wireshark/epan/crypt
Mikael Kanstrup 42544c8c44 dot11decrypt: Support decryption using TK user input
Add support for TK user input keys. With this Wireshark can
decrypt packet captures where 4WHS frames are missing and
packet captures with non-supported AKMS, for example
802.11r / Fast BSS Transitioning.

Decryption using user TK works as a backup if the normal
decryption flow does not succeed. Having TK decryption keys
added will affect general IEEE 802.11 dissector performance
as each encrypted packet will be tested with every TK.
Worst case scenario is plenty of TKs where none of them
matches encrypted frames.

On successful user TK decryption an SA is formed based on
parameters used to decrypt the frame. This SA is similar to
what is formed when Wireshark detects and derive keys from
4WHS messages. With the SA entry in place the decryption
performance (success case) should be on par with "normal"
decryption flow.

Bug: 16579
Change-Id: I72c2c1e2c6693131d3ba07f8ddb8ff772c1b54a9
Reviewed-on: https://code.wireshark.org/review/37217
Petri-Dish: Anders Broman <a.broman58@gmail.com>
Tested-by: Petri Dish Buildbot
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-06-01 07:23:56 +00:00
..
CMakeLists.txt dot11decrypt: Let libgcrypt handle AES unwrap 2020-03-15 14:55:01 +00:00
CMakeListsCustom.txt.example spdx: more licenses converted. 2018-03-07 15:56:44 +00:00
dot11decrypt.c dot11decrypt: Support decryption using TK user input 2020-06-01 07:23:56 +00:00
dot11decrypt_ccmp.c dot11decrypt: Make ccmp_construct_aad an internal utility function 2020-03-14 07:37:31 +00:00
dot11decrypt_ccmp_compat.c dot11decrypt: Silent Coverity Scan out-of-bounds access error 2020-04-05 08:30:35 +00:00
dot11decrypt_debug.h dot11decrypt: Remove DEBUG_TRACE_START/END macros 2020-05-25 10:33:34 +00:00
dot11decrypt_gcmp.c ieee80211: GCMP decryption support 2020-03-14 17:53:36 +00:00
dot11decrypt_int.h ieee80211: GCMP decryption support 2020-03-14 17:53:36 +00:00
dot11decrypt_interop.h spdx: convert files with multiple licenses. 2018-03-09 12:13:23 +00:00
dot11decrypt_system.h dot11decrypt: Use hash table to store SA entries 2020-05-25 12:31:37 +00:00
dot11decrypt_tkip.c spdx: convert files with multiple licenses. 2018-03-09 12:13:23 +00:00
dot11decrypt_user.h dot11decrypt: Support decryption using TK user input 2020-06-01 07:23:56 +00:00
dot11decrypt_util.c dot11decrypt: Silent Coverity Scan out-of-bounds access error 2020-04-05 08:30:35 +00:00
dot11decrypt_util.h Add a newline at the end of the file. 2020-04-20 19:21:13 +00:00
dot11decrypt_ws.h spdx: convert files with multiple licenses. 2018-03-09 12:13:23 +00:00
kasumi.h epan: use SPDX indentifiers. 2018-02-08 19:29:45 +00:00
wep-wpadefs.h dot11decrypt: Support decryption using TK user input 2020-06-01 07:23:56 +00:00