542 static int hkdf_extract(size_t hash_len, const u8 *salt, size_t salt_len,  in hkdf_extract()  argument
546 	if (hash_len == 32)  in hkdf_extract()
550 	if (hash_len == 48)  in hkdf_extract()
555 	if (hash_len == 64)  in hkdf_extract()
563 static int hkdf_expand(size_t hash_len, const u8 *prk, size_t prk_len,  in hkdf_expand()  argument
568 	if (hash_len == 32)  in hkdf_expand()
573 	if (hash_len == 48)  in hkdf_expand()
579 	if (hash_len == 64)  in hkdf_expand()
831 static int sae_pwd_seed(size_t hash_len, const u8 *ssid, size_t ssid_len,  in sae_pwd_seed()  argument
853 	if (hkdf_extract(hash_len, ssid, ssid_len, num_elem, addr, len,  in sae_pwd_seed()
856 	wpa_hexdump_key(MSG_DEBUG, "SAE: pwd-seed", pwd_seed, hash_len);  in sae_pwd_seed()
879 	size_t pwd_value_len, hash_len, prime_len;  in sae_derive_pt_ecc()  local
888 	hash_len = sae_ecc_prime_len_2_hash_len(prime_len);  in sae_derive_pt_ecc()
893 	if (sae_pwd_seed(hash_len, ssid, ssid_len, password, password_len,  in sae_derive_pt_ecc()
899 	if (hkdf_expand(hash_len, pwd_seed, hash_len,  in sae_derive_pt_ecc()
921 	if (hkdf_expand(hash_len, pwd_seed, hash_len,  in sae_derive_pt_ecc()
977 	size_t hash_len, prime_len, pwd_value_len;  in sae_derive_pt_ffc()  local
991 	hash_len = sae_ffc_prime_len_2_hash_len(prime_len);  in sae_derive_pt_ffc()
998 	if (sae_pwd_seed(hash_len, ssid, ssid_len, password, password_len,  in sae_derive_pt_ffc()
1003 	if (hkdf_expand(hash_len, pwd_seed, hash_len,  in sae_derive_pt_ffc()
1154 	size_t hash_len;  in sae_derive_pwe_from_pt_ecc()  local
1172 	hash_len = sae_ecc_prime_len_2_hash_len(prime_len);  in sae_derive_pwe_from_pt_ecc()
1173 	os_memset(salt, 0, hash_len);  in sae_derive_pwe_from_pt_ecc()
1174 	if (hkdf_extract(hash_len, salt, hash_len, 2, addr, len, hash) < 0)  in sae_derive_pwe_from_pt_ecc()
1176 	wpa_hexdump(MSG_DEBUG, "SAE: val", hash, hash_len);  in sae_derive_pwe_from_pt_ecc()
1181 	val = crypto_bignum_init_set(hash, hash_len);  in sae_derive_pwe_from_pt_ecc()
1218 	size_t hash_len;  in sae_derive_pwe_from_pt_ffc()  local
1234 	hash_len = sae_ffc_prime_len_2_hash_len(prime_len);  in sae_derive_pwe_from_pt_ffc()
1235 	os_memset(salt, 0, hash_len);  in sae_derive_pwe_from_pt_ffc()
1236 	if (hkdf_extract(hash_len, salt, hash_len, 2, addr, len, hash) < 0)  in sae_derive_pwe_from_pt_ffc()
1238 	wpa_hexdump(MSG_DEBUG, "SAE: val", hash, hash_len);  in sae_derive_pwe_from_pt_ffc()
1242 	val = crypto_bignum_init_set(hash, hash_len);  in sae_derive_pwe_from_pt_ffc()
1505 static int sae_kdf_hash(size_t hash_len, const u8 *k, const char *label,  in sae_kdf_hash()  argument
1509 	if (hash_len == 32)  in sae_kdf_hash()
1510 		return sha256_prf(k, hash_len, label,  in sae_kdf_hash()
1513 	if (hash_len == 48)  in sae_kdf_hash()
1514 		return sha384_prf(k, hash_len, label,  in sae_kdf_hash()
1518 	if (hash_len == 64)  in sae_kdf_hash()
1519 		return sha512_prf(k, hash_len, label,  in sae_kdf_hash()
1535 	size_t hash_len, salt_len, prime_len = sae->tmp->prime_len;  in sae_derive_keys()  local
1553 		hash_len = SHA256_MAC_LEN;  in sae_derive_keys()
1555 		hash_len = sae_ffc_prime_len_2_hash_len(prime_len);  in sae_derive_keys()
1557 		hash_len = sae_ecc_prime_len_2_hash_len(prime_len);  in sae_derive_keys()
1559 		pmk_len = hash_len;  in sae_derive_keys()
1594 		os_memset(zero, 0, hash_len);  in sae_derive_keys()
1596 		salt_len = hash_len;  in sae_derive_keys()
1602 	if (hkdf_extract(hash_len, salt, salt_len, 1, addr, len, keyseed) < 0)  in sae_derive_keys()
1604 	wpa_hexdump_key(MSG_DEBUG, "SAE: keyseed", keyseed, hash_len);  in sae_derive_keys()
1623 		if (sae_kdf_hash(hash_len, keyseed, "SAE-PK keys",  in sae_derive_keys()
1625 				 keys, 2 * hash_len + pmk_len) < 0)  in sae_derive_keys()
1628 		if (sae_kdf_hash(hash_len, keyseed, "SAE KCK and PMK",  in sae_derive_keys()
1630 				 keys, hash_len + pmk_len) < 0)  in sae_derive_keys()
1634 	if (sae_kdf_hash(hash_len, keyseed, "SAE KCK and PMK",  in sae_derive_keys()
1636 			 keys, hash_len + pmk_len) < 0)  in sae_derive_keys()
1641 	os_memcpy(sae->tmp->kck, keys, hash_len);  in sae_derive_keys()
1642 	sae->tmp->kck_len = hash_len;  in sae_derive_keys()
1643 	os_memcpy(sae->pmk, keys + hash_len, pmk_len);  in sae_derive_keys()
1648 		os_memcpy(sae->tmp->kek, keys + hash_len + SAE_PMK_LEN,  in sae_derive_keys()
1649 			  hash_len);  in sae_derive_keys()
1650 		sae->tmp->kek_len = hash_len;  in sae_derive_keys()
2363 	size_t hash_len;  in sae_write_confirm()  local
2369 	hash_len = sae->tmp->kck_len;  in sae_write_confirm()
2382 					 wpabuf_put(buf, hash_len));  in sae_write_confirm()
2388 					 wpabuf_put(buf, hash_len));  in sae_write_confirm()
2405 	size_t hash_len;  in sae_check_confirm()  local
2410 	hash_len = sae->tmp->kck_len;  in sae_check_confirm()
2411 	if (len < 2 + hash_len) {  in sae_check_confirm()
2443 	if (os_memcmp_const(verifier, data + 2, hash_len) != 0) {  in sae_check_confirm()
2446 			    data + 2, hash_len);  in sae_check_confirm()
2448 			    verifier, hash_len);  in sae_check_confirm()
2453 	if (sae_check_confirm_pk(sae, data + 2 + hash_len,  in sae_check_confirm()
2454 				 len - 2 - hash_len) < 0)  in sae_check_confirm()
2460 		*ie_offset = 2 + hash_len;  in sae_check_confirm()