The introduced SHA1_NOFINAL hasher was not sufficient for EAP-AKA,
authorMartin Willi <martin@strongswan.org>
Wed, 19 Mar 2008 14:02:52 +0000 (14:02 -0000)
committerMartin Willi <martin@strongswan.org>
Wed, 19 Mar 2008 14:02:52 +0000 (14:02 -0000)
commitcfede7f6e26351e9edf4a10ab40c292d2f7142bc
tree6cd01db7a5b7c71fa05e4034db086ecce5afe1ab
parentc912c3d382172999be8a0827180a0cabd0f982b9
The introduced SHA1_NOFINAL hasher was not sufficient for EAP-AKA,
as it requires to XOR the key into the hashers state.
A new SHA1 based keyed hash function, implemented as PRF, enables EAP-AKA
and the FIPS-PRF function to properly use the existing SHA1 implementation.
src/charon/plugins/eap_aka/eap_aka.c
src/charon/plugins/unit_tester/tests/test_fips_prf.c
src/libstrongswan/crypto/hashers/hasher.c
src/libstrongswan/crypto/hashers/hasher.h
src/libstrongswan/crypto/prfs/prf.c
src/libstrongswan/crypto/prfs/prf.h
src/libstrongswan/plugins/fips_prf/fips_prf.c
src/libstrongswan/plugins/sha1/sha1_hasher.c
src/libstrongswan/plugins/sha1/sha1_hasher.h
src/libstrongswan/plugins/sha1/sha1_plugin.c