Multi-link wireless communication security
This disclosure provides systems, methods, and apparatuses for wireless communication performed by a wireless communication device. An example wireless communication device includes an access point (AP) multi-link device (MLD). The AP MLD transmits a beacon frame to a wireless station (STA) MLD, the beacon frame including a plurality of AP medium access control (MAC) addresses of respective APs belonging to the AP MLD. The AP MLD receives an association request from the STA MLD, the association request including a plurality of STA MAC addresses of respective STAs belonging to the STA MLD. The AP MLD generates, during a handshake operation with the STA MLD, one or more encryption keys configured to encrypt communications between the AP MLD and the STA MLD. The AP MLD verifies the plurality of STA MAC addresses based at least in part on the one or more encryption keys.
1. A method for wireless communication performed by a first multi-link device (MLD), the method comprising:
transmitting a beacon frame to a second MLD, the beacon frame including one or more first medium access control (MAC) addresses of respective first devices belonging to the first MLD;
receiving an association request or a reassociation request from the second MLD, the association request or the reassociation request including one or more second MAC addresses of respective second devices belonging to the second MLD;
generating, during a handshake operation with the second MLD, one or more encryption keys configured to encrypt communications between the first MLD and the second MLD;
transmitting a first Extensible Authentication Protocol (EAP) over local area network (LAN) (EAPOL) message to the second MLD;
receiving a second EAPOL message from the second MLD responsive to the first EAPOL message, wherein the second EAPOL message includes a first set of key data encapsulations (KDEs) encapsulating an address of the second MLD and the one or more second MAC addresses;
verifying the one or more second MAC addresses based at least in part on the one or more encryption keys and the first set of KDEs, wherein verifying the one or more second MAC addresses includes confirming that each of the one or more second MAC addresses received via the second EAPOL message matches a respective one of the one or more second MAC addresses received via the association request or the reassociation request; and
generating a pairwise transient key (PTK) based at least in part on the one or more encryption keys.
2. The method of claim 1 , further comprising:
exchanging one or more encrypted packets with the second MLD, each of the one or more encrypted packets including a temporal key (TK) generated based on the PTK.
3. The method of claim 2 , wherein:
the first EAPOL message includes an access point (AP) nonce (ANonce); and
the second EAPOL message includes a station (STA) nonce (SNonce) and a message integrity code (MIC).
4. The method of claim 3 , wherein the generation of the PTK is based at least in part on a pseudo-random function (PRF), a pairwise master key (PMK), the ANonce, or the SNonce.
5. The method of claim 4 , further comprising:
transmitting a third EAPOL message to the second MLD, the third EAPOL message including a group temporal key (GTK) and a second set of KDEs representative of an address of the first MLD and the one or more first MAC addresses.
6. The method of claim 5 , further comprising:
receiving a fourth EAPOL message from the second MLD; and
exchanging the one or more encrypted packets with the second MLD responsive to the fourth EAPOL message, each of the one or more encrypted packets including the TK generated based on the PTK.
7. A wireless communication device comprising:
at least one modem;
one or more processors communicatively coupled with the at least one modem; and
one or more memories communicatively coupled with the one or more processors and storing processor-readable code that, when executed by the one or more processors in conjunction with the at least one modem, is configured to:
transmit a beacon frame to a second MLD, the beacon frame including one or more first medium access control (MAC) addresses of respective first devices belonging to a first MLD;
receive an association request or a reassociation request from the second MLD, the association request or the reassociation request including one or more second MAC addresses of respective second devices belonging to the second MLD;
generate, during a handshake operation with the second MLD, one or more encryption keys configured to encrypt communications between the first MLD and the second MLD;
transmit a first Extensible Authentication Protocol (EAP) over local area network (LAN) (EAPOL) message to the second MLD;
receive a second EAPOL message from the second MLD responsive to the first EAPOL message, wherein the second EAPOL message includes a first set of key data encapsulations (KDEs) encapsulating an address of the second MLD and the one or more second MAC addresses;
verify the one or more second MAC addresses based at least in part on the one or more encryption keys and the first set of KDEs, wherein verifying the one or more second MAC addresses includes confirming that each of the one or more second MAC addresses received via the second EAPOL message matches a respective one of the one or more second MAC addresses received via the association request or the reassociation request; and
generate a pairwise transient key (PTK) based at least in part on the one or more encryption keys.
8. The wireless communication device of claim 7 , wherein execution of the processor-readable code is further configured to:
exchange one or more encrypted packets with the second MLD, each of the one or more encrypted packets including a temporal key (TK) generated based on the PTK.
9. The wireless communication device of claim 8 , wherein:
the first EAPOL message includes an access point (AP) nonce (ANonce); and
the second EAPOL message includes a station (STA) nonce (SNonce) and a message integrity code (MIC).
10. The wireless communication device of claim 9 , wherein the generation of the PTK is based at least in part on a pseudo-random function (PRF), a pairwise master key (PMK), the ANonce, or the SNonce.
11. The wireless communication device of claim 10 , wherein execution of the processor-readable code is further configured to transmit a third EAPOL message to the second MLD, the third EAPOL message including a group temporal key (GTK) and a second set of KDEs representative of an address of the first MLD and the one or more first MAC addresses.
12. A method for wireless communication performed by a first multi-link device (MLD), the method comprising:
receiving, at the first MLD, a beacon frame from a second MLD, the beacon frame including one or more first medium access control (MAC) addresses of respective second devices belonging to the second MLD;
transmitting an association request or a reassociation request to the second MLD, the association request or the reassociation request including one or more second MAC addresses of respective first devices belonging to the first MLD;
generating, during a handshake operation with the second MLD, one or more encryption keys configured to encrypt communications between the second MLD and the first MLD;
receiving a first Extensible Authentication Protocol (EAP) over local area network (LAN) (EAPOL) message from the second MLD;
transmitting a second EAPOL message to the second MLD responsive to the first EAPOL message, wherein the second EAPOL message includes a first set of key data encapsulations (KDEs) encapsulating an address of the first MLD and the one or more second MAC addresses;
receiving a third EAPOL message from the second MLD, the third EAPOL message including a group temporal key (GTK) and a second set of KDEs representative of an address of the second MLD and the one or more first MAC addresses;
verifying the one or more first MAC addresses based at least in part on the one or more encryption keys and the first set of KDEs, wherein verifying the one or more first MAC addresses includes confirming that each of the one or more first MAC addresses received via the third EAPOL message matches a respective one of the one or more first MAC addresses received via the beacon frame; and
generating a pairwise transient key (PTK) based at least in part on the one or more encryption keys.
13. The method of claim 12 , further comprising:
exchanging one or more encrypted packets with the second MLD, each of the one or more encrypted packets including a temporal key (TK) generated based on the PTK.
14. The method of claim 13 , wherein:
the second EAPOL message includes an access point (AP) nonce (ANonce); and
the first EAPOL message includes a station (STA) nonce (SNonce) and a message integrity code (MIC).
15. The method of claim 14 , wherein the generation of the PTK is based at least in part on a pseudo-random function (PRF), a pairwise master key (PMK), the ANonce, or the SNonce.
16. The method of claim 15 , further comprising:
transmitting a fourth EAPOL message to the second MLD; and
exchanging the one or more encrypted packets with the second MLD, each of the one or more encrypted packets including the TK generated based on the PTK.
17. A wireless communication device comprising:
at least one modem;
one or more processors communicatively coupled with the at least one modem; and
one or more memories communicatively coupled with the one or more processors and storing processor-readable code that, when executed by the one or more processors in conjunction with the at least one modem, is configured to:
receive, at a first multi-link device (MLD), a beacon frame from a second MLD, the beacon frame including one or more first medium access control (MAC) addresses of respective second devices belonging to the second MLD;
transmit an association request or a reassociation request to the second MLD, the association request or the reassociation request including one or more second MAC addresses of respective first devices belonging to the first MLD;
generate, during a handshake operation with the second MLD, one or more encryption keys configured to encrypt communications between the second MLD and the first MLD;
receive a first Extensible Authentication Protocol (EAP) over local area network (LAN) (EAPOL) message from the second MLD;
transmit a second EAPOL message to the second MLD responsive to the first EAPOL message, wherein the second EAPOL message includes a first set of key data encapsulations (KDEs) encapsulating an address of the first MLD and the one or more second MAC addresses; receive a third EAPOL message from the second MLD, the third EAPOL message including a group temporal key (GTK) and a second set of KDEs representative of an address of the second MLD and the one or more first MAC addresses;
verify the one or more first MAC addresses based at least in part on the one or more encryption keys and the first set of KDEs, wherein verifying the one or more first MAC addresses includes confirming that each of the one or more first MAC addresses received via the third EAPOL message matches a respective one of the one or more first MAC addresses received via the beacon frame; and
generate a pairwise transient key (PTK) based at least in part on the one or more encryption keys.
18. The wireless communication device of claim 17 , wherein execution of the processor-readable code is further configured to:
exchange one or more encrypted packets with the second MLD, each of the one or more encrypted packets including a temporal key (TK) generated based on the PTK.
19. The wireless communication device of claim 18 , wherein:
the second EAPOL message includes an access point (AP) nonce (ANonce); and
the first EAPOL message includes a station (STA) nonce (SNonce) and a message integrity code (MIC).
20. The wireless communication device of claim 19 , wherein the generation of the PTK is based at least in part on a pseudo-random function (PRF), a pairwise master key (PMK), the ANonce, or the SNonce.