6543     authkey = keys[0:32]
6546     return authkey, keywrapkey, emsk
6548 def wsc_dev_pw_half_psk(authkey, dev_pw):  argument
6549     m = hmac.new(authkey, dev_pw.encode(), hashlib.sha256)
6552 def wsc_dev_pw_psk(authkey, dev_pw):  argument
6555     psk1 = wsc_dev_pw_half_psk(authkey, dev_pw_1)
6556     psk2 = wsc_dev_pw_half_psk(authkey, dev_pw_2)
6559 def build_attr_authenticator(authkey, prev_msg, curr_msg):  argument
6560     m = hmac.new(authkey, prev_msg + curr_msg, hashlib.sha256)
6564 def build_attr_encr_settings(authkey, keywrapkey, data):  argument
6565     m = hmac.new(authkey, data, hashlib.sha256)
6576 def decrypt_attr_encr_settings(authkey, keywrapkey, data):  argument
6600     m = hmac.new(authkey, decrypted, hashlib.sha256)
6637     authkey, keywrapkey, emsk = wsc_keys(kdk)
6638     logger.debug("AuthKey: " + binascii.hexlify(authkey).decode())
6641     return authkey, keywrapkey
6643 def wsc_dev_pw_hash(authkey, dev_pw, e_pk, r_pk):  argument
6644     psk1, psk2 = wsc_dev_pw_psk(authkey, dev_pw)
6651     m = hmac.new(authkey, s1 + psk1 + e_pk + r_pk, hashlib.sha256)
6656     m = hmac.new(authkey, s2 + psk2 + e_pk + r_pk, hashlib.sha256)
6688 def build_m2(authkey, m1, eap_id, e_nonce, r_nonce, uuid_r, r_pk,  argument
6714     attrs += build_attr_authenticator(authkey, m1, attrs)
6794     authkey, keywrapkey = wsc_dh_kdf(m2_attrs[ATTR_PUBLIC_KEY], own_private,
6797     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk,
6807     attrs += build_attr_authenticator(authkey, raw_m2_attrs, attrs)
6821     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
6822     attrs += build_attr_authenticator(authkey, raw_m4_attrs, attrs)
6836     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
6837     attrs += build_attr_authenticator(authkey, raw_m6_attrs, attrs)
6844     m8_cred = decrypt_attr_encr_settings(authkey, keywrapkey,
6870     authkey, keywrapkey = wsc_dh_kdf(m1_attrs[ATTR_PUBLIC_KEY], own_private,
6873     r_s1, r_s2, r_hash1, r_hash2 = wsc_dev_pw_hash(authkey, pin,
6878     m2, raw_m2_attrs = build_m2(authkey, raw_m1_attrs, eap_id,
6894     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
6895     attrs += build_attr_authenticator(authkey, raw_m3_attrs, attrs)
6910     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
6911     attrs += build_attr_authenticator(authkey, raw_m5_attrs, attrs)
6925     attrs += build_attr_encr_settings(authkey, keywrapkey, m8_cred)
6926     attrs += build_attr_authenticator(authkey, raw_m7_attrs, attrs)
6968     authkey, keywrapkey = wsc_dh_kdf(m1_attrs[ATTR_PUBLIC_KEY], own_private,
6971     r_s1, r_s2, r_hash1, r_hash2 = wsc_dev_pw_hash(authkey, pin,
6976     m2, raw_m2_attrs = build_m2(authkey, raw_m1_attrs, eap_id,
6992     return r_s1, keywrapkey, authkey, raw_m3_attrs, eap_id, bssid, attrs
6994 def wps_stop_kwa(dev, bssid, attrs, authkey, raw_m3_attrs, eap_id):  argument
6995     attrs += build_attr_authenticator(authkey, raw_m3_attrs, attrs)
7011     r_s1, keywrapkey, authkey, raw_m3_attrs, eap_id, bssid, attrs = wps_start_kwa(dev, apdev)
7021     wps_stop_kwa(dev, bssid, attrs, authkey, raw_m3_attrs, eap_id)
7025     r_s1, keywrapkey, authkey, raw_m3_attrs, eap_id, bssid, attrs = wps_start_kwa(dev, apdev)
7028     m = hmac.new(authkey, data, hashlib.sha256)
7039     wps_stop_kwa(dev, bssid, attrs, authkey, raw_m3_attrs, eap_id)
7043     r_s1, keywrapkey, authkey, raw_m3_attrs, eap_id, bssid, attrs = wps_start_kwa(dev, apdev)
7054     wps_stop_kwa(dev, bssid, attrs, authkey, raw_m3_attrs, eap_id)
7072     authkey, keywrapkey = wsc_dh_kdf(m1_attrs[ATTR_PUBLIC_KEY], own_private,
7075     r_s1, r_s2, r_hash1, r_hash2 = wsc_dev_pw_hash(authkey, pin,
7080     m2, raw_m2_attrs = build_m2(authkey, raw_m1_attrs, eap_id,
7096     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
7097     attrs += build_attr_authenticator(authkey, raw_m3_attrs, attrs)
7112     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
7113     attrs += build_attr_authenticator(authkey, raw_m5_attrs, attrs)
7127     attrs += build_attr_encr_settings(authkey, keywrapkey, m8_cred)
7128     attrs += build_attr_authenticator(authkey, raw_m7_attrs, attrs)
7275     authkey, keywrapkey = wsc_dh_kdf(m1_attrs[ATTR_PUBLIC_KEY], own_private,
7278     r_s1, r_s2, r_hash1, r_hash2 = wsc_dev_pw_hash(authkey, pin,
7283     m2, raw_m2_attrs = build_m2(authkey, raw_m1_attrs, eap_id,
7314     authkey, keywrapkey = wsc_dh_kdf(m1_attrs[ATTR_PUBLIC_KEY], own_private,
7317     r_s1, r_s2, r_hash1, r_hash2 = wsc_dev_pw_hash(authkey, pin,
7322     m2, raw_m2_attrs = build_m2(authkey, raw_m1_attrs, eap_id,
7353     authkey, keywrapkey = wsc_dh_kdf(m1_attrs[ATTR_PUBLIC_KEY], own_private,
7356     r_s1, r_s2, r_hash1, r_hash2 = wsc_dev_pw_hash(authkey, pin,
7361     m2, raw_m2_attrs = build_m2(authkey, raw_m1_attrs, eap_id,
7393     authkey, keywrapkey = wsc_dh_kdf(m1_attrs[ATTR_PUBLIC_KEY], own_private,
7396     r_s1, r_s2, r_hash1, r_hash2 = wsc_dev_pw_hash(authkey, pin,
7401     m2, raw_m2_attrs = build_m2(authkey, raw_m1_attrs, eap_id,
7437     authkey, keywrapkey = wsc_dh_kdf(m1_attrs[ATTR_PUBLIC_KEY], own_private,
7440     r_s1, r_s2, r_hash1, r_hash2 = wsc_dev_pw_hash(authkey, pin,
7445     m2, raw_m2_attrs = build_m2(authkey, raw_m1_attrs, eap_id,
7461     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
7462     attrs += build_attr_authenticator(authkey, raw_m3_attrs, attrs)
7497     authkey, keywrapkey = wsc_dh_kdf(m1_attrs[ATTR_PUBLIC_KEY], own_private,
7500     r_s1, r_s2, r_hash1, r_hash2 = wsc_dev_pw_hash(authkey, pin,
7505     m2, raw_m2_attrs = build_m2(authkey, raw_m1_attrs, eap_id,
7693     authkey, keywrapkey = wsc_dh_kdf(m1_attrs[ATTR_PUBLIC_KEY], own_private,
7696     r_s1, r_s2, r_hash1, r_hash2 = wsc_dev_pw_hash(authkey, pin,
7701     m2, raw_m2_attrs = build_m2(authkey, raw_m1_attrs, eap_id,
7709 …return eap_id, m1_attrs, r_nonce, bssid, r_hash1, r_hash2, r_s1, r_s2, raw_m3_attrs, authkey, keyw…
7712 …eap_id, m1_attrs, r_nonce, bssid, r_hash1, r_hash2, r_s1, r_s2, raw_m3_attrs, authkey, keywrapkey …
7713 …trs[ATTR_ENROLLEE_NONCE], r_nonce, bssid, r_hash1, r_hash2, r_s1, raw_m3_attrs, authkey, keywrapkey
7716 …eap_id, m1_attrs, r_nonce, bssid, r_hash1, r_hash2, r_s1, r_s2, raw_m3_attrs, authkey, keywrapkey …
7725     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
7726     attrs += build_attr_authenticator(authkey, raw_m3_attrs, attrs)
7735 …trs[ATTR_ENROLLEE_NONCE], r_nonce, bssid, r_hash1, r_hash2, r_s2, raw_m5_attrs, authkey, keywrapkey
7739 …eap_id, e_nonce, r_nonce, bssid, r_hash1, r_hash2, r_s1, m3, authkey, keywrapkey = wps_to_m3(dev, …
7748     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
7749     attrs += build_attr_authenticator(authkey, m3, attrs)
7765 …eap_id, e_nonce, r_nonce, bssid, r_hash1, r_hash2, r_s1, m3, authkey, keywrapkey = wps_to_m3(dev, …
7774     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
7775     attrs += build_attr_authenticator(authkey, m3, attrs)
7791 …eap_id, e_nonce, r_nonce, bssid, r_hash1, r_hash2, r_s1, m3, authkey, keywrapkey = wps_to_m3(dev, …
7801     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
7802     attrs += build_attr_authenticator(authkey, m3, attrs)
7818 …eap_id, e_nonce, r_nonce, bssid, r_hash1, r_hash2, r_s1, m3, authkey, keywrapkey = wps_to_m3(dev, …
7828     m = hmac.new(authkey, data, hashlib.sha256)
7839     attrs += build_attr_authenticator(authkey, m3, attrs)
7855 …eap_id, e_nonce, r_nonce, bssid, r_hash1, r_hash2, r_s1, m3, authkey, keywrapkey = wps_to_m3(dev, …
7865     m = hmac.new(authkey, data, hashlib.sha256)
7876     attrs += build_attr_authenticator(authkey, m3, attrs)
7892 …eap_id, e_nonce, r_nonce, bssid, r_hash1, r_hash2, r_s1, m3, authkey, keywrapkey = wps_to_m3(dev, …
7900     attrs += build_attr_authenticator(authkey, m3, attrs)
7916 …eap_id, e_nonce, r_nonce, bssid, r_hash1, r_hash2, r_s2, m5, authkey, keywrapkey = wps_to_m5(dev, …
7924     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
7925     attrs += build_attr_authenticator(authkey, m5, attrs)
7941 …eap_id, e_nonce, r_nonce, bssid, r_hash1, r_hash2, r_s2, m5, authkey, keywrapkey = wps_to_m5(dev, …
7949     attrs += build_attr_authenticator(authkey, m5, attrs)
7965 …eap_id, e_nonce, r_nonce, bssid, r_hash1, r_hash2, r_s2, m5, authkey, keywrapkey = wps_to_m5(dev, …
7972     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
7973     attrs += build_attr_authenticator(authkey, m5, attrs)
7987     attrs += build_attr_authenticator(authkey, raw_m7_attrs, attrs)
8035     authkey, keywrapkey = wsc_dh_kdf(e_pk, own_private, mac_addr, e_nonce,
8037     r_s1, r_s2, r_hash1, r_hash2 = wsc_dev_pw_hash(authkey, appin, e_pk, r_pk)
8040     m2, raw_m2_attrs = build_m2(authkey, raw_m1_attrs, msg['eap_identifier'],
8054     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
8055     attrs += build_attr_authenticator(authkey, raw_m3_attrs, attrs)
8068     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
8069     attrs += build_attr_authenticator(authkey, raw_m5_attrs, attrs)
8082         attrs += build_attr_encr_settings(authkey, keywrapkey, ap_settings)
8083     attrs += build_attr_authenticator(authkey, raw_m7_attrs, attrs)
8230     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
8232     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
8240     attrs += build_attr_authenticator(authkey, raw_m2_attrs, attrs)
8275     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
8277     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
8285     attrs += build_attr_authenticator(authkey, raw_m2_attrs, attrs)
8320     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
8322     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
8330     attrs += build_attr_authenticator(authkey, raw_m2_attrs, attrs)
8344     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
8345     attrs += build_attr_authenticator(authkey, raw_m4_attrs, attrs)
8380     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
8382     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
8390     attrs += build_attr_authenticator(authkey, raw_m2_attrs, attrs)
8403     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
8404     attrs += build_attr_authenticator(authkey, raw_m4_attrs, attrs)
8438     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
8440     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
8448     attrs += build_attr_authenticator(authkey, raw_m2_attrs, attrs)
8461     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
8462     attrs += build_attr_authenticator(authkey, raw_m4_attrs, attrs)
8476     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
8477     attrs += build_attr_authenticator(authkey, raw_m6_attrs, attrs)
8512     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
8514     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
8522     attrs += build_attr_authenticator(authkey, raw_m2_attrs, attrs)
8535     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
8536     attrs += build_attr_authenticator(authkey, raw_m4_attrs, attrs)
8549     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
8550     attrs += build_attr_authenticator(authkey, raw_m6_attrs, attrs)
8616     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
8618     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
8626     attrs += build_attr_authenticator(authkey, raw_m2_attrs, attrs)
8661     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
8663     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
8671     attrs += build_attr_authenticator(authkey, raw_m2_attrs, attrs)
8684     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
8685     attrs += build_attr_authenticator(authkey, raw_m4_attrs, attrs)
8720     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
8722     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
8728     attrs += build_attr_authenticator(authkey, raw_m2_attrs, attrs)
8763     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
8765     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
8773     attrs += build_attr_authenticator(authkey, raw_m2_attrs, attrs)
8808     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
8810     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
8818     attrs += build_attr_authenticator(authkey, raw_m2_attrs, attrs)
8853     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
8855     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
8860     attrs += build_attr_authenticator(authkey, raw_m2_attrs, attrs)
8895     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
8897     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
8934     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
8936     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
8973     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
8975     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
9012     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
9014     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
9051     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
9053     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
9090     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
9092     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
9129     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
9131     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
9167     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
9169     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
9206     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
9208     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
9245     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
9247     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
9321     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
9323     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
9331     attrs += build_attr_authenticator(authkey, raw_m2_attrs, attrs)
9344     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
9345     attrs += build_attr_authenticator(authkey, raw_m4_attrs, attrs)
9358     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
9359     attrs += build_attr_authenticator(authkey, raw_m6_attrs, attrs)
9467     authkey, keywrapkey = wsc_dh_kdf(r_pk, own_private, mac_addr, e_nonce,
9469     e_s1, e_s2, e_hash1, e_hash2 = wsc_dev_pw_hash(authkey, pin, e_pk, r_pk)
9477     attrs += build_attr_authenticator(authkey, raw_m2_attrs, attrs)
9490     attrs += build_attr_encr_settings(authkey, keywrapkey, data)
9491     attrs += build_attr_authenticator(authkey, raw_m4_attrs, attrs)
9505     attrs += build_attr_authenticator(authkey, raw_m6_attrs, attrs)