path: root/wpa_supplicant
diff options
authorJouni Malinen <jouni.malinen@atheros.com>2009-04-01 09:04:36 (GMT)
committerJouni Malinen <j@w1.fi>2009-04-01 09:04:36 (GMT)
commitc0a6190815ce37450fc348d4d09b2a0153478fc0 (patch)
treefde0953e0c4a7c54a29e76f8e45ee39ae88c4147 /wpa_supplicant
parentd61f48ba1da01ed501026e5fa1b6bfefa6d5c93a (diff)
Fix SHA-256-based KDF when using CCMP as the pairwise cipher
IEEE 802.11r KDF uses key length in the derivation and as such, the PTK length must be specified correctly. The previous version was deriving using 512-bit PTK regardless of the negotiated cipher suite; this works for TKIP, but not for CCMP. Update the code to use proper PTK length based on the pairwise cipher. This fixed PTK derivation for both IEEE 802.11r and IEEE 802.11w (when using AKMP that specifies SHA-256-based key derivation). The fixed version does not interoperate with the previous versions. [Bug 307]
Diffstat (limited to 'wpa_supplicant')
1 files changed, 3 insertions, 0 deletions
diff --git a/wpa_supplicant/ChangeLog b/wpa_supplicant/ChangeLog
index 795194d..bae055b 100644
--- a/wpa_supplicant/ChangeLog
+++ b/wpa_supplicant/ChangeLog
@@ -22,6 +22,9 @@ ChangeLog for wpa_supplicant
and association commands (e.g., mac80211-based Linux drivers with
nl80211; SME in wpa_supplicant); this allows over-the-air FT protocol
to be used (IEEE 802.11r)
+ * fixed SHA-256 based key derivation function to match with the
+ standard when using CCMP (for IEEE 802.11r and IEEE 802.11w)
+ (note: this breaks interoperability with previous version) [Bug 307]
2009-01-06 - v0.6.7
* added support for Wi-Fi Protected Setup (WPS)