524 static int hkdf_extract(size_t hash_len, const u8 *salt, size_t salt_len,  in hkdf_extract()  argument
528 	if (hash_len == 32)  in hkdf_extract()
535 static int hkdf_expand(size_t hash_len, const u8 *prk, size_t prk_len,  in hkdf_expand()  argument
540 	if (hash_len == 32)  in hkdf_expand()
777 static int sae_pwd_seed(size_t hash_len, const u8 *ssid, size_t ssid_len,  in sae_pwd_seed()  argument
799 	if (hkdf_extract(hash_len, ssid, ssid_len, num_elem, addr, len,  in sae_pwd_seed()
802 	wpa_hexdump_key(MSG_DEBUG, "SAE: pwd-seed", pwd_seed, hash_len);  in sae_pwd_seed()
825 	size_t pwd_value_len, hash_len, prime_len;  in sae_derive_pt_ecc()  local
834 	hash_len = sae_ecc_prime_len_2_hash_len(prime_len);  in sae_derive_pt_ecc()
839 	if (sae_pwd_seed(hash_len, ssid, ssid_len, password, password_len,  in sae_derive_pt_ecc()
845 	if (hkdf_expand(hash_len, pwd_seed, hash_len,  in sae_derive_pt_ecc()
867 	if (hkdf_expand(hash_len, pwd_seed, hash_len,  in sae_derive_pt_ecc()
923 	size_t hash_len, prime_len, pwd_value_len;  in sae_derive_pt_ffc()  local
937 	hash_len = sae_ffc_prime_len_2_hash_len(prime_len);  in sae_derive_pt_ffc()
944 	if (sae_pwd_seed(hash_len, ssid, ssid_len, password, password_len,  in sae_derive_pt_ffc()
949 	if (hkdf_expand(hash_len, pwd_seed, hash_len,  in sae_derive_pt_ffc()
1100 	size_t hash_len;  in sae_derive_pwe_from_pt_ecc()  local
1118 	hash_len = sae_ecc_prime_len_2_hash_len(prime_len);  in sae_derive_pwe_from_pt_ecc()
1119 	os_memset(salt, 0, hash_len);  in sae_derive_pwe_from_pt_ecc()
1120 	if (hkdf_extract(hash_len, salt, hash_len, 2, addr, len, hash) < 0)  in sae_derive_pwe_from_pt_ecc()
1122 	wpa_hexdump(MSG_DEBUG, "SAE: val", hash, hash_len);  in sae_derive_pwe_from_pt_ecc()
1127 	val = crypto_bignum_init_set(hash, hash_len);  in sae_derive_pwe_from_pt_ecc()
1164 	size_t hash_len;  in sae_derive_pwe_from_pt_ffc()  local
1180 	hash_len = sae_ffc_prime_len_2_hash_len(prime_len);  in sae_derive_pwe_from_pt_ffc()
1181 	os_memset(salt, 0, hash_len);  in sae_derive_pwe_from_pt_ffc()
1182 	if (hkdf_extract(hash_len, salt, hash_len, 2, addr, len, hash) < 0)  in sae_derive_pwe_from_pt_ffc()
1184 	wpa_hexdump(MSG_DEBUG, "SAE: val", hash, hash_len);  in sae_derive_pwe_from_pt_ffc()
1188 	val = crypto_bignum_init_set(hash, hash_len);  in sae_derive_pwe_from_pt_ffc()
1451 static int sae_kdf_hash(size_t hash_len, const u8 *k, const char *label,  in sae_kdf_hash()  argument
1455 	if (hash_len == 32)  in sae_kdf_hash()
1456 		return sha256_prf(k, hash_len, label,  in sae_kdf_hash()
1471 	size_t hash_len, salt_len, prime_len = sae->tmp->prime_len;  in sae_derive_keys()  local
1488 		hash_len = SHA256_MAC_LEN;  in sae_derive_keys()
1490 		hash_len = sae_ffc_prime_len_2_hash_len(prime_len);  in sae_derive_keys()
1492 		hash_len = sae_ecc_prime_len_2_hash_len(prime_len);  in sae_derive_keys()
1522 		os_memset(zero, 0, hash_len);  in sae_derive_keys()
1524 		salt_len = hash_len;  in sae_derive_keys()
1530 	if (hkdf_extract(hash_len, salt, salt_len, 1, addr, len, keyseed) < 0)  in sae_derive_keys()
1532 	wpa_hexdump_key(MSG_DEBUG, "SAE: keyseed", keyseed, hash_len);  in sae_derive_keys()
1552 		if (sae_kdf_hash(hash_len, keyseed, "SAE-PK keys",  in sae_derive_keys()
1554 			   keys, 2 * hash_len + SAE_PMK_LEN) < 0)  in sae_derive_keys()
1557 		if (sae_kdf_hash(hash_len, keyseed, "SAE KCK and PMK",  in sae_derive_keys()
1559 			   keys, hash_len + SAE_PMK_LEN) < 0)  in sae_derive_keys()
1563 	if (sae_kdf_hash(hash_len, keyseed, "SAE KCK and PMK",  in sae_derive_keys()
1565 			 keys, hash_len + SAE_PMK_LEN) < 0)  in sae_derive_keys()
1570 	os_memcpy(sae->tmp->kck, keys, hash_len);  in sae_derive_keys()
1571 	sae->tmp->kck_len = hash_len;  in sae_derive_keys()
1572 	os_memcpy(sae->pmk, keys + hash_len, SAE_PMK_LEN);  in sae_derive_keys()
1578 		os_memcpy(sae->tmp->kek, keys + hash_len + SAE_PMK_LEN, hash_len);  in sae_derive_keys()
1579 		sae->tmp->kek_len = hash_len;  in sae_derive_keys()
2224 	size_t hash_len;  in sae_write_confirm()  local
2229 	hash_len = sae->tmp->kck_len;  in sae_write_confirm()
2241 					 wpabuf_put(buf, hash_len))) {  in sae_write_confirm()
2250 					 wpabuf_put(buf, hash_len))) {  in sae_write_confirm()
2262 	size_t hash_len;  in sae_check_confirm()  local
2267 	hash_len = sae->tmp->kck_len;  in sae_check_confirm()
2268 	if (len < 2 + hash_len) {  in sae_check_confirm()
2307 	if (os_memcmp_const(verifier, data + 2, hash_len) != 0) {  in sae_check_confirm()
2310 			    data + 2, hash_len);  in sae_check_confirm()
2312 			    verifier, hash_len);  in sae_check_confirm()
2317 	if (sae_check_confirm_pk(sae, data + 2 + hash_len,  in sae_check_confirm()
2318 		   len - 2 - hash_len) != ESP_OK)  in sae_check_confirm()