29 	struct eap_eke_session sess;  member
104 	eap_eke_session_clean(&data->sess);  in eap_eke_reset()
253 	if (eap_eke_derive_key(&data->sess, sm->user->password,  in eap_eke_build_commit()
262 	msg = eap_eke_build_msg(data, id, data->sess.dhcomp_len,  in eap_eke_build_commit()
277 	if (eap_eke_dh_init(data->sess.dhgroup, data->dh_priv, pub) < 0) {  in eap_eke_build_commit()
284 	if (eap_eke_dhcomp(&data->sess, data->key, pub,  in eap_eke_build_commit()
285 			   wpabuf_put(msg, data->sess.dhcomp_len))  in eap_eke_build_commit()
314 	plen = data->sess.pnonce_ps_len + data->sess.prf_len;  in eap_eke_build_confirm()
321 	if (random_get_bytes(data->nonce_s, data->sess.nonce_len)) {  in eap_eke_build_confirm()
327 			data->nonce_s, data->sess.nonce_len);  in eap_eke_build_confirm()
329 	os_memcpy(nonces, data->nonce_p, data->sess.nonce_len);  in eap_eke_build_confirm()
330 	os_memcpy(nonces + data->sess.nonce_len, data->nonce_s,  in eap_eke_build_confirm()
331 		  data->sess.nonce_len);  in eap_eke_build_confirm()
333 	if (eap_eke_prot(&data->sess, nonces, 2 * data->sess.nonce_len,  in eap_eke_build_confirm()
341 	if (eap_eke_derive_ka(&data->sess,  in eap_eke_build_confirm()
350 	auth = wpabuf_put(msg, data->sess.prf_len);  in eap_eke_build_confirm()
351 	if (eap_eke_auth(&data->sess, "EAP-EKE server", data->msgs, auth) < 0) {  in eap_eke_build_confirm()
356 	wpa_hexdump(MSG_DEBUG, "EAP-EKE: Auth_S", auth, data->sess.prf_len);  in eap_eke_build_confirm()
462 	if (eap_eke_session_init(&data->sess, pos[0], pos[1], pos[2], pos[3]) <  in eap_eke_process_identity()
533 	if (pos + data->sess.dhcomp_len + data->sess.pnonce_len > end) {  in eap_eke_process_commit()
540 		    pos, data->sess.dhcomp_len);  in eap_eke_process_commit()
542 	pos += data->sess.dhcomp_len;  in eap_eke_process_commit()
543 	wpa_hexdump(MSG_DEBUG, "EAP-EKE: PNonce_P", pos, data->sess.pnonce_len);  in eap_eke_process_commit()
545 	pos += data->sess.pnonce_len;  in eap_eke_process_commit()
548 	if (eap_eke_shared_secret(&data->sess, data->key, data->dh_priv, dhcomp)  in eap_eke_process_commit()
555 	if (eap_eke_derive_ke_ki(&data->sess,  in eap_eke_process_commit()
564 	if (eap_eke_decrypt_prot(&data->sess, pnonce, data->sess.pnonce_len,  in eap_eke_process_commit()
570 	if (decrypt_len < (size_t) data->sess.nonce_len) {  in eap_eke_process_commit()
576 			data->nonce_p, data->sess.nonce_len);  in eap_eke_process_commit()
606 	if (payloadlen < (size_t) data->sess.pnonce_len + data->sess.prf_len) {  in eap_eke_process_confirm()
613 	if (eap_eke_decrypt_prot(&data->sess, payload, data->sess.pnonce_len,  in eap_eke_process_confirm()
619 	if (decrypt_len < (size_t) data->sess.nonce_len) {  in eap_eke_process_confirm()
625 			nonce, data->sess.nonce_len);  in eap_eke_process_confirm()
626 	if (os_memcmp(nonce, data->nonce_s, data->sess.nonce_len) != 0) {  in eap_eke_process_confirm()
632 	if (eap_eke_auth(&data->sess, "EAP-EKE peer", data->msgs, auth_p) < 0) {  in eap_eke_process_confirm()
637 	wpa_hexdump(MSG_DEBUG, "EAP-EKE: Auth_P", auth_p, data->sess.prf_len);  in eap_eke_process_confirm()
638 	if (os_memcmp_const(auth_p, payload + data->sess.pnonce_len,  in eap_eke_process_confirm()
639 			    data->sess.prf_len) != 0) {  in eap_eke_process_confirm()
645 	if (eap_eke_derive_msk(&data->sess, sm->cfg->server_id,  in eap_eke_process_confirm()
657 	eap_eke_session_clean(&data->sess);  in eap_eke_process_confirm()
777 	sid_len = 1 + 2 * data->sess.nonce_len;  in eap_eke_get_session_id()
782 	os_memcpy(sid + 1, data->nonce_p, data->sess.nonce_len);  in eap_eke_get_session_id()
783 	os_memcpy(sid + 1 + data->sess.nonce_len, data->nonce_s,  in eap_eke_get_session_id()
784 		  data->sess.nonce_len);  in eap_eke_get_session_id()