hostapd/src/rsn_supp
Jouni Malinen ff89af96e5 TDLS: Reject TPK-TK reconfiguration
Do not try to reconfigure the same TPK-TK to the driver after it has
been successfully configured. This is an explicit check to avoid issues
related to resetting the TX/RX packet number. There was already a check
for this for TPK M2 (retries of that message are ignored completely), so
that behavior does not get modified.

For TPK M3, the TPK-TK could have been reconfigured, but that was
followed by immediate teardown of the link due to an issue in updating
the STA entry. Furthermore, for TDLS with any real security (i.e.,
ignoring open/WEP), the TPK message exchange is protected on the AP path
and simple replay attacks are not feasible.

As an additional corner case, make sure the local nonce gets updated if
the peer uses a very unlikely "random nonce" of all zeros.

Signed-off-by: Jouni Malinen <j@w1.fi>
2017-10-16 02:03:47 +03:00
..
Makefile tests: Add eapol-fuzzer 2015-04-22 11:44:19 +03:00
peerkey.c DPP: Add new AKM 2017-06-19 21:13:17 +03:00
peerkey.h PeerKey: Fix EAPOL-Key processing 2016-12-18 19:07:29 +02:00
pmksa_cache.c FILS: Update PMKID derivation rules for ERP key hierarchy establishment 2017-09-13 22:17:58 +03:00
pmksa_cache.h FILS: Use FILS Cache Identifier to extend PMKSA applicability 2017-02-26 12:05:40 +02:00
preauth.c FILS: Add support for Cache Identifier in add/remove PMKSA 2017-04-07 18:46:13 +03:00
preauth.h Fix wpa_supplicant build with IEEE8021X_EAPOL=y and CONFIG_NO_WPA=y 2016-01-15 20:04:41 +02:00
tdls.c TDLS: Reject TPK-TK reconfiguration 2017-10-16 02:03:47 +03:00
wpa.c Prevent installation of an all-zero TK 2017-10-16 02:03:47 +03:00
wpa.h OWE: PMKSA caching in station mode 2017-10-09 12:12:54 +03:00
wpa_ft.c FT: Add selection of FT+FILS AKMs 2017-04-02 12:57:32 +03:00
wpa_i.h Prevent installation of an all-zero TK 2017-10-16 02:03:47 +03:00
wpa_ie.c DPP: Add new AKM 2017-06-19 21:13:17 +03:00
wpa_ie.h Simplify VHT Capabilities element parsing 2015-04-22 22:05:11 +03:00