Fix PTK rekeying to generate a new ANonce

The Authenticator state machine path for PTK rekeying ended up bypassing
the AUTHENTICATION2 state where a new ANonce is generated when going
directly to the PTKSTART state since there is no need to try to
determine the PMK again in such a case. This is far from ideal since the
new PTK would depend on a new nonce only from the supplicant.

Fix this by generating a new ANonce when moving to the PTKSTART state
for the purpose of starting new 4-way handshake to rekey PTK.

Bug: 65245581
Test: Wifi Integration Suite
Change-Id: Ib1276336b08af19f664d1562e2844f969774bb1c
Signed-off-by: Jouni Malinen <>
Signed-off-by: Glen Kuhne <>
(cherry picked from commit b8f0fb5ef2e25537c024d86eb5c501d4d10172ce)
1 file changed