_DOT11DECRYPT_EAPOL_PARSED Struct Reference

Parsed representation of an EAPOL key frame for WPA/WPA2/WPA3 handshake processing. More...

#include <dot11decrypt_system.h>

Classes
struct	DOT11DECRYPT_EAPOL_PARSED_MLO_GTK
	Per-link Group Temporal Key record for an MLO association. More...
struct	DOT11DECRYPT_EAPOL_PARSED_MLO_LINK
	Per-link identity record for an MLO (Multi-Link Operation) association. More...

Public Attributes
DOT11DECRYPT_HS_MSG_TYPE	msg_type
uint16_t	len
uint8_t	key_type
uint8_t	key_version
uint16_t	key_len
uint8_t *	key_iv
uint8_t *	key_data
uint16_t	key_data_len
uint8_t	group_cipher
uint8_t	cipher
uint8_t	akm
uint8_t *	nonce
uint8_t *	mic
uint16_t	mic_len
uint8_t *	gtk
uint16_t	gtk_len
uint8_t *	mld_mac
uint8_t	mlo_link_count
struct _DOT11DECRYPT_EAPOL_PARSED::DOT11DECRYPT_EAPOL_PARSED_MLO_LINK	mlo_link [3]
uint8_t	mlo_gtk_count
struct _DOT11DECRYPT_EAPOL_PARSED::DOT11DECRYPT_EAPOL_PARSED_MLO_GTK	mlo_gtk [3]
uint8_t *	mdid
DOT11DECRYPT_FTE	fte

Detailed Description

Parsed representation of an EAPOL key frame for WPA/WPA2/WPA3 handshake processing.

Member Data Documentation

akm

uint8_t _DOT11DECRYPT_EAPOL_PARSED::akm

Authentication and Key Management (AKM) suite selector

cipher

uint8_t _DOT11DECRYPT_EAPOL_PARSED::cipher

Pairwise cipher suite selector

fte

DOT11DECRYPT_FTE _DOT11DECRYPT_EAPOL_PARSED::fte

Parsed Fast Transition Element (FTE) fields

group_cipher

uint8_t _DOT11DECRYPT_EAPOL_PARSED::group_cipher

Group cipher suite selector

gtk

uint8_t* _DOT11DECRYPT_EAPOL_PARSED::gtk

Pointer to the Group Temporal Key (GTK), if present

gtk_len

uint16_t _DOT11DECRYPT_EAPOL_PARSED::gtk_len

Length in bytes of gtk

key_data

uint8_t* _DOT11DECRYPT_EAPOL_PARSED::key_data

Pointer to the Key Data payload

key_data_len

uint16_t _DOT11DECRYPT_EAPOL_PARSED::key_data_len

Length in bytes of key_data

key_iv

uint8_t* _DOT11DECRYPT_EAPOL_PARSED::key_iv

Pointer to the key IV field

key_len

uint16_t _DOT11DECRYPT_EAPOL_PARSED::key_len

Length of the temporal key in bytes

key_type

uint8_t _DOT11DECRYPT_EAPOL_PARSED::key_type

Key descriptor type (e.g., RSN vs. WPA legacy)

key_version

uint8_t _DOT11DECRYPT_EAPOL_PARSED::key_version

Key descriptor version field

len

uint16_t _DOT11DECRYPT_EAPOL_PARSED::len

Total length of the EAPOL frame in bytes

mdid

uint8_t* _DOT11DECRYPT_EAPOL_PARSED::mdid

Pointer to the Mobility Domain Identifier (MDID), used for 802.11r FT AKMs

mic

uint8_t* _DOT11DECRYPT_EAPOL_PARSED::mic

Pointer to the Message Integrity Code (MIC)

mic_len

uint16_t _DOT11DECRYPT_EAPOL_PARSED::mic_len

Length in bytes of mic

mld_mac

uint8_t* _DOT11DECRYPT_EAPOL_PARSED::mld_mac

Pointer to the MLD (Multi-Link Device) MAC address, if present

mlo_gtk

struct _DOT11DECRYPT_EAPOL_PARSED::DOT11DECRYPT_EAPOL_PARSED_MLO_GTK _DOT11DECRYPT_EAPOL_PARSED::mlo_gtk[ 3 ]

Array of per-link GTKs

mlo_gtk_count

uint8_t _DOT11DECRYPT_EAPOL_PARSED::mlo_gtk_count

Number of valid entries in mlo_gtk

mlo_link

struct _DOT11DECRYPT_EAPOL_PARSED::DOT11DECRYPT_EAPOL_PARSED_MLO_LINK _DOT11DECRYPT_EAPOL_PARSED::mlo_link[ 3 ]

Array of MLO link identifiers

mlo_link_count

uint8_t _DOT11DECRYPT_EAPOL_PARSED::mlo_link_count

Number of valid entries in mlo_link

msg_type

DOT11DECRYPT_HS_MSG_TYPE _DOT11DECRYPT_EAPOL_PARSED::msg_type

Identified handshake step this EAPOL frame belongs to

nonce

uint8_t* _DOT11DECRYPT_EAPOL_PARSED::nonce

Pointer to the nonce field (ANonce or SNonce depending on direction)

---

The documentation for this struct was generated from the following file:

• /builds/wireshark/wireshark/epan/crypt/dot11decrypt_system.h