aboutsummaryrefslogtreecommitdiffstats
path: root/wpa_supplicant/config_ssid.h
diff options
context:
space:
mode:
authorJouni Malinen <j@w1.fi>2017-03-12 20:45:35 (GMT)
committerJouni Malinen <j@w1.fi>2017-03-12 21:20:32 (GMT)
commit76e20f4fa7025b8e6887b9bd55a5072ca7d74677 (patch)
tree4b367a4940d392336b16efa25ce2908fac29f9ea /wpa_supplicant/config_ssid.h
parent1764559eef3020afebb427d48799c13514f45de0 (diff)
downloadhostap-76e20f4fa7025b8e6887b9bd55a5072ca7d74677.zip
hostap-76e20f4fa7025b8e6887b9bd55a5072ca7d74677.tar.gz
hostap-76e20f4fa7025b8e6887b9bd55a5072ca7d74677.tar.bz2
FILS: Add FILS SK auth PFS support in STA mode
This adds an option to configure wpa_supplicant to use the perfect forward secrecy option in FILS shared key authentication. A new build option CONFIG_FILS_SK_PFS=y can be used to include this functionality. A new runtime network profile parameter fils_dh_group is used to enable this by specifying which DH group to use. For example, fils_dh_group=19 would use FILS SK PFS with a 256-bit random ECP group. Signed-off-by: Jouni Malinen <j@w1.fi>
Diffstat (limited to 'wpa_supplicant/config_ssid.h')
-rw-r--r--wpa_supplicant/config_ssid.h8
1 files changed, 8 insertions, 0 deletions
diff --git a/wpa_supplicant/config_ssid.h b/wpa_supplicant/config_ssid.h
index 908b641..869165c 100644
--- a/wpa_supplicant/config_ssid.h
+++ b/wpa_supplicant/config_ssid.h
@@ -814,6 +814,14 @@ struct wpa_ssid {
* 1 = WPS disabled
*/
int wps_disabled;
+
+ /**
+ * fils_dh_group - FILS DH Group
+ *
+ * 0 = PFS disabled with FILS shared key authentication
+ * 1-65535 DH Group to use for FILS PFS
+ */
+ int fils_dh_group;
};
#endif /* CONFIG_SSID_H */