[PATCH v2 00/14] Support PASN with SAE, FILS and FT

[Peer, Ilan]

Hi,

> -----Original Message-----
> From: Jouni Malinen <j at w1.fi>
> Sent: Tuesday, January 26, 2021 23:37
> To: Peer, Ilan <ilan.peer at intel.com>
> Cc: hostap at lists.infradead.org
> Subject: Re: [PATCH v2 00/14] Support PASN with SAE, FILS and FT
> 
> On Wed, Dec 16, 2020 at 01:00:51PM +0200, Ilan Peer wrote:
> >   PASN: Support PASN with SAE key derivation
> >   AP: Support PASN with SAE key derivation
> >   tests: Add PASN tests with SAE
> >   PASN: Support PASN with FILS key derivation
> >   AP: Support PASN with FILS key derivation
> >   tests: Add PASN with FILS tests
> >   PASN: Support PASN with FT key derivation
> >   AP: Support PASN with FT key derivation
> >   tests: Add PASN tests with FT key derivation
> 
> Thanks, applied with some cleanup and fixes.
> 
> >   AP: Rename SAE anti clogging variables and functions
> >   AP: Move anti clogging handling code
> >   AP: Add support for PASN comeback flow
> >   PASN: Add support for comeback flow to the wpa_supplicant
> >   tests: Add PASN test with comeback flow
> 
> As discussed, I'm dropping these versions now. Most of the functionality
> would likely be fine as an initial approach, but at minimum, I'd likely to see
> the 0 TU Comeback After case being handled within wpa_supplicant without
> external work needed and hostapd using that 0 TU value for the case that
> depends on too many open exchanges.
> 
> I'm attaching the rebased patches I had in my working branch since the
> posted versions of these patches would not have applied on top of the
> current hostap.git snapshot.
> 

Thanks 😊

I'll continue the work based on the attached patches and add the following functionality. Let me know if you would like additional changes etc.:

- Add support for immediate comeback in the wpa_supplicant in case 'after' is 0.
- Add a new configuration parameter to hostapd 'anti_clogging_threshold' that would be used same as 'sae_anti_clogging_threshold' to
  configure the anti_clogging_threshold for both SAE and PASN (and maybe future additions).
- Add a new configuration parameters to hostapd to configure the PASN comeback 'after' value.

Regards,

Ilan.