hostapd/src
Michael Braun f8e09bc57e Defer passphrase-to-PSK hashing out of 802.11 authentication ACL check
Hashing takes quite some time (can be about one second on a low-power
CPU for each passphrase provided), so hostapd can easily hit the 900 ms
Wi-Fi client authentication deadline (mac80211 uses 3x 300 ms). This can
be fixed by storing the passphrase instead of PSK with the STA and defer
the hashing into the WPA/RSN 4-way handshake, when enumerating all PSKs.

This applies for the case where a RADIUS server is used to store the
per-STA passphrases and this passphrase is delivered as part of the MAC
ACL check during IEEE 802.11 Authentication frame processing.

Signed-off-by: Michael Braun <michael-dev@fami-braun.de>
2016-02-28 18:46:05 +02:00
..
ap Defer passphrase-to-PSK hashing out of 802.11 authentication ACL check 2016-02-28 18:46:05 +02:00
common AP: Store STA supported operating classes information 2016-02-24 12:20:31 +02:00
crypto OpenSSL: Fix PKCS#12 parsing of extra certificates with OpenSSL 1.0.1 2016-02-16 18:30:55 +02:00
drivers nl80211: Add an option to specify the BSSID to scan for 2016-02-26 17:19:20 +02:00
eap_common EAP-PAX: Check hmac_sha1_vector() return value 2016-01-06 21:12:08 +02:00
eap_peer EAP-FAST peer: Remove fixed return value from eap_fast_parse_phase1() 2016-02-20 10:07:29 +02:00
eap_server EAP-pwd server: Use os_get_random() for unpredictable token 2016-02-19 18:44:40 +02:00
eapol_auth RADIUS: Share a single function for generating session IDs 2016-02-06 17:19:35 +02:00
eapol_supp Fix EAPOL reauth after FT protocol or offloaded PMKSA cache use 2015-11-19 21:16:18 +02:00
fst FST: Get rid of gcc extensions in structure/array initialization 2016-01-15 18:40:21 +02:00
l2_packet l2_packet: Extend bridge workaround RX processing to cover two frames 2016-01-07 13:30:59 +02:00
p2p P2P: Reduce off channel wait time for some P2P Action frames 2016-02-06 18:19:03 +02:00
pae MACsec: Update protect frames and replay on reauthentication 2014-12-09 16:56:10 +02:00
radius Add RADIUS Service-Type attribute with a value of Framed 2016-02-19 18:44:39 +02:00
rsn_supp SAE: Fix PMKID calculation for PMKSA cache 2016-02-18 21:07:47 +02:00
tls TLS: Make tls_cert_chain_failure_event() more robust 2015-12-28 18:31:11 +02:00
utils kqueue: Use 0 instead of NULL for udata 2016-02-18 17:40:12 +02:00
wps WPS: Use only os_get_random() for PIN generation 2016-02-19 18:44:40 +02:00
lib.rules Add QUIET=1 option for make 2014-12-29 15:49:05 +02:00
Makefile FST: Add the Fast Session Transfer (FST) module 2015-07-16 18:26:15 +03:00