path: root/src/rsn_supp/wpa.h
diff options
authorJouni Malinen <j@w1.fi>2017-03-12 20:45:35 (GMT)
committerJouni Malinen <j@w1.fi>2017-03-12 21:20:32 (GMT)
commit76e20f4fa7025b8e6887b9bd55a5072ca7d74677 (patch)
tree4b367a4940d392336b16efa25ce2908fac29f9ea /src/rsn_supp/wpa.h
parent1764559eef3020afebb427d48799c13514f45de0 (diff)
FILS: Add FILS SK auth PFS support in STA mode
This adds an option to configure wpa_supplicant to use the perfect forward secrecy option in FILS shared key authentication. A new build option CONFIG_FILS_SK_PFS=y can be used to include this functionality. A new runtime network profile parameter fils_dh_group is used to enable this by specifying which DH group to use. For example, fils_dh_group=19 would use FILS SK PFS with a 256-bit random ECP group. Signed-off-by: Jouni Malinen <j@w1.fi>
Diffstat (limited to 'src/rsn_supp/wpa.h')
1 files changed, 1 insertions, 1 deletions
diff --git a/src/rsn_supp/wpa.h b/src/rsn_supp/wpa.h
index df774ad..cd9f56d 100644
--- a/src/rsn_supp/wpa.h
+++ b/src/rsn_supp/wpa.h
@@ -435,7 +435,7 @@ extern unsigned int tdls_testing;
int wpa_wnmsleep_install_key(struct wpa_sm *sm, u8 subelem_id, u8 *buf);
void wpa_sm_set_test_assoc_ie(struct wpa_sm *sm, struct wpabuf *buf);
-struct wpabuf * fils_build_auth(struct wpa_sm *sm);
+struct wpabuf * fils_build_auth(struct wpa_sm *sm, int dh_group);
int fils_process_auth(struct wpa_sm *sm, const u8 *bssid, const u8 *data,
size_t len);
struct wpabuf * fils_build_assoc_req(struct wpa_sm *sm, const u8 **kek,