src/common/sae.c

46 		tmp->prime_len = crypto_ec_prime_len(tmp->ec);
59 		tmp->prime_len = tmp->dh->prime_len;
60 		if (tmp->prime_len > SAE_MAX_PRIME_LEN) {
66 							tmp->prime_len);
155 			    prime, sae->tmp->prime_len, pwd_value, bits) < 0)
158 		buf_shift_right(pwd_value, sae->tmp->prime_len, 8 - bits % 8);
160 			pwd_value, sae->tmp->prime_len);
162 	cmp_prime = const_time_memcmp(pwd_value, prime, sae->tmp->prime_len);
170 	x_cand = crypto_bignum_init_set(pwd_value, sae->tmp->prime_len);
193 	size_t bits = sae->tmp->prime_len * 8;
203 			    sae->tmp->dh->prime, sae->tmp->prime_len, pwd_value,
207 			sae->tmp->prime_len);
211 				sae->tmp->prime_len);
225 	a = crypto_bignum_init_set(pwd_value, sae->tmp->prime_len);
288 	size_t prime_len;
306 	prime_len = sae->tmp->prime_len;
308 				 prime_len) < 0)
316 	    crypto_bignum_to_bin(qr, qr_bin, sizeof(qr_bin), prime_len) < 0 ||
317 	    crypto_bignum_to_bin(qnr, qnr_bin, sizeof(qnr_bin), prime_len) < 0)
371 		const_time_select_bin(found, x_bin, x_cand_bin, prime_len,
399 	x = crypto_bignum_init_set(x_bin, prime_len);
454 	size_t prime_len = sae->tmp->prime_len * 8;
462 	pwe_buf = os_zalloc(prime_len * 2);
513 		if (crypto_bignum_to_bin(pwe, pwe_buf + prime_len, prime_len,
514 					 prime_len) < 0)
516 		const_time_select_bin(found, pwe_buf, pwe_buf + prime_len,
517 				      prime_len, pwe_buf);
527 	sae->tmp->pwe_ffc = crypto_bignum_init_set(pwe_buf, prime_len);
530 	bin_clear_free(pwe_buf, prime_len * 2);
648 	wpa_hexdump_key(MSG_DEBUG, "SAE: k", k, sae->tmp->prime_len);
680 	    crypto_bignum_to_bin(K, k, SAE_MAX_PRIME_LEN, sae->tmp->prime_len) <
686 	wpa_hexdump_key(MSG_DEBUG, "SAE: k", k, sae->tmp->prime_len);
714 	hmac_sha256(null_key, sizeof(null_key), k, sae->tmp->prime_len,
773 	pos = wpabuf_put(buf, sae->tmp->prime_len);
775 			     sae->tmp->prime_len, sae->tmp->prime_len);
777 		    pos, sae->tmp->prime_len);
779 		pos = wpabuf_put(buf, 2 * sae->tmp->prime_len);
782 				       pos, pos + sae->tmp->prime_len);
784 			    pos, sae->tmp->prime_len);
786 			    pos + sae->tmp->prime_len, sae->tmp->prime_len);
788 		pos = wpabuf_put(buf, sae->tmp->prime_len);
790 				     sae->tmp->prime_len, sae->tmp->prime_len);
792 			    pos, sae->tmp->prime_len);
871 	scalar_elem_len = (sae->tmp->ec ? 3 : 2) * sae->tmp->prime_len;
921 	if (sae->tmp->prime_len > end - *pos) {
926 	peer_scalar = crypto_bignum_init_set(*pos, sae->tmp->prime_len);
957 		    *pos, sae->tmp->prime_len);
958 	*pos += sae->tmp->prime_len;
969 	if (2 * sae->tmp->prime_len > end - *pos) {
976 				 sae->tmp->prime_len) < 0)
980 	if (os_memcmp(*pos, prime, sae->tmp->prime_len) >= 0 ||
981 	    os_memcmp(*pos + sae->tmp->prime_len, prime,
982 		      sae->tmp->prime_len) >= 0) {
989 		    *pos, sae->tmp->prime_len);
991 		    *pos + sae->tmp->prime_len, sae->tmp->prime_len);
1005 	*pos += 2 * sae->tmp->prime_len;
1017 	if (sae->tmp->prime_len > end - *pos) {
1023 		    sae->tmp->prime_len);
1027 		crypto_bignum_init_set(*pos, sae->tmp->prime_len);
1055 	*pos += sae->tmp->prime_len;
1189 			     sae->tmp->prime_len);
1191 	len[1] = sae->tmp->prime_len;
1195 			     sae->tmp->prime_len);
1197 	len[3] = sae->tmp->prime_len;
1216 			       element_b1 + sae->tmp->prime_len);
1218 			       element_b2 + sae->tmp->prime_len);
1220 	sae_cn_confirm(sae, sc, scalar1, element_b1, 2 * sae->tmp->prime_len,
1221 		       scalar2, element_b2, 2 * sae->tmp->prime_len, confirm);
1236 			     sae->tmp->prime_len);
1238 			     sae->tmp->prime_len);
1240 	sae_cn_confirm(sae, sc, scalar1, element_b1, sae->tmp->prime_len,
1241 		       scalar2, element_b2, sae->tmp->prime_len, confirm);