[PATCH 1/2] 802.1X: Add support for AKM 23

Jouni Malinen j at w1.fi
Fri Nov 3 08:29:13 PDT 2023


On Tue, May 23, 2023 at 01:14:54PM +0300, Andrei Otcheretianski wrote:
> Add support for Authentication negotiated over IEEE Std 802.1X
> with key derivation function using SHA-384

Thanks, applied with a number of fixes. The test case in patch 2/2 did
not actually pass with this implementation, so I'm not sure how this was
tested.. Anyway, the implementation was using incorrect EAPOL-Key
descriptor version and a number of new AKM suite parameters were
undefined. I added those and inspected the debug logs to show that
SHA-384 is indeed being used and that the KEK/KCK/MIC end up being
derived with correct lengths.

-- 
Jouni Malinen                                            PGP id EFC895FA



More information about the Hostap mailing list