On Tue, Jul 25, 2017 at 12:25:51PM +0900, Tomoharu Hatano wrote: > After KDF negotiation, must check only requested change occurred in the > list of AT_KDF attributes. If there are any other changes, the peer must > behave like the case that AT_MAC had been incorrect and authentication > is failed. These are defined in EAP-AKA' specification RFC5448. > > Adds a complete check of AT_KDF attributes and sends Client-Error if a > change which is not requested is included in it. Thanks, applied. -- Jouni Malinen PGP id EFC895FA _______________________________________________ Hostap mailing list Hostap@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/hostap