<div dir="ltr">I am talking about hostapd as EAP Server side. For real SIM and USIM we have to know its IMSI, Kc(Shared Key) and OPc(Operator variant algorithm configuration field). If I include these in hostapad database. Then should it work or not?<br>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Mar 4, 2014 at 1:50 PM, Jouni Malinen <span dir="ltr"><<a href="mailto:j@w1.fi" target="_blank">j@w1.fi</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="HOEnZb"><div class="h5">On Tue, Mar 04, 2014 at 01:22:05PM +0530, samiran saha wrote:<br>
> Does hostapd library support EAP-AKA and EAP-SIM authentication<br>
> using real USIM and SIM card in Linux? I am seeing something like<br>
> winscard.h file which are not present...<br>
<br>
</div></div>hostapd? As in using the SIM/USIM on the EAP server side? No, that is<br>
not supported directly and cannot even be supported for EAP-AKA due to<br>
the authentication design (replay protection on the client side). Or do<br>
you mean whether hostapd can be used to authenticate a real SIM/USIM<br>
card on the client side? If so, yes, this could be done with hlr_auc_gw<br>
if you have access to the private key used on the SIM/USIM and Milenage<br>
is used to generate authentication values (i.e., this depends on how the<br>
SIM/USIM was provisioned).<br>
<br>
(wpa_supplicant on the other hand does support doing this on the client,<br>
i.e., EAP peer, side with pcsc-lite which is where that winscard.h<br>
comes from.)<br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
Jouni Malinen PGP id EFC895FA<br>
_______________________________________________<br>
HostAP mailing list<br>
<a href="mailto:HostAP@lists.shmoo.com">HostAP@lists.shmoo.com</a><br>
<a href="http://lists.shmoo.com/mailman/listinfo/hostap" target="_blank">http://lists.shmoo.com/mailman/listinfo/hostap</a><br>
</font></span></blockquote></div><br></div>