2 * Copyright 2002-2005, Instant802 Networks, Inc.
3 * Copyright 2005-2006, Devicescape Software, Inc.
4 * Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
5 * Copyright 2007 Johannes Berg <johannes@sipsolutions.net>
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License version 2 as
9 * published by the Free Software Foundation.
12 #include <linux/if_ether.h>
13 #include <linux/etherdevice.h>
14 #include <linux/list.h>
15 #include <linux/rcupdate.h>
16 #include <net/mac80211.h>
17 #include "ieee80211_i.h"
18 #include "debugfs_key.h"
25 * Key handling in mac80211 is done based on per-interface (sub_if_data)
26 * keys and per-station keys. Since each station belongs to an interface,
27 * each station key also belongs to that interface.
29 * Hardware acceleration is done on a best-effort basis, for each key
30 * that is eligible the hardware is asked to enable that key but if
31 * it cannot do that they key is simply kept for software encryption.
32 * There is currently no way of knowing this except by looking into
35 * All operations here are called under RTNL so no extra locking is
39 static const u8 bcast_addr
[ETH_ALEN
] = { 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF };
40 static const u8 zero_addr
[ETH_ALEN
];
42 static const u8
*get_mac_for_key(struct ieee80211_key
*key
)
44 const u8
*addr
= bcast_addr
;
47 * If we're an AP we won't ever receive frames with a non-WEP
48 * group key so we tell the driver that by using the zero MAC
49 * address to indicate a transmit-only key.
51 if (key
->conf
.alg
!= ALG_WEP
&&
52 (key
->sdata
->type
== IEEE80211_IF_TYPE_AP
||
53 key
->sdata
->type
== IEEE80211_IF_TYPE_VLAN
))
57 addr
= key
->sta
->addr
;
62 static void ieee80211_key_enable_hw_accel(struct ieee80211_key
*key
)
67 if (!key
->local
->ops
->set_key
)
70 addr
= get_mac_for_key(key
);
72 ret
= key
->local
->ops
->set_key(local_to_hw(key
->local
), SET_KEY
,
73 key
->sdata
->dev
->dev_addr
, addr
,
77 key
->flags
|= KEY_FLAG_UPLOADED_TO_HARDWARE
;
79 if (ret
&& ret
!= -ENOSPC
&& ret
!= -EOPNOTSUPP
)
80 printk(KERN_ERR
"mac80211-%s: failed to set key "
81 "(%d, " MAC_FMT
") to hardware (%d)\n",
82 wiphy_name(key
->local
->hw
.wiphy
),
83 key
->conf
.keyidx
, MAC_ARG(addr
), ret
);
86 static void ieee80211_key_disable_hw_accel(struct ieee80211_key
*key
)
91 if (!key
->local
->ops
->set_key
)
94 if (!(key
->flags
& KEY_FLAG_UPLOADED_TO_HARDWARE
))
97 addr
= get_mac_for_key(key
);
99 ret
= key
->local
->ops
->set_key(local_to_hw(key
->local
), DISABLE_KEY
,
100 key
->sdata
->dev
->dev_addr
, addr
,
104 printk(KERN_ERR
"mac80211-%s: failed to remove key "
105 "(%d, " MAC_FMT
") from hardware (%d)\n",
106 wiphy_name(key
->local
->hw
.wiphy
),
107 key
->conf
.keyidx
, MAC_ARG(addr
), ret
);
109 key
->flags
&= ~KEY_FLAG_UPLOADED_TO_HARDWARE
;
112 struct ieee80211_key
*ieee80211_key_alloc(struct ieee80211_sub_if_data
*sdata
,
113 struct sta_info
*sta
,
114 enum ieee80211_key_alg alg
,
119 struct ieee80211_key
*key
;
121 BUG_ON(idx
< 0 || idx
>= NUM_DEFAULT_KEYS
);
123 key
= kzalloc(sizeof(struct ieee80211_key
) + key_len
, GFP_KERNEL
);
128 * Default to software encryption; we'll later upload the
129 * key to the hardware if possible.
135 key
->conf
.keyidx
= idx
;
136 key
->conf
.keylen
= key_len
;
137 memcpy(key
->conf
.key
, key_data
, key_len
);
139 key
->local
= sdata
->local
;
143 if (alg
== ALG_CCMP
) {
145 * Initialize AES key state here as an optimization so that
146 * it does not need to be initialized for every packet.
148 key
->u
.ccmp
.tfm
= ieee80211_aes_key_setup_encrypt(key_data
);
149 if (!key
->u
.ccmp
.tfm
) {
150 ieee80211_key_free(key
);
155 ieee80211_debugfs_key_add(key
->local
, key
);
157 /* remove key first */
159 ieee80211_key_free(sta
->key
);
161 ieee80211_key_free(sdata
->keys
[idx
]);
164 ieee80211_debugfs_key_sta_link(key
, sta
);
167 * some hardware cannot handle TKIP with QoS, so
168 * we indicate whether QoS could be in use.
170 if (sta
->flags
& WLAN_STA_WME
)
171 key
->conf
.flags
|= IEEE80211_KEY_FLAG_WMM_STA
;
173 if (sdata
->type
== IEEE80211_IF_TYPE_STA
) {
176 /* same here, the AP could be using QoS */
177 ap
= sta_info_get(key
->local
, key
->sdata
->u
.sta
.bssid
);
179 if (ap
->flags
& WLAN_STA_WME
)
181 IEEE80211_KEY_FLAG_WMM_STA
;
187 /* enable hwaccel if appropriate */
188 if (netif_running(key
->sdata
->dev
))
189 ieee80211_key_enable_hw_accel(key
);
192 rcu_assign_pointer(sta
->key
, key
);
194 rcu_assign_pointer(sdata
->keys
[idx
], key
);
196 list_add(&key
->list
, &sdata
->key_list
);
201 void ieee80211_key_free(struct ieee80211_key
*key
)
207 rcu_assign_pointer(key
->sta
->key
, NULL
);
209 if (key
->sdata
->default_key
== key
)
210 ieee80211_set_default_key(key
->sdata
, -1);
211 if (key
->conf
.keyidx
>= 0 &&
212 key
->conf
.keyidx
< NUM_DEFAULT_KEYS
)
213 rcu_assign_pointer(key
->sdata
->keys
[key
->conf
.keyidx
],
219 /* wait for all key users to complete */
222 /* remove from hwaccel if appropriate */
223 ieee80211_key_disable_hw_accel(key
);
225 if (key
->conf
.alg
== ALG_CCMP
)
226 ieee80211_aes_key_free(key
->u
.ccmp
.tfm
);
227 ieee80211_debugfs_key_remove(key
);
229 list_del(&key
->list
);
234 void ieee80211_set_default_key(struct ieee80211_sub_if_data
*sdata
, int idx
)
236 struct ieee80211_key
*key
= NULL
;
238 if (idx
>= 0 && idx
< NUM_DEFAULT_KEYS
)
239 key
= sdata
->keys
[idx
];
241 if (sdata
->default_key
!= key
) {
242 ieee80211_debugfs_key_remove_default(sdata
);
244 rcu_assign_pointer(sdata
->default_key
, key
);
246 if (sdata
->default_key
)
247 ieee80211_debugfs_key_add_default(sdata
);
251 void ieee80211_free_keys(struct ieee80211_sub_if_data
*sdata
)
253 struct ieee80211_key
*key
, *tmp
;
255 list_for_each_entry_safe(key
, tmp
, &sdata
->key_list
, list
)
256 ieee80211_key_free(key
);
259 void ieee80211_enable_keys(struct ieee80211_sub_if_data
*sdata
)
261 struct ieee80211_key
*key
;
263 WARN_ON(!netif_running(sdata
->dev
));
264 if (!netif_running(sdata
->dev
))
267 list_for_each_entry(key
, &sdata
->key_list
, list
)
268 ieee80211_key_enable_hw_accel(key
);
271 void ieee80211_disable_keys(struct ieee80211_sub_if_data
*sdata
)
273 struct ieee80211_key
*key
;
275 list_for_each_entry(key
, &sdata
->key_list
, list
)
276 ieee80211_key_disable_hw_accel(key
);