hostapd/src/pasn
Jouni Malinen 9ff778fa4b Check for own address (SPA) match when finding PMKSA entries
This prevents attempts of trying to use PMKSA caching when the existing
entry was created using a different MAC address than the one that is
currently being used. This avoids exposing the longer term PMKID value
when using random MAC addresses for connections.

In practice, similar restriction was already done by flushing the PMKSA
cache entries whenever wpas_update_random_addr() changed the local
address or when the interface was marked down (e.g., for an external
operation to change the MAC address).

Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2022-11-10 21:13:05 +02:00
..
Makefile PASN: Move responder functionality into a separate file 2022-11-04 00:52:17 +02:00
pasn_common.h PASN: Use separate variables for BSSID and peer address 2022-11-10 21:12:50 +02:00
pasn_initiator.c Check for own address (SPA) match when finding PMKSA entries 2022-11-10 21:13:05 +02:00
pasn_responder.c PASN: Use separate variables for BSSID and peer address 2022-11-10 21:12:50 +02:00