WEP rekeying with stable version

[Jouni Malinen]

On Sat, Apr 05, 2003 at 05:06:30PM +0200, Israel Cardenas Romero wrote:

> i've seen last stable version finishes authentication and reauthentication process 
> with these lines:
> 
> 1.- IEEE 802.1X: Sending canned EAP packet SUCCESS to 00:xx:xx:xx:xx:e2 
> (identifier 24)
> 2.- IEEE 802.1X: 00:0b:46:26:1b:e2 AUTH_KEY_TX entering state KEY_TRANSMIT
> 3.- IEEE 802.1X: Sending EAPOL-Key(s) to 00:xx:xx:xx:xx:e2 (identifier 24)
> 4.- IEEE 802.1X: Sending EAPOL-Key to 00:xx:xx:xx:xx:e2 (broadcast index=1)
> 5.- Individual WEP key - hexdump(len=5): 8d 4a 26 a0 58
> 6.- IEEE 802.1X: Sending EAPOL-Key to 00:xx:xx:xx:xx:e2 (unicast index=0)

> If this version has not WEP rekeying, what do lines 5 and 6 mean?
> I've comprobed that individual WEP key (unicast) is different in every 
> reauthentication process...

I was a bit unclear when saying it does not support rekeying. Yes,
these are new individual WEP keys and that key is indeed changed on
reauthentication. The rekeying functionality that was added after
2002-10-12 release is rekeying both broadcast and unicast keys without
reauthentication (i.e., it can be done more often without needed to talk
to RADIUS server).

-- 
Jouni Malinen                                            PGP id EFC895FA