[PATCH] Add some documentation relating to EAP-AKA.

[Jouni Malinen]

On Fri, Jan 03, 2014 at 04:10:16PM -0800, greearb at candelatech.com wrote:
> diff --git a/wpa_supplicant/defconfig b/wpa_supplicant/defconfig
> -# gnutls = GnuTLS
> +# gnutls = GnuTLS (Missing some features needed by EAP-AKA with USIM, at least)

This is not exactly complete and I would much rather make this work with
EAP-SIM and EAP-AKA or make the build fail than expect people to notice
and understand this note in defconfig.

> diff --git a/wpa_supplicant/wpa_supplicant.conf b/wpa_supplicant/wpa_supplicant.conf
> @@ -658,6 +658,8 @@ fast_reauth=1
>  # identity: Identity string for EAP
>  #	This field is also used to configure user NAI for
>  #	EAP-PSK/PAX/SAKE/GPSK.
> +#       For EAP-AKA, it is  1 | IMSI
> +#       For EAP-SIM, it is  0 | IMSI

That is not correct. EAP-SIM does normally (but not always!) use 1 as
the prefix and EAP-AKA uses 0 (again, not always). Anyway, these would
not normally be configured by users since the identity is generated
automatically based on IMSI read from SIM/USIM. In other words, these
prefixes are reversed and only used in some test scenarios with
simulated SIM/USIM and as such, I don't think it is appropriate to
document these in this style. Furthermore, this is not really even
complete since the realm part is not included. I would be fine listing
the examples for software simulated version if they are marked as such
(and well, obviously, if they are correct).

>  # anonymous_identity: Anonymous identity string for EAP (to be used as the
>  #	unencrypted identity with EAP types that support different tunnelled
>  #	identity, e.g., EAP-TTLS). This field can also be used with
> @@ -671,6 +673,8 @@ fast_reauth=1
>  #	PSK) is also configured using this field. For EAP-GPSK, this is a
>  #	variable length PSK. ext:<name of external password field> format can
>  #	be used to indicate that the password is stored in external storage.
> +#       For EAP-AKA, the syntax is K:OPc:SQN
> +#       For EAP-SIM, the syntax is K:OPc

Again, this is very much for special corner cases. This would never be
used in normal EAP-SIM/AKA cases.

-- 
Jouni Malinen                                            PGP id EFC895FA