sae_data::tmp field

os_memcpy(g_sae_data.tmp->own_addr, own_addr, ETH_ALEN);

esp_wpa3.c:140

os_memcpy(g_sae_data.tmp->peer_addr, bssid, ETH_ALEN);

esp_wpa3.c:141

if (g_sae_data.tmp && wpa3_check_sae_rejected_groups(g_sae_data.tmp->peer_rejected_groups)) {

esp_wpa3.c:338

wpa3_parse_sae_commit()

if (sta->sae->tmp) {

ieee802_11.c:65

rx_id = sta->sae->tmp->pw_id;

ieee802_11.c:66

sae_write_commit(sta->sae, buf, sta->sae->tmp ?

ieee802_11.c:101

sta->sae->tmp->anti_clogging_token : NULL,

ieee802_11.c:102

check_sae_rejected_groups()

if (!data && sta->sae->tmp && sta->sae->tmp->pw_id) {

ieee802_11.c:140

auth_sae_send_commit()

if (sta->sae->tmp && sta->sae->h2e) {

ieee802_11.c:147

auth_sae_send_commit()

if (sta->sae->tmp) {

ieee802_11.c:273

sae_sm_step()

if (!sae->tmp)

ieee802_11.c:436

groups = sae->tmp->peer_rejected_groups;

ieee802_11.c:438

check_sae_rejected_groups()

if (sta->sae->tmp)

ieee802_11.c:577

handle_auth_sae()

tmp = sae->tmp = os_zalloc(sizeof(*tmp));

sae.c:30

sae_set_group()

if (sae == NULL || sae->tmp == NULL)

sae.c:89

tmp = sae->tmp;

sae.c:91

sae->tmp = NULL;

sae.c:108

bits = crypto_ec_prime_len_bits(sae->tmp->ec);

sae.c:148

prime, sae->tmp->prime_len, pwd_value, bits) < 0)

sae.c:150

buf_shift_right(pwd_value, sae->tmp->prime_len, 8 - bits % 8);

sae.c:153

cmp_prime = const_time_memcmp(pwd_value, prime, sae->tmp->prime_len);

sae.c:157

x_cand = crypto_bignum_init_set(pwd_value, sae->tmp->prime_len);

sae.c:165

y_sqr = crypto_ec_point_compute_y_sqr(sae->tmp->ec, x_cand);

sae.c:168

res = dragonfly_is_quadratic_residue_blind(sae->tmp->ec, qr, qnr,

sae.c:173

size_t bits = sae->tmp->prime_len * 8;

sae.c:190

sae->tmp->dh->prime, sae->tmp->prime_len, pwd_value,

sae.c:200

res = const_time_memcmp(pwd_value, sae->tmp->dh->prime,

sae.c:207

sae->tmp->prime_len);

sae.c:208

a = crypto_bignum_init_set(pwd_value, sae->tmp->prime_len);

sae.c:222

if (sae->tmp->dh->safe_prime) {

sae.c:229

crypto_bignum_sub(sae->tmp->prime, b, b) < 0 ||

sae.c:241

crypto_bignum_div(b, sae->tmp->order, b) < 0)

sae.c:242

res = crypto_bignum_exptmod(a, b, sae->tmp->prime, pwe);

sae.c:249

prime_len = sae->tmp->prime_len;

sae.c:304

if (crypto_bignum_to_bin(sae->tmp->prime, prime, sizeof(prime),

sae.c:305

if (dragonfly_get_random_qr_qnr(sae->tmp->prime, &qr, &qnr) < 0 ||

sae.c:313

y = crypto_ec_point_compute_y_sqr(sae->tmp->ec, x);

sae.c:400

dragonfly_sqrt(sae->tmp->ec, y, y) < 0 ||

sae.c:402

crypto_bignum_sub(sae->tmp->prime, y, y) < 0 ||

sae.c:405

crypto_ec_point_deinit(sae->tmp->pwe_ecc, 1);

sae.c:417

sae->tmp->pwe_ecc = crypto_ec_point_from_bin(sae->tmp->ec, x_y);

sae.c:418

if (!sae->tmp->pwe_ecc) {

sae.c:419

size_t prime_len = sae->tmp->prime_len * 8;

sae.c:451

crypto_bignum_deinit(sae->tmp->pwe_ffc, 1);

sae.c:454

sae->tmp->pwe_ffc = NULL;

sae.c:455

sae->tmp->pwe_ffc = crypto_bignum_init_set(pwe_buf, prime_len);

sae.c:517

return sae->tmp->pwe_ffc ? 0 : -1;

sae.c:521

if (!sae->tmp->own_commit_element_ecc) {

sae.c:1237

sae->tmp->own_commit_element_ecc =

sae.c:1238

crypto_ec_point_init(sae->tmp->ec);

sae.c:1239

if (!sae->tmp->own_commit_element_ecc)

sae.c:1240

if (crypto_ec_point_mul(sae->tmp->ec, sae->tmp->pwe_ecc, mask,

sae.c:1244

sae->tmp->own_commit_element_ecc) < 0 ||

sae.c:1245

crypto_ec_point_invert(sae->tmp->ec,

sae.c:1246

sae->tmp->own_commit_element_ecc) < 0) {

sae.c:1247

if (!sae->tmp->own_commit_element_ffc) {

sae.c:1260

sae->tmp->own_commit_element_ffc = crypto_bignum_init();

sae.c:1261

if (!sae->tmp->own_commit_element_ffc)

sae.c:1262

if (crypto_bignum_exptmod(sae->tmp->pwe_ffc, mask, sae->tmp->prime,

sae.c:1266

sae->tmp->own_commit_element_ffc) < 0 ||

sae.c:1267

crypto_bignum_inverse(sae->tmp->own_commit_element_ffc,

sae.c:1268

sae->tmp->prime,

sae.c:1269

sae->tmp->own_commit_element_ffc) < 0) {

sae.c:1270

if (!sae->tmp->sae_rand)

sae.c:1285

sae->tmp->sae_rand = crypto_bignum_init();

sae.c:1286

if (!sae->tmp->own_commit_scalar)

sae.c:1287

sae->tmp->own_commit_scalar = crypto_bignum_init();

sae.c:1288

ret = !mask || !sae->tmp->sae_rand || !sae->tmp->own_commit_scalar ||

sae.c:1289

dragonfly_generate_scalar(sae->tmp->order, sae->tmp->sae_rand,

sae.c:1290

sae->tmp->own_commit_scalar) < 0 ||

(sae->tmp->ec &&

(sae->tmp->dh &&

if (sae->tmp == NULL ||

sae.c:1306

(sae->tmp->ec && sae_derive_pwe_ecc(sae, addr1, addr2, password,

sae.c:1307

(sae->tmp->dh && sae_derive_pwe_ffc(sae, addr1, addr2, password,

sae.c:1309

if (!sae->tmp)

sae.c:1323

os_memcpy(sae->tmp->ssid, pt->ssid, pt->ssid_len);

sae.c:1337

sae->tmp->ssid_len = pt->ssid_len;

sae.c:1338

sae->tmp->ap_pk = pk;

sae.c:1339

sae->tmp->own_addr_higher = os_memcmp(addr1, addr2, ETH_ALEN) > 0;

sae.c:1342

wpabuf_free(sae->tmp->own_rejected_groups);

sae.c:1343

sae->tmp->own_rejected_groups = NULL;

sae.c:1344

sae->tmp->own_rejected_groups = groups;

sae.c:1355

crypto_ec_point_deinit(sae->tmp->pwe_ecc, 1);

sae.c:1359

sae->tmp->pwe_ecc = sae_derive_pwe_from_pt_ecc(pt, addr1,

sae.c:1360

if (!sae->tmp->pwe_ecc)

sae.c:1362

crypto_bignum_deinit(sae->tmp->pwe_ffc, 1);

sae.c:1367

sae->tmp->pwe_ffc = sae_derive_pwe_from_pt_ffc(pt, addr1,

sae.c:1368

if (!sae->tmp->pwe_ffc)

sae.c:1370

K = crypto_ec_point_init(sae->tmp->ec);

sae.c:1384

if (crypto_ec_point_mul(sae->tmp->ec, sae->tmp->pwe_ecc,

sae.c:1395

crypto_ec_point_add(sae->tmp->ec, K,

sae.c:1397

sae->tmp->peer_commit_element_ecc, K) < 0 ||

sae.c:1398

crypto_ec_point_mul(sae->tmp->ec, K, sae->tmp->sae_rand, K) < 0 ||

sae.c:1399

crypto_ec_point_is_at_infinity(sae->tmp->ec, K) ||

sae.c:1400

crypto_ec_point_to_bin(sae->tmp->ec, K, k, NULL) < 0) {

sae.c:1401

if (crypto_bignum_exptmod(sae->tmp->pwe_ffc, sae->peer_commit_scalar,

sae.c:1431

sae->tmp->prime, K) < 0 ||

sae.c:1432

crypto_bignum_mulmod(K, sae->tmp->peer_commit_element_ffc,

sae.c:1433

sae->tmp->prime, K) < 0 ||

sae.c:1434

crypto_bignum_exptmod(K, sae->tmp->sae_rand, sae->tmp->prime, K) < 0

sae.c:1435

crypto_bignum_to_bin(K, k, SAE_MAX_PRIME_LEN, sae->tmp->prime_len) <

sae.c:1438

size_t hash_len, salt_len, prime_len = sae->tmp->prime_len;

sae.c:1473

else if (sae->tmp->dh)

sae.c:1492

if (sae->h2e && (sae->tmp->own_rejected_groups ||

sae.c:1501

sae->tmp->peer_rejected_groups)) {

sae.c:1502

own = sae->tmp->own_rejected_groups;

sae.c:1505

peer = sae->tmp->peer_rejected_groups;

sae.c:1506

if (sae->tmp->own_addr_higher) {

sae.c:1515

if (crypto_bignum_add(sae->tmp->own_commit_scalar,

sae.c:1541

crypto_bignum_mod(tmp, sae->tmp->order, tmp) < 0)

sae.c:1543

sae->tmp->order_len) < 0) {

sae.c:1552

val, sae->tmp->order_len,

sae.c:1560

val, sae->tmp->order_len,

sae.c:1565

os_memcpy(sae->tmp->kck, keys, hash_len);

sae.c:1577

sae->tmp->kck_len = hash_len;

sae.c:1578

os_memcpy(sae->tmp->kek, keys + hash_len + SAE_PMK_LEN,

sae.c:1584

sae->tmp->kek_len = hash_len;

sae.c:1586

if (sae->tmp == NULL ||

sae.c:1607

sae_process_commit()

(sae->tmp->ec && sae_derive_k_ecc(sae, k) < 0) ||

sae.c:1608

sae_process_commit()

(sae->tmp->dh && sae_derive_k_ffc(sae, k) < 0) ||

sae.c:1609

sae_process_commit()

if (sae->tmp == NULL)

sae.c:1621

pos = wpabuf_put(buf, sae->tmp->prime_len);

sae.c:1630

if (crypto_bignum_to_bin(sae->tmp->own_commit_scalar, pos,

sae.c:1631

sae->tmp->prime_len, sae->tmp->prime_len) < 0) {

if (sae->tmp->ec) {

pos = wpabuf_put(buf, 2 * sae->tmp->prime_len);

sae.c:1639

if (crypto_ec_point_to_bin(sae->tmp->ec,

sae.c:1640

sae.c:1641

pos, pos + sae->tmp->prime_len) < 0) {

sae.c:1642

pos = wpabuf_put(buf, sae->tmp->prime_len);

sae.c:1651

if (crypto_bignum_to_bin(sae->tmp->own_commit_element_ffc, pos,

sae.c:1652

sae->tmp->prime_len, sae->tmp->prime_len) < 0) {

sae.c:1653

if (sae->h2e && sae->tmp->own_rejected_groups) {

sae.c:1671

1 + wpabuf_len(sae->tmp->own_rejected_groups));

sae.c:1676

wpabuf_put_buf(buf, sae->tmp->own_rejected_groups);

sae.c:1678

if (sae->tmp == NULL) {

sae.c:1733

sae_group_allowed()

if (sae->tmp->dh && !allowed_groups) {

sae.c:1738

sae_group_allowed()

scalar_elem_len = (sae->tmp->ec ? 3 : 2) * sae->tmp->prime_len;

sae.c:1802

sae_parse_commit_token()

if (sae->tmp->prime_len > end - *pos) {

sae.c:1844

peer_scalar = crypto_bignum_init_set(*pos, sae->tmp->prime_len);

sae.c:1849

crypto_bignum_cmp(peer_scalar, sae->tmp->order) >= 0) {

sae.c:1871

*pos += sae->tmp->prime_len;

sae.c:1882

if (2 * sae->tmp->prime_len > end - *pos) {

sae.c:1893

if (crypto_bignum_to_bin(sae->tmp->prime, prime, sizeof(prime),

sae.c:1899

sae->tmp->prime_len) < 0)

sae.c:1900

if (os_memcmp(*pos, prime, sae->tmp->prime_len) >= 0 ||

sae.c:1904

os_memcmp(*pos + sae->tmp->prime_len, prime,

sae.c:1905

sae->tmp->prime_len) >= 0) {

sae.c:1906

crypto_ec_point_deinit(sae->tmp->peer_commit_element_ecc, 0);

sae.c:1917

sae->tmp->peer_commit_element_ecc =

sae.c:1918

crypto_ec_point_from_bin(sae->tmp->ec, *pos);

sae.c:1919

if (!sae->tmp->peer_commit_element_ecc) {

sae.c:1920

if (!crypto_ec_point_is_on_curve(sae->tmp->ec,

sae.c:1925

sae->tmp->peer_commit_element_ecc)) {

sae.c:1926

*pos += 2 * sae->tmp->prime_len;

sae.c:1931

if (sae->tmp->prime_len > end - *pos) {

sae.c:1943

crypto_bignum_deinit(sae->tmp->peer_commit_element_ffc, 0);

sae.c:1951

sae->tmp->peer_commit_element_ffc =

sae.c:1952

crypto_bignum_init_set(*pos, sae->tmp->prime_len);

sae.c:1953

if (sae->tmp->peer_commit_element_ffc == NULL)

sae.c:1954

crypto_bignum_sub(sae->tmp->prime, one, res) ||

sae.c:1960

crypto_bignum_is_zero(sae->tmp->peer_commit_element_ffc) ||

sae.c:1961

crypto_bignum_is_one(sae->tmp->peer_commit_element_ffc) ||

sae.c:1962

crypto_bignum_cmp(sae->tmp->peer_commit_element_ffc, res) >= 0) {

sae.c:1963

if (crypto_bignum_exptmod(sae->tmp->peer_commit_element_ffc,

sae.c:1972

sae->tmp->order, sae->tmp->prime, res) < 0 ||

sae.c:1973

*pos += sae->tmp->prime_len;

sae.c:1981

sae_parse_commit_element()

if (sae->tmp->dh)

sae.c:1990

if (sae->tmp->pw_id) {

sae.c:2005

os_free(sae->tmp->pw_id);

sae.c:2011

sae->tmp->pw_id = NULL;

sae.c:2012

if (sae->tmp->pw_id &&

sae.c:2024

(len != os_strlen(sae->tmp->pw_id) ||

sae.c:2025

os_memcmp(sae->tmp->pw_id, epos, len) != 0)) {

sae.c:2026

os_free(sae->tmp->pw_id);

sae.c:2033

sae->tmp->pw_id = os_malloc(len + 1);

sae.c:2034

if (!sae->tmp->pw_id)

sae.c:2035

os_memcpy(sae->tmp->pw_id, epos, len);

sae.c:2037

sae->tmp->pw_id[len] = '\0';

sae.c:2038

wpabuf_free(sae->tmp->peer_rejected_groups);

sae.c:2053

sae->tmp->peer_rejected_groups = NULL;

sae.c:2054

wpabuf_free(sae->tmp->peer_rejected_groups);

sae.c:2072

sae->tmp->peer_rejected_groups = wpabuf_alloc(len);

sae.c:2073

if (!sae->tmp->peer_rejected_groups)

sae.c:2074

wpabuf_put_data(sae->tmp->peer_rejected_groups, epos, len);

sae.c:2076

wpabuf_free(sae->tmp->peer_rejected_groups);

sae.c:2152

sae->tmp->peer_rejected_groups = NULL;

sae.c:2153

if (!sae->tmp->own_commit_scalar ||

sae.c:2187

crypto_bignum_cmp(sae->tmp->own_commit_scalar,

(sae->tmp->dh &&

(!sae->tmp->own_commit_element_ffc ||

sae.c:2191

crypto_bignum_cmp(sae->tmp->own_commit_element_ffc,

sae.c:2192

sae->tmp->peer_commit_element_ffc) != 0)) ||

(sae->tmp->ec &&

(!sae->tmp->own_commit_element_ecc ||

sae.c:2195

crypto_ec_point_cmp(sae->tmp->ec,

sae.c:2196

sae.c:2197

sae->tmp->peer_commit_element_ecc) != 0)))

sae.c:2198

sae->tmp->prime_len) < 0 ||

sae.c:2230

sae->tmp->prime_len) < 0)

sae.c:2232

len[1] = sae->tmp->prime_len;

sae.c:2237

len[3] = sae->tmp->prime_len;

sae.c:2241

return hkdf_extract(sae->tmp->kck_len, sae->tmp->kck, sae->tmp->kck_len,

sae.c:2244

if (crypto_ec_point_to_bin(sae->tmp->ec, element1, element_b1,

sae.c:2259

element_b1 + sae->tmp->prime_len) < 0) {

sae.c:2260

if (crypto_ec_point_to_bin(sae->tmp->ec, element2, element_b2,

sae.c:2264

element_b2 + sae->tmp->prime_len) < 0) {

sae.c:2265

sae_cn_confirm(sae, sc, scalar1, element_b1, 2 * sae->tmp->prime_len,

sae.c:2270

scalar2, element_b2, 2 * sae->tmp->prime_len, confirm);

sae.c:2271

sae->tmp->prime_len) < 0) {

sae.c:2287

sae->tmp->prime_len) < 0) {

sae.c:2292

if (sae_cn_confirm(sae, sc, scalar1, element_b1, sae->tmp->prime_len,

sae.c:2297

scalar2, element_b2, sae->tmp->prime_len, confirm) < 0)

sae.c:2298

if (sae->tmp == NULL)

sae.c:2309

hash_len = sae->tmp->kck_len;

if (sae->tmp->ec) {

if (sae_cn_confirm_ecc(sae, sc, sae->tmp->own_commit_scalar,

sae.c:2321

sae.c:2322

sae->tmp->peer_commit_element_ecc,

sae.c:2324

if (sae_cn_confirm_ffc(sae, sc, sae->tmp->own_commit_scalar,

sae.c:2330

sae->tmp->own_commit_element_ffc,

sae.c:2331

sae->tmp->peer_commit_element_ffc,

if (!sae->tmp)

hash_len = sae->tmp->kck_len;

sae.c:2351

if (sae->tmp == NULL || !sae->peer_commit_scalar ||

sae.c:2359

!sae->tmp->own_commit_scalar) {

if (sae->tmp->ec) {

if (!sae->tmp->peer_commit_element_ecc ||

sae.c:2366

!sae->tmp->own_commit_element_ecc)

sae.c:2367

sae->tmp->peer_commit_element_ecc,

sae.c:2370

sae->tmp->own_commit_scalar,

sae.c:2371

sae.c:2372

if (!sae->tmp->peer_commit_element_ffc ||

sae.c:2378

!sae->tmp->own_commit_element_ffc)

sae.c:2379

sae->tmp->peer_commit_element_ffc,

sae.c:2382

sae->tmp->own_commit_scalar,

sae.c:2383

sae->tmp->own_commit_element_ffc,

sae.c:2384

sae_pk_valid_fingerprint()

struct sae_temporary_data *tmp = sae->tmp;

sae_pk.c:383

sae_pk_set_password()

struct sae_temporary_data *tmp = sae->tmp;

sae_pk.c:485

sae_pk_hash_sig_data()

struct sae_temporary_data *tmp = sae->tmp;

sae_pk.c:544

struct sae_temporary_data *tmp = sae->tmp;

sae_pk.c:612

sae_check_confirm_pk()

Call Tree

All items filtered out

Data Use

sae_data::tmp is written by 2 functions and is read by 40 functions:

sae_set_group()

sae_data::tmp

check_sae_rejected_groups()

auth_sae_send_commit()

sae_sm_step()

handle_auth_sae()

sae_parse_commit_token()

sae_parse_commit_element()

sae_pk_valid_fingerprint()

sae_pk_set_password()

sae_pk_hash_sig_data()

sae_check_confirm_pk()