533 static int hkdf_extract(size_t hash_len, const u8 *salt, size_t salt_len,  in hkdf_extract()  argument
537 	if (hash_len == 32)  in hkdf_extract()
541 	if (hash_len == 48)  in hkdf_extract()
546 	if (hash_len == 64)  in hkdf_extract()
554 static int hkdf_expand(size_t hash_len, const u8 *prk, size_t prk_len,  in hkdf_expand()  argument
559 	if (hash_len == 32)  in hkdf_expand()
564 	if (hash_len == 48)  in hkdf_expand()
570 	if (hash_len == 64)  in hkdf_expand()
832 static int sae_pwd_seed(size_t hash_len, const u8 *ssid, size_t ssid_len,  in sae_pwd_seed()  argument
854 	if (hkdf_extract(hash_len, ssid, ssid_len, num_elem, addr, len,  in sae_pwd_seed()
857 	wpa_hexdump_key(MSG_DEBUG, "SAE: pwd-seed", pwd_seed, hash_len);  in sae_pwd_seed()
880 	size_t pwd_value_len, hash_len, prime_len;  in sae_derive_pt_ecc()  local
889 	hash_len = sae_ecc_prime_len_2_hash_len(prime_len);  in sae_derive_pt_ecc()
894 	if (sae_pwd_seed(hash_len, ssid, ssid_len, password, password_len,  in sae_derive_pt_ecc()
900 	if (hkdf_expand(hash_len, pwd_seed, hash_len,  in sae_derive_pt_ecc()
922 	if (hkdf_expand(hash_len, pwd_seed, hash_len,  in sae_derive_pt_ecc()
978 	size_t hash_len, prime_len, pwd_value_len;  in sae_derive_pt_ffc()  local
992 	hash_len = sae_ffc_prime_len_2_hash_len(prime_len);  in sae_derive_pt_ffc()
999 	if (sae_pwd_seed(hash_len, ssid, ssid_len, password, password_len,  in sae_derive_pt_ffc()
1004 	if (hkdf_expand(hash_len, pwd_seed, hash_len,  in sae_derive_pt_ffc()
1155 	size_t hash_len;  in sae_derive_pwe_from_pt_ecc()  local
1173 	hash_len = sae_ecc_prime_len_2_hash_len(prime_len);  in sae_derive_pwe_from_pt_ecc()
1174 	os_memset(salt, 0, hash_len);  in sae_derive_pwe_from_pt_ecc()
1175 	if (hkdf_extract(hash_len, salt, hash_len, 2, addr, len, hash) < 0)  in sae_derive_pwe_from_pt_ecc()
1177 	wpa_hexdump(MSG_DEBUG, "SAE: val", hash, hash_len);  in sae_derive_pwe_from_pt_ecc()
1182 	val = crypto_bignum_init_set(hash, hash_len);  in sae_derive_pwe_from_pt_ecc()
1219 	size_t hash_len;  in sae_derive_pwe_from_pt_ffc()  local
1235 	hash_len = sae_ffc_prime_len_2_hash_len(prime_len);  in sae_derive_pwe_from_pt_ffc()
1236 	os_memset(salt, 0, hash_len);  in sae_derive_pwe_from_pt_ffc()
1237 	if (hkdf_extract(hash_len, salt, hash_len, 2, addr, len, hash) < 0)  in sae_derive_pwe_from_pt_ffc()
1239 	wpa_hexdump(MSG_DEBUG, "SAE: val", hash, hash_len);  in sae_derive_pwe_from_pt_ffc()
1243 	val = crypto_bignum_init_set(hash, hash_len);  in sae_derive_pwe_from_pt_ffc()
1508 static int sae_kdf_hash(size_t hash_len, const u8 *k, const char *label,  in sae_kdf_hash()  argument
1512 	if (hash_len == 32)  in sae_kdf_hash()
1513 		return sha256_prf(k, hash_len, label,  in sae_kdf_hash()
1516 	if (hash_len == 48)  in sae_kdf_hash()
1517 		return sha384_prf(k, hash_len, label,  in sae_kdf_hash()
1521 	if (hash_len == 64)  in sae_kdf_hash()
1522 		return sha512_prf(k, hash_len, label,  in sae_kdf_hash()
1538 	size_t hash_len, salt_len, prime_len = sae->tmp->prime_len;  in sae_derive_keys()  local
1555 		hash_len = SHA256_MAC_LEN;  in sae_derive_keys()
1557 		hash_len = sae_ffc_prime_len_2_hash_len(prime_len);  in sae_derive_keys()
1559 		hash_len = sae_ecc_prime_len_2_hash_len(prime_len);  in sae_derive_keys()
1588 		os_memset(zero, 0, hash_len);  in sae_derive_keys()
1590 		salt_len = hash_len;  in sae_derive_keys()
1596 	if (hkdf_extract(hash_len, salt, salt_len, 1, addr, len, keyseed) < 0)  in sae_derive_keys()
1598 	wpa_hexdump_key(MSG_DEBUG, "SAE: keyseed", keyseed, hash_len);  in sae_derive_keys()
1615 		if (sae_kdf_hash(hash_len, keyseed, "SAE-PK keys",  in sae_derive_keys()
1617 				 keys, 2 * hash_len + SAE_PMK_LEN) < 0)  in sae_derive_keys()
1620 		if (sae_kdf_hash(hash_len, keyseed, "SAE KCK and PMK",  in sae_derive_keys()
1622 				 keys, hash_len + SAE_PMK_LEN) < 0)  in sae_derive_keys()
1626 	if (sae_kdf_hash(hash_len, keyseed, "SAE KCK and PMK",  in sae_derive_keys()
1628 			 keys, hash_len + SAE_PMK_LEN) < 0)  in sae_derive_keys()
1633 	os_memcpy(sae->tmp->kck, keys, hash_len);  in sae_derive_keys()
1634 	sae->tmp->kck_len = hash_len;  in sae_derive_keys()
1635 	os_memcpy(sae->pmk, keys + hash_len, SAE_PMK_LEN);  in sae_derive_keys()
1639 		os_memcpy(sae->tmp->kek, keys + hash_len + SAE_PMK_LEN,  in sae_derive_keys()
1640 			  hash_len);  in sae_derive_keys()
1641 		sae->tmp->kek_len = hash_len;  in sae_derive_keys()
2240 	size_t hash_len;  in sae_write_confirm()  local
2246 	hash_len = sae->tmp->kck_len;  in sae_write_confirm()
2259 					 wpabuf_put(buf, hash_len));  in sae_write_confirm()
2265 					 wpabuf_put(buf, hash_len));  in sae_write_confirm()
2281 	size_t hash_len;  in sae_check_confirm()  local
2286 	hash_len = sae->tmp->kck_len;  in sae_check_confirm()
2287 	if (len < 2 + hash_len) {  in sae_check_confirm()
2319 	if (os_memcmp_const(verifier, data + 2, hash_len) != 0) {  in sae_check_confirm()
2322 			    data + 2, hash_len);  in sae_check_confirm()
2324 			    verifier, hash_len);  in sae_check_confirm()
2329 	if (sae_check_confirm_pk(sae, data + 2 + hash_len,  in sae_check_confirm()
2330 				 len - 2 - hash_len) < 0)  in sae_check_confirm()