DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions
hostapd/wlantest/wlantest.h

382 lines
11 KiB
C
Raw Permalink Normal View History

wlantest: Add preliminary version of IEEE 802.11 protocol testing tool This tool can be used to capture IEEE 802.11 frames either from a monitor interface for realtime capturing or from pcap files for offline analysis. This version is only adding basic infrastructure for going through the frames and parsing their headers.
2010-11-06 15:20:45 +01:00
/*
* wlantest - IEEE 802.11 protocol monitoring and testing tool
wlantest: Handle FT over-the-DS association state update cleanly It is expected for the STA entry on the target AP to move directly from State 1 to State 3 when performing FT over-the-DS (i.e., FT Action Request/Response frame exchange through the old AP followed by Reassociation Request/Response frame exchange with the target AP). Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-23 20:11:33 +02:00
* Copyright (c) 2010-2020, Jouni Malinen <j@w1.fi>
wlantest: Add preliminary version of IEEE 802.11 protocol testing tool This tool can be used to capture IEEE 802.11 frames either from a monitor interface for realtime capturing or from pcap files for offline analysis. This version is only adding basic infrastructure for going through the frames and parsing their headers.
2010-11-06 15:20:45 +01:00
*
Remove the GPL notification from files contributed by Jouni Malinen Remove the GPL notification text from the files that were initially contributed by myself. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-02-11 15:46:35 +01:00
* This software may be distributed under the terms of the BSD license.
* See README for more details.
wlantest: Add preliminary version of IEEE 802.11 protocol testing tool This tool can be used to capture IEEE 802.11 frames either from a monitor interface for realtime capturing or from pcap files for offline analysis. This version is only adding basic infrastructure for going through the frames and parsing their headers.
2010-11-06 15:20:45 +01:00
*/
#ifndef WLANTEST_H
#define WLANTEST_H
wlantest: Maintain table of BSS information Whenever a Beacon or Probe Response frame is observed, add or update a BSS entry to maintain current information about the active BSSes.
2010-11-06 16:11:12 +01:00
#include "utils/list.h"
wlantest: Add PTK derivation based on passphrases Allow pre-configuration of passphrases (-p<passphrase>) to provide enough information for wlantest to be able to derive PMK for each BSS and PTK for each STA going through 4-Way Handshake (at least message 2 and 3 needs to be received).
2010-11-06 21:57:49 +01:00
#include "common/wpa_common.h"
wlantest: Add BSS/STA statistics counters These counters can be cleared and queried from external programs to script various testing tasks.
2010-11-18 18:05:29 +01:00
#include "wlantest_ctrl.h"
wlantest: Maintain table of BSS information Whenever a Beacon or Probe Response frame is observed, add or update a BSS entry to maintain current information about the active BSSes.
2010-11-06 16:11:12 +01:00
wlantest: Move bss_update() into bss.c
2010-11-06 16:57:21 +01:00
struct ieee802_11_elems;
wlantest: Derive PMK from RADIUS exchange Decrypt MPPE keys and derive PMK from RADIUS exchange if RADIUS shared secret is known. Use the derived PMK when trying to derive PTK during 4-Way Handshake.
2010-11-07 18:43:10 +01:00
struct radius_msg;
wlantest: Add support for decrypting CCMP protected unicast Data frames
2010-11-11 00:29:30 +01:00
struct ieee80211_hdr;
wlantest: Parse WPA/RSN IE and store info for BSS/STA In addition, verify that the parameters that the STA is requesting match with what is enabled in the BSS.
2010-11-12 21:40:59 +01:00
struct wlantest_bss;
wlantest: Move bss_update() into bss.c
2010-11-06 16:57:21 +01:00
wlantest: Derive PMK from RADIUS exchange Decrypt MPPE keys and derive PMK from RADIUS exchange if RADIUS shared secret is known. Use the derived PMK when trying to derive PTK during 4-Way Handshake.
2010-11-07 18:43:10 +01:00
#define MAX_RADIUS_SECRET_LEN 128
struct wlantest_radius_secret {
struct dl_list list;
char secret[MAX_RADIUS_SECRET_LEN];
};
wlantest: Maintain table of BSS information Whenever a Beacon or Probe Response frame is observed, add or update a BSS entry to maintain current information about the active BSSes.
2010-11-06 16:11:12 +01:00
wlantest: Add PTK derivation based on passphrases Allow pre-configuration of passphrases (-p<passphrase>) to provide enough information for wlantest to be able to derive PMK for each BSS and PTK for each STA going through 4-Way Handshake (at least message 2 and 3 needs to be received).
2010-11-06 21:57:49 +01:00
struct wlantest_passphrase {
struct dl_list list;
char passphrase[64];
u8 ssid[32];
size_t ssid_len;
u8 bssid[ETH_ALEN];
};
struct wlantest_pmk {
struct dl_list list;
wlantest: Support variable length PMK This is needed to be able to handle key derivation for FILS authentication. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-09-05 18:01:14 +02:00
u8 pmk[PMK_LEN_MAX];
size_t pmk_len;
wlantest: Add PTK derivation based on passphrases Allow pre-configuration of passphrases (-p<passphrase>) to provide enough information for wlantest to be able to derive PMK for each BSS and PTK for each STA going through 4-Way Handshake (at least message 2 and 3 needs to be received).
2010-11-06 21:57:49 +01:00
};
wlantest: Allow additional PTKs to be specified from a file A text file with a hexdump of PTK (KCK|KEK=TK with 48 octets for CCMP or 64 octets for TKIP or alternative 16 or 32 octet TK for CCMP/TKIP) can now be read from a file specified with the -T command line argument. If the current known PTK fails to decrypt a frame (or if no current PTK is known) all listed PTKs are iterated to see if any of them matches. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-11-17 21:52:15 +01:00
struct wlantest_ptk {
struct dl_list list;
struct wpa_ptk ptk;
size_t ptk_len;
};
wlantest: Add support for decrypting WEP frames
2011-01-14 16:43:17 +01:00
struct wlantest_wep {
struct dl_list list;
size_t key_len;
u8 key[13];
};
wlantest: Create station list for each BSS
2010-11-06 16:31:02 +01:00
struct wlantest_sta {
struct dl_list list;
wlantest: Parse WPA/RSN IE and store info for BSS/STA In addition, verify that the parameters that the STA is requesting match with what is enabled in the BSS.
2010-11-12 21:40:59 +01:00
struct wlantest_bss *bss;
wlantest: Create station list for each BSS
2010-11-06 16:31:02 +01:00
u8 addr[ETH_ALEN];
wlantest: Learn MLD MAC address from EAPOL-Key msg 1/4 and 2/4 IEEE P802.11be indicates the MLD MAC addresses, i.e., the Authenticator and Supplicant addresses, in the MAC Address KDE in EAPOL-Key msg 1/4 and 2/4. Learn those addresses so that wlantest can be extended to support MLO. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2022-09-05 20:08:24 +02:00
u8 mld_mac_addr[ETH_ALEN];
Use a single define MAX_NUM_MLD_LINKS for the maximum number of links There is no need to maintain a separate MAX_NUM_MLO_LINKS define for practically the same thing. Signed-off-by: Jouni Malinen <j@w1.fi>
2024-03-02 10:21:48 +01:00
u8 link_addr[MAX_NUM_MLD_LINKS][ETH_ALEN];
wlantest: Maintain STA state based on auth/assoc/deauth/disassoc
2010-11-06 16:55:27 +01:00
enum {
STATE1 /* not authenticated */,
STATE2 /* authenticated */,
STATE3 /* associated */
} state;
wlantest: FILS keys and (Re)Association Request/Response frames Try to derive PTK when FILS shared key authentication is used without PFS. The list of available PMKs is interpreted as rMSK for this purpose and PMK and PTK is derived from that. If the resulting PTK (KEK) can be used to decrypt the encrypted parts of (Re)Association Request/Response frames, mark the PTK as derived so that encrypted frames during the association can be decrypted. In addition, write a decrypted version of the (Re)Association Request/Response frames into the output file. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-09-05 18:01:59 +02:00
u16 auth_alg;
wlantest: Handle FT over-the-DS association state update cleanly It is expected for the STA entry on the target AP to move directly from State 1 to State 3 when performing FT over-the-DS (i.e., FT Action Request/Response frame exchange through the old AP followed by Reassociation Request/Response frame exchange with the target AP). Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-23 20:11:33 +02:00
bool ft_over_ds;
wlantest: Maintain STA state based on auth/assoc/deauth/disassoc
2010-11-06 16:55:27 +01:00
u16 aid;
wlantest: Maintain a copy of WPA/RSN IE from (Re)AssocReq
2010-11-06 17:10:34 +01:00
u8 rsnie[257]; /* WPA/RSN IE */
wlantest: Adjust kdk_len according to RSNX capability This is needed to derive the PTK correct when Secure LTF support is used and the additional KDK component needs to be taken into account. Signed-off-by: Adil Saeed Musthafa <quic_adilm@quicinc.com>
2023-03-01 20:21:38 +01:00
u8 rsnxe[254]; /* RSNXE data */
size_t rsnxe_len;
wlantest: Add support for OSEN This allows Hotspot 2.0 OSEN connection to be analyzed more conveniently. The frames from an OSEN association can now be decrypted using an MSK file. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2014-05-15 11:40:02 +02:00
u8 osenie[257]; /* OSEN IE */
wlantest: Parse WPA/RSN IE and store info for BSS/STA In addition, verify that the parameters that the STA is requesting match with what is enabled in the BSS.
2010-11-12 21:40:59 +01:00
int proto;
int pairwise_cipher;
int group_cipher;
int key_mgmt;
int rsn_capab;
wlantest: Validate FT elements in Reassociation Request frame Verify that RSNE, MDE, and FTE have valid information in FT Reassociation Request frames. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-23 20:44:16 +02:00
/* ANonce from the previous EAPOL-Key msg 1/4 or 3/4 */
u8 anonce[WPA_NONCE_LEN];
/* SNonce from the previous EAPOL-Key msg 2/4 */
u8 snonce[WPA_NONCE_LEN];
wlantest: Store PMK-R0 length explicitly PMK-R0 is not of fixed length, so store its length explicitly. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-23 20:24:01 +02:00
u8 pmk_r0[PMK_LEN_MAX];
size_t pmk_r0_len;
wlantest: Derive PMK-R1 and PTK for FT protocol cases Track PMK-R0/PMK-R0-Name from the initial mobility domain association and derive PMK-R1/PTK when the station uses FT protocol. This allows frames from additional roaming cases to be decrypted. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-08-22 21:14:47 +02:00
u8 pmk_r0_name[WPA_PMK_NAME_LEN];
wlantest: Store PMK-R1 in STA entry Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-23 20:43:36 +02:00
u8 pmk_r1[PMK_LEN_MAX];
size_t pmk_r1_len;
u8 pmk_r1_name[WPA_PMK_NAME_LEN];
wlantest: Add PTK derivation based on passphrases Allow pre-configuration of passphrases (-p<passphrase>) to provide enough information for wlantest to be able to derive PMK for each BSS and PTK for each STA going through 4-Way Handshake (at least message 2 and 3 needs to be received).
2010-11-06 21:57:49 +01:00
struct wpa_ptk ptk; /* Derived PTK */
int ptk_set;
wlantest: Fix handling of PTK rekeying Use a temporary PTK buffer during 4-way handshake when rekeying PTK so that the new EAPOL-Key frame MIC values are checked against the new PTK and frames are decrypted using the old PTK. Take the new PTK into use once msg 4/4 is processed and clear RSC counters at that point (including moving of RSC update to avoid setting RSC based on the msg 4/4). In addition, add a workaround to handle supplicant implementations that set Secure bit to one during PTK rekeying 4-way handshake in msg 2/4. This was previously assumed to be msg 4/4, but the key data contents can be used to figure out whether this is msg 2/4 even if the Secure bit is set to one. Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2011-11-14 21:33:26 +01:00
struct wpa_ptk tptk; /* Derived PTK during rekeying */
int tptk_set;
wlantest: Decrypt CCMP protected unicast Robust Management frames
2010-11-11 19:46:15 +01:00
u8 rsc_tods[16 + 1][6];
u8 rsc_fromds[16 + 1][6];
wlantest: Process Action frames Parse Action frames and verify SA Query transactions.
2010-11-11 20:34:06 +01:00
u8 ap_sa_query_tr[2];
u8 sta_sa_query_tr[2];
wlantest: Add BSS/STA statistics counters These counters can be cleared and queried from external programs to script various testing tasks.
2010-11-18 18:05:29 +01:00
u32 counters[NUM_WLANTEST_STA_COUNTER];
wlantest: Get STA IEs based on EAPOL-Key msg 2/4 before PTK derivation The previous implementation tried to update STA IE information based on EAPOL-Key msg 2/4 to be able to handle captures that do not include the (Re)Association Request frame. This was not sufficient (OSEN was not included) and was done too late (the parsed information is needed for PMK-to-PTK derivation). Move the IE update step to happen before trying to derive the PTK if no (Re)Association Request frame has been seen. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-02-27 23:31:33 +01:00
int assocreq_seen;
wlantest: Add support for injecting (Re)Association Request frames
2010-11-19 16:09:02 +01:00
u16 assocreq_capab_info;
u16 assocreq_listen_int;
u8 *assocreq_ies;
size_t assocreq_ies_len;
wlantest: Parse ICMP echo packet and record STA ping success
2010-11-20 21:34:42 +01:00
/* Last ICMP Echo request information */
u32 icmp_echo_req_src;
u32 icmp_echo_req_dst;
u16 icmp_echo_req_id;
u16 icmp_echo_req_seq;
wlantest: Implement IEEE 802.11 duplicate detection This cleans up debug logs by avoiding incorrect entries on TKIP/CCMP replays and some state changes.
2010-11-23 13:27:28 +01:00
le16 seq_ctrl_to_sta[17];
le16 seq_ctrl_to_ap[17];
wlantest: Allow duplicate frame processing after decryption failure If a sniffer capture does not include FCS for each frame, but may included frames with invalid FCS, it would be possible for wlantest to try to decrypt the first received frame and fail (e.g., due to CCMP MIC mismatch) because that particular frame was corrupted and then ignore the following retry of that frame as a duplicate even if that retry has different payload (e.g., if its reception did not show corruption). Work around this by skipping duplicate frame detection immediately following a decryption failure. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-06-12 21:23:30 +02:00
int allow_duplicate;
wlantest: Track station PS state
2011-01-07 14:54:58 +01:00
int pwrmgt;
int pspoll;
wlantest: Store last received GTK for each STA This allows info_sta command to be used to fetch the last received GTK separately for each STA. Signed-hostap: Jouni Malinen <j@w1.fi>
2011-12-22 15:59:25 +01:00
u8 gtk[32];
size_t gtk_len;
int gtk_idx;
wlantest: Add per-TID RX/TX counters Signed-hostap: Jouni Malinen <j@w1.fi>
2013-12-24 19:21:27 +01:00
u32 tx_tid[16 + 1];
u32 rx_tid[16 + 1];
wlantest: Key derivation for SAE-EXT-KEY Extend wlantest capabilities to cover the new SAE-EXT-KEY AKM and variable length MIC field and key lengths for it based on the used SAE group. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2022-10-12 21:33:27 +02:00
u16 sae_group;
wlantest: Handle variable length MIC field in EAPOL-Key with OWE The Key MIC field is of variable length when using OWE, so determine the correct length based on which group was negotiated for OWE during association. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2023-08-08 09:30:10 +02:00
u16 owe_group;
wlantest: Create station list for each BSS
2010-11-06 16:31:02 +01:00
};
wlantest: Add support for decrypting TDLS frames Derive TPK based on TDLS TPK Handshake and decrypt frames on the direct link with TPK-TK.
2010-12-13 10:20:55 +01:00
struct wlantest_tdls {
struct dl_list list;
struct wlantest_sta *init;
struct wlantest_sta *resp;
struct tpk {
u8 kck[16];
u8 tk[16];
} tpk;
int link_up;
wlantest: Check FTIE MIC in TDLS Teardown messages
2010-12-16 16:08:00 +01:00
u8 dialog_token;
wlantest: Add support for decrypting TDLS frames Derive TPK based on TDLS TPK Handshake and decrypt frames on the direct link with TPK-TK.
2010-12-13 10:20:55 +01:00
u8 rsc_init[16 + 1][6];
u8 rsc_resp[16 + 1][6];
wlantest: Add counters and AP/direct path validation for TDLS These can be used to write automated test scripts for verifying that TDLS STAs are using correct data path.
2010-12-16 18:08:49 +01:00
u32 counters[NUM_WLANTEST_TDLS_COUNTER];
wlantest: Track TDLS setup nonces Signed-hostap: Jouni Malinen <j@w1.fi>
2013-05-26 20:35:00 +02:00
u8 inonce[32];
u8 rnonce[32];
wlantest: Add support for decrypting TDLS frames Derive TPK based on TDLS TPK Handshake and decrypt frames on the direct link with TPK-TK.
2010-12-13 10:20:55 +01:00
};
wlantest: Maintain table of BSS information Whenever a Beacon or Probe Response frame is observed, add or update a BSS entry to maintain current information about the active BSSes.
2010-11-06 16:11:12 +01:00
struct wlantest_bss {
struct dl_list list;
u8 bssid[ETH_ALEN];
wlantest: Learn MLD MAC address from EAPOL-Key msg 1/4 and 2/4 IEEE P802.11be indicates the MLD MAC addresses, i.e., the Authenticator and Supplicant addresses, in the MAC Address KDE in EAPOL-Key msg 1/4 and 2/4. Learn those addresses so that wlantest can be extended to support MLO. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2022-09-05 20:08:24 +02:00
u8 mld_mac_addr[ETH_ALEN];
wlantest: Learn the Link ID for AP MLD affiliated BSSs This allows the Link ID to be determined based on the BSS entry when processing a frame. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2023-08-24 16:28:33 +02:00
u8 link_id;
bool link_id_set;
wlantest: Maintain table of BSS information Whenever a Beacon or Probe Response frame is observed, add or update a BSS entry to maintain current information about the active BSSes.
2010-11-06 16:11:12 +01:00
u16 capab_info;
wlantest: Add support for decrypting WEP frames
2011-01-14 16:43:17 +01:00
u16 prev_capab_info;
wlantest: Maintain table of BSS information Whenever a Beacon or Probe Response frame is observed, add or update a BSS entry to maintain current information about the active BSSes.
2010-11-06 16:11:12 +01:00
u8 ssid[32];
size_t ssid_len;
wlantest: Do not ignore RSN/WPA/OSEN element before full BSS info wlantest used to ignore RSN/WPA/OSEN element in (Re)Association Request frame if no Beacon frame had been seen from the AP before the association exchange. This could result in not being able to derive keys properly. Work around this by skipping that step if the BSS entry is not yet complete. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-11-14 11:55:48 +01:00
int beacon_seen;
wlantest: Maintain table of BSS information Whenever a Beacon or Probe Response frame is observed, add or update a BSS entry to maintain current information about the active BSSes.
2010-11-06 16:11:12 +01:00
int proberesp_seen;
wlantest: Update BSS IEs based on EAPOL-Key msg 3/4 If no Beacon or Probe Response frame has been seen in the capture, use the IEs from EAPOL-Key msg 3/4 to set up BSS information. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-02-27 23:51:07 +01:00
int ies_set;
wlantest: Maintain table of BSS information Whenever a Beacon or Probe Response frame is observed, add or update a BSS entry to maintain current information about the active BSSes.
2010-11-06 16:11:12 +01:00
int parse_error_reported;
u8 wpaie[257];
u8 rsnie[257];
wlantest: Adjust kdk_len according to RSNX capability This is needed to derive the PTK correct when Secure LTF support is used and the additional KDK component needs to be taken into account. Signed-off-by: Adil Saeed Musthafa <quic_adilm@quicinc.com>
2023-03-01 20:21:38 +01:00
u8 rsnxe[254]; /* RSNXE data */
size_t rsnxe_len;
wlantest: Add support for OSEN This allows Hotspot 2.0 OSEN connection to be analyzed more conveniently. The frames from an OSEN association can now be decrypted using an MSK file. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2014-05-15 11:40:02 +02:00
u8 osenie[257];
wlantest: Parse WPA/RSN IE and store info for BSS/STA In addition, verify that the parameters that the STA is requesting match with what is enabled in the BSS.
2010-11-12 21:40:59 +01:00
int proto;
int pairwise_cipher;
int group_cipher;
int mgmt_group_cipher;
int key_mgmt;
int rsn_capab;
wlantest: Create station list for each BSS
2010-11-06 16:31:02 +01:00
struct dl_list sta; /* struct wlantest_sta */
wlantest: Add PTK derivation based on passphrases Allow pre-configuration of passphrases (-p<passphrase>) to provide enough information for wlantest to be able to derive PMK for each BSS and PTK for each STA going through 4-Way Handshake (at least message 2 and 3 needs to be received).
2010-11-06 21:57:49 +01:00
struct dl_list pmk; /* struct wlantest_pmk */
wlantest: Parse Key Data KDEs and store GTK and IGTK
2010-11-09 19:29:12 +01:00
u8 gtk[4][32];
size_t gtk_len[4];
wlantest: Add support for protecting injected broadcast frames
2010-11-19 15:48:33 +01:00
int gtk_idx;
wlantest: Add replay detection for CCMP
2010-11-11 19:21:11 +01:00
u8 rsc[4][6];
wlantest: BIGTK fetching and Beacon protection validation Fetch the BIGTK from EAPOL-Key msg 3/4 and use it to validate MME in Beacon frames when the AP uses Beacon protection. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2020-02-21 18:40:32 +01:00
u8 igtk[8][32];
size_t igtk_len[8];
wlantest: Add support for protecting injected broadcast frames
2010-11-19 15:48:33 +01:00
int igtk_idx;
wlantest: BIGTK fetching and Beacon protection validation Fetch the BIGTK from EAPOL-Key msg 3/4 and use it to validate MME in Beacon frames when the AP uses Beacon protection. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2020-02-21 18:40:32 +01:00
u8 ipn[8][6];
int bigtk_idx;
wlantest: Add BSS/STA statistics counters These counters can be cleared and queried from external programs to script various testing tasks.
2010-11-18 18:05:29 +01:00
u32 counters[NUM_WLANTEST_BSS_COUNTER];
wlantest: Add support for decrypting TDLS frames Derive TPK based on TDLS TPK Handshake and decrypt frames on the direct link with TPK-TK.
2010-12-13 10:20:55 +01:00
struct dl_list tdls; /* struct wlantest_tdls */
wlantest: Validate FT elements in Reassociation Request frame Verify that RSNE, MDE, and FTE have valid information in FT Reassociation Request frames. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-05-23 20:44:16 +02:00
u8 mdid[MOBILITY_DOMAIN_ID_LEN];
wlantest: Add support for FT-PSK initial association key derivation This adds minimal support for deriving keys for FT-PSK to allow the initial mobility domain association to be analyzed in more detail. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-08-06 14:51:36 +02:00
u8 r0kh_id[FT_R0KH_ID_MAX_LEN];
size_t r0kh_id_len;
u8 r1kh_id[FT_R1KH_ID_LEN];
wlantest: Skip Mesh Control field from the beginning of payload This allows correct processing of Data frames with Mesh Control field by finding the LLC/SNAP header after that field. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2021-03-09 19:20:24 +01:00
bool mesh;
wlantest: Maintain table of BSS information Whenever a Beacon or Probe Response frame is observed, add or update a BSS entry to maintain current information about the active BSSes.
2010-11-06 16:11:12 +01:00
};
wlantest: Derive PMK from RADIUS exchange Decrypt MPPE keys and derive PMK from RADIUS exchange if RADIUS shared secret is known. Use the derived PMK when trying to derive PTK during 4-Way Handshake.
2010-11-07 18:43:10 +01:00
struct wlantest_radius {
struct dl_list list;
u32 srv;
u32 cli;
struct radius_msg *last_req;
};
wlantest: Add control interface and wlantest_cli This can be used to manage wlantest operation during run time.
2010-11-13 17:38:19 +01:00
#define MAX_CTRL_CONNECTIONS 10
wlantest: Add support for writing pcapng files The new -n<file> command line argument can be used to request wlantest to write all read or captured frames into a pcapng file. This is similar to the -w argument, but with pcapng allowing per-frame comments to be embedded in the file. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-05-26 18:39:48 +02:00
#define MAX_NOTES 10
wlantest: Add control interface and wlantest_cli This can be used to manage wlantest operation during run time.
2010-11-13 17:38:19 +01:00
wlantest: TKIP frame reassembly for Michael MIC check in fragmented case Reassemble the full MSDU when processing TKIP protected fragmented frames so that the Michael MIC can be validated once the last fragment has been received. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2021-02-08 17:38:39 +01:00
struct tkip_frag {
struct wpabuf *buf;
u8 ra[ETH_ALEN];
u8 ta[ETH_ALEN];
u16 sn;
u8 fn;
};
wlantest: Add preliminary version of IEEE 802.11 protocol testing tool This tool can be used to capture IEEE 802.11 frames either from a monitor interface for realtime capturing or from pcap files for offline analysis. This version is only adding basic infrastructure for going through the frames and parsing their headers.
2010-11-06 15:20:45 +01:00
struct wlantest {
int monitor_sock;
wlantest: Add capturing and parsing of RADIUS messages Another interface (-I) or pcap file (-R) can now be specified as a source of RADIUS packets. These packets are now parsed, but the MSK is not yet derived for PMK use.
2010-11-07 16:59:50 +01:00
int monitor_wired;
wlantest: Add preliminary version of IEEE 802.11 protocol testing tool This tool can be used to capture IEEE 802.11 frames either from a monitor interface for realtime capturing or from pcap files for offline analysis. This version is only adding basic infrastructure for going through the frames and parsing their headers.
2010-11-06 15:20:45 +01:00
wlantest: Add control interface and wlantest_cli This can be used to manage wlantest operation during run time.
2010-11-13 17:38:19 +01:00
int ctrl_sock;
int ctrl_socks[MAX_CTRL_CONNECTIONS];
wlantest: Add PTK derivation based on passphrases Allow pre-configuration of passphrases (-p<passphrase>) to provide enough information for wlantest to be able to derive PMK for each BSS and PTK for each STA going through 4-Way Handshake (at least message 2 and 3 needs to be received).
2010-11-06 21:57:49 +01:00
struct dl_list passphrase; /* struct wlantest_passphrase */
wlantest: Maintain table of BSS information Whenever a Beacon or Probe Response frame is observed, add or update a BSS entry to maintain current information about the active BSSes.
2010-11-06 16:11:12 +01:00
struct dl_list bss; /* struct wlantest_bss */
wlantest: Derive PMK from RADIUS exchange Decrypt MPPE keys and derive PMK from RADIUS exchange if RADIUS shared secret is known. Use the derived PMK when trying to derive PTK during 4-Way Handshake.
2010-11-07 18:43:10 +01:00
struct dl_list secret; /* struct wlantest_radius_secret */
struct dl_list radius; /* struct wlantest_radius */
struct dl_list pmk; /* struct wlantest_pmk */
wlantest: Allow additional PTKs to be specified from a file A text file with a hexdump of PTK (KCK|KEK=TK with 48 octets for CCMP or 64 octets for TKIP or alternative 16 or 32 octet TK for CCMP/TKIP) can now be read from a file specified with the -T command line argument. If the current known PTK fails to decrypt a frame (or if no current PTK is known) all listed PTKs are iterated to see if any of them matches. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-11-17 21:52:15 +01:00
struct dl_list ptk; /* struct wlantest_ptk */
wlantest: Add support for decrypting WEP frames
2011-01-14 16:43:17 +01:00
struct dl_list wep; /* struct wlantest_wep */
wlantest: Maintain table of BSS information Whenever a Beacon or Probe Response frame is observed, add or update a BSS entry to maintain current information about the active BSSes.
2010-11-06 16:11:12 +01:00
wlantest: Add preliminary version of IEEE 802.11 protocol testing tool This tool can be used to capture IEEE 802.11 frames either from a monitor interface for realtime capturing or from pcap files for offline analysis. This version is only adding basic infrastructure for going through the frames and parsing their headers.
2010-11-06 15:20:45 +01:00
unsigned int rx_mgmt;
unsigned int rx_ctrl;
unsigned int rx_data;
unsigned int fcs_error;
wlantest: Detect and report plaintext payload in protected frames Signed-off-by: Jouni Malinen <j@w1.fi>
2020-03-14 16:31:57 +01:00
unsigned int frame_num;
wlantest: Add option for writing a PCAP dump file The output file includes all the capture (or read from wireless PCAP file) frames in their original contents and another copy of each frame that is decrypted in wlantest (including EAPOL-Key Key Data field).
2010-11-12 00:00:31 +01:00
void *write_pcap; /* pcap_t* */
void *write_pcap_dumper; /* pcpa_dumper_t */
struct timeval write_pcap_time;
wlantest: Add support for writing pcapng files The new -n<file> command line argument can be used to request wlantest to write all read or captured frames into a pcapng file. This is similar to the -w argument, but with pcapng allowing per-frame comments to be embedded in the file. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-05-26 18:39:48 +02:00
u8 *decrypted;
size_t decrypted_len;
FILE *pcapng;
u32 write_pcapng_time_high;
u32 write_pcapng_time_low;
wlantest: Count number of STA ACK'ed Deauth/Disassoc frames
2011-01-03 18:28:40 +01:00
u8 last_hdr[30];
size_t last_len;
int last_mgmt_valid;
wlantest: Add -F option for assuming FCS is included When using DLT_IEEE802_11 datalink type in a pcap file, wlantest can now be instructed to assume there is an FCS included in the frame by adding the new -F command line argument. This will make wlantest validate the FCS and strip it from the frame before processing. Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2013-01-17 11:55:30 +01:00
unsigned int assume_fcs:1;
wlantest: Add -N command line argument to remove write buffering This makes it easier to do live parsing of captured pcap files from wlantest without having to rename and restart the capture file. Packet writes are flushed to disk after each packet if -N is included in the command line. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-11-26 23:10:53 +01:00
unsigned int pcap_no_buffer:1;
wlantest: Ethernet interface capture Allow option (command line argument -e) to capture Ethernet headers instead of IEEE 802.11 so that wlantest can be used as a replacement for tcpdump/dumpcap for capturing. Signed-off-by: Jouni Malinen <j@w1.fi>
2019-12-27 22:15:14 +01:00
unsigned int ethernet:1;
wlantest: Add support for writing pcapng files The new -n<file> command line argument can be used to request wlantest to write all read or captured frames into a pcapng file. This is similar to the -w argument, but with pcapng allowing per-frame comments to be embedded in the file. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-05-26 18:39:48 +02:00
char *notes[MAX_NOTES];
size_t num_notes;
wlantest: Add RELOG command to reopen log/capture files This can be used similarly to the wpa_supplicant RELOG command to rotate log and capture files. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-11-17 20:11:35 +01:00
const char *write_file;
const char *pcapng_file;
wlantest: TKIP frame reassembly for Michael MIC check in fragmented case Reassemble the full MSDU when processing TKIP protected fragmented frames so that the Michael MIC can be validated once the last fragment has been received. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2021-02-08 17:38:39 +01:00
struct tkip_frag tkip_frag;
wlantest: Add preliminary version of IEEE 802.11 protocol testing tool This tool can be used to capture IEEE 802.11 frames either from a monitor interface for realtime capturing or from pcap files for offline analysis. This version is only adding basic infrastructure for going through the frames and parsing their headers.
2010-11-06 15:20:45 +01:00
};
wlantest: Add support for writing pcapng files The new -n<file> command line argument can be used to request wlantest to write all read or captured frames into a pcapng file. This is similar to the -w argument, but with pcapng allowing per-frame comments to be embedded in the file. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-05-26 18:39:48 +02:00
void add_note(struct wlantest *wt, int level, const char *fmt, ...)
PRINTF_FORMAT(3, 4);
void clear_notes(struct wlantest *wt);
size_t notes_len(struct wlantest *wt, size_t hdrlen);
wlantest: Support TK list for Management frame decryption Use the TKs from the PTK file (-T command line argument) to try to decrypt encrypted Management frames if no BSS/STA key can be found based on addresses. Signed-off-by: Jouni Malinen <j@w1.fi>
2021-02-07 10:37:58 +01:00
void write_decrypted_note(struct wlantest *wt, const u8 *decrypted,
const u8 *tk, size_t tk_len, int keyid);
wlantest: Add support for writing pcapng files The new -n<file> command line argument can be used to request wlantest to write all read or captured frames into a pcapng file. This is similar to the -w argument, but with pcapng allowing per-frame comments to be embedded in the file. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-05-26 18:39:48 +02:00
wlantest: Add command for adding WEP keys during run time
2011-01-28 12:33:21 +01:00
int add_wep(struct wlantest *wt, const char *key);
wlantest: Add preliminary version of IEEE 802.11 protocol testing tool This tool can be used to capture IEEE 802.11 frames either from a monitor interface for realtime capturing or from pcap files for offline analysis. This version is only adding basic infrastructure for going through the frames and parsing their headers.
2010-11-06 15:20:45 +01:00
int read_cap_file(struct wlantest *wt, const char *fname);
wlantest: Add capturing and parsing of RADIUS messages Another interface (-I) or pcap file (-R) can now be specified as a source of RADIUS packets. These packets are now parsed, but the MSK is not yet derived for PMK use.
2010-11-07 16:59:50 +01:00
int read_wired_cap_file(struct wlantest *wt, const char *fname);
wlantest: Add support for writing pcapng files The new -n<file> command line argument can be used to request wlantest to write all read or captured frames into a pcapng file. This is similar to the -w argument, but with pcapng allowing per-frame comments to be embedded in the file. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-05-26 18:39:48 +02:00
wlantest: Add option for writing a PCAP dump file The output file includes all the capture (or read from wireless PCAP file) frames in their original contents and another copy of each frame that is decrypted in wlantest (including EAPOL-Key Key Data field).
2010-11-12 00:00:31 +01:00
int write_pcap_init(struct wlantest *wt, const char *fname);
void write_pcap_deinit(struct wlantest *wt);
void write_pcap_captured(struct wlantest *wt, const u8 *buf, size_t len);
void write_pcap_decrypted(struct wlantest *wt, const u8 *buf1, size_t len1,
const u8 *buf2, size_t len2);
wlantest: Add support for writing pcapng files The new -n<file> command line argument can be used to request wlantest to write all read or captured frames into a pcapng file. This is similar to the -w argument, but with pcapng allowing per-frame comments to be embedded in the file. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-05-26 18:39:48 +02:00
int write_pcapng_init(struct wlantest *wt, const char *fname);
void write_pcapng_deinit(struct wlantest *wt);
struct pcap_pkthdr;
void write_pcapng_write_read(struct wlantest *wt, int dlt,
struct pcap_pkthdr *hdr, const u8 *data);
void write_pcapng_captured(struct wlantest *wt, const u8 *buf, size_t len);
wlantest: Add preliminary version of IEEE 802.11 protocol testing tool This tool can be used to capture IEEE 802.11 frames either from a monitor interface for realtime capturing or from pcap files for offline analysis. This version is only adding basic infrastructure for going through the frames and parsing their headers.
2010-11-06 15:20:45 +01:00
void wlantest_process(struct wlantest *wt, const u8 *data, size_t len);
wlantest: Add support for reading pcap files with prism header
2010-12-02 21:56:37 +01:00
void wlantest_process_prism(struct wlantest *wt, const u8 *data, size_t len);
wlantest: Add support for reading DLT_IEEE802_11 pcap files
2010-12-04 20:18:21 +01:00
void wlantest_process_80211(struct wlantest *wt, const u8 *data, size_t len);
wlantest: Add capturing and parsing of RADIUS messages Another interface (-I) or pcap file (-R) can now be specified as a source of RADIUS packets. These packets are now parsed, but the MSK is not yet derived for PMK use.
2010-11-07 16:59:50 +01:00
void wlantest_process_wired(struct wlantest *wt, const u8 *data, size_t len);
wlantest: Add preliminary version of IEEE 802.11 protocol testing tool This tool can be used to capture IEEE 802.11 frames either from a monitor interface for realtime capturing or from pcap files for offline analysis. This version is only adding basic infrastructure for going through the frames and parsing their headers.
2010-11-06 15:20:45 +01:00
int monitor_init(struct wlantest *wt, const char *ifname);
wlantest: Add capturing and parsing of RADIUS messages Another interface (-I) or pcap file (-R) can now be specified as a source of RADIUS packets. These packets are now parsed, but the MSK is not yet derived for PMK use.
2010-11-07 16:59:50 +01:00
int monitor_init_wired(struct wlantest *wt, const char *ifname);
wlantest: Add preliminary version of IEEE 802.11 protocol testing tool This tool can be used to capture IEEE 802.11 frames either from a monitor interface for realtime capturing or from pcap files for offline analysis. This version is only adding basic infrastructure for going through the frames and parsing their headers.
2010-11-06 15:20:45 +01:00
void monitor_deinit(struct wlantest *wt);
wlantest: Move Mgmt and Data frame processing into their own files
2010-11-06 17:01:24 +01:00
void rx_mgmt(struct wlantest *wt, const u8 *data, size_t len);
wlantest: Count number of STA ACK'ed Deauth/Disassoc frames
2011-01-03 18:28:40 +01:00
void rx_mgmt_ack(struct wlantest *wt, const struct ieee80211_hdr *hdr);
wlantest: Move Mgmt and Data frame processing into their own files
2010-11-06 17:01:24 +01:00
void rx_data(struct wlantest *wt, const u8 *data, size_t len);
Make struct wpa_eapol_key easier to use with variable length MIC Suite B 192-bit addition from IEEE Std 802.11ac-2013 replaced the previous fixed length Key MIC field with a variable length field. That change was addressed with an addition of a new struct defined for the second MIC length. This is not really scalable and with FILS coming up with a zero-length MIC case for AEAD, a more thorough change to support variable length MIC is needed. Remove the Key MIC and Key Data Length fields from the struct wpa_eapol_key and find their location based on the MIC length information (which is determined by the AKMP). This change allows the separate struct wpa_eapol_key_192 to be removed since struct wpa_eapol_key will now include only the fixed length fields that are shared with all EAPOL-Key cases in IEEE Std 802.11. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-09-02 21:55:03 +02:00
void rx_data_eapol(struct wlantest *wt, const u8 *bssid, const u8 *sta_addr,
const u8 *dst, const u8 *src,
wlantest: Move RX EAPOL processing into its own file
2010-11-20 20:40:04 +01:00
const u8 *data, size_t len, int prot);
wlantest: Parse ICMP echo packet and record STA ping success
2010-11-20 21:34:42 +01:00
void rx_data_ip(struct wlantest *wt, const u8 *bssid, const u8 *sta_addr,
wlantest: Determine ping matches properly for direct link Check ICMP echo request/response matches for both STAs to get proper counter values for a ping from a one STA to another one using TDLS.
2011-01-24 13:50:51 +01:00
const u8 *dst, const u8 *src, const u8 *data, size_t len,
const u8 *peer_addr);
wlantest: Add support for decrypting TDLS frames Derive TPK based on TDLS TPK Handshake and decrypt frames on the direct link with TPK-TK.
2010-12-13 10:20:55 +01:00
void rx_data_80211_encap(struct wlantest *wt, const u8 *bssid,
const u8 *sta_addr, const u8 *dst, const u8 *src,
const u8 *data, size_t len);
wlantest: Add preliminary version of IEEE 802.11 protocol testing tool This tool can be used to capture IEEE 802.11 frames either from a monitor interface for realtime capturing or from pcap files for offline analysis. This version is only adding basic infrastructure for going through the frames and parsing their headers.
2010-11-06 15:20:45 +01:00
wlantest: Do not add new BSS/STA entries based on ctrl commands Introduce bss_find()/sta_find() as an alternative bss_get()/sta_get() command that do not allocate new BSS/STA entry if no existing entry is found.
2010-11-19 21:00:10 +01:00
struct wlantest_bss * bss_find(struct wlantest *wt, const u8 *bssid);
wlantest: Allow specific link BSS to be found with bss_find_mld() Make this function more capable to address cases where a specific affiliated link of an AP MLD needs to be found. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2023-08-25 10:19:24 +02:00
struct wlantest_bss * bss_find_mld(struct wlantest *wt, const u8 *mld_mac_addr,
int link_id);
wlantest: Maintain table of BSS information Whenever a Beacon or Probe Response frame is observed, add or update a BSS entry to maintain current information about the active BSSes.
2010-11-06 16:11:12 +01:00
struct wlantest_bss * bss_get(struct wlantest *wt, const u8 *bssid);
void bss_deinit(struct wlantest_bss *bss);
wlantest: Add PTK derivation based on passphrases Allow pre-configuration of passphrases (-p<passphrase>) to provide enough information for wlantest to be able to derive PMK for each BSS and PTK for each STA going through 4-Way Handshake (at least message 2 and 3 needs to be received).
2010-11-06 21:57:49 +01:00
void bss_update(struct wlantest *wt, struct wlantest_bss *bss,
wlantest: Update BSS IEs based on EAPOL-Key msg 3/4 If no Beacon or Probe Response frame has been seen in the capture, use the IEs from EAPOL-Key msg 3/4 to set up BSS information. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-02-27 23:51:07 +01:00
struct ieee802_11_elems *elems, int beacon);
wlantest: Add flush command for dropping all BSS data
2010-11-18 16:36:08 +01:00
void bss_flush(struct wlantest *wt);
wlantest: Derive PMK to existing BSSes when a new passphrase is added
2010-11-21 12:19:43 +01:00
int bss_add_pmk_from_passphrase(struct wlantest_bss *bss,
const char *passphrase);
wlantest: Derive PMK from RADIUS exchange Decrypt MPPE keys and derive PMK from RADIUS exchange if RADIUS shared secret is known. Use the derived PMK when trying to derive PTK during 4-Way Handshake.
2010-11-07 18:43:10 +01:00
void pmk_deinit(struct wlantest_pmk *pmk);
wlantest: Maintain only a single entry for an active direct link The TDLS link itself is bidirectional, but there is explicit initiator/responder roles. Remove the other direction of the link if it exists when processing TDLS Setup Confirm to make sure that the link counters are stored for the current TDLS entery. This is also changing the control interface search for TDLS counters to require initiator/responder addresses in the correct order instead of matching entries regardless of the role.
2011-01-24 13:26:35 +01:00
void tdls_deinit(struct wlantest_tdls *tdls);
wlantest: Maintain table of BSS information Whenever a Beacon or Probe Response frame is observed, add or update a BSS entry to maintain current information about the active BSSes.
2010-11-06 16:11:12 +01:00
wlantest: Do not add new BSS/STA entries based on ctrl commands Introduce bss_find()/sta_find() as an alternative bss_get()/sta_get() command that do not allocate new BSS/STA entry if no existing entry is found.
2010-11-19 21:00:10 +01:00
struct wlantest_sta * sta_find(struct wlantest_bss *bss, const u8 *addr);
wlantest: Find a STA entry based on MLO affiliated link addresses Allow a single STA entry to be found for a non-AP MLD regardless of which link MAC address was used to transmit/receive it. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2022-09-29 12:08:37 +02:00
struct wlantest_sta * sta_find_mlo(struct wlantest *wt,
struct wlantest_bss *bss, const u8 *addr);
wlantest: Create station list for each BSS
2010-11-06 16:31:02 +01:00
struct wlantest_sta * sta_get(struct wlantest_bss *bss, const u8 *addr);
void sta_deinit(struct wlantest_sta *sta);
wlantest: Maintain a copy of WPA/RSN IE from (Re)AssocReq
2010-11-06 17:10:34 +01:00
void sta_update_assoc(struct wlantest_sta *sta,
struct ieee802_11_elems *elems);
wlantest: Clone new PTK to all potentially matching STA entries for MLO It is possible for there to be multiple STA entries (e.g., one for each BSS) when a sniffer capture contains multiple associations using MLO. For such cases, the new PTK information needs to be updated to all existing STA entries to be able to find the latest TK when decrypting following frames since the other STA entries might be located first when trying to figure out how to decrypt a frame. In addition to the PTK, copy the MLD MAC addresses to the other STA and BSS entries to make sure the latest values are used when trying to decrypt frames. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2022-11-09 21:39:01 +01:00
void sta_new_ptk(struct wlantest *wt, struct wlantest_sta *sta,
struct wpa_ptk *ptk);
wlantest: Create station list for each BSS
2010-11-06 16:31:02 +01:00
wlantest: Add support for decrypting CCMP protected unicast Data frames
2010-11-11 00:29:30 +01:00
u8 * ccmp_decrypt(const u8 *tk, const struct ieee80211_hdr *hdr,
wlantest: Use AP MLD address in CCMP/GCMP AAD for A3 Commit b20991da6936 ("wlantest: MLD MAC Address in CCMP/GCMP AAD/nonce") updated AAD and nonce construction to use MLD addresses in AAD for A1 and A2. IEEE P802.11be has additional cases where A3 in AAD is set to the AP MLD address, so cover those as well. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2023-01-10 11:38:59 +01:00
const u8 *a1, const u8 *a2, const u8 *a3,
const u8 *data, size_t data_len, size_t *decrypted_len);
wlantest: MLD MAC Address in CCMP/GCMP AAD/nonce Use the MLD MAC Address instead of link address in CCMP/GCMP AAD/nonce construction when processing an individually addressed Data frame with FromDS=1 or ToDS=1 between an AP MLD and non-AP MLD. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2022-09-05 22:08:43 +02:00
u8 * ccmp_encrypt(const u8 *tk, u8 *frame, size_t len, size_t hdrlen,
wlantest: Use AP MLD address in CCMP/GCMP AAD for A3 Commit b20991da6936 ("wlantest: MLD MAC Address in CCMP/GCMP AAD/nonce") updated AAD and nonce construction to use MLD addresses in AAD for A1 and A2. IEEE P802.11be has additional cases where A3 in AAD is set to the AP MLD address, so cover those as well. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2023-01-10 11:38:59 +01:00
const u8 *qos, const u8 *a1, const u8 *a2, const u8 *a3,
const u8 *pn, int keyid, size_t *encrypted_len);
IEEE P802.11ah/D10.0 PV1 CCMP test vectors Extend wlantest test_vectors to calculate test vectors for P802.11ah Annex J.6.4. Signed-off-by: Jouni Malinen <j@w1.fi>
2016-04-26 15:51:09 +02:00
u8 * ccmp_encrypt_pv1(const u8 *tk, const u8 *a1, const u8 *a2, const u8 *a3,
const u8 *frame, size_t len,
size_t hdrlen, const u8 *pn, int keyid,
size_t *encrypted_len);
wlantest: Add replay detection for CCMP
2010-11-11 19:21:11 +01:00
void ccmp_get_pn(u8 *pn, const u8 *data);
wlantest: Add CCMP-256 test vector Signed-hostap: Jouni Malinen <j@w1.fi>
2012-09-09 17:38:18 +02:00
u8 * ccmp_256_decrypt(const u8 *tk, const struct ieee80211_hdr *hdr,
wlantest: Use AP MLD address in CCMP/GCMP AAD for A3 Commit b20991da6936 ("wlantest: MLD MAC Address in CCMP/GCMP AAD/nonce") updated AAD and nonce construction to use MLD addresses in AAD for A1 and A2. IEEE P802.11be has additional cases where A3 in AAD is set to the AP MLD address, so cover those as well. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2023-01-10 11:38:59 +01:00
const u8 *a1, const u8 *a2, const u8 *a3,
wlantest: Add CCMP-256 test vector Signed-hostap: Jouni Malinen <j@w1.fi>
2012-09-09 17:38:18 +02:00
const u8 *data, size_t data_len, size_t *decrypted_len);
u8 * ccmp_256_encrypt(const u8 *tk, u8 *frame, size_t len, size_t hdrlen,
wlantest: Use AP MLD address in CCMP/GCMP AAD for A3 Commit b20991da6936 ("wlantest: MLD MAC Address in CCMP/GCMP AAD/nonce") updated AAD and nonce construction to use MLD addresses in AAD for A1 and A2. IEEE P802.11be has additional cases where A3 in AAD is set to the AP MLD address, so cover those as well. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2023-01-10 11:38:59 +01:00
const u8 *qos, const u8 *a1, const u8 *a2, const u8 *a3,
const u8 *pn, int keyid, size_t *encrypted_len);
wlantest: Add support for decrypting CCMP protected unicast Data frames
2010-11-11 00:29:30 +01:00
wlantest: Report decrypted TKIP frames even if cannot check Michael MIC This can be useful for debugging, so return successfully decrypted TKIP frame even if the Michael MIC cannot be verified (fragment reassembly not yet supported) or if the Michael MIC value is incorrect. Add a note in the frame to point out that the Michael MIC was not verified or is incorrect. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2021-01-30 16:28:49 +01:00
enum michael_mic_result {
MICHAEL_MIC_OK,
MICHAEL_MIC_INCORRECT,
MICHAEL_MIC_NOT_VERIFIED
};
wlantest: Add support for TKIP decryption
2010-11-13 10:36:37 +01:00
u8 * tkip_decrypt(const u8 *tk, const struct ieee80211_hdr *hdr,
wlantest: Report decrypted TKIP frames even if cannot check Michael MIC This can be useful for debugging, so return successfully decrypted TKIP frame even if the Michael MIC cannot be verified (fragment reassembly not yet supported) or if the Michael MIC value is incorrect. Add a note in the frame to point out that the Michael MIC was not verified or is incorrect. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2021-01-30 16:28:49 +01:00
const u8 *data, size_t data_len, size_t *decrypted_len,
wlantest: TKIP frame reassembly for Michael MIC check in fragmented case Reassemble the full MSDU when processing TKIP protected fragmented frames so that the Michael MIC can be validated once the last fragment has been received. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2021-02-08 17:38:39 +01:00
enum michael_mic_result *mic_res, struct tkip_frag *frag);
wlantest: Add support for CCMP protection for injected frames
2010-11-19 15:09:19 +01:00
u8 * tkip_encrypt(const u8 *tk, u8 *frame, size_t len, size_t hdrlen, u8 *qos,
u8 *pn, int keyid, size_t *encrypted_len);
wlantest: Implement TKIP replay detection
2010-11-13 11:40:36 +01:00
void tkip_get_pn(u8 *pn, const u8 *data);
wlantest: Add support for TKIP decryption
2010-11-13 10:36:37 +01:00
wlantest: Add support for decrypting WEP frames
2011-01-14 16:43:17 +01:00
u8 * wep_decrypt(struct wlantest *wt, const struct ieee80211_hdr *hdr,
const u8 *data, size_t data_len, size_t *decrypted_len);
wlantest: Extend BIP support to cover BIP-CMAC-256 Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-01-23 16:24:24 +01:00
u8 * bip_protect(const u8 *igtk, size_t igtk_len, u8 *frame, size_t len,
u8 *ipn, int keyid, size_t *prot_len);
wlantest: Add test vectors for S1G BIP - CMAC and GMAC modes - 128-bit and 256-bit modes - normal BIP and BIP using BCE - test vectors with minimum and optional additional header elements in S1G beacon frames - S1G Beacon Compatibility element in some cases, no other beacon body components Signed-off-by: Henry Ptasinski <henry@e78com.com> Signed-off-by: Andrew Pope <andrew.pope@morsemicro.com> Signed-off-by: David Goodall <dave@morsemicro.com>
2024-01-11 02:20:55 +01:00
u8 * bip_protect_s1g_beacon(const u8 *igtk, size_t igtk_len, const u8 *frame,
size_t len, const u8 *ipn, int keyid, bool bce,
size_t *prot_len);
wlantest: Add BIP-GMAC-128/256 test vectors Signed-hostap: Jouni Malinen <j@w1.fi>
2012-09-09 18:04:53 +02:00
u8 * bip_gmac_protect(const u8 *igtk, size_t igtk_len, u8 *frame, size_t len,
u8 *ipn, int keyid, size_t *prot_len);
wlantest: Add test vectors for S1G BIP - CMAC and GMAC modes - 128-bit and 256-bit modes - normal BIP and BIP using BCE - test vectors with minimum and optional additional header elements in S1G beacon frames - S1G Beacon Compatibility element in some cases, no other beacon body components Signed-off-by: Henry Ptasinski <henry@e78com.com> Signed-off-by: Andrew Pope <andrew.pope@morsemicro.com> Signed-off-by: David Goodall <dave@morsemicro.com>
2024-01-11 02:20:55 +01:00
u8 * bip_gmac_protect_s1g_beacon(const u8 *igtk, size_t igtk_len,
const u8 *frame, size_t len, const u8 *ipn,
int keyid, bool bce, size_t *prot_len);
wlantest: Move BIP function into a separate function and file Signed-hostap: Jouni Malinen <j@w1.fi>
2012-09-08 15:32:35 +02:00
wlantest: Add GCMP-256 test vector Signed-hostap: Jouni Malinen <j@w1.fi>
2012-09-09 13:01:03 +02:00
u8 * gcmp_decrypt(const u8 *tk, size_t tk_len, const struct ieee80211_hdr *hdr,
wlantest: Use AP MLD address in CCMP/GCMP AAD for A3 Commit b20991da6936 ("wlantest: MLD MAC Address in CCMP/GCMP AAD/nonce") updated AAD and nonce construction to use MLD addresses in AAD for A1 and A2. IEEE P802.11be has additional cases where A3 in AAD is set to the AP MLD address, so cover those as well. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2023-01-10 11:38:59 +01:00
const u8 *a1, const u8 *a2, const u8 *a3,
const u8 *data, size_t data_len, size_t *decrypted_len);
Declare all read only data structures as const By analysing objdump output some read only structures were found in .data section. To help compiler further optimize code declare these as const. Signed-off-by: Mikael Kanstrup <mikael.kanstrup@sonymobile.com>
2015-04-24 09:19:53 +02:00
u8 * gcmp_encrypt(const u8 *tk, size_t tk_len, const u8 *frame, size_t len,
wlantest: MLD MAC Address in CCMP/GCMP AAD/nonce Use the MLD MAC Address instead of link address in CCMP/GCMP AAD/nonce construction when processing an individually addressed Data frame with FromDS=1 or ToDS=1 between an AP MLD and non-AP MLD. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2022-09-05 22:08:43 +02:00
size_t hdrlen, const u8 *qos, const u8 *a1, const u8 *a2,
wlantest: Use AP MLD address in CCMP/GCMP AAD for A3 Commit b20991da6936 ("wlantest: MLD MAC Address in CCMP/GCMP AAD/nonce") updated AAD and nonce construction to use MLD addresses in AAD for A1 and A2. IEEE P802.11be has additional cases where A3 in AAD is set to the AP MLD address, so cover those as well. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2023-01-10 11:38:59 +01:00
const u8 *a3, const u8 *pn, int keyid, size_t *encrypted_len);
wlantest: Add GCMP implementation and test vectors from P802.11ad/D9.0 Signed-hostap: Jouni Malinen <j@w1.fi>
2012-09-08 19:00:54 +02:00
wlantest: Add control interface and wlantest_cli This can be used to manage wlantest operation during run time.
2010-11-13 17:38:19 +01:00
int ctrl_init(struct wlantest *wt);
void ctrl_deinit(struct wlantest *wt);
wlantest: Add preliminary infrastructure for injecting frames This adds new commands for wlantest_cli to request wlantest to inject frames. This version can only send out Authentication frames and unprotected SA Query Request frames, but there is now place to add more frames and encryption with future commits.
2010-11-18 23:35:13 +01:00
int wlantest_inject(struct wlantest *wt, struct wlantest_bss *bss,
struct wlantest_sta *sta, u8 *frame, size_t len,
enum wlantest_inject_protection prot);
wlantest: Add RELOG command to reopen log/capture files This can be used similarly to the wpa_supplicant RELOG command to rotate log and capture files. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-11-17 20:11:35 +01:00
int wlantest_relog(struct wlantest *wt);
wlantest: Add preliminary version of IEEE 802.11 protocol testing tool This tool can be used to capture IEEE 802.11 frames either from a monitor interface for realtime capturing or from pcap files for offline analysis. This version is only adding basic infrastructure for going through the frames and parsing their headers.
2010-11-06 15:20:45 +01:00
#endif /* WLANTEST_H */
Reference in a new issue Copy permalink