[PATCH 16/44] FT: generate PMK_R0 and PMK_R1 for FT-PSK locally

Jouni Malinen j at w1.fi
Sun Feb 28 02:47:04 PST 2016


On Wed, Feb 24, 2016 at 12:53:22PM +0100, michael-dev at fami-braun.de wrote:
> IEEE 802.11-2012 mandates that a station should be able to connect
> initially without ft_pmk_cache filled. So the target AP has the PSK
> available and thus the same information as the origin AP.
> Therefore neither caching nor communication between the APs with respect
> to PMK_R0 or PMK_R1 or VLANs is required if the target AP derives the
> required PMKs locally.
> 
> This patch introduces the generation of the required PMKs locally for
> FT-PSK. Additionally, PMK-R0 is not stored (and thus pushed) for FT-PSK.
> 
> So for FT-PSK networks, no configuration of inter-AP communication is
> needed anymore.

Even though this would sound like something that would not depend on the
patches I dropped, there is a dependency on wpa_ft_get_vlan() and a
simple rebasing was not straightforward enough for this, so I had to
drop this as well. I would probably be fine with this type of change
without that dependency as an independent patch or if easier, wait
until the new AP-to-AP message definition gets handled for the earlier
patches to be acceptable.

-- 
Jouni Malinen                                            PGP id EFC895FA



More information about the Hostap mailing list