[PATCH v2 00/14] Support PASN with SAE, FILS and FT
ilan.peer at intel.com
Wed Jan 27 02:23:29 EST 2021
> -----Original Message-----
> From: Jouni Malinen <j at w1.fi>
> Sent: Tuesday, January 26, 2021 23:37
> To: Peer, Ilan <ilan.peer at intel.com>
> Cc: hostap at lists.infradead.org
> Subject: Re: [PATCH v2 00/14] Support PASN with SAE, FILS and FT
> On Wed, Dec 16, 2020 at 01:00:51PM +0200, Ilan Peer wrote:
> > PASN: Support PASN with SAE key derivation
> > AP: Support PASN with SAE key derivation
> > tests: Add PASN tests with SAE
> > PASN: Support PASN with FILS key derivation
> > AP: Support PASN with FILS key derivation
> > tests: Add PASN with FILS tests
> > PASN: Support PASN with FT key derivation
> > AP: Support PASN with FT key derivation
> > tests: Add PASN tests with FT key derivation
> Thanks, applied with some cleanup and fixes.
> > AP: Rename SAE anti clogging variables and functions
> > AP: Move anti clogging handling code
> > AP: Add support for PASN comeback flow
> > PASN: Add support for comeback flow to the wpa_supplicant
> > tests: Add PASN test with comeback flow
> As discussed, I'm dropping these versions now. Most of the functionality
> would likely be fine as an initial approach, but at minimum, I'd likely to see
> the 0 TU Comeback After case being handled within wpa_supplicant without
> external work needed and hostapd using that 0 TU value for the case that
> depends on too many open exchanges.
> I'm attaching the rebased patches I had in my working branch since the
> posted versions of these patches would not have applied on top of the
> current hostap.git snapshot.
I'll continue the work based on the attached patches and add the following functionality. Let me know if you would like additional changes etc.:
- Add support for immediate comeback in the wpa_supplicant in case 'after' is 0.
- Add a new configuration parameter to hostapd 'anti_clogging_threshold' that would be used same as 'sae_anti_clogging_threshold' to
configure the anti_clogging_threshold for both SAE and PASN (and maybe future additions).
- Add a new configuration parameters to hostapd to configure the PASN comeback 'after' value.
More information about the Hostap