On Wed, 2018-02-07 at 20:35 +0100, Arend van Spriel wrote: > On 2/7/2018 5:20 PM, Srinivas Dasari wrote: > > This is needed to cover the case of DPP with the NIST P-521 and > > brainpoolP512r1 curves which derive a PMK that is longer than the > > previously used limit. > > So how are driver supposed to deal with this longer PMK. Maybe if you > could elaborate on what DPP stands for in this context it would become > more clear. device provisioning protocol, I guess? But longer curves and longer PMK is kinda obvious, whichever way that ends up getting used. > Can we stick with PMK_MAX_LEN or does it need to be more > fine-grained per use-case? If existing drivers only support 48 bytes PMK > and trust nl80211 code to check that limit it may screw them up. Not? Yeah I'm concerned about this too - and regardless of that issue, we probably need those drivers that do support it to advertise support for the new curves, and then allow the longer PMK length only for those that do? johannes
