linux-toradex.git/net/mac80211/key.c, branch v4.0.2

mac80111: Add BIP-GMAC-128 and BIP-GMAC-256 ciphers

2015-01-27T10:10:13+00:00

This allows mac80211 to configure BIP-GMAC-128 and BIP-GMAC-256 to the
driver and also use software-implementation within mac80211 when the
driver does not support this with hardware accelaration.

Signed-off-by: Jouni Malinen 
Signed-off-by: Johannes Berg

mac80111: Add BIP-CMAC-256 cipher

2015-01-27T10:09:13+00:00

This allows mac80211 to configure BIP-CMAC-256 to the driver and also
use software-implementation within mac80211 when the driver does not
support this with hardware accelaration.

Signed-off-by: Jouni Malinen 
Signed-off-by: Johannes Berg

mac80111: Add CCMP-256 cipher

2015-01-27T10:07:35+00:00

This allows mac80211 to configure CCMP-256 to the driver and also use
software-implementation within mac80211 when the driver does not support
this with hardware accelaration.

Signed-off-by: Jouni Malinen 
[squash ccmp256 -> mic_len argument change]
Signed-off-by: Johannes Berg

mac80111: Add GCMP and GCMP-256 ciphers

2015-01-27T10:06:09+00:00

This allows mac80211 to configure GCMP and GCMP-256 to the driver and
also use software-implementation within mac80211 when the driver does
not support this with hardware accelaration.

Signed-off-by: Jouni Malinen 
[remove a spurious newline]
Signed-off-by: Johannes Berg

mac80211: allow drivers to control software crypto

2015-01-22T21:01:01+00:00

Some drivers unfortunately cannot support software crypto, but
mac80211 currently assumes that they do.

This has the issue that if the hardware enabling fails for some
reason, the software fallback is used, which won't work. This
clearly isn't desirable, the error should be reported and the
key setting refused.

Support this in mac80211 by allowing drivers to set a new HW
flag IEEE80211_HW_SW_CRYPTO_CONTROL, in which case mac80211 will
only allow software fallback if the set_key() method returns 1.
The driver will also need to advertise supported cipher suites
so that mac80211 doesn't advertise any (future) software ciphers
that the driver can't actually do.

While at it, to make it easier to support this, refactor the
ieee80211_init_cipher_suites() code.

Signed-off-by: Johannes Berg

mac80211: Re-fix accounting of the tailroom-needed counter

2015-01-07T13:39:32+00:00

When hw acceleration is enabled, the GENERATE_IV or PUT_IV_SPACE flags
only require headroom space. Therefore, the tailroom-needed counter can
safely be decremented for most drivers.

The older incarnation of this patch (ca34e3b5) assumed that the above
holds true for all drivers. As reported by Christopher Chavez and
researched by Christian Lamparter and Larry Finger, this isn't a valid
assumption for p54 and cw1200.

Drivers that still require tailroom for ICV/MIC even when HW encryption
is enabled can use IEEE80211_KEY_FLAG_RESERVE_TAILROOM to indicate it.

Signed-off-by: Ido Yariv 
Cc: Christopher Chavez 
Cc: Christian Lamparter 
Cc: Larry Finger 
Cc: Solomon Peachy 
Signed-off-by: Johannes Berg

Revert "mac80211: Fix accounting of the tailroom-needed counter"

2015-01-05T09:33:46+00:00

This reverts commit ca34e3b5c808385b175650605faa29e71e91991b.

It turns out that the p54 and cw2100 drivers assume that there's
tailroom even when they don't say they really need it. However,
there's currently no way for them to explicitly say they do need
it, so for now revert this.

This fixes https://bugzilla.kernel.org/show_bug.cgi?id=90331.

Cc: stable@vger.kernel.org
Fixes: ca34e3b5c808 ("mac80211: Fix accounting of the tailroom-needed counter")
Reported-by: Christopher Chavez 
Bisected-by: Larry Finger 
Debugged-by: Christian Lamparter 
Signed-off-by: Johannes Berg

mac80211: free management frame keys when removing station

2014-12-17T13:00:17+00:00

When writing the code to allow per-station GTKs, I neglected to
take into account the management frame keys (index 4 and 5) when
freeing the station and only added code to free the first four
data frame keys.

Fix this by iterating the array of keys over the right length.

Cc: stable@vger.kernel.org
Fixes: e31b82136d1a ("cfg80211/mac80211: allow per-station GTKs")
Signed-off-by: Johannes Berg

mac80211: don't remove tainted keys after not programming

2014-10-22T09:30:30+00:00

When a key is tainted during resume, it is no longer programmed
into the device; however, it's uploaded flag may (will) be set.
Clear the flag when not programming it because it's tainted to
avoid attempting to remove it again later.

Signed-off-by: Johannes Berg

mac80211: clear key material when freeing keys

2014-09-11T10:07:23+00:00

When freeing the key, clear the memory to avoid having the
key material stick around in memory "forever".

Signed-off-by: Johannes Berg