[RFC PATCH v1 00/13] SAE DecoyAuth multi-password authentication with FT/MLO support

[Jeff Hansen]

This adds multiple password support to WPA3-SAE through Mathy Vanhoef's
work via an NGI Sargasso grant. More details can be found here:
https://github.com/DistriNet/decoyauth

This includes both AP- and Client-side changes, and has been tested
thoroughly by Alta Labs. AP7-Pro version 3.0m includes this port,
and has been verified as well.

Client-side changes can be easily tested with this PPA:
https://launchpad.net/~sqrammi/+archive/ubuntu/hostap-decoyauth

Jeff Hansen (13):
  FT: Add Multi-Link element to Authentication frames
  FT: Update target AP MLO state before response processing
  FT: Include MLO link data in MIC calculation
  crypto: Add DecoyAuth encoding and interpolation support
  crypto: Add DecoyAuth interpolation cache
  SAE: Add DecoyAuth multi-password primitives
  SAE: Add DecoyAuth fragment handling
  SAE: Add DecoyAuth worker support
  hostapd: Add DecoyAuth configuration
  hostapd: Add DecoyAuth SAE responder
  SAE: Preserve password VLAN in PMKSA cache
  wpa_supplicant: Add DecoyAuth SAE initiator
  tests: Add DecoyAuth interpolation cache coverage

 hostapd/Makefile                   |   13 +
 hostapd/config_file.c              |   34 +
 hostapd/defconfig                  |   11 +
 hostapd/hostapd.conf               |   22 +
 src/ap/ap_config.c                 |   10 +
 src/ap/ap_config.h                 |    3 +
 src/ap/beacon.c                    |   28 +-
 src/ap/beacon.h                    |    1 -
 src/ap/ieee802_11.c                |  454 ++++++-
 src/ap/ieee802_11.h                |    6 +
 src/ap/ieee802_11_eht.c            |    2 +-
 src/ap/pmksa_cache_auth.c          |    1 +
 src/common/sae.c                   | 1798 +++++++++++++++++++++++++++-
 src/common/sae.h                   |   68 ++
 src/crypto/crypto.h                |  102 ++
 src/crypto/crypto_openssl.c        | 1306 ++++++++++++++++++++
 src/rsn_supp/wpa.c                 |   23 +
 src/rsn_supp/wpa.h                 |   12 +
 src/rsn_supp/wpa_ft.c              |   96 +-
 tests/Makefile                     |   11 +-
 tests/test-decoyauth-cache.c       |  179 +++
 wpa_supplicant/Makefile            |    3 +
 wpa_supplicant/config.c            |    8 +
 wpa_supplicant/config_file.c       |    7 +
 wpa_supplicant/config_ssid.h       |    6 +
 wpa_supplicant/defconfig           |    3 +
 wpa_supplicant/sme.c               |  238 +++-
 wpa_supplicant/wpa_supplicant.c    |    7 +-
 wpa_supplicant/wpa_supplicant.conf |   10 +
 wpa_supplicant/wpa_supplicant_i.h  |    1 +
 30 files changed, 4394 insertions(+), 69 deletions(-)
 create mode 100644 tests/test-decoyauth-cache.c


base-commit: 54c0928689f7cde587bcd9e2eb6ac6ba21bc8a78
-- 
2.53.0