMANENT_ID_REQ");

277

eap_sim_msg_add(msg, EAP_SIM_AT_PERMANENT_ID_REQ, 0, NULL, 0);

278

} else {

279

280

* RFC 4187, Chap. 4.1.4 recommends that identity from EAP is

281

* ignored and the AKA/Identity is used to request the

282

* identity.

283

284

wpa_printf(MSG_DEBUG, " AT_ANY_ID_REQ");

285

eap_sim_msg_add(msg, EAP_SIM_AT_ANY_ID_REQ, 0, NULL, 0);

286

}

287

buf = eap_sim_msg_finish(msg, NULL, NULL, 0);

288

if (eap_aka_add_id_msg(data, buf) < 0) {

289

wpabuf_free(buf);

290

return NULL;

291

}

292

data->pending_id = id;

293

return buf;

294

}

295

296

297

static int eap_aka_build_encr(struct eap_sm *sm, struct eap_aka_data *data,

298

struct eap_sim_msg *msg, u16 counter,

299

const u8 *nonce_s)

300

{

301

os_free(data->next_pseudonym);

302

data->next_pseudonym =

303

eap_sim_db_get_next_pseudonym(sm->eap_sim_db_priv, 1);

304

os_free(data->next_reauth_id);

305

if (data->counter <= EAP_AKA_MAX_FAST_REAUTHS) {

306

data->next_reauth_id =

307

eap_sim_db_get_next_reauth_id(sm->eap_sim_db_priv, 1);

308

} else {

309

wpa_printf(MSG_DEBUG, "EAP-AKA: Max fast re-authentication "

310

"count exceeded - force full authentication");

311

data->next_reauth_id = NULL;

312

}

313

314

if (data->next_pseudonym == NULL && data->next_reauth_id == NULL &&

315

counter == 0 && nonce_s == NULL)

316

return 0;

317

318

wpa_printf(MSG_DEBUG, " AT_IV");

319

wpa_printf(MSG_DEBUG, " AT_ENCR_DATA");

320

eap_sim_msg_add_encr_start(msg, EAP_SIM_AT_IV, EAP_SIM_AT_ENCR_DATA);

321

322

if (counter > 0) {

323

wpa_printf(MSG_DEBUG, " *AT_COUNTER (%u)", counter);

324

eap_sim_msg_add(msg, EAP_SIM_AT_COUNTER, counter, NULL, 0);

325

}

326

327

if (nonce_s) {

328

wpa_printf(MSG_DEBUG, " *AT_NONCE_S");

329

eap_sim_msg_add(msg, EAP_SIM_AT_NONCE_S, 0, nonce_s,

330

EAP_SIM_NONCE_S_LEN);

331

}

332

333

if (data->next_pseudonym) {

334

wpa_printf(MSG_DEBUG, " *AT_NEXT_PSEUDONYM (%s)",

335

data->next_pseudonym);

336

eap_sim_msg_add(msg, EAP_SIM_AT_NEXT_PSEUDONYM,

337

os_strlen(data->next_pseudonym),

338

(u8 *) data->next_pseudonym,

339

os_strlen(data->next_pseudonym));

340

}

341

342

if (data->next_reauth_id) {

343

wpa_printf(MSG_DEBUG, " *AT_NEXT_REAUTH_ID (%s)",

344

data->next_reauth_id);

345

eap_sim_msg_add(msg, EAP_SIM_AT_NEXT_REAUTH_ID,

346

os_strlen(data->next_reauth_id),

347

(u8 *) data->next_reauth_id,

348

os_strlen(data->next_reauth_id));

349

}

350

351

if (eap_sim_msg_add_encr_end(msg, data->k_encr, EAP_SIM_AT_PADDING)) {

352

wpa_printf(MSG_WARNING, "EAP-AKA: Failed to encrypt "

353

"AT_ENCR_DATA");

354

return -1;

355

}

356

357

return 0;

358

}

359

360

361

static struct wpabuf * eap_aka_build_challenge(struct eap_sm *sm,

362

struct eap_aka_data *data,

363

u8 id)

364

{

365

struct eap_sim_msg *msg;

366

367

wpa_printf(MSG_DEBUG, "EAP-AKA: Generating Challenge");

368

msg = eap_sim_msg_init(EAP_CODE_REQUEST, id, data->eap_method,

369

EAP_AKA_SUBTYPE_CHALLENGE);

370

wpa_printf(MSG_DEBUG, " AT_RAND");

371

eap_sim_msg_add(msg, EAP_SIM_AT_RAND, 0, data->rand, EAP_AKA_RAND_LEN);

372

wpa_printf(MSG_DEBUG, " AT_AUTN");

373

eap_sim_msg_add(msg, EAP_SIM_AT_AUTN, 0, data->autn, EAP_AKA_AUTN_LEN);

374

if (data->eap_method == EAP_TYPE_AKA_PRIME) {

375

if (data->kdf) {

376

/* Add the selected KDF into the beginning */

377

wpa_printf(MSG_DEBUG, " AT_KDF");

378

eap_sim_msg_add(msg, EAP_SIM_AT_KDF, data->kdf,

379

NULL, 0);

380

}

381

wpa_printf(MSG_DEBUG, " AT_KDF");

382

eap_sim_msg_add(msg, EAP_SIM_AT_KDF, EAP_AKA_PRIME_KDF,

383

NULL, 0);

384

wpa_printf(MSG_DEBUG, " AT_KDF_INPUT");

385

eap_sim_msg_add(msg, EAP_SIM_AT_KDF_INPUT,

386

data->network_name_len,

387

data->network_name, data->network_name_len);

388

}

389

390

if (eap_aka_build_encr(sm, data, msg, 0, NULL)) {

391

eap_sim_msg_free(msg);

392

return NULL;

393

}

394

395

eap_aka_add_checkcode(data, msg);

396

397

if (sm->eap_sim_aka_result_ind) {

398

wpa_printf(MSG_DEBUG, " AT_RESULT_IND");

399

eap_sim_msg_add(msg, EAP_SIM_AT_RESULT_IND, 0, NULL, 0);

400

}

401

402

#ifdef EAP_AKA_PRIME

403

if (data->eap_method == EAP_TYPE_AKA) {

404

u16 flags = 0;

405

int i;

406

int aka_prime_preferred = 0;

407

408

i = 0;

409

while (sm->user && i < EAP_MAX_METHODS &&

410

(sm->user->methods[i].vendor != EAP_VENDOR_IETF ||

411

sm->user->methods[i].method != EAP_TYPE_NONE)) {

412

if (sm->user->methods[i].vendor == EAP_VENDOR_IETF) {

413

if (sm->user->methods[i].method ==

414

EAP_TYPE_AKA)

415

break;

416

if (sm->user->methods[i].method ==

417

EAP_TYPE_AKA_PRIME) {

418

aka_prime_preferred = 1;

419

break;

420

}

421

}

422

i++;

423

}

424

425

if (aka_prime_preferred)

426

flags |= EAP_AKA_BIDDING_FLAG_D;

427

eap_sim_msg_add(msg, EAP_SIM_AT_BIDDING, flags, NULL, 0);

428

}

429

#endif /* EAP_AKA_PRIME */

430

431

wpa_printf(MSG_DEBUG, " AT_MAC");

432

eap_sim_msg_add_mac(msg, EAP_SIM_AT_MAC);

433

return eap_sim_msg_finish(msg, data->k_aut, NULL, 0);

434

}

435

436

437

static struct wpabuf * eap_aka_build_reauth(struct eap_sm *sm,

438

struct eap_aka_data *data, u8 id)

439

{

440

struct eap_sim_msg *msg;

441

442

wpa_printf(MSG_DEBUG, "EAP-AKA: Generating Re-authentication");

443

444

if (os_get_random(data->nonce_s, EAP_SIM_NONCE_S_LEN))

445

return NULL;

446

wpa_hexdump_key(MSG_MSGDUMP, "EAP-AKA: NONCE_S",

447

data->nonce_s, EAP_SIM_NONCE_S_LEN);

448

449

if (data->eap_method == EAP_TYPE_AKA_PRIME) {

450

eap_aka_prime_derive_keys_reauth(data->k_re, data->counter,

451

sm->identity,

452

sm->identity_len,

453

data->nonce_s,

454

data->msk, data->emsk);

455

} else {

456

eap_sim_derive_keys(data->mk, data->k_encr, data->k_aut,

457

data->msk, data->emsk);

458

eap_sim_derive_keys_reauth(data->counter, sm->identity,

459

sm->identity_len, data->nonce_s,

460

data->mk, data->msk, data->emsk);

461

}

462

463

msg = eap_sim_msg_init(EAP_CODE_REQUEST, id, data->eap_method,

464

EAP_AKA_SUBTYPE_REAUTHENTICATION);

465

466

if (eap_aka_build_encr(sm, data, msg, data->counter, data->nonce_s)) {

467

eap_sim_msg_free(msg);

468

return NULL;

469

}

470

471

eap_aka_add_checkcode(data, msg);

472

473

if (sm->eap_sim_aka_result_ind) {

474

wpa_printf(MSG_DEBUG, " AT_RESULT_IND");

475

eap_sim_msg_add(msg, EAP_SIM_AT_RESULT_IND, 0, NULL, 0);

476

}

477

478

wpa_printf(MSG_DEBUG, " AT_MAC");

479

eap_sim_msg_add_mac(msg, EAP_SIM_AT_MAC);

480

return eap_sim_msg_finish(msg, data->k_aut, NULL, 0);

481

}

482

483

484

static struct wpabuf * eap_aka_build_notification(struct eap_sm *sm,

485

struct eap_aka_data *data,

486

u8 id)

487

{

488

struct eap_sim_msg *msg;

489

490

wpa_printf(MSG_DEBUG, "EAP-AKA: Generating Notification");

491

msg = eap_sim_msg_init(EAP_CODE_REQUEST, id, data->eap_method,

492

EAP_AKA_SUBTYPE_NOTIFICATION);

493

wpa_printf(MSG_DEBUG, " AT_NOTIFICATION (%d)", data->notification);

494

eap_sim_msg_add(msg, EAP_SIM_AT_NOTIFICATION, data->notification,

495

NULL, 0);

496

if (data->use_result_ind) {

497

if (data->reauth) {

498

wpa_printf(MSG_DEBUG, " AT_IV");

499

wpa_printf(MSG_DEBUG, " AT_ENCR_DATA");

500

eap_sim_msg_add_encr_start(msg, EAP_SIM_AT_IV,

501

EAP_SIM_AT_ENCR_DATA);

502

wpa_printf(MSG_DEBUG, " *AT_COUNTER (%u)",

503

data->counter);

504

eap_sim_msg_add(msg, EAP_SIM_AT_COUNTER, data->counter,

505

NULL, 0);

506

507

if (eap_sim_msg_add_encr_end(msg, data->k_encr,

508

EAP_SIM_AT_PADDING)) {

509

wpa_printf(MSG_WARNING, "EAP-AKA: Failed to "

510

"encrypt AT_ENCR_DATA");

511

eap_sim_msg_free(msg);

512

return NULL;

513

}

514

}

515

516

wpa_printf(MSG_DEBUG, " AT_MAC");

517

eap_sim_msg_add_mac(msg, EAP_SIM_AT_MAC);

518

}

519

return eap_sim_msg_finish(msg, data->k_aut, NULL, 0);

520

}

521

522

523

static struct wpabuf * eap_aka_buildReq(struct eap_sm *sm, void *priv, u8 id)

524

{

525

struct eap_aka_data *data = priv;

526

527

data->auts_reported = 0;

528

switch (data->state) {

529

case IDENTITY:

530

return eap_aka_build_identity(sm, data, id);

531

case CHALLENGE:

532

return eap_aka_build_challenge(sm, data, id);

533

case REAUTH:

534

return eap_aka_build_reauth(sm, data, id);

535

case NOTIFICATION:

536

return eap_aka_build_notification(sm, data, id);

537

default:

538

wpa_printf(MSG_DEBUG, "EAP-AKA: Unknown state %d in "

539

"buildReq", data->state);

540

break;

541

}

542

return NULL;

543

}

544

545

546

static Boolean eap_aka_check(struct eap_sm *sm, void *priv,

547

struct wpabuf *respData)

548

{

549

struct eap_aka_data *data = priv;

550

const u8 *pos;

551

size_t len;

552

553

pos = eap_hdr_validate(EAP_VENDOR_IETF, data->eap_method, respData,

554

&len);

555

if (pos == NULL || len < 3) {

556

wpa_printf(MSG_INFO, "EAP-AKA: Invalid frame");

557

return TRUE;

558

}

559

560

return FALSE;

561

}

562

563

564

static Boolean eap_aka_subtype_ok(struct eap_aka_data *data, u8 subtype)

565

{

566

if (subtype == EAP_AKA_SUBTYPE_CLIENT_ERROR ||

567

subtype == EAP_AKA_SUBTYPE_AUTHENTICATION_REJECT)

568

return FALSE;

569

570

switch (data->state) {

571

case IDENTITY:

572

if (subtype != EAP_AKA_SUBTYPE_IDENTITY) {

573

wpa_printf(MSG_INFO, "EAP-AKA: Unexpected response "

574

"subtype %d", subtype);

575

return TRUE;

576

}

577

break;

578

case CHALLENGE:

579

if (subtype != EAP_AKA_SUBTYPE_CHALLENGE &&

580

subtype != EAP_AKA_SUBTYPE_SYNCHRONIZATION_FAILURE) {

581

wpa_printf(MSG_INFO, "EAP-AKA: Unexpected response "

582

"subtype %d", subtype);

583

return TRUE;

584

}

585

break;

586

case REAUTH:

587

if (subtype != EAP_AKA_SUBTYPE_REAUTHENTICATION) {

588

wpa_printf(MSG_INFO, "EAP-AKA: Unexpected response "

589

"subtype %d", subtype);

590

return TRUE;

591

}

592

break;

593

case NOTIFICATION:

594

if (subtype != EAP_AKA_SUBTYPE_NOTIFICATION) {

595

wpa_printf(MSG_INFO, "EAP-AKA: Unexpected response "

596

"subtype %d", subtype);

597

return TRUE;

598

}

599

break;

600

default:

601

wpa_printf(MSG_INFO, "EAP-AKA: Unexpected state (%d) for "

602

"processing a response", data->state);

603

return TRUE;

604

}

605

606

return FALSE;

607

}

608

609

610

static void eap_aka_determine_identity(struct eap_sm *sm,

611

struct eap_aka_data *data,

612

int before_identity, int after_reauth)

613

{

614

const u8 *identity;

615

size_t identity_len;

616

int res;

617

618

identity = NULL;

619

identity_len = 0;

620

621

if (after_reauth && data->reauth) {

622

identity = data->reauth->identity;

623

identity_len = data->reauth->identity_len;

624

} else if (sm->identity && sm->identity_len > 0 &&

625

sm->identity[0] == EAP_AKA_PERMANENT_PREFIX) {

626

identity = sm->identity;

627

identity_len = sm->identity_len;

628

} else {

629

identity = eap_sim_db_get_permanent(sm->eap_sim_db_priv,

630

sm->identity,

631

sm->identity_len,

632

&identity_len);

633

if (identity == NULL) {

634

data->reauth = eap_sim_db_get_reauth_entry(

635

sm->eap_sim_db_priv, sm->identity,

636

sm->identity_len);

637

if (data->reauth &&

638

data->reauth->aka_prime !=

639

(data->eap_method == EAP_TYPE_AKA_PRIME)) {

640

wpa_printf(MSG_DEBUG, "EAP-AKA: Reauth data "

641

"was for different AKA version");

642

data->reauth = NULL;

643

}

644

if (data->reauth) {

645

wpa_printf(MSG_DEBUG, "EAP-AKA: Using fast "

646

"re-authentication");

647

identity = data->reauth->identity;

648

identity_len = data->reauth->identity_len;

649

data->counter = data->reauth->counter;

650

if (data->eap_method == EAP_TYPE_AKA_PRIME) {

651

os_memcpy(data->k_encr,

652

data->reauth->k_encr,

653

EAP_SIM_K_ENCR_LEN);

654

os_memcpy(data->k_aut,

655

data->reauth->k_aut,

656

EAP_AKA_PRIME_K_AUT_LEN);

657

os_memcpy(data->k_re,

658

data->reauth->k_re,

659

EAP_AKA_PRIME_K_RE_LEN);

660

} else {

661

os_memcpy(data->mk, data->reauth->mk,

662

EAP_SIM_MK_LEN);

663

}

664

}

665

}

666

}

667

668

if (identity == NULL ||

669

eap_sim_db_identity_known(sm->eap_sim_db_priv, sm->identity,

670

sm->identity_len) < 0) {

671

if (before_identity) {

672

wpa_printf(MSG_DEBUG, "EAP-AKA: Permanent user name "

673

"not known - send AKA-Identity request");

674

eap_aka_state(data, IDENTITY);

675

return;

676

} else {

677

wpa_printf(MSG_DEBUG, "EAP-AKA: Unknown whether the "

678

"permanent user name is known; try to use "

679

"it");

680

/* eap_sim_db_get_aka_auth() will report failure, if

681

* this identity is not known. */

682

}

683

}

684

685

wpa_hexdump_ascii(MSG_DEBUG, "EAP-AKA: Identity",

686

identity, identity_len);

687

688

if (!after_reauth && data->reauth) {

689

eap_aka_state(data, REAUTH);

690

return;

691

}

692

693

res = eap_sim_db_get_aka_auth(sm->eap_sim_db_priv, identity,

694

identity_len, data->rand, data->autn,

695

data->ik, data->ck, data->res,

696

&data->res_len, sm);

697

if (res == EAP_SIM_DB_PENDING) {

698

wpa_printf(MSG_DEBUG, "EAP-AKA: AKA authentication data "

699

"not yet available - pending request");

700

sm->method_pending = METHOD_PENDING_WAIT;

701

return;

702

}

703

704

#ifdef EAP_AKA_PRIME

705

if (data->eap_method == EAP_TYPE_AKA_PRIME) {

706

/* Note: AUTN = (SQN ^ AK) || AMF || MAC which gives us the

707

* needed 6-octet SQN ^AK for CK',IK' derivation */

708

eap_aka_prime_derive_ck_ik_prime(data->ck, data->ik,

709

data->autn,

710

data->network_name,

711

data->network_name_len);

712

}

713

#endif /* EAP_AKA_PRIME */

714

715

data->reauth = NULL;

716

data->counter = 0; /* reset re-auth counter since this is full auth */

717

718

if (res != 0) {

719

wpa_printf(MSG_INFO, "EAP-AKA: Failed to get AKA "

720

"authentication data for the peer");

721

data->notification = EAP_SIM_GENERAL_FAILURE_BEFORE_AUTH;

722

eap_aka_state(data, NOTIFICATION);

723

return;

724

}

725

if (sm->method_pending == METHOD_PENDING_WAIT) {

726

wpa_printf(MSG_DEBUG, "EAP-AKA: AKA authentication data "

727

"available - abort pending wait");

728

sm->method_pending = METHOD_PENDING_NONE;

729

}

730

731

identity_len = sm->identity_len;

732

while (identity_len > 0 && sm->identity[identity_len - 1] == '\0') {

733

wpa_printf(MSG_DEBUG, "EAP-AKA: Workaround - drop last null "

734

"character from identity");

735

identity_len--;

736

}

737

wpa_hexdump_ascii(MSG_DEBUG, "EAP-AKA: Identity for MK derivation",

738

sm->identity, identity_len);

739

740

if (data->eap_method == EAP_TYPE_AKA_PRIME) {

741

eap_aka_prime_derive_keys(identity, identity_len, data->ik,

742

data->ck, data->k_encr, data->k_aut,

743

data->k_re, data->msk, data->emsk);

744

} else {

745

eap_aka_derive_mk(sm->identity, identity_len, data->ik,

746

data->ck, data->mk);

747

eap_sim_derive_keys(data->mk, data->k_encr, data->k_aut,

748

data->msk, data->emsk);

749

}

750

751

eap_aka_state(data, CHALLENGE);

752

}

753

754

755

static void eap_aka_process_identity(struct eap_sm *sm,

756

struct eap_aka_data *data,

757

struct wpabuf *respData,

758

struct eap_sim_attrs *attr)

759

{

760

wpa_printf(MSG_DEBUG, "EAP-AKA: Processing Identity");

761

762

if (attr->mac || attr->iv || attr->encr_data) {

763

wpa_printf(MSG_WARNING, "EAP-AKA: Unexpected attribute "

764

"received in EAP-Response/AKA-Identity");

765

data->notification = EAP_SIM_GENERAL_FAILURE_BEFORE_AUTH;

766

eap_aka_state(data, NOTIFICATION);

767

return;

768

}

769

770

if (attr->identity) {

771

os_free(sm->identity);

772

sm->identity = os_malloc(attr->identity_len);

773

if (sm->identity) {

774

os_memcpy(sm->identity, attr->identity,

775

attr->identity_len);

776

sm->identity_len = attr->identity_len;

777

}

778

}

779

780

eap_aka_determine_identity(sm, data, 0, 0);

781

if (eap_get_id(respData) == data->pending_id) {

782

data->pending_id = -1;

783

eap_aka_add_id_msg(data, respData);

784

}

785

}

786

787

788

static int eap_aka_verify_mac(struct eap_aka_data *data,

789

const struct wpabuf *req,

790

const u8 *mac, const u8 *extra,

791

size_t extra_len)

792

{

793

if (data->eap_method == EAP_TYPE_AKA_PRIME)

794

return eap_sim_verify_mac_sha256(data->k_aut, req, mac, extra,

795

extra_len);

796

return eap_sim_verify_mac(data->k_aut, req, mac, extra, extra_len);

797

}

798

799

800

static void eap_aka_process_challenge(struct eap_sm *sm,

801

struct eap_aka_data *data,

802

struct wpabuf *respData,

803

struct eap_sim_attrs *attr)

804

{

805

const u8 *identity;

806

size_t identity_len;

807

808

wpa_printf(MSG_DEBUG, "EAP-AKA: Processing Challenge");

809

810

#ifdef EAP_AKA_PRIME

811

#if 0

812

/* KDF negotiation; to be enabled only after more than one KDF is

813

* supported */

814

if (data->eap_method == EAP_TYPE_AKA_PRIME &&

815

attr->kdf_count == 1 && attr->mac == NULL) {

816

if (attr->kdf[0] != EAP_AKA_PRIME_KDF) {

817

wpa_printf(MSG_WARNING, "EAP-AKA': Peer selected "

818

"unknown KDF");

819

data->notification =

820

EAP_SIM_GENERAL_FAILURE_BEFORE_AUTH;

821

eap_aka_state(data, NOTIFICATION);

822

return;

823

}

824

825

data->kdf = attr->kdf[0];

826

827

/* Allow negotiation to continue with the selected KDF by

828

* sending another Challenge message */

829

wpa_printf(MSG_DEBUG, "EAP-AKA': KDF %d selected", data->kdf);

830

return;

831

}

832

#endif

833

#endif /* EAP_AKA_PRIME */

834

835

if (attr->checkcode &&

836

eap_aka_verify_checkcode(data, attr->checkcode,

837

attr->checkcode_len)) {

838

wpa_printf(MSG_WARNING, "EAP-AKA: Invalid AT_CHECKCODE in the "

839

"message");

840

data->notification = EAP_SIM_GENERAL_FAILURE_BEFORE_AUTH;

841

eap_aka_state(data, NOTIFICATION);

842

return;

843

}

844

if (attr->mac == NULL ||

845

eap_aka_verify_mac(data, respData, attr->mac, NULL, 0)) {

846

wpa_printf(MSG_WARNING, "EAP-AKA: Challenge message "

847

"did not include valid AT_MAC");

848

data->notification = EAP_SIM_GENERAL_FAILURE_BEFORE_AUTH;

849

eap_aka_state(data, NOTIFICATION);

850

return;

851

}

852

853

854

* AT_RES is padded, so verify that there is enough room for RES and

855

* that the RES length in bits matches with the expected RES.

856

857

if (attr->res == NULL || attr->res_len < data->res_len ||

858

attr->res_len_bits != data->res_len * 8 ||

859

os_memcmp(attr->res, data->res, data->res_len) != 0) {

860

wpa_printf(MSG_WARNING, "EAP-AKA: Challenge message did not "

861

"include valid AT_RES (attr len=%lu, res len=%lu "

862

"bits, expected %lu bits)",

863

(unsigned long) attr->res_len,

864

(unsigned long) attr->res_len_bits,

865

(unsigned long) data->res_len * 8);

866

data->notification = EAP_SIM_GENERAL_FAILURE_BEFORE_AUTH;

867

eap_aka_state(data, NOTIFICATION);

868

return;

869

}

870

871

wpa_printf(MSG_DEBUG, "EAP-AKA: Challenge response includes the "

872

"correct AT_MAC");

873

if (sm->eap_sim_aka_result_ind && attr->result_ind) {

874

data->use_result_ind = 1;

875

data->notification = EAP_SIM_SUCCESS;

876

eap_aka_state(data, NOTIFICATION);

877

} else

878

eap_aka_state(data, SUCCESS);

879

880

identity = eap_sim_db_get_permanent(sm->eap_sim_db_priv, sm->identity,

881

sm->identity_len, &identity_len);

882

if (identity == NULL) {

883

identity = sm->identity;

884

identity_len = sm->identity_len;

885

}

886

887

if (data->next_pseudonym) {

888

eap_sim_db_add_pseudonym(sm->eap_sim_db_priv, identity,

889

identity_len,

890

data->next_pseudonym);

891

data->next_pseudonym = NULL;

892

}

893

if (data->next_reauth_id) {

894

if (data->eap_method == EAP_TYPE_AKA_PRIME) {

895

#ifdef EAP_AKA_PRIME

896

eap_sim_db_add_reauth_prime(sm->eap_sim_db_priv,

897

identity,

898

identity_len,

899

data->next_reauth_id,

900

data->counter + 1,

901

data->k_encr, data->k_aut,

902

data->k_re);

903

#endif /* EAP_AKA_PRIME */

904

} else {

905

eap_sim_db_add_reauth(sm->eap_sim_db_priv, identity,

906

identity_len,

907

data->next_reauth_id,

908

data->counter + 1,

909

data->mk);

910

}

911

data->next_reauth_id = NULL;

912

}

913

}

914

915

916

static void eap_aka_process_sync_failure(struct eap_sm *sm,

917

struct eap_aka_data *data,

918

struct wpabuf *respData,

919

struct eap_sim_attrs *attr)

920

{

921

wpa_printf(MSG_DEBUG, "EAP-AKA: Processing Synchronization-Failure");

922

923

if (attr->auts == NULL) {

924

wpa_printf(MSG_WARNING, "EAP-AKA: Synchronization-Failure "

925

"message did not include valid AT_AUTS");

926

data->notification = EAP_SIM_GENERAL_FAILURE_BEFORE_AUTH;

927

eap_aka_state(data, NOTIFICATION);

928

return;

929

}

930

931

/* Avoid re-reporting AUTS when processing pending EAP packet by

932

* maintaining a local flag stating whether this AUTS has already been

933

* reported. */

934

if (!data->auts_reported &&

935

eap_sim_db_resynchronize(sm->eap_sim_db_priv, sm->identity,

936

sm->identity_len, attr->auts,

937

data->rand)) {

938

wpa_printf(MSG_WARNING, "EAP-AKA: Resynchronization failed");

939

data->notification = EAP_SIM_GENERAL_FAILURE_BEFORE_AUTH;

940

eap_aka_state(data, NOTIFICATION);

941

return;

942

}

943

data->auts_reported = 1;

944

945

/* Try again after resynchronization */

946

eap_aka_determine_identity(sm, data, 0, 0);

947

}

948

949

950

static void eap_aka_process_reauth(struct eap_sm *sm,

951

struct eap_aka_data *data,

952

struct wpabuf *respData,

953

struct eap_sim_attrs *attr)

954

{

955

struct eap_sim_attrs eattr;

956

u8 *decrypted = NULL;

957

const u8 *identity, *id2;

958

size_t identity_len, id2_len;

959

960

wpa_printf(MSG_DEBUG, "EAP-AKA: Processing Reauthentication");

961

962

if (attr->mac == NULL ||

963

eap_aka_verify_mac(data, respData, attr->mac, data->nonce_s,

964

EAP_SIM_NONCE_S_LEN)) {

965

wpa_printf(MSG_WARNING, "EAP-AKA: Re-authentication message "

966

"did not include valid AT_MAC");

967

goto fail;

968

}

969

970

if (attr->encr_data == NULL || attr->iv == NULL) {

971

wpa_printf(MSG_WARNING, "EAP-AKA: Reauthentication "

972

"message did not include encrypted data");

973

goto fail;

974

}

975

976

decrypted = eap_sim_parse_encr(data->k_encr, attr->encr_data,

977

attr->encr_data_len, attr->iv, &eattr,

978

0);

979

if (decrypted == NULL) {

980

wpa_printf(MSG_WARNING, "EAP-AKA: Failed to parse encrypted "

981

"data from reauthentication message");

982

goto fail;

983

}

984

985

if (eattr.counter != data->counter) {

986

wpa_printf(MSG_WARNING, "EAP-AKA: Re-authentication message "

987

"used incorrect counter %u, expected %u",

988

eattr.counter, data->counter);

989

goto fail;

990

}

991

os_free(decrypted);

992

decrypted = NULL;

993

994

wpa_printf(MSG_DEBUG, "EAP-AKA: Re-authentication response includes "

995

"the correct AT_MAC");

996

997

if (eattr.counter_too_small) {

998

wpa_printf(MSG_DEBUG, "EAP-AKA: Re-authentication response "

999

"included AT_COUNTER_TOO_SMALL - starting full "

1000

"authentication");

1001

eap_aka_determine_identity(sm, data, 0, 1);

1002

return;

1003

}

1004

1005

if (sm->eap_sim_aka_result_ind && attr->result_ind) {

1006

data->use_result_ind = 1;

1007

data->notification = EAP_SIM_SUCCESS;

1008

eap_aka_state(data, NOTIFICATION);

1009

} else

1010

eap_aka_state(data, SUCCESS);

1011

1012

if (data->reauth) {

1013

identity = data->reauth->identity;

1014

identity_len = data->reauth->identity_len;

1015

} else {

1016

identity = sm->identity;

1017

identity_len = sm->identity_len;

1018

}

1019

1020

id2 = eap_sim_db_get_permanent(sm->eap_sim_db_priv, identity,

1021

identity_len, &id2_len);

1022

if (id2) {

1023

identity = id2;

1024

identity_len = id2_len;

1025

}

1026

1027

if (data->next_pseudonym) {

1028

eap_sim_db_add_pseudonym(sm->eap_sim_db_priv, identity,

1029

identity_len, data->next_pseudonym);

1030

data->next_pseudonym = NULL;

1031

}

1032

if (data->next_reauth_id) {

1033

if (data->eap_method == EAP_TYPE_AKA_PRIME) {

1034

#ifdef EAP_AKA_PRIME

1035

eap_sim_db_add_reauth_prime(sm->eap_sim_db_priv,

1036

identity,

1037

identity_len,

1038

data->next_reauth_id,

1039

data->counter + 1,

1040

data->k_encr, data->k_aut,

1041

data->k_re);

1042

#endif /* EAP_AKA_PRIME */

1043

} else {

1044

eap_sim_db_add_reauth(sm->eap_sim_db_priv, identity,

1045

identity_len,

1046

data->next_reauth_id,

1047

data->counter + 1,

1048

data->mk);

1049

}

1050

data->next_reauth_id = NULL;

1051

} else {

1052

eap_sim_db_remove_reauth(sm->eap_sim_db_priv, data->reauth);

1053

data->reauth = NULL;

1054

}

1055

1056

return;

1057

1058

fail:

1059

data->notification = EAP_SIM_GENERAL_FAILURE_BEFORE_AUTH;

1060

eap_aka_state(data, NOTIFICATION);

1061

eap_sim_db_remove_reauth(sm->eap_sim_db_priv, data->reauth);

1062

data->reauth = NULL;

1063

os_free(decrypted);

1064

}

1065

1066

1067

static void eap_aka_process_client_error(struct eap_sm *sm,

1068

struct eap_aka_data *data,

1069

struct wpabuf *respData,

1070

struct eap_sim_attrs *attr)

1071

{

1072

wpa_printf(MSG_DEBUG, "EAP-AKA: Client reported error %d",

1073

attr->client_error_code);

1074

if (data->notification == EAP_SIM_SUCCESS && data->use_result_ind)

1075

eap_aka_state(data, SUCCESS);

1076

else

1077

eap_aka_state(data, FAILURE);

1078

}

1079

1080

1081

static void eap_aka_process_authentication_reject(

1082

struct eap_sm *sm, struct eap_aka_data *data,

1083

struct wpabuf *respData, struct eap_sim_attrs *attr)

1084

{

1085

wpa_printf(MSG_DEBUG, "EAP-AKA: Client rejected authentication");

1086

eap_aka_state(data, FAILURE);

1087

}

1088

1089

1090

static void eap_aka_process_notification(struct eap_sm *sm,

1091

struct eap_aka_data *data,

1092

struct wpabuf *respData,

1093

struct eap_sim_attrs *attr)

1094

{

1095

wpa_printf(MSG_DEBUG, "EAP-AKA: Client replied to notification");

1096

if (data->notification == EAP_SIM_SUCCESS && data->use_result_ind)

1097

eap_aka_state(data, SUCCESS);

1098

else

1099

eap_aka_state(data, FAILURE);

1100

}

1101

1102

1103

static void eap_aka_process(struct eap_sm *sm, void *priv,

1104

struct wpabuf *respData)

1105

{

1106

struct eap_aka_data *data = priv;

1107

const u8 *pos, *end;

1108

u8 subtype;

1109

size_t len;

1110

struct eap_sim_attrs attr;

1111

1112

pos = eap_hdr_validate(EAP_VENDOR_IETF, data->eap_method, respData,

1113

&len);

1114

if (pos == NULL || len < 3)

1115

return;

1116

1117

end = pos + len;

1118

subtype = *pos;

1119

pos += 3;

1120

1121

if (eap_aka_subtype_ok(data, subtype)) {

1122

wpa_printf(MSG_DEBUG, "EAP-AKA: Unrecognized or unexpected "

1123

"EAP-AKA Subtype in EAP Response");

1124

data->notification = EAP_SIM_GENERAL_FAILURE_BEFORE_AUTH;

1125

eap_aka_state(data, NOTIFICATION);

1126

return;

1127

}

1128

1129

if (eap_sim_parse_attr(pos, end, &attr,

1130

data->eap_method == EAP_TYPE_AKA_PRIME ? 2 : 1,

1131

0)) {

1132

wpa_printf(MSG_DEBUG, "EAP-AKA: Failed to parse attributes");

1133

data->notification = EAP_SIM_GENERAL_FAILURE_BEFORE_AUTH;

1134

eap_aka_state(data, NOTIFICATION);

1135

return;

1136

}

1137

1138

if (subtype == EAP_AKA_SUBTYPE_CLIENT_ERROR) {

1139

eap_aka_process_client_error(sm, data, respData, &attr);

1140

return;

1141

}

1142

1143

if (subtype == EAP_AKA_SUBTYPE_AUTHENTICATION_REJECT) {

1144

eap_aka_process_authentication_reject(sm, data, respData,

1145

&attr);

1146

return;

1147

}

1148

1149

switch (data->state) {

1150

case IDENTITY:

1151

eap_aka_process_identity(sm, data, respData, &attr);

1152

break;

1153

case CHALLENGE:

1154

if (subtype == EAP_AKA_SUBTYPE_SYNCHRONIZATION_FAILURE) {

1155

eap_aka_process_sync_failure(sm, data, respData,

1156

&attr);

1157

} else {

1158

eap_aka_process_challenge(sm, data, respData, &attr);

1159

}

1160

break;

1161

case REAUTH:

1162

eap_aka_process_reauth(sm, data, respData, &attr);

1163

break;

1164

case NOTIFICATION:

1165

eap_aka_process_notification(sm, data, respData, &attr);

1166

break;

1167

default:

1168

wpa_printf(MSG_DEBUG, "EAP-AKA: Unknown state %d in "

1169

"process", data->state);

1170

break;

1171

}

1172

}

1173

1174

1175

static Boolean eap_aka_isDone(struct eap_sm *sm, void *priv)

1176

{

1177

struct eap_aka_data *data = priv;

1178

return data->state == SUCCESS || data->state == FAILURE;

1179

}

1180

1181

1182

static u8 * eap_aka_getKey(struct eap_sm *sm, void *priv, size_t *len)

1183

{

1184

struct eap_aka_data *data = priv;

1185

u8 *key;

1186

1187

if (data->state != SUCCESS)

1188

return NULL;

1189

1190

key = os_malloc(EAP_SIM_KEYING_DATA_LEN);

1191

if (key == NULL)

1192

return NULL;

1193

os_memcpy(key, data->msk, EAP_SIM_KEYING_DATA_LEN);

1194

*len = EAP_SIM_KEYING_DATA_LEN;

1195

return key;

1196

}

1197

1198

1199

static u8 * eap_aka_get_emsk(struct eap_sm *sm, void *priv, size_t *len)

1200

{

1201

struct eap_aka_data *data = priv;

1202

u8 *key;

1203

1204

if (data->state != SUCCESS)

1205

return NULL;

1206

1207

key = os_malloc(EAP_EMSK_LEN);

1208

if (key == NULL)

1209

return NULL;

1210

os_memcpy(key, data->emsk, EAP_EMSK_LEN);

1211

*len = EAP_EMSK_LEN;

1212

return key;

1213

}

1214

1215

1216

static Boolean eap_aka_isSuccess(struct eap_sm *sm, void *priv)

1217

{

1218

struct eap_aka_data *data = priv;

1219

return data->state == SUCCESS;

1220

}

1221

1222

1223

int eap_server_aka_register(void)

1224

{

1225

struct eap_method *eap;

1226

int ret;

1227

1228

eap = eap_server_method_alloc(EAP_SERVER_METHOD_INTERFACE_VERSION,

1229

EAP_VENDOR_IETF, EAP_TYPE_AKA, "AKA");

1230

if (eap == NULL)

1231

return -1;

1232

1233

eap->init = eap_aka_init;

1234

eap->reset = eap_aka_reset;

1235

eap->buildReq = eap_aka_buildReq;

1236

eap->check = eap_aka_check;

1237

eap->process = eap_aka_process;

1238

eap->isDone = eap_aka_isDone;

1239

eap->getKey = eap_aka_getKey;

1240

eap->isSuccess = eap_aka_isSuccess;

1241

eap->get_emsk = eap_aka_get_emsk;

1242

1243

ret = eap_server_method_register(eap);

1244

if (ret)

1245

eap_server_method_free(eap);

1246

return ret;

1247

}

1248

1249

1250

#ifdef EAP_AKA_PRIME

1251

int eap_server_aka_prime_register(void)

1252

{

1253

struct eap_method *eap;

1254

int ret;

1255

1256

eap = eap_server_method_alloc(EAP_SERVER_METHOD_INTERFACE_VERSION,

1257

EAP_VENDOR_IETF, EAP_TYPE_AKA_PRIME,

1258

"AKA'");

1259

if (eap == NULL)

1260

return -1;

1261

1262

eap->init = eap_aka_prime_init;

1263

eap->reset = eap_aka_reset;

1264

eap->buildReq = eap_aka_buildReq;

1265

eap->check = eap_aka_check;

1266

eap->process = eap_aka_process;

1267

eap->isDone = eap_aka_isDone;

1268

eap->getKey = eap_aka_getKey;

1269

eap->isSuccess = eap_aka_isSuccess;

1270

eap->get_emsk = eap_aka_get_emsk;

1271

1272

ret = eap_server_method_register(eap);

1273

if (ret)

1274

eap_server_method_free(eap);

1275

1276

return ret;

1277

}

1278

#endif /* EAP_AKA_PRIME */

Older »