2 * EAP-FAST definitions (RFC 4851)
3 * Copyright (c) 2004-2007, Jouni Malinen <j@w1.fi>
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
9 * Alternatively, this software may be distributed under the terms of BSD
12 * See README and COPYING for more details.
18 #define EAP_FAST_VERSION 1
19 #define EAP_FAST_KEY_LEN 64
20 #define EAP_FAST_SIMCK_LEN 40
21 #define EAP_FAST_SKS_LEN 40
23 #define TLS_EXT_PAC_OPAQUE 35
26 * draft-cam-winget-eap-fast-provisioning-04.txt:
27 * Section 4.2.1 - Formats for PAC TLV Attributes / Type Field
28 * Note: bit 0x8000 (Mandatory) and bit 0x4000 (Reserved) are also defined
29 * in the general PAC TLV format (Section 4.2).
31 #define PAC_TYPE_PAC_KEY 1
32 #define PAC_TYPE_PAC_OPAQUE 2
33 #define PAC_TYPE_CRED_LIFETIME 3
34 #define PAC_TYPE_A_ID 4
35 #define PAC_TYPE_I_ID 5
37 * 6 was previous assigned for SERVER_PROTECTED_DATA, but
38 * draft-cam-winget-eap-fast-provisioning-02.txt changed this to Reserved.
40 #define PAC_TYPE_A_ID_INFO 7
41 #define PAC_TYPE_PAC_ACKNOWLEDGEMENT 8
42 #define PAC_TYPE_PAC_INFO 9
43 #define PAC_TYPE_PAC_TYPE 10
59 #define EAP_FAST_PAC_KEY_LEN 32
61 /* draft-cam-winget-eap-fast-provisioning-04.txt: 4.2.6 PAC-Type TLV
62 * Note: Machine Authentication PAC and User Authorization PAC were removed in
63 * draft-cam-winget-eap-fast-provisioning-03.txt
65 #define PAC_TYPE_TUNNEL_PAC 1
66 /* Application Specific Short Lived PACs (only in volatile storage) */
67 /* User Authorization PAC */
68 #define PAC_TYPE_USER_AUTHORIZATION 3
69 /* Application Specific Long Lived PACs */
70 /* Machine Authentication PAC */
71 #define PAC_TYPE_MACHINE_AUTHENTICATION 2
75 * draft-cam-winget-eap-fast-provisioning-04.txt:
76 * Section 3.4 - Key Derivations Used in the EAP-FAST Provisioning Exchange
78 struct eap_fast_key_block_provisioning {
79 /* Extra key material after TLS key_block */
80 u8 session_key_seed[EAP_FAST_SKS_LEN];
81 u8 server_challenge[16]; /* MSCHAPv2 ServerChallenge */
82 u8 client_challenge[16]; /* MSCHAPv2 ClientChallenge */
85 #endif /* EAP_FAST_H */