Multi-link wireless communication security

1. A method for wireless communication performed by a first multi-link device (MLD), the method comprising:

transmitting a beacon frame to a second MLD, the beacon frame including a first plurality of medium access control (MAC) addresses of respective first devices associated with the first MLD;

receiving an association request from the second MLD, the association request including a second plurality of MAC addresses of respective second devices associated with the second MLD;

generating, during a handshake operation with the second MLD, one or more encryption keys configured to encrypt communications between the first MLD and the second MLD;

receiving an Extensible Authentication Protocol (EAP) over local area network (LAN) (EAPoL) message that includes a first set of key data encapsulations (KDEs) encapsulating an address of the second MLD and a third plurality of MAC addresses; and

verifying the second plurality of MAC addresses based at least in part on the one or more encryption keys and the first set of KDEs.

2. The method of claim 1 , further comprising:

generating a pairwise transient key (PTK) based at least in part on the one or more encryption keys.

3. The method of claim 2 , wherein the EAPoL message is a second EAPoL message, the method further comprising:

transmitting a first EAPoL message to the second MLD, wherein receiving the second EAPoL message is based at least in part on the first EAPoL message.

4. The method of claim 3 , wherein:

the first EAPoL message includes an AP nonce (ANonce); and

the second EAPoL message includes a STA nonce (SNonce) and a message integrity code (MIC).

5. The method of claim 4 , wherein generating the PTK is based at least in part on a pseudo-random function (PRF), a pairwise master key (PMK), the ANonce, or the SNonce.

6. The method of claim 4 , wherein verifying the plurality of second MAC addresses includes:

confirming that each of the third plurality of third MAC addresses matches a respective one of the second plurality of MAC addresses, wherein the second plurality of MAC addresses are compared to the third plurality of first MAC addresses indicated by the one or more encryption keys.

7. The method of claim 6 , further comprising:

transmitting a third EAPoL message to the second MLD, the third EAPoL message including a group temporal key (GTK) and a second set of KDEs encapsulating an address of the first MLD and a plurality of fourth MAC addresses.

8. The method of claim 7 , further comprising:

receiving a fourth EAPoL message from the second MLD; and

exchanging one or more encrypted packets with the second MLD responsive to the fourth EAPoL message, each of the one or more encrypted packets including a temporal key (TK) generated based on the PTK.

9. A wireless communication device comprising:

at least one modem;

at least one processor communicatively coupled with the at least one modem; and

at least one memory communicatively coupled with the at least one processor and storing processor-readable code that, when executed by the at least one processor in conjunction with the at least one modem, is configured to:

transmit, from a first multi-link device (MLD), a beacon frame to a second MLD, the beacon frame including a first plurality of medium access control (MAC) addresses of respective first devices associated with the first MLD;

receive an association request from the second MLD, the association request including a second plurality of MAC addresses of respective second devices associated with the second MLD;

generate, during a handshake operation with the second MLD, one or more encryption keys configured to encrypt communications between the first MLD and the second MLD;

receive an Extensible Authentication Protocol (EAP) over local area network (LAN) (EAPoL) message that includes a first set of key data encapsulations (KDEs) encapsulating an address of the second MLD and a third plurality of MAC addresses; and

verify the plurality of second MAC addresses based at least in part on the one or more encryption keys and the first set of KDEs.

10. The wireless communication device of claim 9 , wherein execution of the processor-readable code is further configured to:

generate a pairwise transient key (PTK) based at least in part on the one or more encryption keys.

11. The wireless communication device of claim 10 , wherein the EAPoL message is a second EAPoL message, wherein execution of the processor-readable code is further configured to:

transmit a first EAPoL message to the second MLD, wherein receiving the second EAPoL message is based at least in part on the first EAPoL message.

12. The wireless communication device of claim 11 , wherein:

the first EAPoL message includes an AP nonce (ANonce); and

the second EAPoL message includes a STA nonce (SNonce) and a message integrity code (MIC).

13. The wireless communication device of claim 12 , wherein the generation of the PTK is based at least in part on a pseudo-random function (PRF), a pairwise master key (PMK), the ANonce, or the SNonce.

14. The wireless communication device of claim 12 , wherein verifying the plurality of second MAC addresses includes:

confirming that each of the third plurality of MAC addresses matches a respective one of the second plurality of MAC addresses, wherein the second plurality of MAC addresses are compared to the third plurality of MAC addresses indicated by the one or more encryption keys.

15. The wireless communication device of claim 14 , wherein execution of the processor-readable code is further configured to:

transmit a third EAPoL message to the second MLD, the third EAPoL message including a group temporal key (GTK) and a second set of KDEs encapsulating an address of the first MLD and a fourth plurality of MAC addresses.

16. A method for wireless communication performed by a first multi-link device (MLD), the method comprising:

receiving a beacon frame from a second MLD, the beacon frame including a first plurality of medium access control (MAC) addresses of respective first devices associated with the second MLD;

transmitting an association request to the second MLD, the association request including a second plurality of MAC addresses of respective second devices associated with the first MLD;

generating, during a handshake operation with the second MLD, one or more encryption keys configured to encrypt communications between the second MLD and the first MLD;

receiving an Extensible Authentication Protocol (EAP) over local area network (LAN) (EAPoL) message that includes a set of first key data encapsulations (KDEs) encapsulating an address of the second MLD and a third plurality of MAC addresses; and

verifying the first plurality of MAC addresses based at least in part on the one or more encryption keys and the first set of first KDEs.

17. The method of claim 16 , further comprising:

generating a pairwise transient key (PTK) based at least in part on the one or more encryption keys.

18. The method of claim 17 , wherein the EAPoL message is a second EAPoL message, the method further comprising:

receiving a first EAPoL message from the second MLD, wherein transmitting the second EAPoL message is based at least in part on the first EAPoL message.

19. The method of claim 18 , wherein:

the first EAPoL message includes an AP nonce (ANonce); and

the second EAPoL message includes a STA nonce (SNonce) and a message integrity code (MIC).

20. The method of claim 19 , wherein generating the PTK is based at least in part on a pseudo-random function (PRF), a pairwise master key (PMK), the ANonce, or the SNonce.

21. The method of claim 18 , further comprising transmitting a third EAPoL message from the first MLD, the third EAPoL message including a second set of KDEs encapsulating an address of the first MLD and a fourth plurality of MAC addresses, wherein verifying the second plurality of MAC addresses includes confirming that each of the fourth plurality of MAC addresses matches a respective one of the second plurality of MAC addresses.

22. The method of claim 21 , further comprising:

transmitting a fourth EAPoL message to the second MLD; and

exchanging one or more encrypted packets with the second MLD, each of the one or more encrypted packets including a temporal key (TK) generated based on the PTK.

23. A wireless communication device comprising:

at least one modem;

at least one processor communicatively coupled with the at least one modem; and

at least one memory communicatively coupled with the at least one processor and storing processor-readable code that, when executed by the at least one processor in conjunction with the at least one modem, is configured to:

receive, at a first multi-link device (MLD), a beacon frame from a second MLD, the beacon frame including a first plurality of medium access control (MAC) addresses of respective first devices associated with the second MLD;

transmit an association request to the second MLD, the association request including a second plurality of MAC addresses of respective second devices associated with the first MLD;

generate, during a handshake operation with the second MLD, one or more encryption keys configured to encrypt communications between the second MLD and the first MLD;

receive an Extensible Authentication Protocol (EAP) over local area network (LAN) (EAPoL) message that includes a first set of key data encapsulations (KDEs) encapsulating an address of the second MLD and a third plurality of MAC addresses; and

verify the first plurality of MAC addresses based at least in part on the one or more encryption keys and the first set of KDEs.

24. The wireless communication device of claim 23 , wherein execution of the processor-readable code is further configured to:

generate a pairwise transient key (PTK) based at least in part on the handshake operation.

25. The wireless communication device of claim 24 , wherein the EAPoL message is a second EAPoL message, and wherein execution of the processor-readable code is further configured to:

receive a first EAPoL message from the second MLD, wherein the second EAPoL message is transmitted based at least in part on the first EAPoL message.

26. The wireless communication device of claim 25 , wherein:

the first EAPoL message includes an AP nonce (ANonce); and

the second EAPoL message includes a STA nonce (SNonce) and a message integrity code (MIC).

27. The wireless communication device of claim 26 , wherein the generation of the PTK is based at least in part on a pseudo-random function (PRF), a pairwise master key (PMK), the ANonce, or the SNonce.

28. The wireless communication device of claim 25 , wherein execution of the processor-readable code is further configured to:

transmit a third EAPoL message from the first MLD, the third EAPoL message including a second set of KDEs encapsulating an address of the first MLD and a fourth plurality of MAC addresses, wherein verifying the second plurality of MAC addresses includes confirming that each of the fourth plurality of MAC addresses matches a respective one of the second plurality of MAC addresses.

29. The wireless communication device of claim 28 , wherein execution of the processor-readable code is further configured to:

transmit a fourth EAPoL message to the second MLD.