DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

EAP-AKA' server: Fix identity for MK derivation

Browse source 
Incorrect identity string could end up being used with EAP-AKA' when
the EAP client is using pseudonym. This code was supposed to use
sm->identity just like the EAP-AKA case.

Signed-hostap: Jouni Malinen <j@w1.fi>
intended-for: hostap-1
This commit is contained in:
Jouni Malinen 2012-05-02 20:40:11 +03:00
parent 1c7447d08b
commit 8351998313
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/eap_server/eap_server_aka.c
View file

@ -736,7 +736,7 @@ static void eap_aka_determine_identity(struct eap_sm *sm,
sm->identity, identity_len); sm->identity, identity_len);
if (data->eap_method == EAP_TYPE_AKA_PRIME) { if (data->eap_method == EAP_TYPE_AKA_PRIME) {
eap_aka_prime_derive_keys(identity, identity_len, data->ik, eap_aka_prime_derive_keys(sm->identity, identity_len, data->ik,
data->ck, data->k_encr, data->k_aut, data->ck, data->k_encr, data->k_aut,
data->k_re, data->msk, data->emsk); data->k_re, data->msk, data->emsk);
} else { } else {