1. doc.: IEEE 802.11-10/0057r0 Submission January 2010 Dan Harkins, Aruba NetworksSlide 1 [place presentation subject title text here] Date: 2010-01-12 Authors:

2. doc.: IEEE 802.11-10/0057r0 Submission January 2010 Dan Harkins, Aruba NetworksSlide 2 Abstract This presentation provides an update to an open source project of the SAE protocol used in TGs.

3. doc.: IEEE 802.11-10/0057r0 Submission January 2010 Dan Harkins, Aruba NetworksSlide 3 Reference Implementation of SAE Free, open source implementation of the password- based key exchange used in 802.11s. Project at SourceForge– www. sourceforge.net –Project name is “authsae” –Anonymous CVS access to source code is available –“developer” status, allowing write-access to source code repository requires OK by admin (i.e. me) Written in C. Supports elliptic curve groups (no prime modulus groups yet). Uses OpenSSL library. Supported OSs are FreeBSD and Linux (limited support).

4. doc.: IEEE 802.11-10/0057r0 Submission January 2010 Dan Harkins, Aruba NetworksSlide 4 Changes and Current Status Code supports multiple applications communicating over the “loopback” interface –Loopback simulates the “air”– every packet sent is also received. –Allows for simulations of full NxN mesh in a controlled environment. Each “app” acts as a mesh point. Compliant with version 4.01 of TGs draft :-) –Assumes several comments on state machine and message construction will be accepted. Atheros radio support (after slight kernel modification) under FreeBSD. Loopback interface support under Linux and FreeBSD. Includes a “monitor” app to sniff SAE frames.

5. doc.: IEEE 802.11-10/0057r0 Submission January 2010 Dan Harkins, Aruba NetworksSlide 5 Benefits of Reference Implementation A working state machine for SAE –Easy to make changes to see what happens. –Configure open threshold, negotiate groups, etc. The SAE component is OS-independent –The OS-specific component is “meshd”. Three defined APIs between “meshd” and “sae”. –This allows easy porting of SAE code to new operating systems (like yours!) by just supporting the APIs. It may require limited modification– some include files, possibly crypto library calls if openssl is not used. But the core SAE code will easily port. No egregious licensing. Virus free! –GPL will not infect the rest of your codebase! –Code is released under the BSD license meaning it can be changed and used how you want and all you need to do is provide proper attribution.

6. doc.: IEEE 802.11-10/0057r0 Submission January 2010 Dan Harkins, Aruba NetworksSlide 6 SAE Reference Implementation Complete SAE implementation Cost-free and virus-free Easily portable to your OS Go to www.sourceforge.netwww.sourceforge.net Project name authsae Check it out! (if you do, please let me know)