hostap/src/ap/peerkey_auth.c - nest-learning-thermostat/5.0.2/hostap - Git at Google

 /*
  * hostapd - PeerKey for Direct Link Setup (DLS)
  * Copyright (c) 2006-2009, Jouni Malinen <j@w1.fi>
  *
  * This software may be distributed under the terms of the BSD license.
  * See README for more details.
  */

 #include "utils/includes.h"

 #include "utils/common.h"
 #include "utils/eloop.h"
 #include "crypto/sha1.h"
 #include "crypto/sha256.h"
 #include "crypto/random.h"
 #include "wpa_auth.h"
 #include "wpa_auth_i.h"
 #include "wpa_auth_ie.h"

 #ifdef CONFIG_PEERKEY

 static void wpa_stsl_step(void *eloop_ctx, void *timeout_ctx)
 {
 #if 0
 	struct wpa_authenticator *wpa_auth = eloop_ctx;
 	struct wpa_stsl_negotiation *neg = timeout_ctx;
 #endif

 	/* TODO: ? */
 }


 struct wpa_stsl_search {
 	const u8 *addr;
 	struct wpa_state_machine *sm;
 };


 static int wpa_stsl_select_sta(struct wpa_state_machine *sm, void *ctx)
 {
 	struct wpa_stsl_search *search = ctx;
 	if (os_memcmp(search->addr, sm->addr, ETH_ALEN) == 0) {
 		search->sm = sm;
 		return 1;
 	}
 	return 0;
 }


 static void wpa_smk_send_error(struct wpa_authenticator *wpa_auth,
 			       struct wpa_state_machine *sm, const u8 *peer,
 			       u16 mui, u16 error_type)
 {
 	u8 kde[2 + RSN_SELECTOR_LEN + ETH_ALEN +
 	       2 + RSN_SELECTOR_LEN + sizeof(struct rsn_error_kde)];
 	u8 *pos;
 	struct rsn_error_kde error;

 	wpa_auth_logger(wpa_auth, sm->addr, LOGGER_DEBUG,
 			"Sending SMK Error");

 	pos = kde;

 	if (peer) {
 		pos = wpa_add_kde(pos, RSN_KEY_DATA_MAC_ADDR, peer, ETH_ALEN,
 				  NULL, 0);
 	}

 	error.mui = host_to_be16(mui);
 	error.error_type = host_to_be16(error_type);
 	pos = wpa_add_kde(pos, RSN_KEY_DATA_ERROR,
 			  (u8 *) &error, sizeof(error), NULL, 0);

 	__wpa_send_eapol(wpa_auth, sm,
 			 WPA_KEY_INFO_SECURE | WPA_KEY_INFO_MIC |
 			 WPA_KEY_INFO_SMK_MESSAGE | WPA_KEY_INFO_ERROR,
 			 NULL, NULL, kde, pos - kde, 0, 0, 0);
 }


 void wpa_smk_m1(struct wpa_authenticator *wpa_auth,
 		struct wpa_state_machine *sm, struct wpa_eapol_key *key)
 {
 	struct wpa_eapol_ie_parse kde;
 	struct wpa_stsl_search search;
 	u8 *buf, *pos;
 	size_t buf_len;

 	if (wpa_parse_kde_ies((const u8 *) (key + 1),
 			      WPA_GET_BE16(key->key_data_length), &kde) < 0) {
 		wpa_printf(MSG_INFO, "RSN: Failed to parse KDEs in SMK M1");
 		return;
 	}

 	if (kde.rsn_ie == NULL || kde.mac_addr == NULL ||
 	    kde.mac_addr_len < ETH_ALEN) {
 		wpa_printf(MSG_INFO, "RSN: No RSN IE or MAC address KDE in "
 			   "SMK M1");
 		return;
 	}

 	/* Initiator = sm->addr; Peer = kde.mac_addr */

 	search.addr = kde.mac_addr;
 	search.sm = NULL;
 	if (wpa_auth_for_each_sta(wpa_auth, wpa_stsl_select_sta, &search) ==
 	    0 || search.sm == NULL) {
 		wpa_printf(MSG_DEBUG, "RSN: SMK handshake with " MACSTR
 			   " aborted - STA not associated anymore",
 			   MAC2STR(kde.mac_addr));
 		wpa_smk_send_error(wpa_auth, sm, kde.mac_addr, STK_MUI_SMK,
 				   STK_ERR_STA_NR);
 		/* FIX: wpa_stsl_remove(wpa_auth, neg); */
 		return;
 	}

 	buf_len = kde.rsn_ie_len + 2 + RSN_SELECTOR_LEN + ETH_ALEN;
 	buf = os_malloc(buf_len);
 	if (buf == NULL)
 		return;
 	/* Initiator RSN IE */
 	os_memcpy(buf, kde.rsn_ie, kde.rsn_ie_len);
 	pos = buf + kde.rsn_ie_len;
 	/* Initiator MAC Address */
 	pos = wpa_add_kde(pos, RSN_KEY_DATA_MAC_ADDR, sm->addr, ETH_ALEN,
 			  NULL, 0);

 	/* SMK M2:
 	 * EAPOL-Key(S=1, M=1, A=1, I=0, K=0, SM=1, KeyRSC=0, Nonce=INonce,
 	 *           MIC=MIC, DataKDs=(RSNIE_I, MAC_I KDE)
 	 */

 	wpa_auth_logger(wpa_auth, search.sm->addr, LOGGER_DEBUG,
 			"Sending SMK M2");

 	__wpa_send_eapol(wpa_auth, search.sm,
 			 WPA_KEY_INFO_SECURE | WPA_KEY_INFO_MIC |
 			 WPA_KEY_INFO_ACK | WPA_KEY_INFO_SMK_MESSAGE,
 			 NULL, key->key_nonce, buf, pos - buf, 0, 0, 0);

 	os_free(buf);
 }


 static void wpa_send_smk_m4(struct wpa_authenticator *wpa_auth,
 			    struct wpa_state_machine *sm,
 			    struct wpa_eapol_key *key,
 			    struct wpa_eapol_ie_parse *kde,
 			    const u8 *smk)
 {
 	u8 *buf, *pos;
 	size_t buf_len;
 	u32 lifetime;

 	/* SMK M4:
 	 * EAPOL-Key(S=1, M=1, A=0, I=1, K=0, SM=1, KeyRSC=0, Nonce=PNonce,
 	 *           MIC=MIC, DataKDs=(MAC_I KDE, INonce KDE, SMK KDE,
 	 *           Lifetime KDE)
 	 */

 	buf_len = 2 + RSN_SELECTOR_LEN + ETH_ALEN +
 		2 + RSN_SELECTOR_LEN + WPA_NONCE_LEN +
 		2 + RSN_SELECTOR_LEN + PMK_LEN + WPA_NONCE_LEN +
 		2 + RSN_SELECTOR_LEN + sizeof(lifetime);
 	pos = buf = os_malloc(buf_len);
 	if (buf == NULL)
 		return;

 	/* Initiator MAC Address */
 	pos = wpa_add_kde(pos, RSN_KEY_DATA_MAC_ADDR, kde->mac_addr, ETH_ALEN,
 			  NULL, 0);

 	/* Initiator Nonce */
 	pos = wpa_add_kde(pos, RSN_KEY_DATA_NONCE, kde->nonce, WPA_NONCE_LEN,
 			  NULL, 0);

 	/* SMK with PNonce */
 	pos = wpa_add_kde(pos, RSN_KEY_DATA_SMK, smk, PMK_LEN,
 			  key->key_nonce, WPA_NONCE_LEN);

 	/* Lifetime */
 	lifetime = htonl(43200); /* dot11RSNAConfigSMKLifetime */
 	pos = wpa_add_kde(pos, RSN_KEY_DATA_LIFETIME,
 			  (u8 *) &lifetime, sizeof(lifetime), NULL, 0);

 	wpa_auth_logger(sm->wpa_auth, sm->addr, LOGGER_DEBUG,
 			"Sending SMK M4");

 	__wpa_send_eapol(wpa_auth, sm,
 			 WPA_KEY_INFO_SECURE | WPA_KEY_INFO_MIC |
 			 WPA_KEY_INFO_INSTALL | WPA_KEY_INFO_SMK_MESSAGE,
 			 NULL, key->key_nonce, buf, pos - buf, 0, 1, 0);

 	os_free(buf);
 }


 static void wpa_send_smk_m5(struct wpa_authenticator *wpa_auth,
 			    struct wpa_state_machine *sm,
 			    struct wpa_eapol_key *key,
 			    struct wpa_eapol_ie_parse *kde,
 			    const u8 *smk, const u8 *peer)
 {
 	u8 *buf, *pos;
 	size_t buf_len;
 	u32 lifetime;

 	/* SMK M5:
 	 * EAPOL-Key(S=1, M=1, A=0, I=0, K=0, SM=1, KeyRSC=0, Nonce=INonce,
 	 *           MIC=MIC, DataKDs=(RSNIE_P, MAC_P KDE, PNonce, SMK KDE,
 	 *                             Lifetime KDE))
 	 */

 	buf_len = kde->rsn_ie_len +
 		2 + RSN_SELECTOR_LEN + ETH_ALEN +
 		2 + RSN_SELECTOR_LEN + WPA_NONCE_LEN +
 		2 + RSN_SELECTOR_LEN + PMK_LEN + WPA_NONCE_LEN +
 		2 + RSN_SELECTOR_LEN + sizeof(lifetime);
 	pos = buf = os_malloc(buf_len);
 	if (buf == NULL)
 		return;

 	/* Peer RSN IE */
 	os_memcpy(buf, kde->rsn_ie, kde->rsn_ie_len);
 	pos = buf + kde->rsn_ie_len;

 	/* Peer MAC Address */
 	pos = wpa_add_kde(pos, RSN_KEY_DATA_MAC_ADDR, peer, ETH_ALEN, NULL, 0);

 	/* PNonce */
 	pos = wpa_add_kde(pos, RSN_KEY_DATA_NONCE, key->key_nonce,
 			  WPA_NONCE_LEN, NULL, 0);

 	/* SMK and INonce */
 	pos = wpa_add_kde(pos, RSN_KEY_DATA_SMK, smk, PMK_LEN,
 			  kde->nonce, WPA_NONCE_LEN);

 	/* Lifetime */
 	lifetime = htonl(43200); /* dot11RSNAConfigSMKLifetime */
 	pos = wpa_add_kde(pos, RSN_KEY_DATA_LIFETIME,
 			  (u8 *) &lifetime, sizeof(lifetime), NULL, 0);

 	wpa_auth_logger(sm->wpa_auth, sm->addr, LOGGER_DEBUG,
 			"Sending SMK M5");

 	__wpa_send_eapol(wpa_auth, sm,
 			 WPA_KEY_INFO_SECURE | WPA_KEY_INFO_MIC |
 			 WPA_KEY_INFO_SMK_MESSAGE,
 			 NULL, kde->nonce, buf, pos - buf, 0, 1, 0);

 	os_free(buf);
 }


 void wpa_smk_m3(struct wpa_authenticator *wpa_auth,
 		struct wpa_state_machine *sm, struct wpa_eapol_key *key)
 {
 	struct wpa_eapol_ie_parse kde;
 	struct wpa_stsl_search search;
 	u8 smk[32], buf[ETH_ALEN + 8 + 2 * WPA_NONCE_LEN], *pos;

 	if (wpa_parse_kde_ies((const u8 *) (key + 1),
 			      WPA_GET_BE16(key->key_data_length), &kde) < 0) {
 		wpa_printf(MSG_INFO, "RSN: Failed to parse KDEs in SMK M3");
 		return;
 	}

 	if (kde.rsn_ie == NULL ||
 	    kde.mac_addr == NULL || kde.mac_addr_len < ETH_ALEN ||
 	    kde.nonce == NULL || kde.nonce_len < WPA_NONCE_LEN) {
 		wpa_printf(MSG_INFO, "RSN: No RSN IE, MAC address KDE, or "
 			   "Nonce KDE in SMK M3");
 		return;
 	}

 	/* Peer = sm->addr; Initiator = kde.mac_addr;
 	 * Peer Nonce = key->key_nonce; Initiator Nonce = kde.nonce */

 	search.addr = kde.mac_addr;
 	search.sm = NULL;
 	if (wpa_auth_for_each_sta(wpa_auth, wpa_stsl_select_sta, &search) ==
 	    0 || search.sm == NULL) {
 		wpa_printf(MSG_DEBUG, "RSN: SMK handshake with " MACSTR
 			   " aborted - STA not associated anymore",
 			   MAC2STR(kde.mac_addr));
 		wpa_smk_send_error(wpa_auth, sm, kde.mac_addr, STK_MUI_SMK,
 				   STK_ERR_STA_NR);
 		/* FIX: wpa_stsl_remove(wpa_auth, neg); */
 		return;
 	}

 	if (random_get_bytes(smk, PMK_LEN)) {
 		wpa_printf(MSG_DEBUG, "RSN: Failed to generate SMK");
 		return;
 	}

 	/* SMK = PRF-256(Random number, "SMK Derivation",
 	 *               AA || Time || INonce || PNonce)
 	 */
 	os_memcpy(buf, wpa_auth->addr, ETH_ALEN);
 	pos = buf + ETH_ALEN;
 	wpa_get_ntp_timestamp(pos);
 	pos += 8;
 	os_memcpy(pos, kde.nonce, WPA_NONCE_LEN);
 	pos += WPA_NONCE_LEN;
 	os_memcpy(pos, key->key_nonce, WPA_NONCE_LEN);
 #ifdef CONFIG_IEEE80211W
 	sha256_prf(smk, PMK_LEN, "SMK Derivation", buf, sizeof(buf),
 		   smk, PMK_LEN);
 #else /* CONFIG_IEEE80211W */
 	sha1_prf(smk, PMK_LEN, "SMK Derivation", buf, sizeof(buf),
 		 smk, PMK_LEN);
 #endif /* CONFIG_IEEE80211W */

 	wpa_hexdump_key(MSG_DEBUG, "RSN: SMK", smk, PMK_LEN);

 	wpa_send_smk_m4(wpa_auth, sm, key, &kde, smk);
 	wpa_send_smk_m5(wpa_auth, search.sm, key, &kde, smk, sm->addr);

 	/* Authenticator does not need SMK anymore and it is required to forget
 	 * it. */
 	os_memset(smk, 0, sizeof(*smk));
 }


 void wpa_smk_error(struct wpa_authenticator *wpa_auth,
 		   struct wpa_state_machine *sm, struct wpa_eapol_key *key)
 {
 	struct wpa_eapol_ie_parse kde;
 	struct wpa_stsl_search search;
 	struct rsn_error_kde error;
 	u16 mui, error_type;

 	if (wpa_parse_kde_ies((const u8 *) (key + 1),
 			      WPA_GET_BE16(key->key_data_length), &kde) < 0) {
 		wpa_printf(MSG_INFO, "RSN: Failed to parse KDEs in SMK Error");
 		return;
 	}

 	if (kde.mac_addr == NULL || kde.mac_addr_len < ETH_ALEN ||
 	    kde.error == NULL || kde.error_len < sizeof(error)) {
 		wpa_printf(MSG_INFO, "RSN: No MAC address or Error KDE in "
 			   "SMK Error");
 		return;
 	}

 	search.addr = kde.mac_addr;
 	search.sm = NULL;
 	if (wpa_auth_for_each_sta(wpa_auth, wpa_stsl_select_sta, &search) ==
 	    0 || search.sm == NULL) {
 		wpa_printf(MSG_DEBUG, "RSN: Peer STA " MACSTR " not "
 			   "associated for SMK Error message from " MACSTR,
 			   MAC2STR(kde.mac_addr), MAC2STR(sm->addr));
 		return;
 	}

 	os_memcpy(&error, kde.error, sizeof(error));
 	mui = be_to_host16(error.mui);
 	error_type = be_to_host16(error.error_type);
 	wpa_auth_vlogger(wpa_auth, sm->addr, LOGGER_INFO,
 			 "STA reported SMK Error: Peer " MACSTR
 			 " MUI %d Error Type %d",
 			 MAC2STR(kde.mac_addr), mui, error_type);

 	wpa_smk_send_error(wpa_auth, search.sm, sm->addr, mui, error_type);
 }


 int wpa_stsl_remove(struct wpa_authenticator *wpa_auth,
 		    struct wpa_stsl_negotiation *neg)
 {
 	struct wpa_stsl_negotiation *pos, *prev;

 	if (wpa_auth == NULL)
 		return -1;
 	pos = wpa_auth->stsl_negotiations;
 	prev = NULL;
 	while (pos) {
 		if (pos == neg) {
 			if (prev)
 				prev->next = pos->next;
 			else
 				wpa_auth->stsl_negotiations = pos->next;

 			eloop_cancel_timeout(wpa_stsl_step, wpa_auth, pos);
 			os_free(pos);
 			return 0;
 		}
 		prev = pos;
 		pos = pos->next;
 	}

 	return -1;
 }

 #endif /* CONFIG_PEERKEY */
	/*
	* hostapd - PeerKey for Direct Link Setup (DLS)
	* Copyright (c) 2006-2009, Jouni Malinen <j@w1.fi>
	*
	* This software may be distributed under the terms of the BSD license.
	* See README for more details.
	*/

	#include "utils/includes.h"

	#include "utils/common.h"
	#include "utils/eloop.h"
	#include "crypto/sha1.h"
	#include "crypto/sha256.h"
	#include "crypto/random.h"
	#include "wpa_auth.h"
	#include "wpa_auth_i.h"
	#include "wpa_auth_ie.h"

	#ifdef CONFIG_PEERKEY

	static void wpa_stsl_step(void eloop_ctx, void timeout_ctx)
	{
	#if 0
	struct wpa_authenticator *wpa_auth = eloop_ctx;
	struct wpa_stsl_negotiation *neg = timeout_ctx;
	#endif

	/* TODO: ? */
	}


	struct wpa_stsl_search {
	const u8 *addr;
	struct wpa_state_machine *sm;
	};


	static int wpa_stsl_select_sta(struct wpa_state_machine sm, void ctx)
	{
	struct wpa_stsl_search *search = ctx;
	if (os_memcmp(search->addr, sm->addr, ETH_ALEN) == 0) {
	search->sm = sm;
	return 1;
	}
	return 0;
	}


	static void wpa_smk_send_error(struct wpa_authenticator *wpa_auth,
	struct wpa_state_machine sm, const u8 peer,
	u16 mui, u16 error_type)
	{
	u8 kde[2 + RSN_SELECTOR_LEN + ETH_ALEN +
	2 + RSN_SELECTOR_LEN + sizeof(struct rsn_error_kde)];
	u8 *pos;
	struct rsn_error_kde error;

	wpa_auth_logger(wpa_auth, sm->addr, LOGGER_DEBUG,
	"Sending SMK Error");

	pos = kde;

	if (peer) {
	pos = wpa_add_kde(pos, RSN_KEY_DATA_MAC_ADDR, peer, ETH_ALEN,
	NULL, 0);
	}

	error.mui = host_to_be16(mui);
	error.error_type = host_to_be16(error_type);
	pos = wpa_add_kde(pos, RSN_KEY_DATA_ERROR,
	(u8 *) &error, sizeof(error), NULL, 0);

	__wpa_send_eapol(wpa_auth, sm,
	WPA_KEY_INFO_SECURE \| WPA_KEY_INFO_MIC \|
	WPA_KEY_INFO_SMK_MESSAGE \| WPA_KEY_INFO_ERROR,
	NULL, NULL, kde, pos - kde, 0, 0, 0);
	}


	void wpa_smk_m1(struct wpa_authenticator *wpa_auth,
	struct wpa_state_machine sm, struct wpa_eapol_key key)
	{
	struct wpa_eapol_ie_parse kde;
	struct wpa_stsl_search search;
	u8 buf, pos;
	size_t buf_len;

	if (wpa_parse_kde_ies((const u8 *) (key + 1),
	WPA_GET_BE16(key->key_data_length), &kde) < 0) {
	wpa_printf(MSG_INFO, "RSN: Failed to parse KDEs in SMK M1");
	return;
	}

	if (kde.rsn_ie == NULL \|\| kde.mac_addr == NULL \|\|
	kde.mac_addr_len < ETH_ALEN) {
	wpa_printf(MSG_INFO, "RSN: No RSN IE or MAC address KDE in "
	"SMK M1");
	return;
	}

	/* Initiator = sm->addr; Peer = kde.mac_addr */

	search.addr = kde.mac_addr;
	search.sm = NULL;
	if (wpa_auth_for_each_sta(wpa_auth, wpa_stsl_select_sta, &search) ==
	0 \|\| search.sm == NULL) {
	wpa_printf(MSG_DEBUG, "RSN: SMK handshake with " MACSTR
	" aborted - STA not associated anymore",
	MAC2STR(kde.mac_addr));
	wpa_smk_send_error(wpa_auth, sm, kde.mac_addr, STK_MUI_SMK,
	STK_ERR_STA_NR);
	/* FIX: wpa_stsl_remove(wpa_auth, neg); */
	return;
	}

	buf_len = kde.rsn_ie_len + 2 + RSN_SELECTOR_LEN + ETH_ALEN;
	buf = os_malloc(buf_len);
	if (buf == NULL)
	return;
	/* Initiator RSN IE */
	os_memcpy(buf, kde.rsn_ie, kde.rsn_ie_len);
	pos = buf + kde.rsn_ie_len;
	/* Initiator MAC Address */
	pos = wpa_add_kde(pos, RSN_KEY_DATA_MAC_ADDR, sm->addr, ETH_ALEN,
	NULL, 0);

	/* SMK M2:
	* EAPOL-Key(S=1, M=1, A=1, I=0, K=0, SM=1, KeyRSC=0, Nonce=INonce,
	* MIC=MIC, DataKDs=(RSNIE_I, MAC_I KDE)
	*/

	wpa_auth_logger(wpa_auth, search.sm->addr, LOGGER_DEBUG,
	"Sending SMK M2");

	__wpa_send_eapol(wpa_auth, search.sm,
	WPA_KEY_INFO_SECURE \| WPA_KEY_INFO_MIC \|
	WPA_KEY_INFO_ACK \| WPA_KEY_INFO_SMK_MESSAGE,
	NULL, key->key_nonce, buf, pos - buf, 0, 0, 0);

	os_free(buf);
	}


	static void wpa_send_smk_m4(struct wpa_authenticator *wpa_auth,
	struct wpa_state_machine *sm,
	struct wpa_eapol_key *key,
	struct wpa_eapol_ie_parse *kde,
	const u8 *smk)
	{
	u8 buf, pos;
	size_t buf_len;
	u32 lifetime;

	/* SMK M4:
	* EAPOL-Key(S=1, M=1, A=0, I=1, K=0, SM=1, KeyRSC=0, Nonce=PNonce,
	* MIC=MIC, DataKDs=(MAC_I KDE, INonce KDE, SMK KDE,
	* Lifetime KDE)
	*/

	buf_len = 2 + RSN_SELECTOR_LEN + ETH_ALEN +
	2 + RSN_SELECTOR_LEN + WPA_NONCE_LEN +
	2 + RSN_SELECTOR_LEN + PMK_LEN + WPA_NONCE_LEN +
	2 + RSN_SELECTOR_LEN + sizeof(lifetime);
	pos = buf = os_malloc(buf_len);
	if (buf == NULL)
	return;

	/* Initiator MAC Address */
	pos = wpa_add_kde(pos, RSN_KEY_DATA_MAC_ADDR, kde->mac_addr, ETH_ALEN,
	NULL, 0);

	/* Initiator Nonce */
	pos = wpa_add_kde(pos, RSN_KEY_DATA_NONCE, kde->nonce, WPA_NONCE_LEN,
	NULL, 0);

	/* SMK with PNonce */
	pos = wpa_add_kde(pos, RSN_KEY_DATA_SMK, smk, PMK_LEN,
	key->key_nonce, WPA_NONCE_LEN);

	/* Lifetime */
	lifetime = htonl(43200); /* dot11RSNAConfigSMKLifetime */
	pos = wpa_add_kde(pos, RSN_KEY_DATA_LIFETIME,
	(u8 *) &lifetime, sizeof(lifetime), NULL, 0);

	wpa_auth_logger(sm->wpa_auth, sm->addr, LOGGER_DEBUG,
	"Sending SMK M4");

	__wpa_send_eapol(wpa_auth, sm,
	WPA_KEY_INFO_SECURE \| WPA_KEY_INFO_MIC \|
	WPA_KEY_INFO_INSTALL \| WPA_KEY_INFO_SMK_MESSAGE,
	NULL, key->key_nonce, buf, pos - buf, 0, 1, 0);

	os_free(buf);
	}


	static void wpa_send_smk_m5(struct wpa_authenticator *wpa_auth,
	struct wpa_state_machine *sm,
	struct wpa_eapol_key *key,
	struct wpa_eapol_ie_parse *kde,
	const u8 smk, const u8 peer)
	{
	u8 buf, pos;
	size_t buf_len;
	u32 lifetime;

	/* SMK M5:
	* EAPOL-Key(S=1, M=1, A=0, I=0, K=0, SM=1, KeyRSC=0, Nonce=INonce,
	* MIC=MIC, DataKDs=(RSNIE_P, MAC_P KDE, PNonce, SMK KDE,
	* Lifetime KDE))
	*/

	buf_len = kde->rsn_ie_len +
	2 + RSN_SELECTOR_LEN + ETH_ALEN +
	2 + RSN_SELECTOR_LEN + WPA_NONCE_LEN +
	2 + RSN_SELECTOR_LEN + PMK_LEN + WPA_NONCE_LEN +
	2 + RSN_SELECTOR_LEN + sizeof(lifetime);
	pos = buf = os_malloc(buf_len);
	if (buf == NULL)
	return;

	/* Peer RSN IE */
	os_memcpy(buf, kde->rsn_ie, kde->rsn_ie_len);
	pos = buf + kde->rsn_ie_len;

	/* Peer MAC Address */
	pos = wpa_add_kde(pos, RSN_KEY_DATA_MAC_ADDR, peer, ETH_ALEN, NULL, 0);

	/* PNonce */
	pos = wpa_add_kde(pos, RSN_KEY_DATA_NONCE, key->key_nonce,
	WPA_NONCE_LEN, NULL, 0);

	/* SMK and INonce */
	pos = wpa_add_kde(pos, RSN_KEY_DATA_SMK, smk, PMK_LEN,
	kde->nonce, WPA_NONCE_LEN);

	/* Lifetime */
	lifetime = htonl(43200); /* dot11RSNAConfigSMKLifetime */
	pos = wpa_add_kde(pos, RSN_KEY_DATA_LIFETIME,
	(u8 *) &lifetime, sizeof(lifetime), NULL, 0);

	wpa_auth_logger(sm->wpa_auth, sm->addr, LOGGER_DEBUG,
	"Sending SMK M5");

	__wpa_send_eapol(wpa_auth, sm,
	WPA_KEY_INFO_SECURE \| WPA_KEY_INFO_MIC \|
	WPA_KEY_INFO_SMK_MESSAGE,
	NULL, kde->nonce, buf, pos - buf, 0, 1, 0);

	os_free(buf);
	}


	void wpa_smk_m3(struct wpa_authenticator *wpa_auth,
	struct wpa_state_machine sm, struct wpa_eapol_key key)
	{
	struct wpa_eapol_ie_parse kde;
	struct wpa_stsl_search search;
	u8 smk[32], buf[ETH_ALEN + 8 + 2 * WPA_NONCE_LEN], *pos;

	if (wpa_parse_kde_ies((const u8 *) (key + 1),
	WPA_GET_BE16(key->key_data_length), &kde) < 0) {
	wpa_printf(MSG_INFO, "RSN: Failed to parse KDEs in SMK M3");
	return;
	}

	if (kde.rsn_ie == NULL \|\|
	kde.mac_addr == NULL \|\| kde.mac_addr_len < ETH_ALEN \|\|
	kde.nonce == NULL \|\| kde.nonce_len < WPA_NONCE_LEN) {
	wpa_printf(MSG_INFO, "RSN: No RSN IE, MAC address KDE, or "
	"Nonce KDE in SMK M3");
	return;
	}

	/* Peer = sm->addr; Initiator = kde.mac_addr;
	* Peer Nonce = key->key_nonce; Initiator Nonce = kde.nonce */

	search.addr = kde.mac_addr;
	search.sm = NULL;
	if (wpa_auth_for_each_sta(wpa_auth, wpa_stsl_select_sta, &search) ==
	0 \|\| search.sm == NULL) {
	wpa_printf(MSG_DEBUG, "RSN: SMK handshake with " MACSTR
	" aborted - STA not associated anymore",
	MAC2STR(kde.mac_addr));
	wpa_smk_send_error(wpa_auth, sm, kde.mac_addr, STK_MUI_SMK,
	STK_ERR_STA_NR);
	/* FIX: wpa_stsl_remove(wpa_auth, neg); */
	return;
	}

	if (random_get_bytes(smk, PMK_LEN)) {
	wpa_printf(MSG_DEBUG, "RSN: Failed to generate SMK");
	return;
	}

	/* SMK = PRF-256(Random number, "SMK Derivation",
	* AA \|\| Time \|\| INonce \|\| PNonce)
	*/
	os_memcpy(buf, wpa_auth->addr, ETH_ALEN);
	pos = buf + ETH_ALEN;
	wpa_get_ntp_timestamp(pos);
	pos += 8;
	os_memcpy(pos, kde.nonce, WPA_NONCE_LEN);
	pos += WPA_NONCE_LEN;
	os_memcpy(pos, key->key_nonce, WPA_NONCE_LEN);
	#ifdef CONFIG_IEEE80211W
	sha256_prf(smk, PMK_LEN, "SMK Derivation", buf, sizeof(buf),
	smk, PMK_LEN);
	#else /* CONFIG_IEEE80211W */
	sha1_prf(smk, PMK_LEN, "SMK Derivation", buf, sizeof(buf),
	smk, PMK_LEN);
	#endif /* CONFIG_IEEE80211W */

	wpa_hexdump_key(MSG_DEBUG, "RSN: SMK", smk, PMK_LEN);

	wpa_send_smk_m4(wpa_auth, sm, key, &kde, smk);
	wpa_send_smk_m5(wpa_auth, search.sm, key, &kde, smk, sm->addr);

	/* Authenticator does not need SMK anymore and it is required to forget
	* it. */
	os_memset(smk, 0, sizeof(*smk));
	}


	void wpa_smk_error(struct wpa_authenticator *wpa_auth,
	struct wpa_state_machine sm, struct wpa_eapol_key key)
	{
	struct wpa_eapol_ie_parse kde;
	struct wpa_stsl_search search;
	struct rsn_error_kde error;
	u16 mui, error_type;

	if (wpa_parse_kde_ies((const u8 *) (key + 1),
	WPA_GET_BE16(key->key_data_length), &kde) < 0) {
	wpa_printf(MSG_INFO, "RSN: Failed to parse KDEs in SMK Error");
	return;
	}

	if (kde.mac_addr == NULL \|\| kde.mac_addr_len < ETH_ALEN \|\|
	kde.error == NULL \|\| kde.error_len < sizeof(error)) {
	wpa_printf(MSG_INFO, "RSN: No MAC address or Error KDE in "
	"SMK Error");
	return;
	}

	search.addr = kde.mac_addr;
	search.sm = NULL;
	if (wpa_auth_for_each_sta(wpa_auth, wpa_stsl_select_sta, &search) ==
	0 \|\| search.sm == NULL) {
	wpa_printf(MSG_DEBUG, "RSN: Peer STA " MACSTR " not "
	"associated for SMK Error message from " MACSTR,
	MAC2STR(kde.mac_addr), MAC2STR(sm->addr));
	return;
	}

	os_memcpy(&error, kde.error, sizeof(error));
	mui = be_to_host16(error.mui);
	error_type = be_to_host16(error.error_type);
	wpa_auth_vlogger(wpa_auth, sm->addr, LOGGER_INFO,
	"STA reported SMK Error: Peer " MACSTR
	" MUI %d Error Type %d",
	MAC2STR(kde.mac_addr), mui, error_type);

	wpa_smk_send_error(wpa_auth, search.sm, sm->addr, mui, error_type);
	}


	int wpa_stsl_remove(struct wpa_authenticator *wpa_auth,
	struct wpa_stsl_negotiation *neg)
	{
	struct wpa_stsl_negotiation pos, prev;

	if (wpa_auth == NULL)
	return -1;
	pos = wpa_auth->stsl_negotiations;
	prev = NULL;
	while (pos) {
	if (pos == neg) {
	if (prev)
	prev->next = pos->next;
	else
	wpa_auth->stsl_negotiations = pos->next;

	eloop_cancel_timeout(wpa_stsl_step, wpa_auth, pos);
	os_free(pos);
	return 0;
	}
	prev = pos;
	pos = pos->next;
	}

	return -1;
	}

	#endif /* CONFIG_PEERKEY */