Johannes Berg | 1f5a7e4 | 2007-07-27 15:43:23 +0200 | [diff] [blame] | 1 | /* |
| 2 | * Copyright 2002-2005, Instant802 Networks, Inc. |
| 3 | * Copyright 2005-2006, Devicescape Software, Inc. |
| 4 | * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz> |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 5 | * Copyright 2007-2008 Johannes Berg <johannes@sipsolutions.net> |
Johannes Berg | 1f5a7e4 | 2007-07-27 15:43:23 +0200 | [diff] [blame] | 6 | * |
| 7 | * This program is free software; you can redistribute it and/or modify |
| 8 | * it under the terms of the GNU General Public License version 2 as |
| 9 | * published by the Free Software Foundation. |
| 10 | */ |
| 11 | |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 12 | #include <linux/if_ether.h> |
| 13 | #include <linux/etherdevice.h> |
| 14 | #include <linux/list.h> |
Johannes Berg | d4e46a3 | 2007-09-14 11:10:24 -0400 | [diff] [blame] | 15 | #include <linux/rcupdate.h> |
Johannes Berg | db4d116 | 2008-02-25 16:27:45 +0100 | [diff] [blame] | 16 | #include <linux/rtnetlink.h> |
Tejun Heo | 5a0e3ad | 2010-03-24 17:04:11 +0900 | [diff] [blame] | 17 | #include <linux/slab.h> |
Johannes Berg | 1f5a7e4 | 2007-07-27 15:43:23 +0200 | [diff] [blame] | 18 | #include <net/mac80211.h> |
| 19 | #include "ieee80211_i.h" |
Johannes Berg | 2448798 | 2009-04-23 18:52:52 +0200 | [diff] [blame] | 20 | #include "driver-ops.h" |
Johannes Berg | 1f5a7e4 | 2007-07-27 15:43:23 +0200 | [diff] [blame] | 21 | #include "debugfs_key.h" |
| 22 | #include "aes_ccm.h" |
Jouni Malinen | 3cfcf6a | 2009-01-08 13:32:02 +0200 | [diff] [blame] | 23 | #include "aes_cmac.h" |
Johannes Berg | 1f5a7e4 | 2007-07-27 15:43:23 +0200 | [diff] [blame] | 24 | |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 25 | |
Johannes Berg | dbbea67 | 2008-02-26 14:34:06 +0100 | [diff] [blame] | 26 | /** |
| 27 | * DOC: Key handling basics |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 28 | * |
| 29 | * Key handling in mac80211 is done based on per-interface (sub_if_data) |
| 30 | * keys and per-station keys. Since each station belongs to an interface, |
| 31 | * each station key also belongs to that interface. |
| 32 | * |
| 33 | * Hardware acceleration is done on a best-effort basis, for each key |
| 34 | * that is eligible the hardware is asked to enable that key but if |
| 35 | * it cannot do that they key is simply kept for software encryption. |
| 36 | * There is currently no way of knowing this except by looking into |
| 37 | * debugfs. |
| 38 | * |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 39 | * All key operations are protected internally. |
Johannes Berg | db4d116 | 2008-02-25 16:27:45 +0100 | [diff] [blame] | 40 | * |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 41 | * Within mac80211, key references are, just as STA structure references, |
| 42 | * protected by RCU. Note, however, that some things are unprotected, |
| 43 | * namely the key->sta dereferences within the hardware acceleration |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 44 | * functions. This means that sta_info_destroy() must remove the key |
| 45 | * which waits for an RCU grace period. |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 46 | */ |
| 47 | |
| 48 | static const u8 bcast_addr[ETH_ALEN] = { 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF }; |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 49 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 50 | static void assert_key_lock(struct ieee80211_local *local) |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 51 | { |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 52 | WARN_ON(!mutex_is_locked(&local->key_mtx)); |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 53 | } |
| 54 | |
Johannes Berg | dc822b5 | 2008-12-29 12:55:09 +0100 | [diff] [blame] | 55 | static struct ieee80211_sta *get_sta_for_key(struct ieee80211_key *key) |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 56 | { |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 57 | if (key->sta) |
Johannes Berg | dc822b5 | 2008-12-29 12:55:09 +0100 | [diff] [blame] | 58 | return &key->sta->sta; |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 59 | |
Johannes Berg | dc822b5 | 2008-12-29 12:55:09 +0100 | [diff] [blame] | 60 | return NULL; |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 61 | } |
| 62 | |
Johannes Berg | 3ffc2a9 | 2010-08-27 14:26:52 +0300 | [diff] [blame^] | 63 | static int ieee80211_key_enable_hw_accel(struct ieee80211_key *key) |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 64 | { |
Johannes Berg | dc822b5 | 2008-12-29 12:55:09 +0100 | [diff] [blame] | 65 | struct ieee80211_sub_if_data *sdata; |
| 66 | struct ieee80211_sta *sta; |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 67 | int ret; |
| 68 | |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 69 | might_sleep(); |
| 70 | |
Johannes Berg | 3ffc2a9 | 2010-08-27 14:26:52 +0300 | [diff] [blame^] | 71 | if (!key->local->ops->set_key) { |
| 72 | ret = -EOPNOTSUPP; |
| 73 | goto out_unsupported; |
| 74 | } |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 75 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 76 | assert_key_lock(key->local); |
| 77 | |
Johannes Berg | dc822b5 | 2008-12-29 12:55:09 +0100 | [diff] [blame] | 78 | sta = get_sta_for_key(key); |
| 79 | |
| 80 | sdata = key->sdata; |
| 81 | if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) |
| 82 | sdata = container_of(sdata->bss, |
| 83 | struct ieee80211_sub_if_data, |
| 84 | u.ap); |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 85 | |
Johannes Berg | 12375ef | 2009-11-25 20:30:31 +0100 | [diff] [blame] | 86 | ret = drv_set_key(key->local, SET_KEY, sdata, sta, &key->conf); |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 87 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 88 | if (!ret) |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 89 | key->flags |= KEY_FLAG_UPLOADED_TO_HARDWARE; |
| 90 | |
| 91 | if (ret && ret != -ENOSPC && ret != -EOPNOTSUPP) |
Joe Perches | 0fb9a9e | 2010-08-20 16:25:38 -0700 | [diff] [blame] | 92 | wiphy_err(key->local->hw.wiphy, |
| 93 | "failed to set key (%d, %pM) to hardware (%d)\n", |
| 94 | key->conf.keyidx, sta ? sta->addr : bcast_addr, ret); |
Johannes Berg | 3ffc2a9 | 2010-08-27 14:26:52 +0300 | [diff] [blame^] | 95 | |
| 96 | out_unsupported: |
| 97 | if (ret) { |
| 98 | switch (key->conf.cipher) { |
| 99 | case WLAN_CIPHER_SUITE_WEP40: |
| 100 | case WLAN_CIPHER_SUITE_WEP104: |
| 101 | case WLAN_CIPHER_SUITE_TKIP: |
| 102 | case WLAN_CIPHER_SUITE_CCMP: |
| 103 | case WLAN_CIPHER_SUITE_AES_CMAC: |
| 104 | /* all of these we can do in software */ |
| 105 | ret = 0; |
| 106 | break; |
| 107 | default: |
| 108 | ret = -EINVAL; |
| 109 | } |
| 110 | } |
| 111 | |
| 112 | return ret; |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 113 | } |
| 114 | |
| 115 | static void ieee80211_key_disable_hw_accel(struct ieee80211_key *key) |
| 116 | { |
Johannes Berg | dc822b5 | 2008-12-29 12:55:09 +0100 | [diff] [blame] | 117 | struct ieee80211_sub_if_data *sdata; |
| 118 | struct ieee80211_sta *sta; |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 119 | int ret; |
| 120 | |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 121 | might_sleep(); |
| 122 | |
Johannes Berg | db4d116 | 2008-02-25 16:27:45 +0100 | [diff] [blame] | 123 | if (!key || !key->local->ops->set_key) |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 124 | return; |
| 125 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 126 | assert_key_lock(key->local); |
| 127 | |
| 128 | if (!(key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE)) |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 129 | return; |
| 130 | |
Johannes Berg | dc822b5 | 2008-12-29 12:55:09 +0100 | [diff] [blame] | 131 | sta = get_sta_for_key(key); |
| 132 | sdata = key->sdata; |
| 133 | |
| 134 | if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) |
| 135 | sdata = container_of(sdata->bss, |
| 136 | struct ieee80211_sub_if_data, |
| 137 | u.ap); |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 138 | |
Johannes Berg | 12375ef | 2009-11-25 20:30:31 +0100 | [diff] [blame] | 139 | ret = drv_set_key(key->local, DISABLE_KEY, sdata, |
Johannes Berg | 2448798 | 2009-04-23 18:52:52 +0200 | [diff] [blame] | 140 | sta, &key->conf); |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 141 | |
| 142 | if (ret) |
Joe Perches | 0fb9a9e | 2010-08-20 16:25:38 -0700 | [diff] [blame] | 143 | wiphy_err(key->local->hw.wiphy, |
| 144 | "failed to remove key (%d, %pM) from hardware (%d)\n", |
| 145 | key->conf.keyidx, sta ? sta->addr : bcast_addr, ret); |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 146 | |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 147 | key->flags &= ~KEY_FLAG_UPLOADED_TO_HARDWARE; |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 148 | } |
| 149 | |
| 150 | static void __ieee80211_set_default_key(struct ieee80211_sub_if_data *sdata, |
| 151 | int idx) |
| 152 | { |
| 153 | struct ieee80211_key *key = NULL; |
| 154 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 155 | assert_key_lock(sdata->local); |
| 156 | |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 157 | if (idx >= 0 && idx < NUM_DEFAULT_KEYS) |
| 158 | key = sdata->keys[idx]; |
| 159 | |
| 160 | rcu_assign_pointer(sdata->default_key, key); |
| 161 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 162 | if (key) { |
| 163 | ieee80211_debugfs_key_remove_default(key->sdata); |
| 164 | ieee80211_debugfs_key_add_default(key->sdata); |
| 165 | } |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 166 | } |
| 167 | |
| 168 | void ieee80211_set_default_key(struct ieee80211_sub_if_data *sdata, int idx) |
| 169 | { |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 170 | mutex_lock(&sdata->local->key_mtx); |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 171 | __ieee80211_set_default_key(sdata, idx); |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 172 | mutex_unlock(&sdata->local->key_mtx); |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 173 | } |
| 174 | |
Jouni Malinen | 3cfcf6a | 2009-01-08 13:32:02 +0200 | [diff] [blame] | 175 | static void |
| 176 | __ieee80211_set_default_mgmt_key(struct ieee80211_sub_if_data *sdata, int idx) |
| 177 | { |
| 178 | struct ieee80211_key *key = NULL; |
| 179 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 180 | assert_key_lock(sdata->local); |
| 181 | |
Jouni Malinen | 3cfcf6a | 2009-01-08 13:32:02 +0200 | [diff] [blame] | 182 | if (idx >= NUM_DEFAULT_KEYS && |
| 183 | idx < NUM_DEFAULT_KEYS + NUM_DEFAULT_MGMT_KEYS) |
| 184 | key = sdata->keys[idx]; |
| 185 | |
| 186 | rcu_assign_pointer(sdata->default_mgmt_key, key); |
| 187 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 188 | if (key) { |
| 189 | ieee80211_debugfs_key_remove_mgmt_default(key->sdata); |
| 190 | ieee80211_debugfs_key_add_mgmt_default(key->sdata); |
| 191 | } |
Jouni Malinen | 3cfcf6a | 2009-01-08 13:32:02 +0200 | [diff] [blame] | 192 | } |
| 193 | |
| 194 | void ieee80211_set_default_mgmt_key(struct ieee80211_sub_if_data *sdata, |
| 195 | int idx) |
| 196 | { |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 197 | mutex_lock(&sdata->local->key_mtx); |
Jouni Malinen | 3cfcf6a | 2009-01-08 13:32:02 +0200 | [diff] [blame] | 198 | __ieee80211_set_default_mgmt_key(sdata, idx); |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 199 | mutex_unlock(&sdata->local->key_mtx); |
Jouni Malinen | 3cfcf6a | 2009-01-08 13:32:02 +0200 | [diff] [blame] | 200 | } |
| 201 | |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 202 | |
| 203 | static void __ieee80211_key_replace(struct ieee80211_sub_if_data *sdata, |
| 204 | struct sta_info *sta, |
| 205 | struct ieee80211_key *old, |
| 206 | struct ieee80211_key *new) |
| 207 | { |
Jouni Malinen | 3cfcf6a | 2009-01-08 13:32:02 +0200 | [diff] [blame] | 208 | int idx, defkey, defmgmtkey; |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 209 | |
| 210 | if (new) |
| 211 | list_add(&new->list, &sdata->key_list); |
| 212 | |
| 213 | if (sta) { |
| 214 | rcu_assign_pointer(sta->key, new); |
| 215 | } else { |
| 216 | WARN_ON(new && old && new->conf.keyidx != old->conf.keyidx); |
| 217 | |
| 218 | if (old) |
| 219 | idx = old->conf.keyidx; |
| 220 | else |
| 221 | idx = new->conf.keyidx; |
| 222 | |
| 223 | defkey = old && sdata->default_key == old; |
Jouni Malinen | 3cfcf6a | 2009-01-08 13:32:02 +0200 | [diff] [blame] | 224 | defmgmtkey = old && sdata->default_mgmt_key == old; |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 225 | |
| 226 | if (defkey && !new) |
| 227 | __ieee80211_set_default_key(sdata, -1); |
Jouni Malinen | 3cfcf6a | 2009-01-08 13:32:02 +0200 | [diff] [blame] | 228 | if (defmgmtkey && !new) |
| 229 | __ieee80211_set_default_mgmt_key(sdata, -1); |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 230 | |
| 231 | rcu_assign_pointer(sdata->keys[idx], new); |
| 232 | if (defkey && new) |
| 233 | __ieee80211_set_default_key(sdata, new->conf.keyidx); |
Jouni Malinen | 3cfcf6a | 2009-01-08 13:32:02 +0200 | [diff] [blame] | 234 | if (defmgmtkey && new) |
| 235 | __ieee80211_set_default_mgmt_key(sdata, |
| 236 | new->conf.keyidx); |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 237 | } |
| 238 | |
| 239 | if (old) { |
| 240 | /* |
| 241 | * We'll use an empty list to indicate that the key |
| 242 | * has already been removed. |
| 243 | */ |
| 244 | list_del_init(&old->list); |
| 245 | } |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 246 | } |
| 247 | |
Johannes Berg | 97359d1 | 2010-08-10 09:46:38 +0200 | [diff] [blame] | 248 | struct ieee80211_key *ieee80211_key_alloc(u32 cipher, int idx, size_t key_len, |
Jouni Malinen | faa8fdc | 2009-05-11 21:57:58 +0300 | [diff] [blame] | 249 | const u8 *key_data, |
| 250 | size_t seq_len, const u8 *seq) |
Johannes Berg | 1f5a7e4 | 2007-07-27 15:43:23 +0200 | [diff] [blame] | 251 | { |
| 252 | struct ieee80211_key *key; |
Ben Hutchings | 1ac62ba | 2010-08-01 17:37:03 +0100 | [diff] [blame] | 253 | int i, j, err; |
Johannes Berg | 1f5a7e4 | 2007-07-27 15:43:23 +0200 | [diff] [blame] | 254 | |
Jouni Malinen | 3cfcf6a | 2009-01-08 13:32:02 +0200 | [diff] [blame] | 255 | BUG_ON(idx < 0 || idx >= NUM_DEFAULT_KEYS + NUM_DEFAULT_MGMT_KEYS); |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 256 | |
| 257 | key = kzalloc(sizeof(struct ieee80211_key) + key_len, GFP_KERNEL); |
Johannes Berg | 1f5a7e4 | 2007-07-27 15:43:23 +0200 | [diff] [blame] | 258 | if (!key) |
Ben Hutchings | 1ac62ba | 2010-08-01 17:37:03 +0100 | [diff] [blame] | 259 | return ERR_PTR(-ENOMEM); |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 260 | |
| 261 | /* |
| 262 | * Default to software encryption; we'll later upload the |
| 263 | * key to the hardware if possible. |
| 264 | */ |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 265 | key->conf.flags = 0; |
| 266 | key->flags = 0; |
| 267 | |
Johannes Berg | 97359d1 | 2010-08-10 09:46:38 +0200 | [diff] [blame] | 268 | key->conf.cipher = cipher; |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 269 | key->conf.keyidx = idx; |
| 270 | key->conf.keylen = key_len; |
Johannes Berg | 97359d1 | 2010-08-10 09:46:38 +0200 | [diff] [blame] | 271 | switch (cipher) { |
| 272 | case WLAN_CIPHER_SUITE_WEP40: |
| 273 | case WLAN_CIPHER_SUITE_WEP104: |
Felix Fietkau | 76708de | 2008-10-05 18:02:48 +0200 | [diff] [blame] | 274 | key->conf.iv_len = WEP_IV_LEN; |
| 275 | key->conf.icv_len = WEP_ICV_LEN; |
| 276 | break; |
Johannes Berg | 97359d1 | 2010-08-10 09:46:38 +0200 | [diff] [blame] | 277 | case WLAN_CIPHER_SUITE_TKIP: |
Felix Fietkau | 76708de | 2008-10-05 18:02:48 +0200 | [diff] [blame] | 278 | key->conf.iv_len = TKIP_IV_LEN; |
| 279 | key->conf.icv_len = TKIP_ICV_LEN; |
Jouni Malinen | 9f26a95 | 2009-05-15 12:38:32 +0300 | [diff] [blame] | 280 | if (seq) { |
Jouni Malinen | faa8fdc | 2009-05-11 21:57:58 +0300 | [diff] [blame] | 281 | for (i = 0; i < NUM_RX_DATA_QUEUES; i++) { |
| 282 | key->u.tkip.rx[i].iv32 = |
| 283 | get_unaligned_le32(&seq[2]); |
| 284 | key->u.tkip.rx[i].iv16 = |
| 285 | get_unaligned_le16(seq); |
| 286 | } |
| 287 | } |
Felix Fietkau | 76708de | 2008-10-05 18:02:48 +0200 | [diff] [blame] | 288 | break; |
Johannes Berg | 97359d1 | 2010-08-10 09:46:38 +0200 | [diff] [blame] | 289 | case WLAN_CIPHER_SUITE_CCMP: |
Felix Fietkau | 76708de | 2008-10-05 18:02:48 +0200 | [diff] [blame] | 290 | key->conf.iv_len = CCMP_HDR_LEN; |
| 291 | key->conf.icv_len = CCMP_MIC_LEN; |
Jouni Malinen | 9f26a95 | 2009-05-15 12:38:32 +0300 | [diff] [blame] | 292 | if (seq) { |
Jouni Malinen | 9190252 | 2010-06-11 10:27:33 -0700 | [diff] [blame] | 293 | for (i = 0; i < NUM_RX_DATA_QUEUES + 1; i++) |
Jouni Malinen | faa8fdc | 2009-05-11 21:57:58 +0300 | [diff] [blame] | 294 | for (j = 0; j < CCMP_PN_LEN; j++) |
| 295 | key->u.ccmp.rx_pn[i][j] = |
| 296 | seq[CCMP_PN_LEN - j - 1]; |
| 297 | } |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 298 | /* |
| 299 | * Initialize AES key state here as an optimization so that |
| 300 | * it does not need to be initialized for every packet. |
| 301 | */ |
| 302 | key->u.ccmp.tfm = ieee80211_aes_key_setup_encrypt(key_data); |
Ben Hutchings | 1ac62ba | 2010-08-01 17:37:03 +0100 | [diff] [blame] | 303 | if (IS_ERR(key->u.ccmp.tfm)) { |
| 304 | err = PTR_ERR(key->u.ccmp.tfm); |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 305 | kfree(key); |
Ben Hutchings | 1ac62ba | 2010-08-01 17:37:03 +0100 | [diff] [blame] | 306 | key = ERR_PTR(err); |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 307 | } |
Johannes Berg | 60ae0f2 | 2010-08-10 09:46:39 +0200 | [diff] [blame] | 308 | break; |
| 309 | case WLAN_CIPHER_SUITE_AES_CMAC: |
| 310 | key->conf.iv_len = 0; |
| 311 | key->conf.icv_len = sizeof(struct ieee80211_mmie); |
| 312 | if (seq) |
| 313 | for (j = 0; j < 6; j++) |
| 314 | key->u.aes_cmac.rx_pn[j] = seq[6 - j - 1]; |
Jouni Malinen | 3cfcf6a | 2009-01-08 13:32:02 +0200 | [diff] [blame] | 315 | /* |
| 316 | * Initialize AES key state here as an optimization so that |
| 317 | * it does not need to be initialized for every packet. |
| 318 | */ |
| 319 | key->u.aes_cmac.tfm = |
| 320 | ieee80211_aes_cmac_key_setup(key_data); |
Ben Hutchings | 1ac62ba | 2010-08-01 17:37:03 +0100 | [diff] [blame] | 321 | if (IS_ERR(key->u.aes_cmac.tfm)) { |
| 322 | err = PTR_ERR(key->u.aes_cmac.tfm); |
Jouni Malinen | 3cfcf6a | 2009-01-08 13:32:02 +0200 | [diff] [blame] | 323 | kfree(key); |
Ben Hutchings | 1ac62ba | 2010-08-01 17:37:03 +0100 | [diff] [blame] | 324 | key = ERR_PTR(err); |
Jouni Malinen | 3cfcf6a | 2009-01-08 13:32:02 +0200 | [diff] [blame] | 325 | } |
Johannes Berg | 60ae0f2 | 2010-08-10 09:46:39 +0200 | [diff] [blame] | 326 | break; |
Jouni Malinen | 3cfcf6a | 2009-01-08 13:32:02 +0200 | [diff] [blame] | 327 | } |
Johannes Berg | 60ae0f2 | 2010-08-10 09:46:39 +0200 | [diff] [blame] | 328 | memcpy(key->conf.key, key_data, key_len); |
| 329 | INIT_LIST_HEAD(&key->list); |
Jouni Malinen | 3cfcf6a | 2009-01-08 13:32:02 +0200 | [diff] [blame] | 330 | |
Johannes Berg | db4d116 | 2008-02-25 16:27:45 +0100 | [diff] [blame] | 331 | return key; |
| 332 | } |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 333 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 334 | static void __ieee80211_key_destroy(struct ieee80211_key *key) |
| 335 | { |
| 336 | if (!key) |
| 337 | return; |
| 338 | |
Jouni Malinen | 32162a4 | 2010-07-26 15:52:03 -0700 | [diff] [blame] | 339 | if (key->local) |
| 340 | ieee80211_key_disable_hw_accel(key); |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 341 | |
Johannes Berg | 97359d1 | 2010-08-10 09:46:38 +0200 | [diff] [blame] | 342 | if (key->conf.cipher == WLAN_CIPHER_SUITE_CCMP) |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 343 | ieee80211_aes_key_free(key->u.ccmp.tfm); |
Johannes Berg | 97359d1 | 2010-08-10 09:46:38 +0200 | [diff] [blame] | 344 | if (key->conf.cipher == WLAN_CIPHER_SUITE_AES_CMAC) |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 345 | ieee80211_aes_cmac_key_free(key->u.aes_cmac.tfm); |
Jouni Malinen | 32162a4 | 2010-07-26 15:52:03 -0700 | [diff] [blame] | 346 | if (key->local) |
| 347 | ieee80211_debugfs_key_remove(key); |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 348 | |
| 349 | kfree(key); |
| 350 | } |
| 351 | |
Johannes Berg | 3ffc2a9 | 2010-08-27 14:26:52 +0300 | [diff] [blame^] | 352 | int ieee80211_key_link(struct ieee80211_key *key, |
| 353 | struct ieee80211_sub_if_data *sdata, |
| 354 | struct sta_info *sta) |
Johannes Berg | db4d116 | 2008-02-25 16:27:45 +0100 | [diff] [blame] | 355 | { |
| 356 | struct ieee80211_key *old_key; |
Johannes Berg | 3ffc2a9 | 2010-08-27 14:26:52 +0300 | [diff] [blame^] | 357 | int idx, ret; |
Johannes Berg | db4d116 | 2008-02-25 16:27:45 +0100 | [diff] [blame] | 358 | |
Johannes Berg | db4d116 | 2008-02-25 16:27:45 +0100 | [diff] [blame] | 359 | BUG_ON(!sdata); |
| 360 | BUG_ON(!key); |
| 361 | |
| 362 | idx = key->conf.keyidx; |
| 363 | key->local = sdata->local; |
| 364 | key->sdata = sdata; |
| 365 | key->sta = sta; |
| 366 | |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 367 | if (sta) { |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 368 | /* |
| 369 | * some hardware cannot handle TKIP with QoS, so |
| 370 | * we indicate whether QoS could be in use. |
| 371 | */ |
Johannes Berg | 07346f81 | 2008-05-03 01:02:02 +0200 | [diff] [blame] | 372 | if (test_sta_flags(sta, WLAN_STA_WME)) |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 373 | key->conf.flags |= IEEE80211_KEY_FLAG_WMM_STA; |
Ivo van Doorn | c6adbd2 | 2008-04-17 21:11:18 +0200 | [diff] [blame] | 374 | |
| 375 | /* |
| 376 | * This key is for a specific sta interface, |
| 377 | * inform the driver that it should try to store |
| 378 | * this key as pairwise key. |
| 379 | */ |
| 380 | key->conf.flags |= IEEE80211_KEY_FLAG_PAIRWISE; |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 381 | } else { |
Johannes Berg | 05c914f | 2008-09-11 00:01:58 +0200 | [diff] [blame] | 382 | if (sdata->vif.type == NL80211_IFTYPE_STATION) { |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 383 | struct sta_info *ap; |
| 384 | |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 385 | /* |
| 386 | * We're getting a sta pointer in, |
| 387 | * so must be under RCU read lock. |
| 388 | */ |
Johannes Berg | d0709a6 | 2008-02-25 16:27:46 +0100 | [diff] [blame] | 389 | |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 390 | /* same here, the AP could be using QoS */ |
Johannes Berg | abe6063 | 2009-11-25 17:46:18 +0100 | [diff] [blame] | 391 | ap = sta_info_get(key->sdata, key->sdata->u.mgd.bssid); |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 392 | if (ap) { |
Johannes Berg | 07346f81 | 2008-05-03 01:02:02 +0200 | [diff] [blame] | 393 | if (test_sta_flags(ap, WLAN_STA_WME)) |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 394 | key->conf.flags |= |
| 395 | IEEE80211_KEY_FLAG_WMM_STA; |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 396 | } |
| 397 | } |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 398 | } |
| 399 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 400 | mutex_lock(&sdata->local->key_mtx); |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 401 | |
Johannes Berg | d4e46a3 | 2007-09-14 11:10:24 -0400 | [diff] [blame] | 402 | if (sta) |
Johannes Berg | db4d116 | 2008-02-25 16:27:45 +0100 | [diff] [blame] | 403 | old_key = sta->key; |
Johannes Berg | d4e46a3 | 2007-09-14 11:10:24 -0400 | [diff] [blame] | 404 | else |
Johannes Berg | db4d116 | 2008-02-25 16:27:45 +0100 | [diff] [blame] | 405 | old_key = sdata->keys[idx]; |
| 406 | |
| 407 | __ieee80211_key_replace(sdata, sta, old_key, key); |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 408 | __ieee80211_key_destroy(old_key); |
Johannes Berg | d4e46a3 | 2007-09-14 11:10:24 -0400 | [diff] [blame] | 409 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 410 | ieee80211_debugfs_key_add(key); |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 411 | |
Johannes Berg | 3ffc2a9 | 2010-08-27 14:26:52 +0300 | [diff] [blame^] | 412 | ret = ieee80211_key_enable_hw_accel(key); |
Johannes Berg | 523d2f6 | 2009-07-01 21:26:43 +0200 | [diff] [blame] | 413 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 414 | mutex_unlock(&sdata->local->key_mtx); |
Johannes Berg | 3ffc2a9 | 2010-08-27 14:26:52 +0300 | [diff] [blame^] | 415 | |
| 416 | return ret; |
Johannes Berg | 3a24576 | 2008-04-09 16:45:37 +0200 | [diff] [blame] | 417 | } |
| 418 | |
| 419 | static void __ieee80211_key_free(struct ieee80211_key *key) |
| 420 | { |
| 421 | /* |
| 422 | * Replace key with nothingness if it was ever used. |
| 423 | */ |
| 424 | if (key->sdata) |
| 425 | __ieee80211_key_replace(key->sdata, key->sta, |
| 426 | key, NULL); |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 427 | __ieee80211_key_destroy(key); |
Johannes Berg | 1f5a7e4 | 2007-07-27 15:43:23 +0200 | [diff] [blame] | 428 | } |
| 429 | |
Jouni Malinen | 32162a4 | 2010-07-26 15:52:03 -0700 | [diff] [blame] | 430 | void ieee80211_key_free(struct ieee80211_local *local, |
| 431 | struct ieee80211_key *key) |
Johannes Berg | 1f5a7e4 | 2007-07-27 15:43:23 +0200 | [diff] [blame] | 432 | { |
Johannes Berg | 8f37171 | 2007-08-28 17:01:54 -0400 | [diff] [blame] | 433 | if (!key) |
| 434 | return; |
| 435 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 436 | mutex_lock(&local->key_mtx); |
Johannes Berg | 3a24576 | 2008-04-09 16:45:37 +0200 | [diff] [blame] | 437 | __ieee80211_key_free(key); |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 438 | mutex_unlock(&local->key_mtx); |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 439 | } |
| 440 | |
| 441 | void ieee80211_enable_keys(struct ieee80211_sub_if_data *sdata) |
| 442 | { |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 443 | struct ieee80211_key *key; |
| 444 | |
Johannes Berg | 3a24576 | 2008-04-09 16:45:37 +0200 | [diff] [blame] | 445 | ASSERT_RTNL(); |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 446 | |
Johannes Berg | 9607e6b | 2009-12-23 13:15:31 +0100 | [diff] [blame] | 447 | if (WARN_ON(!ieee80211_sdata_running(sdata))) |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 448 | return; |
| 449 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 450 | mutex_lock(&sdata->local->key_mtx); |
| 451 | |
| 452 | list_for_each_entry(key, &sdata->key_list, list) |
| 453 | ieee80211_key_enable_hw_accel(key); |
| 454 | |
| 455 | mutex_unlock(&sdata->local->key_mtx); |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 456 | } |
| 457 | |
| 458 | void ieee80211_disable_keys(struct ieee80211_sub_if_data *sdata) |
| 459 | { |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 460 | struct ieee80211_key *key; |
| 461 | |
Johannes Berg | 3a24576 | 2008-04-09 16:45:37 +0200 | [diff] [blame] | 462 | ASSERT_RTNL(); |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 463 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 464 | mutex_lock(&sdata->local->key_mtx); |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 465 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 466 | list_for_each_entry(key, &sdata->key_list, list) |
| 467 | ieee80211_key_disable_hw_accel(key); |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 468 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 469 | mutex_unlock(&sdata->local->key_mtx); |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 470 | } |
| 471 | |
| 472 | void ieee80211_free_keys(struct ieee80211_sub_if_data *sdata) |
| 473 | { |
| 474 | struct ieee80211_key *key, *tmp; |
Johannes Berg | db4d116 | 2008-02-25 16:27:45 +0100 | [diff] [blame] | 475 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 476 | mutex_lock(&sdata->local->key_mtx); |
Johannes Berg | 3b96766 | 2008-04-08 17:56:52 +0200 | [diff] [blame] | 477 | |
| 478 | ieee80211_debugfs_key_remove_default(sdata); |
Jouni Malinen | 3cfcf6a | 2009-01-08 13:32:02 +0200 | [diff] [blame] | 479 | ieee80211_debugfs_key_remove_mgmt_default(sdata); |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 480 | |
| 481 | list_for_each_entry_safe(key, tmp, &sdata->key_list, list) |
Johannes Berg | 3a24576 | 2008-04-09 16:45:37 +0200 | [diff] [blame] | 482 | __ieee80211_key_free(key); |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 483 | |
Johannes Berg | ad0e2b5 | 2010-06-01 10:19:19 +0200 | [diff] [blame] | 484 | mutex_unlock(&sdata->local->key_mtx); |
Johannes Berg | 11a843b | 2007-08-28 17:01:55 -0400 | [diff] [blame] | 485 | } |