Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-12-31 | aux/wpa: get rid of custom Hfmt() routine, just use encodefmt. use %E for ↵ | cinap_lenrek | |
mac addresses | |||
2017-10-17 | aux/wpa: prevent PTK re-installation attack by replaying AP retransmits | cinap_lenrek | |
this implements the mitigation suggested in section "6.5 Countermeasures" of "Key Reinstallation Attacks: Forcing Nonce Resuse in WPA2" [1]. [1] https://papers.mathyvanhoef.com/ccs2017.pdf | |||
2017-04-02 | aux/wpa: go to background when not prompting, handle open networks | cinap_lenrek | |
2017-02-16 | wpa: dont send initial "start" message, faster polling interval waiting for ↵ | cinap_lenrek | |
connection the kernel will automatically timeout the eap blocked state for us and reassociate for us, so there is no need to provoke the ap to start the wpa/eap handshake. make the polling faster changing the sleep time from 500 to 100 ms. | |||
2015-06-28 | wpa: do not prompt for key when there is already one in factotum | cinap_lenrek | |
2015-01-27 | wpa: fix password avp padding, recognize wpa1 authentication oui | cinap_lenrek | |
we have to padd the data portion in the password avp, not add padding after the avp. | |||
2015-01-27 | wpa: do not forward alert tls records, close connection | cinap_lenrek | |
2015-01-26 | wpa: cleanup, pad eap-ttls/pap password, zero passwords and key material ↵ | cinap_lenrek | |
after use | |||
2015-01-25 | wpa: experimental wpa2 enterprise support | cinap_lenrek | |
this adds support for eap-peap/mschapv2 and eap-ttls/pap. code has only been tested with freeradius and a cheap access point, not tested with actual eduroam network. | |||
2014-11-17 | wpa: handle essid: with whitespaces from ether ifstats file | cinap_lenrek | |
2014-11-17 | wpa: fix quoting for essid with spaces | cinap_lenrek | |
2014-11-02 | wpa: fork note group when going to background (thanks jpm) | cinap_lenrek | |
bug: as jpm pointed out, when we run aux/wpa in rio window and delete the window, aux/wpa was killed as it shared the note group of the window. fix: fork the notegroup. | |||
2013-08-19 | wpa: repeat rsne setup after deassociation (roamng between access points) | cinap_lenrek | |
the "auth" ctl command only sets the rsne of the current selected access point. so on deassociation, we wait for the connection to the potentially new access point and then setup new rsne before processing eapol messages. | |||
2013-07-18 | wpa: wait for bss to connect | cinap_lenrek | |
waiting at the auth command is too late because we want to read the brsne first to build the rsne used in the auth message. | |||
2013-07-18 | wifi: make "auth" command non-blocking, let aux/wpa do the waiting for bss ↵ | cinap_lenrek | |
scan to complete. | |||
2013-06-24 | wpa: fix error reporting for getptk(), use readn() to read ifstats file | cinap_lenrek | |
2013-06-24 | wpa: deassociation, reply eapol version, send rsc 0 and reset install flag ↵ | cinap_lenrek | |
on message D reply, use 0 for txkey tsc | |||
2013-06-22 | wpa: check for eapol v2 | ppatience0 | |
2013-06-22 | wpa: s/peerwise/pairwise/g, fix bug where p is not incremented after | ppatience0 | |
reading wpa1oui into w, making the later memcmp with wpatkipoui bogus. | |||
2013-06-16 | wpa: fix bug | cinap_lenrek | |
2013-06-15 | wpa: automatically pick cipher suits from beacon rsne | cinap_lenrek | |
2013-06-02 | aux/wpa: make sure essid is configured, dont make factotum ask for essid | cinap_lenrek | |
2013-03-23 | wpa: fix rsc for wpa2 | cinap_lenrek | |
in wpa2, the rsc field of the eapol message3 is the packet number for *group* messages that the ap will use as there is no separate group key message. in wpa1, we use it for the peerwise key. | |||
2013-03-23 | wpa: remove debug print | cinap_lenrek | |
2013-03-23 | add experimental wpa2/ccmp support | cinap_lenrek | |
2013-03-17 | wpa: initial support for rsn | cinap_lenrek | |
2013-03-09 | aux/wpa: check reply counter only after mic check | cinap_lenrek | |
2013-03-09 | add wpa key setup program aux/wpa | cinap_lenrek | |