11 #define WPA_REPLAY_COUNTER_LEN 8
12 #define WPA_NONCE_LEN 32
13 #define WPA_KEY_RSC_LEN 8
14 #define WPA_GMK_LEN 32
15 #define WPA_GTK_MAX_LEN 32
17 #define WPA_ALLOWED_PAIRWISE_CIPHERS \
18 (WPA_CIPHER_CCMP | WPA_CIPHER_GCMP | WPA_CIPHER_TKIP | WPA_CIPHER_NONE | \
19 WPA_CIPHER_GCMP_256 | WPA_CIPHER_CCMP_256)
20 #define WPA_ALLOWED_GROUP_CIPHERS \
21 (WPA_CIPHER_CCMP | WPA_CIPHER_GCMP | WPA_CIPHER_TKIP | \
22 WPA_CIPHER_GCMP_256 | WPA_CIPHER_CCMP_256 | \
23 WPA_CIPHER_GTK_NOT_USED)
25 #define WPA_SELECTOR_LEN 4
27 #define RSN_SELECTOR_LEN 4
30 #define RSN_SELECTOR(a, b, c, d) \
31 ((((u32) (a)) << 24) | (((u32) (b)) << 16) | (((u32) (c)) << 8) | \
34 #define WPA_AUTH_KEY_MGMT_NONE RSN_SELECTOR(0x00, 0x50, 0xf2, 0)
35 #define WPA_AUTH_KEY_MGMT_UNSPEC_802_1X RSN_SELECTOR(0x00, 0x50, 0xf2, 1)
36 #define WPA_AUTH_KEY_MGMT_PSK_OVER_802_1X RSN_SELECTOR(0x00, 0x50, 0xf2, 2)
37 #define WPA_AUTH_KEY_MGMT_CCKM RSN_SELECTOR(0x00, 0x40, 0x96, 0)
38 #define WPA_CIPHER_SUITE_NONE RSN_SELECTOR(0x00, 0x50, 0xf2, 0)
39 #define WPA_CIPHER_SUITE_TKIP RSN_SELECTOR(0x00, 0x50, 0xf2, 2)
40 #define WPA_CIPHER_SUITE_CCMP RSN_SELECTOR(0x00, 0x50, 0xf2, 4)
43 #define RSN_AUTH_KEY_MGMT_UNSPEC_802_1X RSN_SELECTOR(0x00, 0x0f, 0xac, 1)
44 #define RSN_AUTH_KEY_MGMT_PSK_OVER_802_1X RSN_SELECTOR(0x00, 0x0f, 0xac, 2)
45 #ifdef CONFIG_IEEE80211R
46 #define RSN_AUTH_KEY_MGMT_FT_802_1X RSN_SELECTOR(0x00, 0x0f, 0xac, 3)
47 #define RSN_AUTH_KEY_MGMT_FT_PSK RSN_SELECTOR(0x00, 0x0f, 0xac, 4)
49 #define RSN_AUTH_KEY_MGMT_802_1X_SHA256 RSN_SELECTOR(0x00, 0x0f, 0xac, 5)
50 #define RSN_AUTH_KEY_MGMT_PSK_SHA256 RSN_SELECTOR(0x00, 0x0f, 0xac, 6)
51 #define RSN_AUTH_KEY_MGMT_TPK_HANDSHAKE RSN_SELECTOR(0x00, 0x0f, 0xac, 7)
52 #define RSN_AUTH_KEY_MGMT_SAE RSN_SELECTOR(0x00, 0x0f, 0xac, 8)
53 #define RSN_AUTH_KEY_MGMT_FT_SAE RSN_SELECTOR(0x00, 0x0f, 0xac, 9)
54 #define RSN_AUTH_KEY_MGMT_802_1X_SUITE_B RSN_SELECTOR(0x00, 0x0f, 0xac, 11)
55 #define RSN_AUTH_KEY_MGMT_802_1X_SUITE_B_192 RSN_SELECTOR(0x00, 0x0f, 0xac, 12)
56 #define RSN_AUTH_KEY_MGMT_FT_802_1X_SUITE_B_192 \
57 RSN_SELECTOR(0x00, 0x0f, 0xac, 13)
58 #define RSN_AUTH_KEY_MGMT_CCKM RSN_SELECTOR(0x00, 0x40, 0x96, 0x00)
59 #define RSN_AUTH_KEY_MGMT_OSEN RSN_SELECTOR(0x50, 0x6f, 0x9a, 0x01)
61 #define RSN_CIPHER_SUITE_NONE RSN_SELECTOR(0x00, 0x0f, 0xac, 0)
62 #define RSN_CIPHER_SUITE_TKIP RSN_SELECTOR(0x00, 0x0f, 0xac, 2)
64 #define RSN_CIPHER_SUITE_WRAP RSN_SELECTOR(0x00, 0x0f, 0xac, 3)
66 #define RSN_CIPHER_SUITE_CCMP RSN_SELECTOR(0x00, 0x0f, 0xac, 4)
67 #define RSN_CIPHER_SUITE_AES_128_CMAC RSN_SELECTOR(0x00, 0x0f, 0xac, 6)
68 #define RSN_CIPHER_SUITE_NO_GROUP_ADDRESSED RSN_SELECTOR(0x00, 0x0f, 0xac, 7)
69 #define RSN_CIPHER_SUITE_GCMP RSN_SELECTOR(0x00, 0x0f, 0xac, 8)
70 #define RSN_CIPHER_SUITE_GCMP_256 RSN_SELECTOR(0x00, 0x0f, 0xac, 9)
71 #define RSN_CIPHER_SUITE_CCMP_256 RSN_SELECTOR(0x00, 0x0f, 0xac, 10)
72 #define RSN_CIPHER_SUITE_BIP_GMAC_128 RSN_SELECTOR(0x00, 0x0f, 0xac, 11)
73 #define RSN_CIPHER_SUITE_BIP_GMAC_256 RSN_SELECTOR(0x00, 0x0f, 0xac, 12)
74 #define RSN_CIPHER_SUITE_BIP_CMAC_256 RSN_SELECTOR(0x00, 0x0f, 0xac, 13)
79 #define RSN_KEY_DATA_GROUPKEY RSN_SELECTOR(0x00, 0x0f, 0xac, 1)
81 #define RSN_KEY_DATA_STAKEY RSN_SELECTOR(0x00, 0x0f, 0xac, 2)
83 #define RSN_KEY_DATA_MAC_ADDR RSN_SELECTOR(0x00, 0x0f, 0xac, 3)
84 #define RSN_KEY_DATA_PMKID RSN_SELECTOR(0x00, 0x0f, 0xac, 4)
86 #define RSN_KEY_DATA_SMK RSN_SELECTOR(0x00, 0x0f, 0xac, 5)
87 #define RSN_KEY_DATA_NONCE RSN_SELECTOR(0x00, 0x0f, 0xac, 6)
88 #define RSN_KEY_DATA_LIFETIME RSN_SELECTOR(0x00, 0x0f, 0xac, 7)
89 #define RSN_KEY_DATA_ERROR RSN_SELECTOR(0x00, 0x0f, 0xac, 8)
91 #ifdef CONFIG_IEEE80211W
92 #define RSN_KEY_DATA_IGTK RSN_SELECTOR(0x00, 0x0f, 0xac, 9)
94 #define RSN_KEY_DATA_KEYID RSN_SELECTOR(0x00, 0x0f, 0xac, 10)
95 #define RSN_KEY_DATA_MULTIBAND_GTK RSN_SELECTOR(0x00, 0x0f, 0xac, 11)
96 #define RSN_KEY_DATA_MULTIBAND_KEYID RSN_SELECTOR(0x00, 0x0f, 0xac, 12)
98 #define WFA_KEY_DATA_IP_ADDR_REQ RSN_SELECTOR(0x50, 0x6f, 0x9a, 4)
99 #define WFA_KEY_DATA_IP_ADDR_ALLOC RSN_SELECTOR(0x50, 0x6f, 0x9a, 5)
101 #define WPA_OUI_TYPE RSN_SELECTOR(0x00, 0x50, 0xf2, 1)
103 #define RSN_SELECTOR_PUT(a, val) WPA_PUT_BE32((u8 *) (a), (val))
104 #define RSN_SELECTOR_GET(a) WPA_GET_BE32((const u8 *) (a))
106 #define RSN_NUM_REPLAY_COUNTERS_1 0
107 #define RSN_NUM_REPLAY_COUNTERS_2 1
108 #define RSN_NUM_REPLAY_COUNTERS_4 2
109 #define RSN_NUM_REPLAY_COUNTERS_16 3
113 #pragma pack(push, 1)
116 #ifdef CONFIG_IEEE80211W
117 #define WPA_IGTK_LEN 16
118 #define WPA_IGTK_MAX_LEN 32
123 #define WPA_CAPABILITY_PREAUTH BIT(0)
124 #define WPA_CAPABILITY_NO_PAIRWISE BIT(1)
127 #define WPA_CAPABILITY_MFPR BIT(6)
128 #define WPA_CAPABILITY_MFPC BIT(7)
130 #define WPA_CAPABILITY_PEERKEY_ENABLED BIT(9)
131 #define WPA_CAPABILITY_SPP_A_MSDU_CAPABLE BIT(10)
132 #define WPA_CAPABILITY_SPP_A_MSDU_REQUIRED BIT(11)
133 #define WPA_CAPABILITY_PBAC BIT(12)
134 #define WPA_CAPABILITY_EXT_KEY_ID_FOR_UNICAST BIT(13)
139 #define MOBILITY_DOMAIN_ID_LEN 2
140 #define FT_R0KH_ID_MAX_LEN 48
141 #define FT_R1KH_ID_LEN 6
142 #define WPA_PMK_NAME_LEN 16
146 #define WPA_KEY_INFO_TYPE_MASK ((u16) (BIT(0) | BIT(1) | BIT(2)))
147 #define WPA_KEY_INFO_TYPE_AKM_DEFINED 0
148 #define WPA_KEY_INFO_TYPE_HMAC_MD5_RC4 BIT(0)
149 #define WPA_KEY_INFO_TYPE_HMAC_SHA1_AES BIT(1)
150 #define WPA_KEY_INFO_TYPE_AES_128_CMAC 3
151 #define WPA_KEY_INFO_KEY_TYPE BIT(3)
153 #define WPA_KEY_INFO_KEY_INDEX_MASK (BIT(4) | BIT(5))
154 #define WPA_KEY_INFO_KEY_INDEX_SHIFT 4
155 #define WPA_KEY_INFO_INSTALL BIT(6)
156 #define WPA_KEY_INFO_TXRX BIT(6)
157 #define WPA_KEY_INFO_ACK BIT(7)
158 #define WPA_KEY_INFO_MIC BIT(8)
159 #define WPA_KEY_INFO_SECURE BIT(9)
160 #define WPA_KEY_INFO_ERROR BIT(10)
161 #define WPA_KEY_INFO_REQUEST BIT(11)
162 #define WPA_KEY_INFO_ENCR_KEY_DATA BIT(12)
163 #define WPA_KEY_INFO_SMK_MESSAGE BIT(13)
171 u8 replay_counter[WPA_REPLAY_COUNTER_LEN];
172 u8 key_nonce[WPA_NONCE_LEN];
174 u8 key_rsc[WPA_KEY_RSC_LEN];
177 u8 key_data_length[2];
186 u8 replay_counter[WPA_REPLAY_COUNTER_LEN];
187 u8 key_nonce[WPA_NONCE_LEN];
189 u8 key_rsc[WPA_KEY_RSC_LEN];
192 u8 key_data_length[2];
196 #define WPA_EAPOL_KEY_MIC_MAX_LEN 24
197 #define WPA_KCK_MAX_LEN 24
198 #define WPA_KEK_MAX_LEN 32
199 #define WPA_TK_MAX_LEN 32
206 u8 kck[WPA_KCK_MAX_LEN];
207 u8 kek[WPA_KEK_MAX_LEN];
208 u8 tk[WPA_TK_MAX_LEN];
268 #ifdef CONFIG_PEERKEY
270 STK_MUI_4WAY_STA_AP = 1,
271 STK_MUI_4WAY_STAT_STA = 2,
278 STK_ERR_STA_NRSN = 2,
289 #ifdef CONFIG_IEEE80211W
290 #define WPA_IGTK_KDE_PREFIX_LEN (2 + 6)
291 struct wpa_igtk_kde {
294 u8 igtk[WPA_IGTK_MAX_LEN];
299 u8 mobility_domain[MOBILITY_DOMAIN_ID_LEN];
303 #define RSN_FT_CAPAB_FT_OVER_DS BIT(0)
304 #define RSN_FT_CAPAB_FT_RESOURCE_REQ_SUPP BIT(1)
309 u8 anonce[WPA_NONCE_LEN];
310 u8 snonce[WPA_NONCE_LEN];
314 #define FTIE_SUBELEM_R1KH_ID 1
315 #define FTIE_SUBELEM_GTK 2
316 #define FTIE_SUBELEM_R0KH_ID 3
317 #define FTIE_SUBELEM_IGTK 4
332 const u8 *buf,
size_t len, u8 *mic);
333 int wpa_pmk_to_ptk(
const u8 *pmk,
size_t pmk_len,
const char *label,
334 const u8 *addr1,
const u8 *addr2,
335 const u8 *nonce1,
const u8 *nonce2,
336 struct wpa_ptk *ptk,
int akmp,
int cipher);
338 #ifdef CONFIG_IEEE80211R
339 int wpa_ft_mic(
const u8 *kck,
size_t kck_len,
const u8 *sta_addr,
340 const u8 *ap_addr, u8 transaction_seqnum,
341 const u8 *mdie,
size_t mdie_len,
342 const u8 *ftie,
size_t ftie_len,
343 const u8 *rsnie,
size_t rsnie_len,
344 const u8 *ric,
size_t ric_len, u8 *mic);
345 void wpa_derive_pmk_r0(
const u8 *xxkey,
size_t xxkey_len,
346 const u8 *ssid,
size_t ssid_len,
347 const u8 *mdid,
const u8 *r0kh_id,
size_t r0kh_id_len,
348 const u8 *s0kh_id, u8 *pmk_r0, u8 *pmk_r0_name);
349 void wpa_derive_pmk_r1_name(
const u8 *pmk_r0_name,
const u8 *r1kh_id,
350 const u8 *s1kh_id, u8 *pmk_r1_name);
351 void wpa_derive_pmk_r1(
const u8 *pmk_r0,
const u8 *pmk_r0_name,
352 const u8 *r1kh_id,
const u8 *s1kh_id,
353 u8 *pmk_r1, u8 *pmk_r1_name);
354 int wpa_pmk_r1_to_ptk(
const u8 *pmk_r1,
const u8 *snonce,
const u8 *anonce,
355 const u8 *sta_addr,
const u8 *bssid,
356 const u8 *pmk_r1_name,
357 struct wpa_ptk *ptk, u8 *ptk_name,
int akmp,
int cipher);
368 int mgmt_group_cipher;
374 int wpa_parse_wpa_ie_wpa(
const u8 *wpa_ie,
size_t wpa_ie_len,
377 void rsn_pmkid(
const u8 *pmk,
size_t pmk_len,
const u8 *aa,
const u8 *spa,
378 u8 *pmkid,
int use_sha256);
380 int rsn_pmkid_suite_b(
const u8 *kck,
size_t kck_len,
const u8 *aa,
381 const u8 *spa, u8 *pmkid);
383 static inline int rsn_pmkid_suite_b(
const u8 *kck,
size_t kck_len,
const u8 *aa,
384 const u8 *spa, u8 *pmkid)
389 #ifdef CONFIG_SUITEB192
390 int rsn_pmkid_suite_b_192(
const u8 *kck,
size_t kck_len,
const u8 *aa,
391 const u8 *spa, u8 *pmkid);
393 static inline int rsn_pmkid_suite_b_192(
const u8 *kck,
size_t kck_len,
394 const u8 *aa,
const u8 *spa, u8 *pmkid)
402 u32 wpa_akm_to_suite(
int akm);
403 int wpa_compare_rsn_ie(
int ft_initial_assoc,
404 const u8 *ie1,
size_t ie1len,
405 const u8 *ie2,
size_t ie2len);
406 int wpa_insert_pmkid(u8 *ies,
size_t ies_len,
const u8 *pmkid);
429 int wpa_ft_parse_ies(
const u8 *ies,
size_t ies_len,
struct wpa_ft_ies *parse);
431 int wpa_cipher_key_len(
int cipher);
432 int wpa_cipher_rsc_len(
int cipher);
433 int wpa_cipher_to_alg(
int cipher);
434 int wpa_cipher_valid_group(
int cipher);
435 int wpa_cipher_valid_pairwise(
int cipher);
436 int wpa_cipher_valid_mgmt_group(
int cipher);
437 u32 wpa_cipher_to_suite(
int proto,
int cipher);
438 int rsn_cipher_put_suites(u8 *pos,
int ciphers);
439 int wpa_cipher_put_suites(u8 *pos,
int ciphers);
440 int wpa_pick_pairwise_cipher(
int ciphers,
int none_allowed);
441 int wpa_pick_group_cipher(
int ciphers);
442 int wpa_parse_cipher(
const char *value);
443 int wpa_write_ciphers(
char *start,
char *end,
int ciphers,
const char *delim);
444 int wpa_select_ap_group_cipher(
int wpa,
int wpa_pairwise,
int rsn_pairwise);
445 unsigned int wpa_mic_len(
int akmp);
int wpa_pmk_to_ptk(const u8 *pmk, size_t pmk_len, const char *label, const u8 *addr1, const u8 *addr2, const u8 *nonce1, const u8 *nonce2, struct wpa_ptk *ptk, int akmp, int cipher)
Calculate PTK from PMK, addresses, and nonces.
Definition: wpa_common.c:137
const char * wpa_key_mgmt_txt(int key_mgmt, int proto)
Convert key management suite to a text string.
Definition: wpa_common.c:1151
Definition: wpa_common.h:306
void rsn_pmkid(const u8 *pmk, size_t pmk_len, const u8 *aa, const u8 *spa, u8 *pmkid, int use_sha256)
Calculate PMK identifier.
Definition: wpa_common.c:1023
Definition: wpa_common.h:181
Definition: wpa_common.h:261
Definition: wpa_common.h:319
int wpa_parse_wpa_ie_rsn(const u8 *rsn_ie, size_t rsn_ie_len, struct wpa_ie_data *data)
Parse RSN IE.
Definition: wpa_common.c:522
Definition: wpa_common.h:166
WPA Pairwise Transient Key IEEE Std 802.11i-2004 - 8.5.1.2 Pairwise key hierarchy.
Definition: wpa_common.h:205
Definition: wpa_common.h:408
Definition: wpa_common.h:298
Definition: wpa_common.h:229
int wpa_eapol_key_mic(const u8 *key, size_t key_len, int akmp, int ver, const u8 *buf, size_t len, u8 *mic)
Calculate EAPOL-Key MIC.
Definition: wpa_common.c:63
Definition: wpa_common.h:284
const char * wpa_cipher_txt(int cipher)
Convert cipher suite to a text string.
Definition: wpa_common.c:1116
Definition: wpa_common.h:360