Authentication in Wireless Mesh Networks ◾ 439
confirm = hash(k||send-confirm||local-commit-scalar||local-commit-
element||peer-commit-scalar||peer-commit-element)
Upon receiving the confirm message, each mesh STA computes a verifier to
validate the value of the confirm message:
verifier = hash(k||send-confirm||peer-commit-scalar||peer-commit-ele-
ment||local-commit-scalar||local-commit-element)
If the verifier is not equal to the confirm message received from the peer, the
authentication of the peer is rejected. If the authentication succeeds, the two mesh
STAs generate a PMK as follows:
PMK = hash(k||(local-commit-scalar + peer-commit-scalar)mod[r]||F(local-
commit-element + peer-commit-element))
Note that the SAE is an ElGamal [27] type algorithm, ...