[prev in list] [next in list] [prev in thread] [next in thread] 

List:       hostap
Subject:    Re: sample pac_file
From:       Jouni Malinen <j () w1 ! fi>
Date:       2008-10-24 19:48:09
Message-ID: 20081024194809.GG19710 () jm ! kir ! nu
[Download RAW message or body]

On Sat, Oct 25, 2008 at 12:38:29AM +0530, Paresh Sawant wrote:

> How this PAC-Opaque data is related to 16 octets of "pac_opaque_encr_key"
> that we specify in hostapd.conf ?
> 
> I see hostapd when it recives the PAC opaque(in client hello from peer), it
> looks for <2bytes of PAC_TYPE_PAC_OPAQUE><2bytes of length><opaqaue data>,
> it tries aes_unwrap on opaque data using pac_opaque_encr_key.

I'm not sure what exactly you are asking, but the way I read your
question, I would say that the following paragraph is answering it..
PAC-Opaque is an encrypted data blob (using AES key wrap with
pac_opaque_encr_key as the key) that contains information the server can
use to authenticate the user.

-- 
Jouni Malinen                                            PGP id EFC895FA
_______________________________________________
HostAP mailing list
HostAP@lists.shmoo.com
http://lists.shmoo.com/mailman/listinfo/hostap
[prev in list] [next in list] [prev in thread] [next in thread]