Re: [Emu] draft-urien-eap-smartcard-20.txt

["Michael Thomsen" <[e-mail]>]

Hi Pascal,

sorry, I don't quite understand what you mean by "former EAP-AKA version", but I've stumpled upon a few things I don't quite understand:

1:
--
In test #2 (Wrong SQN) you're calculating MAC-S with a non-zero AMF giving 7CD924E739F12369. According to 3GPP TS 33.102 AMF is set to zeros when calculating AUTS. When doing that I get 0010C1DA38A75A31 instead.

According to RFC4187 AT_AUTS should include "the AKA AUTS parameter, 112 bits" I don't see anything about the AMF field not being zeroed, as it is per usual.

2:
--
In test #6 (Reauth, Good Counter) the counter value is 0000, whereas RFC4187 specifies that the minimum counter value of the first packet should be 0001. Also, you use the 64-byte MSK value generated in test #1 instead of MK, whereas RFC4187 specifies XKEY'=SHA1(Identity|counter|NONCE_S|MK). This obviously gives a quite different result than what you get.

3:
--
In the "Get MSK" commands in test #1 and test #6 the first 32 bytes of MSK are switched with the last 32 bytes of MSK. I don't see anything in your document stating that this should be the behaviour.

4:
--
In test #6 and test #7 the MAC is not calculated over (EAP-packet | Nounce-S), as specified in RFC4187.

Kind regards,
  Michael Thomsen