linux-toradex.git/net/mac80211/wpa.c, branch v3.19.3

mac80211: fix network header breakage during encryption

2014-10-23T18:40:01+00:00

When an IV is generated, only the MAC header is moved back. The network
header location remains the same relative to the skb head, as the new IV
is using headroom space that was reserved in advance.

Signed-off-by: Arik Nemtsov 
Signed-off-by: Emmanuel Grumbach 
Signed-off-by: Johannes Berg

mac80211: annotate MMIC head/tailroom warning

2014-09-08T09:22:42+00:00

This message occasionally triggers for some people as in
https://bugzilla.redhat.com/show_bug.cgi?id=1111740 but
it's not clear which (headroom or tailroom) is at fault.
Annotate the message a bit to get more information.

Signed-off-by: Johannes Berg

mac80211: fix a potential NULL access in ieee80211_crypto_hw_decrypt

2014-07-21T10:34:08+00:00

The NULL pointer access could happen when ieee80211_crypto_hw_decrypt
is called from ieee80211_rx_h_decrypt with the following condition:
1. rx->key->conf.cipher is not WEP, CCMP, TKIP or AES_CMAC
2. rx->sta is NULL

When ieee80211_crypto_hw_decrypt is called, it verifies
rx->sta->cipher_scheme and it will cause Oops if rx->sta is NULL.

This path adds an addirional rx->sta == NULL verification in
ieee80211_crypto_hw_decrypt for this case.

Signed-off-by: Max Stepanov 
Signed-off-by: Emmanuel Grumbach 
Signed-off-by: Johannes Berg

mac80211: add option to generate CCMP IVs only for mgmt frames

2014-04-25T15:26:15+00:00

Some chips can encrypt managment frames in HW, but
require generated IV in the frame. Add a key flag
that allows us to achieve this.

Signed-off-by: Marek Kwaczynski 
[use BIT(0) to fill that spot, fix indentation]
Signed-off-by: Johannes Berg

mac80211: add length check in ieee80211_is_robust_mgmt_frame()

2014-02-04T20:58:07+00:00

A few places weren't checking that the frame passed to the
function actually has enough data even though the function
clearly documents it must have a payload byte. Make this
safer by changing the function to take an skb and checking
the length inside. The old version is preserved for now as
the rtl* drivers use it and don't have a correct skb.

Signed-off-by: Johannes Berg

mac80211: drop unused param 'encrypted' from ccmp_special_blocks()

2014-02-04T20:48:12+00:00

Commit 7ec7c4a9a686 ("mac80211: port CCMP to cryptoapi's CCM driver")
resulted in the 'encrypted' param of ccmp_special_blocks() to be no
longer used so it can be dropped from the prototype.

Signed-off-by: Ard Biesheuvel 
Signed-off-by: Johannes Berg

mac80211: clean up garbage in comment

2014-01-07T15:21:56+00:00

Not clear how this landed here.

Signed-off-by: Emmanuel Grumbach 
Signed-off-by: Johannes Berg

mac80211: add generic cipher scheme support

2013-11-25T19:50:52+00:00

This adds generic cipher scheme support to mac80211, such schemes
are fully under control by the driver. On hw registration drivers
may specify additional HW ciphers with a scheme how these ciphers
have to be handled by mac80211 TX/RR. A cipher scheme specifies a
cipher suite value, a size of the security header to be added to
or stripped from frames and how the PN is to be verified on RX.

Signed-off-by: Max Stepanov 
Signed-off-by: Johannes Berg

mac80211: port CCMP to cryptoapi's CCM driver

2013-10-11T13:38:20+00:00

Use the generic CCM aead chaining mode driver rather than a local
implementation that sits right on top of the core AES cipher.

This allows the use of accelerated implementations of either
CCM as a whole or the CTR mode which it encapsulates.

Signed-off-by: Ard Biesheuvel 
Signed-off-by: Johannes Berg

wireless: move crypto constants to ieee80211.h

2013-05-16T20:39:41+00:00

mac80211 and the Intel drivers all define crypto
constants, move them to ieee80211.h instead.

Reviewed-by: Emmanuel Grumbach 
Signed-off-by: Johannes Berg