1214501Srpaulo/* 2214501Srpaulo * hostapd - WPA/RSN IE and KDE definitions 3346981Scy * Copyright (c) 2004-2018, Jouni Malinen <j@w1.fi> 4214501Srpaulo * 5252726Srpaulo * This software may be distributed under the terms of the BSD license. 6252726Srpaulo * See README for more details. 7214501Srpaulo */ 8214501Srpaulo 9214501Srpaulo#include "utils/includes.h" 10214501Srpaulo 11214501Srpaulo#include "utils/common.h" 12214501Srpaulo#include "common/ieee802_11_defs.h" 13214501Srpaulo#include "eapol_auth/eapol_auth_sm.h" 14214501Srpaulo#include "ap_config.h" 15214501Srpaulo#include "ieee802_11.h" 16214501Srpaulo#include "wpa_auth.h" 17214501Srpaulo#include "pmksa_cache_auth.h" 18214501Srpaulo#include "wpa_auth_ie.h" 19214501Srpaulo#include "wpa_auth_i.h" 20214501Srpaulo 21214501Srpaulo 22252726Srpaulo#ifdef CONFIG_RSN_TESTING 23252726Srpauloint rsn_testing = 0; 24252726Srpaulo#endif /* CONFIG_RSN_TESTING */ 25252726Srpaulo 26252726Srpaulo 27214501Srpaulostatic int wpa_write_wpa_ie(struct wpa_auth_config *conf, u8 *buf, size_t len) 28214501Srpaulo{ 29214501Srpaulo struct wpa_ie_hdr *hdr; 30214501Srpaulo int num_suites; 31214501Srpaulo u8 *pos, *count; 32252726Srpaulo u32 suite; 33214501Srpaulo 34214501Srpaulo hdr = (struct wpa_ie_hdr *) buf; 35214501Srpaulo hdr->elem_id = WLAN_EID_VENDOR_SPECIFIC; 36214501Srpaulo RSN_SELECTOR_PUT(hdr->oui, WPA_OUI_TYPE); 37214501Srpaulo WPA_PUT_LE16(hdr->version, WPA_VERSION); 38214501Srpaulo pos = (u8 *) (hdr + 1); 39214501Srpaulo 40252726Srpaulo suite = wpa_cipher_to_suite(WPA_PROTO_WPA, conf->wpa_group); 41252726Srpaulo if (suite == 0) { 42214501Srpaulo wpa_printf(MSG_DEBUG, "Invalid group cipher (%d).", 43214501Srpaulo conf->wpa_group); 44214501Srpaulo return -1; 45214501Srpaulo } 46252726Srpaulo RSN_SELECTOR_PUT(pos, suite); 47214501Srpaulo pos += WPA_SELECTOR_LEN; 48214501Srpaulo 49214501Srpaulo count = pos; 50214501Srpaulo pos += 2; 51214501Srpaulo 52252726Srpaulo num_suites = wpa_cipher_put_suites(pos, conf->wpa_pairwise); 53214501Srpaulo if (num_suites == 0) { 54214501Srpaulo wpa_printf(MSG_DEBUG, "Invalid pairwise cipher (%d).", 55214501Srpaulo conf->wpa_pairwise); 56214501Srpaulo return -1; 57214501Srpaulo } 58252726Srpaulo pos += num_suites * WPA_SELECTOR_LEN; 59214501Srpaulo WPA_PUT_LE16(count, num_suites); 60214501Srpaulo 61214501Srpaulo num_suites = 0; 62214501Srpaulo count = pos; 63214501Srpaulo pos += 2; 64214501Srpaulo 65214501Srpaulo if (conf->wpa_key_mgmt & WPA_KEY_MGMT_IEEE8021X) { 66214501Srpaulo RSN_SELECTOR_PUT(pos, WPA_AUTH_KEY_MGMT_UNSPEC_802_1X); 67214501Srpaulo pos += WPA_SELECTOR_LEN; 68214501Srpaulo num_suites++; 69214501Srpaulo } 70214501Srpaulo if (conf->wpa_key_mgmt & WPA_KEY_MGMT_PSK) { 71214501Srpaulo RSN_SELECTOR_PUT(pos, WPA_AUTH_KEY_MGMT_PSK_OVER_802_1X); 72214501Srpaulo pos += WPA_SELECTOR_LEN; 73214501Srpaulo num_suites++; 74214501Srpaulo } 75214501Srpaulo 76214501Srpaulo if (num_suites == 0) { 77214501Srpaulo wpa_printf(MSG_DEBUG, "Invalid key management type (%d).", 78214501Srpaulo conf->wpa_key_mgmt); 79214501Srpaulo return -1; 80214501Srpaulo } 81214501Srpaulo WPA_PUT_LE16(count, num_suites); 82214501Srpaulo 83214501Srpaulo /* WPA Capabilities; use defaults, so no need to include it */ 84214501Srpaulo 85214501Srpaulo hdr->len = (pos - buf) - 2; 86214501Srpaulo 87214501Srpaulo return pos - buf; 88214501Srpaulo} 89214501Srpaulo 90214501Srpaulo 91214501Srpauloint wpa_write_rsn_ie(struct wpa_auth_config *conf, u8 *buf, size_t len, 92214501Srpaulo const u8 *pmkid) 93214501Srpaulo{ 94214501Srpaulo struct rsn_ie_hdr *hdr; 95252726Srpaulo int num_suites, res; 96214501Srpaulo u8 *pos, *count; 97214501Srpaulo u16 capab; 98252726Srpaulo u32 suite; 99214501Srpaulo 100214501Srpaulo hdr = (struct rsn_ie_hdr *) buf; 101214501Srpaulo hdr->elem_id = WLAN_EID_RSN; 102214501Srpaulo WPA_PUT_LE16(hdr->version, RSN_VERSION); 103214501Srpaulo pos = (u8 *) (hdr + 1); 104214501Srpaulo 105252726Srpaulo suite = wpa_cipher_to_suite(WPA_PROTO_RSN, conf->wpa_group); 106252726Srpaulo if (suite == 0) { 107214501Srpaulo wpa_printf(MSG_DEBUG, "Invalid group cipher (%d).", 108214501Srpaulo conf->wpa_group); 109214501Srpaulo return -1; 110214501Srpaulo } 111252726Srpaulo RSN_SELECTOR_PUT(pos, suite); 112214501Srpaulo pos += RSN_SELECTOR_LEN; 113214501Srpaulo 114214501Srpaulo num_suites = 0; 115214501Srpaulo count = pos; 116214501Srpaulo pos += 2; 117214501Srpaulo 118252726Srpaulo#ifdef CONFIG_RSN_TESTING 119252726Srpaulo if (rsn_testing) { 120252726Srpaulo RSN_SELECTOR_PUT(pos, RSN_SELECTOR(0x12, 0x34, 0x56, 1)); 121214501Srpaulo pos += RSN_SELECTOR_LEN; 122214501Srpaulo num_suites++; 123214501Srpaulo } 124252726Srpaulo#endif /* CONFIG_RSN_TESTING */ 125252726Srpaulo 126252726Srpaulo res = rsn_cipher_put_suites(pos, conf->rsn_pairwise); 127252726Srpaulo num_suites += res; 128252726Srpaulo pos += res * RSN_SELECTOR_LEN; 129252726Srpaulo 130252726Srpaulo#ifdef CONFIG_RSN_TESTING 131252726Srpaulo if (rsn_testing) { 132252726Srpaulo RSN_SELECTOR_PUT(pos, RSN_SELECTOR(0x12, 0x34, 0x56, 2)); 133214501Srpaulo pos += RSN_SELECTOR_LEN; 134214501Srpaulo num_suites++; 135214501Srpaulo } 136252726Srpaulo#endif /* CONFIG_RSN_TESTING */ 137214501Srpaulo 138214501Srpaulo if (num_suites == 0) { 139214501Srpaulo wpa_printf(MSG_DEBUG, "Invalid pairwise cipher (%d).", 140214501Srpaulo conf->rsn_pairwise); 141214501Srpaulo return -1; 142214501Srpaulo } 143214501Srpaulo WPA_PUT_LE16(count, num_suites); 144214501Srpaulo 145214501Srpaulo num_suites = 0; 146214501Srpaulo count = pos; 147214501Srpaulo pos += 2; 148214501Srpaulo 149252726Srpaulo#ifdef CONFIG_RSN_TESTING 150252726Srpaulo if (rsn_testing) { 151252726Srpaulo RSN_SELECTOR_PUT(pos, RSN_SELECTOR(0x12, 0x34, 0x56, 1)); 152252726Srpaulo pos += RSN_SELECTOR_LEN; 153252726Srpaulo num_suites++; 154252726Srpaulo } 155252726Srpaulo#endif /* CONFIG_RSN_TESTING */ 156252726Srpaulo 157214501Srpaulo if (conf->wpa_key_mgmt & WPA_KEY_MGMT_IEEE8021X) { 158214501Srpaulo RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_UNSPEC_802_1X); 159214501Srpaulo pos += RSN_SELECTOR_LEN; 160214501Srpaulo num_suites++; 161214501Srpaulo } 162214501Srpaulo if (conf->wpa_key_mgmt & WPA_KEY_MGMT_PSK) { 163214501Srpaulo RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_PSK_OVER_802_1X); 164214501Srpaulo pos += RSN_SELECTOR_LEN; 165214501Srpaulo num_suites++; 166214501Srpaulo } 167346981Scy#ifdef CONFIG_IEEE80211R_AP 168214501Srpaulo if (conf->wpa_key_mgmt & WPA_KEY_MGMT_FT_IEEE8021X) { 169214501Srpaulo RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_FT_802_1X); 170214501Srpaulo pos += RSN_SELECTOR_LEN; 171214501Srpaulo num_suites++; 172214501Srpaulo } 173346981Scy#ifdef CONFIG_SHA384 174346981Scy if (conf->wpa_key_mgmt & WPA_KEY_MGMT_FT_IEEE8021X_SHA384) { 175346981Scy RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_FT_802_1X_SHA384); 176346981Scy pos += RSN_SELECTOR_LEN; 177346981Scy num_suites++; 178346981Scy } 179346981Scy#endif /* CONFIG_SHA384 */ 180214501Srpaulo if (conf->wpa_key_mgmt & WPA_KEY_MGMT_FT_PSK) { 181214501Srpaulo RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_FT_PSK); 182214501Srpaulo pos += RSN_SELECTOR_LEN; 183214501Srpaulo num_suites++; 184214501Srpaulo } 185346981Scy#endif /* CONFIG_IEEE80211R_AP */ 186214501Srpaulo#ifdef CONFIG_IEEE80211W 187214501Srpaulo if (conf->wpa_key_mgmt & WPA_KEY_MGMT_IEEE8021X_SHA256) { 188214501Srpaulo RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_802_1X_SHA256); 189214501Srpaulo pos += RSN_SELECTOR_LEN; 190214501Srpaulo num_suites++; 191214501Srpaulo } 192214501Srpaulo if (conf->wpa_key_mgmt & WPA_KEY_MGMT_PSK_SHA256) { 193214501Srpaulo RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_PSK_SHA256); 194214501Srpaulo pos += RSN_SELECTOR_LEN; 195214501Srpaulo num_suites++; 196214501Srpaulo } 197214501Srpaulo#endif /* CONFIG_IEEE80211W */ 198252726Srpaulo#ifdef CONFIG_SAE 199252726Srpaulo if (conf->wpa_key_mgmt & WPA_KEY_MGMT_SAE) { 200252726Srpaulo RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_SAE); 201252726Srpaulo pos += RSN_SELECTOR_LEN; 202252726Srpaulo num_suites++; 203252726Srpaulo } 204252726Srpaulo if (conf->wpa_key_mgmt & WPA_KEY_MGMT_FT_SAE) { 205252726Srpaulo RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_FT_SAE); 206252726Srpaulo pos += RSN_SELECTOR_LEN; 207252726Srpaulo num_suites++; 208252726Srpaulo } 209252726Srpaulo#endif /* CONFIG_SAE */ 210281806Srpaulo if (conf->wpa_key_mgmt & WPA_KEY_MGMT_IEEE8021X_SUITE_B) { 211281806Srpaulo RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_802_1X_SUITE_B); 212281806Srpaulo pos += RSN_SELECTOR_LEN; 213281806Srpaulo num_suites++; 214281806Srpaulo } 215281806Srpaulo if (conf->wpa_key_mgmt & WPA_KEY_MGMT_IEEE8021X_SUITE_B_192) { 216281806Srpaulo RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_802_1X_SUITE_B_192); 217281806Srpaulo pos += RSN_SELECTOR_LEN; 218281806Srpaulo num_suites++; 219281806Srpaulo } 220346981Scy#ifdef CONFIG_FILS 221346981Scy if (conf->wpa_key_mgmt & WPA_KEY_MGMT_FILS_SHA256) { 222346981Scy RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_FILS_SHA256); 223346981Scy pos += RSN_SELECTOR_LEN; 224346981Scy num_suites++; 225346981Scy } 226346981Scy if (conf->wpa_key_mgmt & WPA_KEY_MGMT_FILS_SHA384) { 227346981Scy RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_FILS_SHA384); 228346981Scy pos += RSN_SELECTOR_LEN; 229346981Scy num_suites++; 230346981Scy } 231346981Scy#ifdef CONFIG_IEEE80211R_AP 232346981Scy if (conf->wpa_key_mgmt & WPA_KEY_MGMT_FT_FILS_SHA256) { 233346981Scy RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_FT_FILS_SHA256); 234346981Scy pos += RSN_SELECTOR_LEN; 235346981Scy num_suites++; 236346981Scy } 237346981Scy if (conf->wpa_key_mgmt & WPA_KEY_MGMT_FT_FILS_SHA384) { 238346981Scy RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_FT_FILS_SHA384); 239346981Scy pos += RSN_SELECTOR_LEN; 240346981Scy num_suites++; 241346981Scy } 242346981Scy#endif /* CONFIG_IEEE80211R_AP */ 243346981Scy#endif /* CONFIG_FILS */ 244346981Scy#ifdef CONFIG_OWE 245346981Scy if (conf->wpa_key_mgmt & WPA_KEY_MGMT_OWE) { 246346981Scy RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_OWE); 247346981Scy pos += RSN_SELECTOR_LEN; 248346981Scy num_suites++; 249346981Scy } 250346981Scy#endif /* CONFIG_OWE */ 251346981Scy#ifdef CONFIG_DPP 252346981Scy if (conf->wpa_key_mgmt & WPA_KEY_MGMT_DPP) { 253346981Scy RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_DPP); 254346981Scy pos += RSN_SELECTOR_LEN; 255346981Scy num_suites++; 256346981Scy } 257346981Scy#endif /* CONFIG_DPP */ 258346981Scy#ifdef CONFIG_HS20 259346981Scy if (conf->wpa_key_mgmt & WPA_KEY_MGMT_OSEN) { 260346981Scy RSN_SELECTOR_PUT(pos, RSN_AUTH_KEY_MGMT_OSEN); 261346981Scy pos += RSN_SELECTOR_LEN; 262346981Scy num_suites++; 263346981Scy } 264346981Scy#endif /* CONFIG_HS20 */ 265214501Srpaulo 266252726Srpaulo#ifdef CONFIG_RSN_TESTING 267252726Srpaulo if (rsn_testing) { 268252726Srpaulo RSN_SELECTOR_PUT(pos, RSN_SELECTOR(0x12, 0x34, 0x56, 2)); 269252726Srpaulo pos += RSN_SELECTOR_LEN; 270252726Srpaulo num_suites++; 271252726Srpaulo } 272252726Srpaulo#endif /* CONFIG_RSN_TESTING */ 273252726Srpaulo 274214501Srpaulo if (num_suites == 0) { 275214501Srpaulo wpa_printf(MSG_DEBUG, "Invalid key management type (%d).", 276214501Srpaulo conf->wpa_key_mgmt); 277214501Srpaulo return -1; 278214501Srpaulo } 279214501Srpaulo WPA_PUT_LE16(count, num_suites); 280214501Srpaulo 281214501Srpaulo /* RSN Capabilities */ 282214501Srpaulo capab = 0; 283214501Srpaulo if (conf->rsn_preauth) 284214501Srpaulo capab |= WPA_CAPABILITY_PREAUTH; 285214501Srpaulo if (conf->wmm_enabled) { 286214501Srpaulo /* 4 PTKSA replay counters when using WMM */ 287214501Srpaulo capab |= (RSN_NUM_REPLAY_COUNTERS_16 << 2); 288214501Srpaulo } 289214501Srpaulo#ifdef CONFIG_IEEE80211W 290214501Srpaulo if (conf->ieee80211w != NO_MGMT_FRAME_PROTECTION) { 291214501Srpaulo capab |= WPA_CAPABILITY_MFPC; 292214501Srpaulo if (conf->ieee80211w == MGMT_FRAME_PROTECTION_REQUIRED) 293214501Srpaulo capab |= WPA_CAPABILITY_MFPR; 294214501Srpaulo } 295214501Srpaulo#endif /* CONFIG_IEEE80211W */ 296346981Scy#ifdef CONFIG_OCV 297346981Scy if (conf->ocv) 298346981Scy capab |= WPA_CAPABILITY_OCVC; 299346981Scy#endif /* CONFIG_OCV */ 300252726Srpaulo#ifdef CONFIG_RSN_TESTING 301252726Srpaulo if (rsn_testing) 302346981Scy capab |= BIT(8) | BIT(15); 303252726Srpaulo#endif /* CONFIG_RSN_TESTING */ 304214501Srpaulo WPA_PUT_LE16(pos, capab); 305214501Srpaulo pos += 2; 306214501Srpaulo 307214501Srpaulo if (pmkid) { 308337817Scy if (2 + PMKID_LEN > buf + len - pos) 309214501Srpaulo return -1; 310214501Srpaulo /* PMKID Count */ 311214501Srpaulo WPA_PUT_LE16(pos, 1); 312214501Srpaulo pos += 2; 313214501Srpaulo os_memcpy(pos, pmkid, PMKID_LEN); 314214501Srpaulo pos += PMKID_LEN; 315214501Srpaulo } 316214501Srpaulo 317214501Srpaulo#ifdef CONFIG_IEEE80211W 318289549Srpaulo if (conf->ieee80211w != NO_MGMT_FRAME_PROTECTION && 319289549Srpaulo conf->group_mgmt_cipher != WPA_CIPHER_AES_128_CMAC) { 320337817Scy if (2 + 4 > buf + len - pos) 321214501Srpaulo return -1; 322214501Srpaulo if (pmkid == NULL) { 323214501Srpaulo /* PMKID Count */ 324214501Srpaulo WPA_PUT_LE16(pos, 0); 325214501Srpaulo pos += 2; 326214501Srpaulo } 327214501Srpaulo 328214501Srpaulo /* Management Group Cipher Suite */ 329281806Srpaulo switch (conf->group_mgmt_cipher) { 330281806Srpaulo case WPA_CIPHER_AES_128_CMAC: 331281806Srpaulo RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_AES_128_CMAC); 332281806Srpaulo break; 333281806Srpaulo case WPA_CIPHER_BIP_GMAC_128: 334281806Srpaulo RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_BIP_GMAC_128); 335281806Srpaulo break; 336281806Srpaulo case WPA_CIPHER_BIP_GMAC_256: 337281806Srpaulo RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_BIP_GMAC_256); 338281806Srpaulo break; 339281806Srpaulo case WPA_CIPHER_BIP_CMAC_256: 340281806Srpaulo RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_BIP_CMAC_256); 341281806Srpaulo break; 342281806Srpaulo default: 343281806Srpaulo wpa_printf(MSG_DEBUG, 344281806Srpaulo "Invalid group management cipher (0x%x)", 345281806Srpaulo conf->group_mgmt_cipher); 346281806Srpaulo return -1; 347281806Srpaulo } 348214501Srpaulo pos += RSN_SELECTOR_LEN; 349214501Srpaulo } 350214501Srpaulo#endif /* CONFIG_IEEE80211W */ 351214501Srpaulo 352252726Srpaulo#ifdef CONFIG_RSN_TESTING 353252726Srpaulo if (rsn_testing) { 354252726Srpaulo /* 355252726Srpaulo * Fill in any defined fields and add extra data to the end of 356252726Srpaulo * the element. 357252726Srpaulo */ 358252726Srpaulo int pmkid_count_set = pmkid != NULL; 359252726Srpaulo if (conf->ieee80211w != NO_MGMT_FRAME_PROTECTION) 360252726Srpaulo pmkid_count_set = 1; 361252726Srpaulo /* PMKID Count */ 362252726Srpaulo WPA_PUT_LE16(pos, 0); 363252726Srpaulo pos += 2; 364252726Srpaulo if (conf->ieee80211w == NO_MGMT_FRAME_PROTECTION) { 365252726Srpaulo /* Management Group Cipher Suite */ 366252726Srpaulo RSN_SELECTOR_PUT(pos, RSN_CIPHER_SUITE_AES_128_CMAC); 367252726Srpaulo pos += RSN_SELECTOR_LEN; 368252726Srpaulo } 369252726Srpaulo 370252726Srpaulo os_memset(pos, 0x12, 17); 371252726Srpaulo pos += 17; 372252726Srpaulo } 373252726Srpaulo#endif /* CONFIG_RSN_TESTING */ 374252726Srpaulo 375214501Srpaulo hdr->len = (pos - buf) - 2; 376214501Srpaulo 377214501Srpaulo return pos - buf; 378214501Srpaulo} 379214501Srpaulo 380214501Srpaulo 381281806Srpaulostatic u8 * wpa_write_osen(struct wpa_auth_config *conf, u8 *eid) 382281806Srpaulo{ 383281806Srpaulo u8 *len; 384281806Srpaulo u16 capab; 385281806Srpaulo 386281806Srpaulo *eid++ = WLAN_EID_VENDOR_SPECIFIC; 387281806Srpaulo len = eid++; /* to be filled */ 388281806Srpaulo WPA_PUT_BE24(eid, OUI_WFA); 389281806Srpaulo eid += 3; 390281806Srpaulo *eid++ = HS20_OSEN_OUI_TYPE; 391281806Srpaulo 392281806Srpaulo /* Group Data Cipher Suite */ 393281806Srpaulo RSN_SELECTOR_PUT(eid, RSN_CIPHER_SUITE_NO_GROUP_ADDRESSED); 394281806Srpaulo eid += RSN_SELECTOR_LEN; 395281806Srpaulo 396281806Srpaulo /* Pairwise Cipher Suite Count and List */ 397281806Srpaulo WPA_PUT_LE16(eid, 1); 398281806Srpaulo eid += 2; 399281806Srpaulo RSN_SELECTOR_PUT(eid, RSN_CIPHER_SUITE_CCMP); 400281806Srpaulo eid += RSN_SELECTOR_LEN; 401281806Srpaulo 402281806Srpaulo /* AKM Suite Count and List */ 403281806Srpaulo WPA_PUT_LE16(eid, 1); 404281806Srpaulo eid += 2; 405281806Srpaulo RSN_SELECTOR_PUT(eid, RSN_AUTH_KEY_MGMT_OSEN); 406281806Srpaulo eid += RSN_SELECTOR_LEN; 407281806Srpaulo 408281806Srpaulo /* RSN Capabilities */ 409281806Srpaulo capab = 0; 410281806Srpaulo if (conf->wmm_enabled) { 411281806Srpaulo /* 4 PTKSA replay counters when using WMM */ 412281806Srpaulo capab |= (RSN_NUM_REPLAY_COUNTERS_16 << 2); 413281806Srpaulo } 414281806Srpaulo#ifdef CONFIG_IEEE80211W 415281806Srpaulo if (conf->ieee80211w != NO_MGMT_FRAME_PROTECTION) { 416281806Srpaulo capab |= WPA_CAPABILITY_MFPC; 417281806Srpaulo if (conf->ieee80211w == MGMT_FRAME_PROTECTION_REQUIRED) 418281806Srpaulo capab |= WPA_CAPABILITY_MFPR; 419281806Srpaulo } 420281806Srpaulo#endif /* CONFIG_IEEE80211W */ 421346981Scy#ifdef CONFIG_OCV 422346981Scy if (conf->ocv) 423346981Scy capab |= WPA_CAPABILITY_OCVC; 424346981Scy#endif /* CONFIG_OCV */ 425281806Srpaulo WPA_PUT_LE16(eid, capab); 426281806Srpaulo eid += 2; 427281806Srpaulo 428281806Srpaulo *len = eid - len - 1; 429281806Srpaulo 430281806Srpaulo return eid; 431281806Srpaulo} 432281806Srpaulo 433281806Srpaulo 434214501Srpauloint wpa_auth_gen_wpa_ie(struct wpa_authenticator *wpa_auth) 435214501Srpaulo{ 436214501Srpaulo u8 *pos, buf[128]; 437214501Srpaulo int res; 438214501Srpaulo 439289549Srpaulo#ifdef CONFIG_TESTING_OPTIONS 440289549Srpaulo if (wpa_auth->conf.own_ie_override_len) { 441289549Srpaulo wpa_hexdump(MSG_DEBUG, "WPA: Forced own IE(s) for testing", 442289549Srpaulo wpa_auth->conf.own_ie_override, 443289549Srpaulo wpa_auth->conf.own_ie_override_len); 444289549Srpaulo os_free(wpa_auth->wpa_ie); 445289549Srpaulo wpa_auth->wpa_ie = 446289549Srpaulo os_malloc(wpa_auth->conf.own_ie_override_len); 447289549Srpaulo if (wpa_auth->wpa_ie == NULL) 448289549Srpaulo return -1; 449289549Srpaulo os_memcpy(wpa_auth->wpa_ie, wpa_auth->conf.own_ie_override, 450289549Srpaulo wpa_auth->conf.own_ie_override_len); 451289549Srpaulo wpa_auth->wpa_ie_len = wpa_auth->conf.own_ie_override_len; 452289549Srpaulo return 0; 453289549Srpaulo } 454289549Srpaulo#endif /* CONFIG_TESTING_OPTIONS */ 455289549Srpaulo 456214501Srpaulo pos = buf; 457214501Srpaulo 458281806Srpaulo if (wpa_auth->conf.wpa == WPA_PROTO_OSEN) { 459281806Srpaulo pos = wpa_write_osen(&wpa_auth->conf, pos); 460281806Srpaulo } 461214501Srpaulo if (wpa_auth->conf.wpa & WPA_PROTO_RSN) { 462214501Srpaulo res = wpa_write_rsn_ie(&wpa_auth->conf, 463214501Srpaulo pos, buf + sizeof(buf) - pos, NULL); 464214501Srpaulo if (res < 0) 465214501Srpaulo return res; 466214501Srpaulo pos += res; 467214501Srpaulo } 468346981Scy#ifdef CONFIG_IEEE80211R_AP 469252726Srpaulo if (wpa_key_mgmt_ft(wpa_auth->conf.wpa_key_mgmt)) { 470214501Srpaulo res = wpa_write_mdie(&wpa_auth->conf, pos, 471214501Srpaulo buf + sizeof(buf) - pos); 472214501Srpaulo if (res < 0) 473214501Srpaulo return res; 474214501Srpaulo pos += res; 475214501Srpaulo } 476346981Scy#endif /* CONFIG_IEEE80211R_AP */ 477214501Srpaulo if (wpa_auth->conf.wpa & WPA_PROTO_WPA) { 478214501Srpaulo res = wpa_write_wpa_ie(&wpa_auth->conf, 479214501Srpaulo pos, buf + sizeof(buf) - pos); 480214501Srpaulo if (res < 0) 481214501Srpaulo return res; 482214501Srpaulo pos += res; 483214501Srpaulo } 484214501Srpaulo 485214501Srpaulo os_free(wpa_auth->wpa_ie); 486214501Srpaulo wpa_auth->wpa_ie = os_malloc(pos - buf); 487214501Srpaulo if (wpa_auth->wpa_ie == NULL) 488214501Srpaulo return -1; 489214501Srpaulo os_memcpy(wpa_auth->wpa_ie, buf, pos - buf); 490214501Srpaulo wpa_auth->wpa_ie_len = pos - buf; 491214501Srpaulo 492214501Srpaulo return 0; 493214501Srpaulo} 494214501Srpaulo 495214501Srpaulo 496214501Srpaulou8 * wpa_add_kde(u8 *pos, u32 kde, const u8 *data, size_t data_len, 497214501Srpaulo const u8 *data2, size_t data2_len) 498214501Srpaulo{ 499214501Srpaulo *pos++ = WLAN_EID_VENDOR_SPECIFIC; 500214501Srpaulo *pos++ = RSN_SELECTOR_LEN + data_len + data2_len; 501214501Srpaulo RSN_SELECTOR_PUT(pos, kde); 502214501Srpaulo pos += RSN_SELECTOR_LEN; 503214501Srpaulo os_memcpy(pos, data, data_len); 504214501Srpaulo pos += data_len; 505214501Srpaulo if (data2) { 506214501Srpaulo os_memcpy(pos, data2, data2_len); 507214501Srpaulo pos += data2_len; 508214501Srpaulo } 509214501Srpaulo return pos; 510214501Srpaulo} 511214501Srpaulo 512214501Srpaulo 513214501Srpaulostruct wpa_auth_okc_iter_data { 514214501Srpaulo struct rsn_pmksa_cache_entry *pmksa; 515214501Srpaulo const u8 *aa; 516214501Srpaulo const u8 *spa; 517214501Srpaulo const u8 *pmkid; 518214501Srpaulo}; 519214501Srpaulo 520214501Srpaulo 521214501Srpaulostatic int wpa_auth_okc_iter(struct wpa_authenticator *a, void *ctx) 522214501Srpaulo{ 523214501Srpaulo struct wpa_auth_okc_iter_data *data = ctx; 524214501Srpaulo data->pmksa = pmksa_cache_get_okc(a->pmksa, data->aa, data->spa, 525214501Srpaulo data->pmkid); 526214501Srpaulo if (data->pmksa) 527214501Srpaulo return 1; 528214501Srpaulo return 0; 529214501Srpaulo} 530214501Srpaulo 531214501Srpaulo 532214501Srpauloint wpa_validate_wpa_ie(struct wpa_authenticator *wpa_auth, 533346981Scy struct wpa_state_machine *sm, int freq, 534214501Srpaulo const u8 *wpa_ie, size_t wpa_ie_len, 535346981Scy const u8 *mdie, size_t mdie_len, 536346981Scy const u8 *owe_dh, size_t owe_dh_len) 537214501Srpaulo{ 538214501Srpaulo struct wpa_ie_data data; 539214501Srpaulo int ciphers, key_mgmt, res, version; 540214501Srpaulo u32 selector; 541214501Srpaulo size_t i; 542214501Srpaulo const u8 *pmkid = NULL; 543214501Srpaulo 544214501Srpaulo if (wpa_auth == NULL || sm == NULL) 545214501Srpaulo return WPA_NOT_ENABLED; 546214501Srpaulo 547214501Srpaulo if (wpa_ie == NULL || wpa_ie_len < 1) 548214501Srpaulo return WPA_INVALID_IE; 549214501Srpaulo 550214501Srpaulo if (wpa_ie[0] == WLAN_EID_RSN) 551214501Srpaulo version = WPA_PROTO_RSN; 552214501Srpaulo else 553214501Srpaulo version = WPA_PROTO_WPA; 554214501Srpaulo 555214501Srpaulo if (!(wpa_auth->conf.wpa & version)) { 556214501Srpaulo wpa_printf(MSG_DEBUG, "Invalid WPA proto (%d) from " MACSTR, 557214501Srpaulo version, MAC2STR(sm->addr)); 558214501Srpaulo return WPA_INVALID_PROTO; 559214501Srpaulo } 560214501Srpaulo 561214501Srpaulo if (version == WPA_PROTO_RSN) { 562214501Srpaulo res = wpa_parse_wpa_ie_rsn(wpa_ie, wpa_ie_len, &data); 563346981Scy if (!data.has_pairwise) 564346981Scy data.pairwise_cipher = wpa_default_rsn_cipher(freq); 565346981Scy if (!data.has_group) 566346981Scy data.group_cipher = wpa_default_rsn_cipher(freq); 567214501Srpaulo 568346981Scy if (wpa_key_mgmt_ft(data.key_mgmt) && !mdie && 569346981Scy !wpa_key_mgmt_only_ft(data.key_mgmt)) { 570346981Scy /* Workaround for some HP and Epson printers that seem 571346981Scy * to incorrectly copy the FT-PSK + WPA-PSK AKMs from AP 572346981Scy * advertised RSNE to Association Request frame. */ 573346981Scy wpa_printf(MSG_DEBUG, 574346981Scy "RSN: FT set in RSNE AKM but MDE is missing from " 575346981Scy MACSTR 576346981Scy " - ignore FT AKM(s) because there's also a non-FT AKM", 577346981Scy MAC2STR(sm->addr)); 578346981Scy data.key_mgmt &= ~WPA_KEY_MGMT_FT; 579346981Scy } 580346981Scy 581214501Srpaulo selector = RSN_AUTH_KEY_MGMT_UNSPEC_802_1X; 582214501Srpaulo if (0) { 583214501Srpaulo } 584281806Srpaulo else if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X_SUITE_B_192) 585281806Srpaulo selector = RSN_AUTH_KEY_MGMT_802_1X_SUITE_B_192; 586281806Srpaulo else if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X_SUITE_B) 587281806Srpaulo selector = RSN_AUTH_KEY_MGMT_802_1X_SUITE_B; 588346981Scy#ifdef CONFIG_FILS 589346981Scy#ifdef CONFIG_IEEE80211R_AP 590346981Scy else if (data.key_mgmt & WPA_KEY_MGMT_FT_FILS_SHA384) 591346981Scy selector = RSN_AUTH_KEY_MGMT_FT_FILS_SHA384; 592346981Scy else if (data.key_mgmt & WPA_KEY_MGMT_FT_FILS_SHA256) 593346981Scy selector = RSN_AUTH_KEY_MGMT_FT_FILS_SHA256; 594346981Scy#endif /* CONFIG_IEEE80211R_AP */ 595346981Scy else if (data.key_mgmt & WPA_KEY_MGMT_FILS_SHA384) 596346981Scy selector = RSN_AUTH_KEY_MGMT_FILS_SHA384; 597346981Scy else if (data.key_mgmt & WPA_KEY_MGMT_FILS_SHA256) 598346981Scy selector = RSN_AUTH_KEY_MGMT_FILS_SHA256; 599346981Scy#endif /* CONFIG_FILS */ 600346981Scy#ifdef CONFIG_IEEE80211R_AP 601346981Scy#ifdef CONFIG_SHA384 602346981Scy else if (data.key_mgmt & WPA_KEY_MGMT_FT_IEEE8021X_SHA384) 603346981Scy selector = RSN_AUTH_KEY_MGMT_FT_802_1X_SHA384; 604346981Scy#endif /* CONFIG_SHA384 */ 605214501Srpaulo else if (data.key_mgmt & WPA_KEY_MGMT_FT_IEEE8021X) 606214501Srpaulo selector = RSN_AUTH_KEY_MGMT_FT_802_1X; 607214501Srpaulo else if (data.key_mgmt & WPA_KEY_MGMT_FT_PSK) 608214501Srpaulo selector = RSN_AUTH_KEY_MGMT_FT_PSK; 609346981Scy#endif /* CONFIG_IEEE80211R_AP */ 610214501Srpaulo#ifdef CONFIG_IEEE80211W 611214501Srpaulo else if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X_SHA256) 612214501Srpaulo selector = RSN_AUTH_KEY_MGMT_802_1X_SHA256; 613214501Srpaulo else if (data.key_mgmt & WPA_KEY_MGMT_PSK_SHA256) 614214501Srpaulo selector = RSN_AUTH_KEY_MGMT_PSK_SHA256; 615214501Srpaulo#endif /* CONFIG_IEEE80211W */ 616252726Srpaulo#ifdef CONFIG_SAE 617252726Srpaulo else if (data.key_mgmt & WPA_KEY_MGMT_SAE) 618252726Srpaulo selector = RSN_AUTH_KEY_MGMT_SAE; 619252726Srpaulo else if (data.key_mgmt & WPA_KEY_MGMT_FT_SAE) 620252726Srpaulo selector = RSN_AUTH_KEY_MGMT_FT_SAE; 621252726Srpaulo#endif /* CONFIG_SAE */ 622214501Srpaulo else if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X) 623214501Srpaulo selector = RSN_AUTH_KEY_MGMT_UNSPEC_802_1X; 624214501Srpaulo else if (data.key_mgmt & WPA_KEY_MGMT_PSK) 625214501Srpaulo selector = RSN_AUTH_KEY_MGMT_PSK_OVER_802_1X; 626346981Scy#ifdef CONFIG_OWE 627346981Scy else if (data.key_mgmt & WPA_KEY_MGMT_OWE) 628346981Scy selector = RSN_AUTH_KEY_MGMT_OWE; 629346981Scy#endif /* CONFIG_OWE */ 630346981Scy#ifdef CONFIG_DPP 631346981Scy else if (data.key_mgmt & WPA_KEY_MGMT_DPP) 632346981Scy selector = RSN_AUTH_KEY_MGMT_DPP; 633346981Scy#endif /* CONFIG_DPP */ 634346981Scy#ifdef CONFIG_HS20 635346981Scy else if (data.key_mgmt & WPA_KEY_MGMT_OSEN) 636346981Scy selector = RSN_AUTH_KEY_MGMT_OSEN; 637346981Scy#endif /* CONFIG_HS20 */ 638214501Srpaulo wpa_auth->dot11RSNAAuthenticationSuiteSelected = selector; 639214501Srpaulo 640252726Srpaulo selector = wpa_cipher_to_suite(WPA_PROTO_RSN, 641252726Srpaulo data.pairwise_cipher); 642252726Srpaulo if (!selector) 643214501Srpaulo selector = RSN_CIPHER_SUITE_CCMP; 644214501Srpaulo wpa_auth->dot11RSNAPairwiseCipherSelected = selector; 645214501Srpaulo 646252726Srpaulo selector = wpa_cipher_to_suite(WPA_PROTO_RSN, 647252726Srpaulo data.group_cipher); 648252726Srpaulo if (!selector) 649214501Srpaulo selector = RSN_CIPHER_SUITE_CCMP; 650214501Srpaulo wpa_auth->dot11RSNAGroupCipherSelected = selector; 651214501Srpaulo } else { 652214501Srpaulo res = wpa_parse_wpa_ie_wpa(wpa_ie, wpa_ie_len, &data); 653214501Srpaulo 654214501Srpaulo selector = WPA_AUTH_KEY_MGMT_UNSPEC_802_1X; 655214501Srpaulo if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X) 656214501Srpaulo selector = WPA_AUTH_KEY_MGMT_UNSPEC_802_1X; 657214501Srpaulo else if (data.key_mgmt & WPA_KEY_MGMT_PSK) 658214501Srpaulo selector = WPA_AUTH_KEY_MGMT_PSK_OVER_802_1X; 659214501Srpaulo wpa_auth->dot11RSNAAuthenticationSuiteSelected = selector; 660214501Srpaulo 661252726Srpaulo selector = wpa_cipher_to_suite(WPA_PROTO_WPA, 662252726Srpaulo data.pairwise_cipher); 663252726Srpaulo if (!selector) 664252726Srpaulo selector = RSN_CIPHER_SUITE_TKIP; 665214501Srpaulo wpa_auth->dot11RSNAPairwiseCipherSelected = selector; 666214501Srpaulo 667252726Srpaulo selector = wpa_cipher_to_suite(WPA_PROTO_WPA, 668252726Srpaulo data.group_cipher); 669252726Srpaulo if (!selector) 670214501Srpaulo selector = WPA_CIPHER_SUITE_TKIP; 671214501Srpaulo wpa_auth->dot11RSNAGroupCipherSelected = selector; 672214501Srpaulo } 673214501Srpaulo if (res) { 674214501Srpaulo wpa_printf(MSG_DEBUG, "Failed to parse WPA/RSN IE from " 675214501Srpaulo MACSTR " (res=%d)", MAC2STR(sm->addr), res); 676214501Srpaulo wpa_hexdump(MSG_DEBUG, "WPA/RSN IE", wpa_ie, wpa_ie_len); 677214501Srpaulo return WPA_INVALID_IE; 678214501Srpaulo } 679214501Srpaulo 680214501Srpaulo if (data.group_cipher != wpa_auth->conf.wpa_group) { 681214501Srpaulo wpa_printf(MSG_DEBUG, "Invalid WPA group cipher (0x%x) from " 682214501Srpaulo MACSTR, data.group_cipher, MAC2STR(sm->addr)); 683214501Srpaulo return WPA_INVALID_GROUP; 684214501Srpaulo } 685214501Srpaulo 686214501Srpaulo key_mgmt = data.key_mgmt & wpa_auth->conf.wpa_key_mgmt; 687214501Srpaulo if (!key_mgmt) { 688214501Srpaulo wpa_printf(MSG_DEBUG, "Invalid WPA key mgmt (0x%x) from " 689214501Srpaulo MACSTR, data.key_mgmt, MAC2STR(sm->addr)); 690214501Srpaulo return WPA_INVALID_AKMP; 691214501Srpaulo } 692214501Srpaulo if (0) { 693214501Srpaulo } 694281806Srpaulo else if (key_mgmt & WPA_KEY_MGMT_IEEE8021X_SUITE_B_192) 695281806Srpaulo sm->wpa_key_mgmt = WPA_KEY_MGMT_IEEE8021X_SUITE_B_192; 696281806Srpaulo else if (key_mgmt & WPA_KEY_MGMT_IEEE8021X_SUITE_B) 697281806Srpaulo sm->wpa_key_mgmt = WPA_KEY_MGMT_IEEE8021X_SUITE_B; 698346981Scy#ifdef CONFIG_FILS 699346981Scy#ifdef CONFIG_IEEE80211R_AP 700346981Scy else if (key_mgmt & WPA_KEY_MGMT_FT_FILS_SHA384) 701346981Scy sm->wpa_key_mgmt = WPA_KEY_MGMT_FT_FILS_SHA384; 702346981Scy else if (data.key_mgmt & WPA_KEY_MGMT_FT_FILS_SHA256) 703346981Scy sm->wpa_key_mgmt = WPA_KEY_MGMT_FT_FILS_SHA256; 704346981Scy#endif /* CONFIG_IEEE80211R_AP */ 705346981Scy else if (key_mgmt & WPA_KEY_MGMT_FILS_SHA384) 706346981Scy sm->wpa_key_mgmt = WPA_KEY_MGMT_FILS_SHA384; 707346981Scy else if (key_mgmt & WPA_KEY_MGMT_FILS_SHA256) 708346981Scy sm->wpa_key_mgmt = WPA_KEY_MGMT_FILS_SHA256; 709346981Scy#endif /* CONFIG_FILS */ 710346981Scy#ifdef CONFIG_IEEE80211R_AP 711346981Scy#ifdef CONFIG_SHA384 712346981Scy else if (key_mgmt & WPA_KEY_MGMT_FT_IEEE8021X_SHA384) 713346981Scy sm->wpa_key_mgmt = WPA_KEY_MGMT_FT_IEEE8021X_SHA384; 714346981Scy#endif /* CONFIG_SHA384 */ 715214501Srpaulo else if (key_mgmt & WPA_KEY_MGMT_FT_IEEE8021X) 716214501Srpaulo sm->wpa_key_mgmt = WPA_KEY_MGMT_FT_IEEE8021X; 717214501Srpaulo else if (key_mgmt & WPA_KEY_MGMT_FT_PSK) 718214501Srpaulo sm->wpa_key_mgmt = WPA_KEY_MGMT_FT_PSK; 719346981Scy#endif /* CONFIG_IEEE80211R_AP */ 720214501Srpaulo#ifdef CONFIG_IEEE80211W 721214501Srpaulo else if (key_mgmt & WPA_KEY_MGMT_IEEE8021X_SHA256) 722214501Srpaulo sm->wpa_key_mgmt = WPA_KEY_MGMT_IEEE8021X_SHA256; 723214501Srpaulo else if (key_mgmt & WPA_KEY_MGMT_PSK_SHA256) 724214501Srpaulo sm->wpa_key_mgmt = WPA_KEY_MGMT_PSK_SHA256; 725214501Srpaulo#endif /* CONFIG_IEEE80211W */ 726252726Srpaulo#ifdef CONFIG_SAE 727252726Srpaulo else if (key_mgmt & WPA_KEY_MGMT_SAE) 728252726Srpaulo sm->wpa_key_mgmt = WPA_KEY_MGMT_SAE; 729252726Srpaulo else if (key_mgmt & WPA_KEY_MGMT_FT_SAE) 730252726Srpaulo sm->wpa_key_mgmt = WPA_KEY_MGMT_FT_SAE; 731252726Srpaulo#endif /* CONFIG_SAE */ 732214501Srpaulo else if (key_mgmt & WPA_KEY_MGMT_IEEE8021X) 733214501Srpaulo sm->wpa_key_mgmt = WPA_KEY_MGMT_IEEE8021X; 734346981Scy#ifdef CONFIG_OWE 735346981Scy else if (key_mgmt & WPA_KEY_MGMT_OWE) 736346981Scy sm->wpa_key_mgmt = WPA_KEY_MGMT_OWE; 737346981Scy#endif /* CONFIG_OWE */ 738346981Scy#ifdef CONFIG_DPP 739346981Scy else if (key_mgmt & WPA_KEY_MGMT_DPP) 740346981Scy sm->wpa_key_mgmt = WPA_KEY_MGMT_DPP; 741346981Scy#endif /* CONFIG_DPP */ 742346981Scy#ifdef CONFIG_HS20 743346981Scy else if (key_mgmt & WPA_KEY_MGMT_OSEN) 744346981Scy sm->wpa_key_mgmt = WPA_KEY_MGMT_OSEN; 745346981Scy#endif /* CONFIG_HS20 */ 746214501Srpaulo else 747214501Srpaulo sm->wpa_key_mgmt = WPA_KEY_MGMT_PSK; 748214501Srpaulo 749214501Srpaulo if (version == WPA_PROTO_RSN) 750214501Srpaulo ciphers = data.pairwise_cipher & wpa_auth->conf.rsn_pairwise; 751214501Srpaulo else 752214501Srpaulo ciphers = data.pairwise_cipher & wpa_auth->conf.wpa_pairwise; 753214501Srpaulo if (!ciphers) { 754214501Srpaulo wpa_printf(MSG_DEBUG, "Invalid %s pairwise cipher (0x%x) " 755214501Srpaulo "from " MACSTR, 756214501Srpaulo version == WPA_PROTO_RSN ? "RSN" : "WPA", 757214501Srpaulo data.pairwise_cipher, MAC2STR(sm->addr)); 758214501Srpaulo return WPA_INVALID_PAIRWISE; 759214501Srpaulo } 760214501Srpaulo 761214501Srpaulo#ifdef CONFIG_IEEE80211W 762214501Srpaulo if (wpa_auth->conf.ieee80211w == MGMT_FRAME_PROTECTION_REQUIRED) { 763214501Srpaulo if (!(data.capabilities & WPA_CAPABILITY_MFPC)) { 764214501Srpaulo wpa_printf(MSG_DEBUG, "Management frame protection " 765214501Srpaulo "required, but client did not enable it"); 766214501Srpaulo return WPA_MGMT_FRAME_PROTECTION_VIOLATION; 767214501Srpaulo } 768214501Srpaulo 769281806Srpaulo if (data.mgmt_group_cipher != wpa_auth->conf.group_mgmt_cipher) 770281806Srpaulo { 771214501Srpaulo wpa_printf(MSG_DEBUG, "Unsupported management group " 772214501Srpaulo "cipher %d", data.mgmt_group_cipher); 773214501Srpaulo return WPA_INVALID_MGMT_GROUP_CIPHER; 774214501Srpaulo } 775214501Srpaulo } 776214501Srpaulo 777346981Scy#ifdef CONFIG_SAE 778346981Scy if (wpa_auth->conf.ieee80211w == MGMT_FRAME_PROTECTION_OPTIONAL && 779346981Scy wpa_auth->conf.sae_require_mfp && 780346981Scy wpa_key_mgmt_sae(sm->wpa_key_mgmt) && 781346981Scy !(data.capabilities & WPA_CAPABILITY_MFPC)) { 782346981Scy wpa_printf(MSG_DEBUG, 783346981Scy "Management frame protection required with SAE, but client did not enable it"); 784346981Scy return WPA_MGMT_FRAME_PROTECTION_VIOLATION; 785346981Scy } 786346981Scy#endif /* CONFIG_SAE */ 787346981Scy 788346981Scy#ifdef CONFIG_OCV 789346981Scy if ((data.capabilities & WPA_CAPABILITY_OCVC) && 790346981Scy !(data.capabilities & WPA_CAPABILITY_MFPC)) { 791346981Scy wpa_printf(MSG_DEBUG, 792346981Scy "Management frame protection required with OCV, but client did not enable it"); 793346981Scy return WPA_MGMT_FRAME_PROTECTION_VIOLATION; 794346981Scy } 795346981Scy wpa_auth_set_ocv(sm, wpa_auth->conf.ocv && 796346981Scy (data.capabilities & WPA_CAPABILITY_OCVC)); 797346981Scy#endif /* CONFIG_OCV */ 798346981Scy 799214501Srpaulo if (wpa_auth->conf.ieee80211w == NO_MGMT_FRAME_PROTECTION || 800214501Srpaulo !(data.capabilities & WPA_CAPABILITY_MFPC)) 801214501Srpaulo sm->mgmt_frame_prot = 0; 802214501Srpaulo else 803214501Srpaulo sm->mgmt_frame_prot = 1; 804346981Scy 805346981Scy if (sm->mgmt_frame_prot && (ciphers & WPA_CIPHER_TKIP)) { 806346981Scy wpa_printf(MSG_DEBUG, 807346981Scy "Management frame protection cannot use TKIP"); 808346981Scy return WPA_MGMT_FRAME_PROTECTION_VIOLATION; 809346981Scy } 810214501Srpaulo#endif /* CONFIG_IEEE80211W */ 811214501Srpaulo 812346981Scy#ifdef CONFIG_IEEE80211R_AP 813214501Srpaulo if (wpa_key_mgmt_ft(sm->wpa_key_mgmt)) { 814214501Srpaulo if (mdie == NULL || mdie_len < MOBILITY_DOMAIN_ID_LEN + 1) { 815214501Srpaulo wpa_printf(MSG_DEBUG, "RSN: Trying to use FT, but " 816214501Srpaulo "MDIE not included"); 817214501Srpaulo return WPA_INVALID_MDIE; 818214501Srpaulo } 819214501Srpaulo if (os_memcmp(mdie, wpa_auth->conf.mobility_domain, 820214501Srpaulo MOBILITY_DOMAIN_ID_LEN) != 0) { 821214501Srpaulo wpa_hexdump(MSG_DEBUG, "RSN: Attempted to use unknown " 822214501Srpaulo "MDIE", mdie, MOBILITY_DOMAIN_ID_LEN); 823214501Srpaulo return WPA_INVALID_MDIE; 824214501Srpaulo } 825346981Scy } else if (mdie != NULL) { 826346981Scy wpa_printf(MSG_DEBUG, 827346981Scy "RSN: Trying to use non-FT AKM suite, but MDIE included"); 828346981Scy return WPA_INVALID_AKMP; 829214501Srpaulo } 830346981Scy#endif /* CONFIG_IEEE80211R_AP */ 831214501Srpaulo 832346981Scy#ifdef CONFIG_OWE 833346981Scy if (sm->wpa_key_mgmt == WPA_KEY_MGMT_OWE && !owe_dh) { 834346981Scy wpa_printf(MSG_DEBUG, 835346981Scy "OWE: No Diffie-Hellman Parameter element"); 836346981Scy return WPA_INVALID_AKMP; 837346981Scy } 838346981Scy#ifdef CONFIG_DPP 839346981Scy if (sm->wpa_key_mgmt == WPA_KEY_MGMT_DPP && owe_dh) { 840346981Scy /* Diffie-Hellman Parameter element can be used with DPP as 841346981Scy * well, so allow this to proceed. */ 842346981Scy } else 843346981Scy#endif /* CONFIG_DPP */ 844346981Scy if (sm->wpa_key_mgmt != WPA_KEY_MGMT_OWE && owe_dh) { 845346981Scy wpa_printf(MSG_DEBUG, 846346981Scy "OWE: Unexpected Diffie-Hellman Parameter element with non-OWE AKM"); 847346981Scy return WPA_INVALID_AKMP; 848346981Scy } 849346981Scy#endif /* CONFIG_OWE */ 850346981Scy 851281806Srpaulo sm->pairwise = wpa_pick_pairwise_cipher(ciphers, 0); 852281806Srpaulo if (sm->pairwise < 0) 853281806Srpaulo return WPA_INVALID_PAIRWISE; 854214501Srpaulo 855214501Srpaulo /* TODO: clear WPA/WPA2 state if STA changes from one to another */ 856214501Srpaulo if (wpa_ie[0] == WLAN_EID_RSN) 857214501Srpaulo sm->wpa = WPA_VERSION_WPA2; 858214501Srpaulo else 859214501Srpaulo sm->wpa = WPA_VERSION_WPA; 860214501Srpaulo 861346981Scy#if defined(CONFIG_IEEE80211R_AP) && defined(CONFIG_FILS) 862346981Scy if ((sm->wpa_key_mgmt == WPA_KEY_MGMT_FT_FILS_SHA256 || 863346981Scy sm->wpa_key_mgmt == WPA_KEY_MGMT_FT_FILS_SHA384) && 864346981Scy (sm->auth_alg == WLAN_AUTH_FILS_SK || 865346981Scy sm->auth_alg == WLAN_AUTH_FILS_SK_PFS || 866346981Scy sm->auth_alg == WLAN_AUTH_FILS_PK) && 867346981Scy (data.num_pmkid != 1 || !data.pmkid || !sm->pmk_r1_name_valid || 868346981Scy os_memcmp_const(data.pmkid, sm->pmk_r1_name, 869346981Scy WPA_PMK_NAME_LEN) != 0)) { 870346981Scy wpa_auth_vlogger(wpa_auth, sm->addr, LOGGER_DEBUG, 871346981Scy "No PMKR1Name match for FILS+FT"); 872346981Scy return WPA_INVALID_PMKID; 873346981Scy } 874346981Scy#endif /* CONFIG_IEEE80211R_AP && CONFIG_FILS */ 875346981Scy 876214501Srpaulo sm->pmksa = NULL; 877214501Srpaulo for (i = 0; i < data.num_pmkid; i++) { 878214501Srpaulo wpa_hexdump(MSG_DEBUG, "RSN IE: STA PMKID", 879214501Srpaulo &data.pmkid[i * PMKID_LEN], PMKID_LEN); 880214501Srpaulo sm->pmksa = pmksa_cache_auth_get(wpa_auth->pmksa, sm->addr, 881214501Srpaulo &data.pmkid[i * PMKID_LEN]); 882214501Srpaulo if (sm->pmksa) { 883214501Srpaulo pmkid = sm->pmksa->pmkid; 884214501Srpaulo break; 885214501Srpaulo } 886214501Srpaulo } 887214501Srpaulo for (i = 0; sm->pmksa == NULL && wpa_auth->conf.okc && 888214501Srpaulo i < data.num_pmkid; i++) { 889214501Srpaulo struct wpa_auth_okc_iter_data idata; 890214501Srpaulo idata.pmksa = NULL; 891214501Srpaulo idata.aa = wpa_auth->addr; 892214501Srpaulo idata.spa = sm->addr; 893214501Srpaulo idata.pmkid = &data.pmkid[i * PMKID_LEN]; 894214501Srpaulo wpa_auth_for_each_auth(wpa_auth, wpa_auth_okc_iter, &idata); 895214501Srpaulo if (idata.pmksa) { 896214501Srpaulo wpa_auth_vlogger(wpa_auth, sm->addr, LOGGER_DEBUG, 897214501Srpaulo "OKC match for PMKID"); 898214501Srpaulo sm->pmksa = pmksa_cache_add_okc(wpa_auth->pmksa, 899214501Srpaulo idata.pmksa, 900214501Srpaulo wpa_auth->addr, 901214501Srpaulo idata.pmkid); 902214501Srpaulo pmkid = idata.pmkid; 903214501Srpaulo break; 904214501Srpaulo } 905214501Srpaulo } 906281806Srpaulo if (sm->pmksa && pmkid) { 907337817Scy struct vlan_description *vlan; 908337817Scy 909337817Scy vlan = sm->pmksa->vlan_desc; 910214501Srpaulo wpa_auth_vlogger(wpa_auth, sm->addr, LOGGER_DEBUG, 911337817Scy "PMKID found from PMKSA cache eap_type=%d vlan=%d%s", 912214501Srpaulo sm->pmksa->eap_type_authsrv, 913337817Scy vlan ? vlan->untagged : 0, 914337817Scy (vlan && vlan->tagged[0]) ? "+" : ""); 915214501Srpaulo os_memcpy(wpa_auth->dot11RSNAPMKIDUsed, pmkid, PMKID_LEN); 916214501Srpaulo } 917214501Srpaulo 918346981Scy#ifdef CONFIG_SAE 919346981Scy if (sm->wpa_key_mgmt == WPA_KEY_MGMT_SAE && data.num_pmkid && 920346981Scy !sm->pmksa) { 921346981Scy wpa_auth_vlogger(wpa_auth, sm->addr, LOGGER_DEBUG, 922346981Scy "No PMKSA cache entry found for SAE"); 923346981Scy return WPA_INVALID_PMKID; 924346981Scy } 925346981Scy#endif /* CONFIG_SAE */ 926346981Scy 927346981Scy#ifdef CONFIG_DPP 928346981Scy if (sm->wpa_key_mgmt == WPA_KEY_MGMT_DPP && !sm->pmksa) { 929346981Scy wpa_auth_vlogger(wpa_auth, sm->addr, LOGGER_DEBUG, 930346981Scy "No PMKSA cache entry found for DPP"); 931346981Scy return WPA_INVALID_PMKID; 932346981Scy } 933346981Scy#endif /* CONFIG_DPP */ 934346981Scy 935214501Srpaulo if (sm->wpa_ie == NULL || sm->wpa_ie_len < wpa_ie_len) { 936214501Srpaulo os_free(sm->wpa_ie); 937214501Srpaulo sm->wpa_ie = os_malloc(wpa_ie_len); 938214501Srpaulo if (sm->wpa_ie == NULL) 939214501Srpaulo return WPA_ALLOC_FAIL; 940214501Srpaulo } 941214501Srpaulo os_memcpy(sm->wpa_ie, wpa_ie, wpa_ie_len); 942214501Srpaulo sm->wpa_ie_len = wpa_ie_len; 943214501Srpaulo 944214501Srpaulo return WPA_IE_OK; 945214501Srpaulo} 946214501Srpaulo 947214501Srpaulo 948281806Srpaulo#ifdef CONFIG_HS20 949281806Srpauloint wpa_validate_osen(struct wpa_authenticator *wpa_auth, 950281806Srpaulo struct wpa_state_machine *sm, 951281806Srpaulo const u8 *osen_ie, size_t osen_ie_len) 952281806Srpaulo{ 953281806Srpaulo if (wpa_auth == NULL || sm == NULL) 954281806Srpaulo return -1; 955281806Srpaulo 956281806Srpaulo /* TODO: parse OSEN element */ 957281806Srpaulo sm->wpa_key_mgmt = WPA_KEY_MGMT_OSEN; 958281806Srpaulo sm->mgmt_frame_prot = 1; 959281806Srpaulo sm->pairwise = WPA_CIPHER_CCMP; 960281806Srpaulo sm->wpa = WPA_VERSION_WPA2; 961281806Srpaulo 962281806Srpaulo if (sm->wpa_ie == NULL || sm->wpa_ie_len < osen_ie_len) { 963281806Srpaulo os_free(sm->wpa_ie); 964281806Srpaulo sm->wpa_ie = os_malloc(osen_ie_len); 965281806Srpaulo if (sm->wpa_ie == NULL) 966281806Srpaulo return -1; 967281806Srpaulo } 968281806Srpaulo 969281806Srpaulo os_memcpy(sm->wpa_ie, osen_ie, osen_ie_len); 970281806Srpaulo sm->wpa_ie_len = osen_ie_len; 971281806Srpaulo 972281806Srpaulo return 0; 973281806Srpaulo} 974281806Srpaulo 975281806Srpaulo#endif /* CONFIG_HS20 */ 976281806Srpaulo 977281806Srpaulo 978214501Srpaulo/** 979214501Srpaulo * wpa_parse_generic - Parse EAPOL-Key Key Data Generic IEs 980214501Srpaulo * @pos: Pointer to the IE header 981214501Srpaulo * @end: Pointer to the end of the Key Data buffer 982214501Srpaulo * @ie: Pointer to parsed IE data 983214501Srpaulo * Returns: 0 on success, 1 if end mark is found, -1 on failure 984214501Srpaulo */ 985214501Srpaulostatic int wpa_parse_generic(const u8 *pos, const u8 *end, 986214501Srpaulo struct wpa_eapol_ie_parse *ie) 987214501Srpaulo{ 988214501Srpaulo if (pos[1] == 0) 989214501Srpaulo return 1; 990214501Srpaulo 991214501Srpaulo if (pos[1] >= 6 && 992214501Srpaulo RSN_SELECTOR_GET(pos + 2) == WPA_OUI_TYPE && 993214501Srpaulo pos[2 + WPA_SELECTOR_LEN] == 1 && 994214501Srpaulo pos[2 + WPA_SELECTOR_LEN + 1] == 0) { 995214501Srpaulo ie->wpa_ie = pos; 996214501Srpaulo ie->wpa_ie_len = pos[1] + 2; 997214501Srpaulo return 0; 998214501Srpaulo } 999214501Srpaulo 1000281806Srpaulo if (pos[1] >= 4 && WPA_GET_BE32(pos + 2) == OSEN_IE_VENDOR_TYPE) { 1001281806Srpaulo ie->osen = pos; 1002281806Srpaulo ie->osen_len = pos[1] + 2; 1003281806Srpaulo return 0; 1004281806Srpaulo } 1005281806Srpaulo 1006337817Scy if (1 + RSN_SELECTOR_LEN < end - pos && 1007214501Srpaulo pos[1] >= RSN_SELECTOR_LEN + PMKID_LEN && 1008214501Srpaulo RSN_SELECTOR_GET(pos + 2) == RSN_KEY_DATA_PMKID) { 1009214501Srpaulo ie->pmkid = pos + 2 + RSN_SELECTOR_LEN; 1010214501Srpaulo return 0; 1011214501Srpaulo } 1012214501Srpaulo 1013214501Srpaulo if (pos[1] > RSN_SELECTOR_LEN + 2 && 1014214501Srpaulo RSN_SELECTOR_GET(pos + 2) == RSN_KEY_DATA_GROUPKEY) { 1015214501Srpaulo ie->gtk = pos + 2 + RSN_SELECTOR_LEN; 1016214501Srpaulo ie->gtk_len = pos[1] - RSN_SELECTOR_LEN; 1017214501Srpaulo return 0; 1018214501Srpaulo } 1019214501Srpaulo 1020214501Srpaulo if (pos[1] > RSN_SELECTOR_LEN + 2 && 1021214501Srpaulo RSN_SELECTOR_GET(pos + 2) == RSN_KEY_DATA_MAC_ADDR) { 1022214501Srpaulo ie->mac_addr = pos + 2 + RSN_SELECTOR_LEN; 1023214501Srpaulo ie->mac_addr_len = pos[1] - RSN_SELECTOR_LEN; 1024214501Srpaulo return 0; 1025214501Srpaulo } 1026214501Srpaulo 1027214501Srpaulo#ifdef CONFIG_IEEE80211W 1028214501Srpaulo if (pos[1] > RSN_SELECTOR_LEN + 2 && 1029214501Srpaulo RSN_SELECTOR_GET(pos + 2) == RSN_KEY_DATA_IGTK) { 1030214501Srpaulo ie->igtk = pos + 2 + RSN_SELECTOR_LEN; 1031214501Srpaulo ie->igtk_len = pos[1] - RSN_SELECTOR_LEN; 1032214501Srpaulo return 0; 1033214501Srpaulo } 1034214501Srpaulo#endif /* CONFIG_IEEE80211W */ 1035214501Srpaulo 1036281806Srpaulo#ifdef CONFIG_P2P 1037281806Srpaulo if (pos[1] >= RSN_SELECTOR_LEN + 1 && 1038281806Srpaulo RSN_SELECTOR_GET(pos + 2) == WFA_KEY_DATA_IP_ADDR_REQ) { 1039281806Srpaulo ie->ip_addr_req = pos + 2 + RSN_SELECTOR_LEN; 1040281806Srpaulo wpa_hexdump(MSG_DEBUG, "WPA: IP Address Request in EAPOL-Key", 1041281806Srpaulo ie->ip_addr_req, pos[1] - RSN_SELECTOR_LEN); 1042281806Srpaulo return 0; 1043281806Srpaulo } 1044281806Srpaulo 1045281806Srpaulo if (pos[1] >= RSN_SELECTOR_LEN + 3 * 4 && 1046281806Srpaulo RSN_SELECTOR_GET(pos + 2) == WFA_KEY_DATA_IP_ADDR_ALLOC) { 1047281806Srpaulo ie->ip_addr_alloc = pos + 2 + RSN_SELECTOR_LEN; 1048281806Srpaulo wpa_hexdump(MSG_DEBUG, 1049281806Srpaulo "WPA: IP Address Allocation in EAPOL-Key", 1050281806Srpaulo ie->ip_addr_alloc, pos[1] - RSN_SELECTOR_LEN); 1051281806Srpaulo return 0; 1052281806Srpaulo } 1053281806Srpaulo#endif /* CONFIG_P2P */ 1054281806Srpaulo 1055346981Scy#ifdef CONFIG_OCV 1056346981Scy if (pos[1] > RSN_SELECTOR_LEN + 2 && 1057346981Scy RSN_SELECTOR_GET(pos + 2) == RSN_KEY_DATA_OCI) { 1058346981Scy ie->oci = pos + 2 + RSN_SELECTOR_LEN; 1059346981Scy ie->oci_len = pos[1] - RSN_SELECTOR_LEN; 1060346981Scy return 0; 1061346981Scy } 1062346981Scy#endif /* CONFIG_OCV */ 1063346981Scy 1064214501Srpaulo return 0; 1065214501Srpaulo} 1066214501Srpaulo 1067214501Srpaulo 1068214501Srpaulo/** 1069214501Srpaulo * wpa_parse_kde_ies - Parse EAPOL-Key Key Data IEs 1070214501Srpaulo * @buf: Pointer to the Key Data buffer 1071214501Srpaulo * @len: Key Data Length 1072214501Srpaulo * @ie: Pointer to parsed IE data 1073214501Srpaulo * Returns: 0 on success, -1 on failure 1074214501Srpaulo */ 1075214501Srpauloint wpa_parse_kde_ies(const u8 *buf, size_t len, struct wpa_eapol_ie_parse *ie) 1076214501Srpaulo{ 1077214501Srpaulo const u8 *pos, *end; 1078214501Srpaulo int ret = 0; 1079214501Srpaulo 1080214501Srpaulo os_memset(ie, 0, sizeof(*ie)); 1081337817Scy for (pos = buf, end = pos + len; end - pos > 1; pos += 2 + pos[1]) { 1082214501Srpaulo if (pos[0] == 0xdd && 1083214501Srpaulo ((pos == buf + len - 1) || pos[1] == 0)) { 1084214501Srpaulo /* Ignore padding */ 1085214501Srpaulo break; 1086214501Srpaulo } 1087337817Scy if (2 + pos[1] > end - pos) { 1088214501Srpaulo wpa_printf(MSG_DEBUG, "WPA: EAPOL-Key Key Data " 1089214501Srpaulo "underflow (ie=%d len=%d pos=%d)", 1090214501Srpaulo pos[0], pos[1], (int) (pos - buf)); 1091214501Srpaulo wpa_hexdump_key(MSG_DEBUG, "WPA: Key Data", 1092214501Srpaulo buf, len); 1093214501Srpaulo ret = -1; 1094214501Srpaulo break; 1095214501Srpaulo } 1096214501Srpaulo if (*pos == WLAN_EID_RSN) { 1097214501Srpaulo ie->rsn_ie = pos; 1098214501Srpaulo ie->rsn_ie_len = pos[1] + 2; 1099346981Scy#ifdef CONFIG_IEEE80211R_AP 1100214501Srpaulo } else if (*pos == WLAN_EID_MOBILITY_DOMAIN) { 1101214501Srpaulo ie->mdie = pos; 1102214501Srpaulo ie->mdie_len = pos[1] + 2; 1103214501Srpaulo } else if (*pos == WLAN_EID_FAST_BSS_TRANSITION) { 1104214501Srpaulo ie->ftie = pos; 1105214501Srpaulo ie->ftie_len = pos[1] + 2; 1106346981Scy#endif /* CONFIG_IEEE80211R_AP */ 1107214501Srpaulo } else if (*pos == WLAN_EID_VENDOR_SPECIFIC) { 1108214501Srpaulo ret = wpa_parse_generic(pos, end, ie); 1109214501Srpaulo if (ret < 0) 1110214501Srpaulo break; 1111214501Srpaulo if (ret > 0) { 1112214501Srpaulo ret = 0; 1113214501Srpaulo break; 1114214501Srpaulo } 1115214501Srpaulo } else { 1116214501Srpaulo wpa_hexdump(MSG_DEBUG, "WPA: Unrecognized EAPOL-Key " 1117214501Srpaulo "Key Data IE", pos, 2 + pos[1]); 1118214501Srpaulo } 1119214501Srpaulo } 1120214501Srpaulo 1121214501Srpaulo return ret; 1122214501Srpaulo} 1123214501Srpaulo 1124214501Srpaulo 1125214501Srpauloint wpa_auth_uses_mfp(struct wpa_state_machine *sm) 1126214501Srpaulo{ 1127214501Srpaulo return sm ? sm->mgmt_frame_prot : 0; 1128214501Srpaulo} 1129346981Scy 1130346981Scy 1131346981Scy#ifdef CONFIG_OCV 1132346981Scy 1133346981Scyvoid wpa_auth_set_ocv(struct wpa_state_machine *sm, int ocv) 1134346981Scy{ 1135346981Scy if (sm) 1136346981Scy sm->ocv_enabled = ocv; 1137346981Scy} 1138346981Scy 1139346981Scy 1140346981Scyint wpa_auth_uses_ocv(struct wpa_state_machine *sm) 1141346981Scy{ 1142346981Scy return sm ? sm->ocv_enabled : 0; 1143346981Scy} 1144346981Scy 1145346981Scy#endif /* CONFIG_OCV */ 1146346981Scy 1147346981Scy 1148346981Scy#ifdef CONFIG_OWE 1149346981Scyu8 * wpa_auth_write_assoc_resp_owe(struct wpa_state_machine *sm, 1150346981Scy u8 *pos, size_t max_len, 1151346981Scy const u8 *req_ies, size_t req_ies_len) 1152346981Scy{ 1153346981Scy int res; 1154346981Scy struct wpa_auth_config *conf; 1155346981Scy 1156346981Scy if (!sm) 1157346981Scy return pos; 1158346981Scy conf = &sm->wpa_auth->conf; 1159346981Scy 1160346981Scy#ifdef CONFIG_TESTING_OPTIONS 1161346981Scy if (conf->own_ie_override_len) { 1162346981Scy if (max_len < conf->own_ie_override_len) 1163346981Scy return NULL; 1164346981Scy wpa_hexdump(MSG_DEBUG, "WPA: Forced own IE(s) for testing", 1165346981Scy conf->own_ie_override, conf->own_ie_override_len); 1166346981Scy os_memcpy(pos, conf->own_ie_override, 1167346981Scy conf->own_ie_override_len); 1168346981Scy return pos + conf->own_ie_override_len; 1169346981Scy } 1170346981Scy#endif /* CONFIG_TESTING_OPTIONS */ 1171346981Scy 1172346981Scy res = wpa_write_rsn_ie(conf, pos, max_len, 1173346981Scy sm->pmksa ? sm->pmksa->pmkid : NULL); 1174346981Scy if (res < 0) 1175346981Scy return pos; 1176346981Scy return pos + res; 1177346981Scy} 1178346981Scy#endif /* CONFIG_OWE */ 1179351611Scy 1180351611Scy 1181351611Scy#ifdef CONFIG_FILS 1182351611Scyu8 * wpa_auth_write_assoc_resp_fils(struct wpa_state_machine *sm, 1183351611Scy u8 *pos, size_t max_len, 1184351611Scy const u8 *req_ies, size_t req_ies_len) 1185351611Scy{ 1186351611Scy int res; 1187351611Scy 1188351611Scy if (!sm || 1189351611Scy sm->wpa_key_mgmt & (WPA_KEY_MGMT_FT_FILS_SHA256 | 1190351611Scy WPA_KEY_MGMT_FT_FILS_SHA384)) 1191351611Scy return pos; 1192351611Scy 1193351611Scy res = wpa_write_rsn_ie(&sm->wpa_auth->conf, pos, max_len, NULL); 1194351611Scy if (res < 0) 1195351611Scy return pos; 1196351611Scy return pos + res; 1197351611Scy} 1198351611Scy#endif /* CONFIG_FILS */ 1199