40 static struct wpabuf * eap_gpsk_send_gpsk_2(struct eap_gpsk_data *data,
44 static struct wpabuf * eap_gpsk_send_gpsk_4(struct eap_gpsk_data *data,
67 static void eap_gpsk_state(struct eap_gpsk_data *data, int state)  in eap_gpsk_state()  argument
70 		   eap_gpsk_state_txt(data->state),  in eap_gpsk_state()
72 	data->state = state;  in eap_gpsk_state()
81 	struct eap_gpsk_data *data;  in eap_gpsk_init()  local
92 	data = os_zalloc(sizeof(*data));  in eap_gpsk_init()
93 	if (data == NULL)  in eap_gpsk_init()
95 	data->state = GPSK_1;  in eap_gpsk_init()
99 		data->id_peer = os_memdup(identity, identity_len);  in eap_gpsk_init()
100 		if (data->id_peer == NULL) {  in eap_gpsk_init()
101 			eap_gpsk_deinit(sm, data);  in eap_gpsk_init()
104 		data->id_peer_len = identity_len;  in eap_gpsk_init()
113 			data->forced_cipher = atoi(pos + 7);  in eap_gpsk_init()
115 				   data->forced_cipher);  in eap_gpsk_init()
119 	data->psk = os_memdup(password, password_len);  in eap_gpsk_init()
120 	if (data->psk == NULL) {  in eap_gpsk_init()
121 		eap_gpsk_deinit(sm, data);  in eap_gpsk_init()
124 	data->psk_len = password_len;  in eap_gpsk_init()
126 	return data;  in eap_gpsk_init()
132 	struct eap_gpsk_data *data = priv;  in eap_gpsk_deinit()  local
133 	os_free(data->id_server);  in eap_gpsk_deinit()
134 	os_free(data->id_peer);  in eap_gpsk_deinit()
135 	if (data->psk) {  in eap_gpsk_deinit()
136 		os_memset(data->psk, 0, data->psk_len);  in eap_gpsk_deinit()
137 		os_free(data->psk);  in eap_gpsk_deinit()
139 	bin_clear_free(data, sizeof(*data));  in eap_gpsk_deinit()
143 static const u8 * eap_gpsk_process_id_server(struct eap_gpsk_data *data,  in eap_gpsk_process_id_server()  argument
158 	os_free(data->id_server);  in eap_gpsk_process_id_server()
159 	data->id_server = os_memdup(pos, alen);  in eap_gpsk_process_id_server()
160 	if (data->id_server == NULL) {  in eap_gpsk_process_id_server()
164 	data->id_server_len = alen;  in eap_gpsk_process_id_server()
166 			  data->id_server, data->id_server_len);  in eap_gpsk_process_id_server()
173 static const u8 * eap_gpsk_process_rand_server(struct eap_gpsk_data *data,  in eap_gpsk_process_rand_server()  argument
183 	os_memcpy(data->rand_server, pos, EAP_GPSK_RAND_LEN);  in eap_gpsk_process_rand_server()
185 		    data->rand_server, EAP_GPSK_RAND_LEN);  in eap_gpsk_process_rand_server()
193 				  struct eap_gpsk_data *data,  in eap_gpsk_select_csuite()  argument
201 	data->vendor = EAP_GPSK_VENDOR_IETF;  in eap_gpsk_select_csuite()
202 	data->specifier = EAP_GPSK_CIPHER_RESERVED;  in eap_gpsk_select_csuite()
210 		if (data->vendor == EAP_GPSK_VENDOR_IETF &&  in eap_gpsk_select_csuite()
211 		    data->specifier == EAP_GPSK_CIPHER_RESERVED &&  in eap_gpsk_select_csuite()
213 		    (!data->forced_cipher || data->forced_cipher == specifier))  in eap_gpsk_select_csuite()
215 			data->vendor = vendor;  in eap_gpsk_select_csuite()
216 			data->specifier = specifier;  in eap_gpsk_select_csuite()
220 	if (data->vendor == EAP_GPSK_VENDOR_IETF &&  in eap_gpsk_select_csuite()
221 	    data->specifier == EAP_GPSK_CIPHER_RESERVED) {  in eap_gpsk_select_csuite()
227 		   data->vendor, data->specifier);  in eap_gpsk_select_csuite()
234 					       struct eap_gpsk_data *data,  in eap_gpsk_process_csuite_list()  argument
260 	if (eap_gpsk_select_csuite(sm, data, pos, len) < 0)  in eap_gpsk_process_csuite_list()
272 					       struct eap_gpsk_data *data,  in eap_gpsk_process_gpsk_1()  argument
282 	if (data->state != GPSK_1) {  in eap_gpsk_process_gpsk_1()
291 	pos = eap_gpsk_process_id_server(data, payload, end);  in eap_gpsk_process_gpsk_1()
292 	pos = eap_gpsk_process_rand_server(data, pos, end);  in eap_gpsk_process_gpsk_1()
293 	pos = eap_gpsk_process_csuite_list(sm, data, &csuite_list,  in eap_gpsk_process_gpsk_1()
297 		eap_gpsk_state(data, FAILURE);  in eap_gpsk_process_gpsk_1()
301 	resp = eap_gpsk_send_gpsk_2(data, identifier,  in eap_gpsk_process_gpsk_1()
306 	eap_gpsk_state(data, GPSK_3);  in eap_gpsk_process_gpsk_1()
312 static struct wpabuf * eap_gpsk_send_gpsk_2(struct eap_gpsk_data *data,  in eap_gpsk_send_gpsk_2()  argument
324 	miclen = eap_gpsk_mic_len(data->vendor, data->specifier);  in eap_gpsk_send_gpsk_2()
325 	len = 1 + 2 + data->id_peer_len + 2 + data->id_server_len +  in eap_gpsk_send_gpsk_2()
338 			  data->id_peer, data->id_peer_len);  in eap_gpsk_send_gpsk_2()
339 	wpabuf_put_be16(resp, data->id_peer_len);  in eap_gpsk_send_gpsk_2()
340 	wpabuf_put_data(resp, data->id_peer, data->id_peer_len);  in eap_gpsk_send_gpsk_2()
342 	wpabuf_put_be16(resp, data->id_server_len);  in eap_gpsk_send_gpsk_2()
343 	wpabuf_put_data(resp, data->id_server, data->id_server_len);  in eap_gpsk_send_gpsk_2()
345 	if (random_get_bytes(data->rand_peer, EAP_GPSK_RAND_LEN)) {  in eap_gpsk_send_gpsk_2()
348 		eap_gpsk_state(data, FAILURE);  in eap_gpsk_send_gpsk_2()
353 		    data->rand_peer, EAP_GPSK_RAND_LEN);  in eap_gpsk_send_gpsk_2()
354 	wpabuf_put_data(resp, data->rand_peer, EAP_GPSK_RAND_LEN);  in eap_gpsk_send_gpsk_2()
355 	wpabuf_put_data(resp, data->rand_server, EAP_GPSK_RAND_LEN);  in eap_gpsk_send_gpsk_2()
361 	WPA_PUT_BE32(csuite->vendor, data->vendor);  in eap_gpsk_send_gpsk_2()
362 	WPA_PUT_BE16(csuite->specifier, data->specifier);  in eap_gpsk_send_gpsk_2()
364 	if (eap_gpsk_derive_keys(data->psk, data->psk_len,  in eap_gpsk_send_gpsk_2()
365 				 data->vendor, data->specifier,  in eap_gpsk_send_gpsk_2()
366 				 data->rand_peer, data->rand_server,  in eap_gpsk_send_gpsk_2()
367 				 data->id_peer, data->id_peer_len,  in eap_gpsk_send_gpsk_2()
368 				 data->id_server, data->id_server_len,  in eap_gpsk_send_gpsk_2()
369 				 data->msk, data->emsk,  in eap_gpsk_send_gpsk_2()
370 				 data->sk, &data->sk_len,  in eap_gpsk_send_gpsk_2()
371 				 data->pk, &data->pk_len) < 0) {  in eap_gpsk_send_gpsk_2()
373 		eap_gpsk_state(data, FAILURE);  in eap_gpsk_send_gpsk_2()
378 	if (eap_gpsk_derive_session_id(data->psk, data->psk_len,  in eap_gpsk_send_gpsk_2()
379 				       data->vendor, data->specifier,  in eap_gpsk_send_gpsk_2()
380 				       data->rand_peer, data->rand_server,  in eap_gpsk_send_gpsk_2()
381 				       data->id_peer, data->id_peer_len,  in eap_gpsk_send_gpsk_2()
382 				       data->id_server, data->id_server_len,  in eap_gpsk_send_gpsk_2()
384 				       data->session_id, &data->id_len) < 0) {  in eap_gpsk_send_gpsk_2()
386 		eap_gpsk_state(data, FAILURE);  in eap_gpsk_send_gpsk_2()
391 		    data->session_id, data->id_len);  in eap_gpsk_send_gpsk_2()
397 	if (eap_gpsk_compute_mic(data->sk, data->sk_len, data->vendor,  in eap_gpsk_send_gpsk_2()
398 				 data->specifier, start, rpos - start, rpos) <  in eap_gpsk_send_gpsk_2()
400 		eap_gpsk_state(data, FAILURE);  in eap_gpsk_send_gpsk_2()
409 static const u8 * eap_gpsk_validate_rand(struct eap_gpsk_data *data,  in eap_gpsk_validate_rand()  argument
417 	if (os_memcmp(pos, data->rand_peer, EAP_GPSK_RAND_LEN) != 0) {  in eap_gpsk_validate_rand()
421 			    data->rand_peer, EAP_GPSK_RAND_LEN);  in eap_gpsk_validate_rand()
433 	if (os_memcmp(pos, data->rand_server, EAP_GPSK_RAND_LEN) != 0) {  in eap_gpsk_validate_rand()
437 			    data->rand_server, EAP_GPSK_RAND_LEN);  in eap_gpsk_validate_rand()
448 static const u8 * eap_gpsk_validate_id_server(struct eap_gpsk_data *data,  in eap_gpsk_validate_id_server()  argument
471 	if (len != data->id_server_len ||  in eap_gpsk_validate_id_server()
472 	    os_memcmp(pos, data->id_server, len) != 0) {  in eap_gpsk_validate_id_server()
476 				  data->id_server, data->id_server_len);  in eap_gpsk_validate_id_server()
488 static const u8 * eap_gpsk_validate_csuite(struct eap_gpsk_data *data,  in eap_gpsk_validate_csuite()  argument
506 	if (vendor != data->vendor || specifier != data->specifier) {  in eap_gpsk_validate_csuite()
509 			   vendor, specifier, data->vendor, data->specifier);  in eap_gpsk_validate_csuite()
517 static const u8 * eap_gpsk_validate_pd_payload_2(struct eap_gpsk_data *data,  in eap_gpsk_validate_pd_payload_2()  argument
544 static const u8 * eap_gpsk_validate_gpsk_3_mic(struct eap_gpsk_data *data,  in eap_gpsk_validate_gpsk_3_mic()  argument
554 	miclen = eap_gpsk_mic_len(data->vendor, data->specifier);  in eap_gpsk_validate_gpsk_3_mic()
562 	if (eap_gpsk_compute_mic(data->sk, data->sk_len, data->vendor,  in eap_gpsk_validate_gpsk_3_mic()
563 				 data->specifier, payload, pos - payload, mic)  in eap_gpsk_validate_gpsk_3_mic()
581 					       struct eap_gpsk_data *data,  in eap_gpsk_process_gpsk_3()  argument
590 	if (data->state != GPSK_3) {  in eap_gpsk_process_gpsk_3()
599 	pos = eap_gpsk_validate_rand(data, payload, end);  in eap_gpsk_process_gpsk_3()
600 	pos = eap_gpsk_validate_id_server(data, pos, end);  in eap_gpsk_process_gpsk_3()
601 	pos = eap_gpsk_validate_csuite(data, pos, end);  in eap_gpsk_process_gpsk_3()
602 	pos = eap_gpsk_validate_pd_payload_2(data, pos, end);  in eap_gpsk_process_gpsk_3()
603 	pos = eap_gpsk_validate_gpsk_3_mic(data, payload, pos, end);  in eap_gpsk_process_gpsk_3()
606 		eap_gpsk_state(data, FAILURE);  in eap_gpsk_process_gpsk_3()
615 	resp = eap_gpsk_send_gpsk_4(data, identifier);  in eap_gpsk_process_gpsk_3()
619 	eap_gpsk_state(data, SUCCESS);  in eap_gpsk_process_gpsk_3()
627 static struct wpabuf * eap_gpsk_send_gpsk_4(struct eap_gpsk_data *data,  in eap_gpsk_send_gpsk_4()  argument
636 	mlen = eap_gpsk_mic_len(data->vendor, data->specifier);  in eap_gpsk_send_gpsk_4()
650 	if (eap_gpsk_compute_mic(data->sk, data->sk_len, data->vendor,  in eap_gpsk_send_gpsk_4()
651 				 data->specifier, start, rpos - start, rpos) <  in eap_gpsk_send_gpsk_4()
653 		eap_gpsk_state(data, FAILURE);  in eap_gpsk_send_gpsk_4()
666 	struct eap_gpsk_data *data = priv;  in eap_gpsk_process()  local
690 		resp = eap_gpsk_process_gpsk_1(sm, data, ret, id, pos, len);  in eap_gpsk_process()
693 		resp = eap_gpsk_process_gpsk_3(sm, data, ret, id, pos, len);  in eap_gpsk_process()
709 	struct eap_gpsk_data *data = priv;  in eap_gpsk_isKeyAvailable()  local
710 	return data->state == SUCCESS;  in eap_gpsk_isKeyAvailable()
716 	struct eap_gpsk_data *data = priv;  in eap_gpsk_getKey()  local
719 	if (data->state != SUCCESS)  in eap_gpsk_getKey()
722 	key = os_memdup(data->msk, EAP_MSK_LEN);  in eap_gpsk_getKey()
733 	struct eap_gpsk_data *data = priv;  in eap_gpsk_get_emsk()  local
736 	if (data->state != SUCCESS)  in eap_gpsk_get_emsk()
739 	key = os_memdup(data->emsk, EAP_EMSK_LEN);  in eap_gpsk_get_emsk()
750 	struct eap_gpsk_data *data = priv;  in eap_gpsk_get_session_id()  local
753 	if (data->state != SUCCESS)  in eap_gpsk_get_session_id()
756 	sid = os_memdup(data->session_id, data->id_len);  in eap_gpsk_get_session_id()
759 	*len = data->id_len;  in eap_gpsk_get_session_id()