RE: [PATCH 00/12] Preparations for Pre association Security Negotiation(PASN) Support

> -----Original Message-----
> From: Jouni Malinen <[email protected]>
> Sent: Sunday, March 01, 2020 00:35
> To: Peer, Ilan <[email protected]>
> Cc: [email protected]
> Subject: Re: [PATCH 00/12] Preparations for Pre association Security
> Negotiation(PASN) Support
> 
> On Mon, Feb 24, 2020 at 11:14:25AM +0200, Ilan Peer wrote:
> > The following series of patches is a preparation for the support for
> > the Pre Association Security Negotiation (PASN) as defined in Draft
> > 802.11az_D2.0. In short, PASN is a mechanism to establish security
> > association and allow Management Frame Protection (MFP) prior to
> > association.
> >
> > To support the PASN authentication flows while associated, the 3-way
> > authentication handshake is going to be performed from the
> > wpa_supplicant, without the low level kernel driver being aware of the
> > authentication exchange. To allow this, some modifications were
> > required in the driver interface and the nl80211 driver, namely extend
> > send_mlme() with wait option and support sending/receiving
> authentication frames.
> >
> > Since the PASN authentication relies on support for wrapped data and
> > element fragmentation/defragmentation, the patch set includes changes
> > that introduce support for the missing parts.
> >
> > Finally, as the specification defines an High Layer Transient Key
> > (HLTK) and it uses the PMK to PTK derivation functions are extended to
> > also derive and HLTK when required.
> 
> Thanks, I applied the following patches with some cleanup/fixes:
> 
> Andrei Otcheretianski (1):
>       nl80211: Register for SAE Authentication frames more strictly
> 
> Ilan Peer (5):
>       driver: Extend send_mlme() with wait option
>       nl80211: Allow TX status for Authentication frames
>       crypto: Add a function to get the ECDH prime length
>       WPA: Rename FILS wrapped data
>       common: Add support for element defragmentation
> 
> The other patches have open items as indicated in the separate replies.

Thanks for the review 😊

Unless you want it otherwise I'll fix 3 and 9 based on your comments, but will push the fixes once things are more stable with 802.11az.

Regards,

Ilan.
_______________________________________________
Hostap mailing list
[email protected]
http://lists.infradead.org/mailman/listinfo/hostap