SIM/AKA/Request/Reauthentication AT_MAC does not include NONCE_S, only the response

src/charon/plugins/eap_aka/eap_aka_peer.c

@@ -366,7 +366,7 @@ static status_t process_reauthentication(private_eap_aka_peer_t *this,
 		*out = create_client_error(this, in->get_identifier(in));
 		return NEED_MORE;
 	}
-	if (!in->verify(in, nonce))
+	if (!in->verify(in, chunk_empty))
 	{
 		*out = create_client_error(this, in->get_identifier(in));
 		return NEED_MORE;

src/charon/plugins/eap_aka/eap_aka_server.c

@@ -244,8 +244,7 @@ static status_t reauthenticate(private_eap_aka_server_t *this,
 							   next->get_encoding(next));
 		next->destroy(next);
 	}
-	/* create AT_MAC over EAP-Message|NONCE_S */
+	*out = message->generate(message, chunk_empty);
-	*out = message->generate(message, this->nonce);
 	message->destroy(message);
 
 	this->pending = SIM_REAUTHENTICATION;

src/charon/plugins/eap_sim/eap_sim_peer.c

@@ -429,7 +429,7 @@ static status_t process_reauthentication(private_eap_sim_peer_t *this,
 								   SIM_UNABLE_TO_PROCESS);
 		return NEED_MORE;
 	}
-	if (!in->verify(in, nonce))
+	if (!in->verify(in, chunk_empty))
 	{
 		*out = create_client_error(this, in->get_identifier(in),
 								   SIM_UNABLE_TO_PROCESS);

src/charon/plugins/eap_sim/eap_sim_server.c

@@ -172,8 +172,7 @@ static status_t reauthenticate(private_eap_sim_server_t *this,
 							   next->get_encoding(next));
 		next->destroy(next);
 	}
-	/* create AT_MAC over EAP-Message|NONCE_S */
+	*out = message->generate(message, chunk_empty);
-	*out = message->generate(message, this->nonce);
 	message->destroy(message);
 
 	this->pending = SIM_REAUTHENTICATION;