wpa.c 16.9 KB
Newer Older
1
2
/*
 * Copyright 2002-2004, Instant802 Networks, Inc.
3
 * Copyright 2008, Jouni Malinen <j@w1.fi>
4
5
6
7
8
9
10
11
12
13
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */

#include <linux/netdevice.h>
#include <linux/types.h>
#include <linux/skbuff.h>
#include <linux/compiler.h>
14
#include <linux/ieee80211.h>
15
#include <linux/gfp.h>
16
#include <asm/unaligned.h>
17
#include <net/mac80211.h>
Johannes Berg's avatar
Johannes Berg committed
18
#include <crypto/aes.h>
19

20
21
22
23
#include "ieee80211_i.h"
#include "michael.h"
#include "tkip.h"
#include "aes_ccm.h"
24
#include "aes_cmac.h"
25
26
#include "wpa.h"

27
ieee80211_tx_result
28
ieee80211_tx_h_michael_mic_add(struct ieee80211_tx_data *tx)
29
{
30
	u8 *data, *key, *mic;
31
	size_t data_len;
32
33
	unsigned int hdrlen;
	struct ieee80211_hdr *hdr;
34
	struct sk_buff *skb = tx->skb;
35
	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
36
	int tail;
37

38
	hdr = (struct ieee80211_hdr *)skb->data;
39
40
	if (!tx->key || tx->key->conf.cipher != WLAN_CIPHER_SUITE_TKIP ||
	    skb->len < 24 || !ieee80211_is_data_present(hdr->frame_control))
41
		return TX_CONTINUE;
42

43
44
	hdrlen = ieee80211_hdrlen(hdr->frame_control);
	if (skb->len < hdrlen)
45
		return TX_DROP;
46

47
48
49
	data = skb->data + hdrlen;
	data_len = skb->len - hdrlen;

50
51
52
53
54
	if (unlikely(info->flags & IEEE80211_TX_INTFL_TKIP_MIC_FAILURE)) {
		/* Need to use software crypto for the test */
		info->control.hw_key = NULL;
	}

55
	if (info->control.hw_key &&
56
57
	    (info->flags & IEEE80211_TX_CTL_DONTFRAG ||
	     tx->local->ops->set_frag_threshold) &&
58
59
	    !(tx->key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_MMIC)) {
		/* hwaccel - with no need for SW-generated MMIC */
60
		return TX_CONTINUE;
61
62
	}

63
	tail = MICHAEL_MIC_LEN;
64
	if (!info->control.hw_key)
65
66
67
68
69
		tail += TKIP_ICV_LEN;

	if (WARN_ON(skb_tailroom(skb) < tail ||
		    skb_headroom(skb) < TKIP_IV_LEN))
		return TX_DROP;
70

71
	key = &tx->key->conf.key[NL80211_TKIP_DATA_OFFSET_TX_MIC_KEY];
72
	mic = skb_put(skb, MICHAEL_MIC_LEN);
73
	michael_mic(key, hdr, data, data_len, mic);
74
75
	if (unlikely(info->flags & IEEE80211_TX_INTFL_TKIP_MIC_FAILURE))
		mic[0]++;
76

77
	return TX_CONTINUE;
78
79
80
}


81
ieee80211_rx_result
82
ieee80211_rx_h_michael_mic_verify(struct ieee80211_rx_data *rx)
83
{
84
	u8 *data, *key = NULL;
85
	size_t data_len;
86
	unsigned int hdrlen;
87
88
	u8 mic[MICHAEL_MIC_LEN];
	struct sk_buff *skb = rx->skb;
Johannes Berg's avatar
Johannes Berg committed
89
90
	struct ieee80211_rx_status *status = IEEE80211_SKB_RXCB(skb);
	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data;
91

92
93
94
95
96
	/*
	 * it makes no sense to check for MIC errors on anything other
	 * than data frames.
	 */
	if (!ieee80211_is_data_present(hdr->frame_control))
97
		return RX_CONTINUE;
98

99
100
101
102
103
104
105
106
107
108
	/*
	 * No way to verify the MIC if the hardware stripped it or
	 * the IV with the key index. In this case we have solely rely
	 * on the driver to set RX_FLAG_MMIC_ERROR in the event of a
	 * MIC failure report.
	 */
	if (status->flag & (RX_FLAG_MMIC_STRIPPED | RX_FLAG_IV_STRIPPED)) {
		if (status->flag & RX_FLAG_MMIC_ERROR)
			goto mic_fail;

109
		if (!(status->flag & RX_FLAG_IV_STRIPPED) && rx->key)
110
111
112
113
114
115
116
117
118
119
			goto update_iv;

		return RX_CONTINUE;
	}

	/*
	 * Some hardware seems to generate Michael MIC failure reports; even
	 * though, the frame was not encrypted with TKIP and therefore has no
	 * MIC. Ignore the flag them to avoid triggering countermeasures.
	 */
120
	if (!rx->key || rx->key->conf.cipher != WLAN_CIPHER_SUITE_TKIP ||
121
	    !(status->flag & RX_FLAG_DECRYPTED))
122
		return RX_CONTINUE;
123

124
125
126
127
128
129
130
131
132
133
134
135
136
	if (rx->sdata->vif.type == NL80211_IFTYPE_AP && rx->key->conf.keyidx) {
		/*
		 * APs with pairwise keys should never receive Michael MIC
		 * errors for non-zero keyidx because these are reserved for
		 * group keys and only the AP is sending real multicast
		 * frames in the BSS. (
		 */
		return RX_DROP_UNUSABLE;
	}

	if (status->flag & RX_FLAG_MMIC_ERROR)
		goto mic_fail;

137
138
	hdrlen = ieee80211_hdrlen(hdr->frame_control);
	if (skb->len < hdrlen + MICHAEL_MIC_LEN)
Johannes Berg's avatar
Johannes Berg committed
139
		return RX_DROP_UNUSABLE;
140

141
142
143
144
	if (skb_linearize(rx->skb))
		return RX_DROP_UNUSABLE;
	hdr = (void *)skb->data;

145
146
	data = skb->data + hdrlen;
	data_len = skb->len - hdrlen - MICHAEL_MIC_LEN;
147
	key = &rx->key->conf.key[NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY];
148
	michael_mic(key, hdr, data, data_len, mic);
149
150
	if (memcmp(mic, data + data_len, MICHAEL_MIC_LEN) != 0)
		goto mic_fail;
151
152
153
154

	/* remove Michael MIC from payload */
	skb_trim(skb, skb->len - MICHAEL_MIC_LEN);

155
update_iv:
156
	/* update IV in key information to be able to detect replays */
157
158
	rx->key->u.tkip.rx[rx->security_idx].iv32 = rx->tkip_iv32;
	rx->key->u.tkip.rx[rx->security_idx].iv16 = rx->tkip_iv16;
159

160
	return RX_CONTINUE;
161
162

mic_fail:
163
164
165
166
167
168
169
	/*
	 * In some cases the key can be unset - e.g. a multicast packet, in
	 * a driver that supports HW encryption. Send up the key idx only if
	 * the key is set.
	 */
	mac80211_ev_michael_mic_failure(rx->sdata,
					rx->key ? rx->key->conf.keyidx : -1,
170
171
					(void *) skb->data, NULL, GFP_ATOMIC);
	return RX_DROP_UNUSABLE;
172
173
174
}


175
static int tkip_encrypt_skb(struct ieee80211_tx_data *tx, struct sk_buff *skb)
176
177
178
{
	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data;
	struct ieee80211_key *key = tx->key;
179
	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
180
	unsigned long flags;
181
182
	unsigned int hdrlen;
	int len, tail;
183
184
	u8 *pos;

185
	if (info->control.hw_key &&
186
187
	    !(info->control.hw_key->flags & IEEE80211_KEY_FLAG_GENERATE_IV) &&
	    !(info->control.hw_key->flags & IEEE80211_KEY_FLAG_PUT_IV_SPACE)) {
188
		/* hwaccel - with no need for software-generated IV */
189
		return 0;
190
191
	}

192
	hdrlen = ieee80211_hdrlen(hdr->frame_control);
193
194
	len = skb->len - hdrlen;

195
	if (info->control.hw_key)
196
		tail = 0;
197
	else
198
199
200
201
202
		tail = TKIP_ICV_LEN;

	if (WARN_ON(skb_tailroom(skb) < tail ||
		    skb_headroom(skb) < TKIP_IV_LEN))
		return -1;
203
204
205
206
207

	pos = skb_push(skb, TKIP_IV_LEN);
	memmove(pos, pos + TKIP_IV_LEN, hdrlen);
	pos += hdrlen;

208
209
210
211
212
	/* the HW only needs room for the IV, but not the actual IV */
	if (info->control.hw_key &&
	    (info->control.hw_key->flags & IEEE80211_KEY_FLAG_PUT_IV_SPACE))
		return 0;

213
	/* Increase IV for the frame */
214
	spin_lock_irqsave(&key->u.tkip.txlock, flags);
215
216
217
	key->u.tkip.tx.iv16++;
	if (key->u.tkip.tx.iv16 == 0)
		key->u.tkip.tx.iv32++;
218
219
	pos = ieee80211_tkip_add_iv(pos, key);
	spin_unlock_irqrestore(&key->u.tkip.txlock, flags);
220

221
222
	/* hwaccel - with software IV */
	if (info->control.hw_key)
223
224
225
226
227
		return 0;

	/* Add room for ICV */
	skb_put(skb, TKIP_ICV_LEN);

228
	return ieee80211_tkip_encrypt_data(tx->local->wep_tx_tfm,
229
					   key, skb, pos, len);
230
231
232
}


233
ieee80211_tx_result
234
ieee80211_crypto_tkip_encrypt(struct ieee80211_tx_data *tx)
235
{
236
	struct sk_buff *skb;
237

238
	ieee80211_tx_set_protected(tx);
239

240
	skb_queue_walk(&tx->skbs, skb) {
241
242
		if (tkip_encrypt_skb(tx, skb) < 0)
			return TX_DROP;
243
	}
244

245
	return TX_CONTINUE;
246
247
248
}


249
ieee80211_rx_result
250
ieee80211_crypto_tkip_decrypt(struct ieee80211_rx_data *rx)
251
252
{
	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) rx->skb->data;
253
	int hdrlen, res, hwaccel = 0;
254
255
	struct ieee80211_key *key = rx->key;
	struct sk_buff *skb = rx->skb;
Johannes Berg's avatar
Johannes Berg committed
256
	struct ieee80211_rx_status *status = IEEE80211_SKB_RXCB(skb);
257

258
	hdrlen = ieee80211_hdrlen(hdr->frame_control);
259

260
	if (!ieee80211_is_data(hdr->frame_control))
261
		return RX_CONTINUE;
262
263

	if (!rx->sta || skb->len - hdrlen < 12)
Johannes Berg's avatar
Johannes Berg committed
264
		return RX_DROP_UNUSABLE;
265

266
267
268
269
270
	/* it may be possible to optimize this a bit more */
	if (skb_linearize(rx->skb))
		return RX_DROP_UNUSABLE;
	hdr = (void *)skb->data;

271
272
273
274
275
276
	/*
	 * Let TKIP code verify IV, but skip decryption.
	 * In the case where hardware checks the IV as well,
	 * we don't even get here, see ieee80211_rx_h_decrypt()
	 */
	if (status->flag & RX_FLAG_DECRYPTED)
277
278
279
280
		hwaccel = 1;

	res = ieee80211_tkip_decrypt_data(rx->local->wep_rx_tfm,
					  key, skb->data + hdrlen,
281
					  skb->len - hdrlen, rx->sta->sta.addr,
282
					  hdr->addr1, hwaccel, rx->security_idx,
283
284
					  &rx->tkip_iv32,
					  &rx->tkip_iv16);
285
	if (res != TKIP_DECRYPT_OK)
Johannes Berg's avatar
Johannes Berg committed
286
		return RX_DROP_UNUSABLE;
287
288
289
290
291
292
293
294

	/* Trim ICV */
	skb_trim(skb, skb->len - TKIP_ICV_LEN);

	/* Remove IV */
	memmove(skb->data + TKIP_IV_LEN, skb->data, hdrlen);
	skb_pull(skb, TKIP_IV_LEN);

295
	return RX_CONTINUE;
296
297
298
}


299
static void ccmp_special_blocks(struct sk_buff *skb, u8 *pn, u8 *scratch,
300
301
				int encrypted)
{
302
	__le16 mask_fc;
303
	int a4_included, mgmt;
304
	u8 qos_tid;
305
	u8 *b_0, *aad;
306
307
308
	u16 data_len, len_a;
	unsigned int hdrlen;
	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data;
309

Johannes Berg's avatar
Johannes Berg committed
310
	memset(scratch, 0, 6 * AES_BLOCK_SIZE);
Johannes Berg's avatar
Johannes Berg committed
311

Johannes Berg's avatar
Johannes Berg committed
312
313
	b_0 = scratch + 3 * AES_BLOCK_SIZE;
	aad = scratch + 4 * AES_BLOCK_SIZE;
314

315
	/*
316
	 * Mask FC: zero subtype b4 b5 b6 (if not mgmt)
317
318
	 * Retry, PwrMgt, MoreData; set Protected
	 */
319
	mgmt = ieee80211_is_mgmt(hdr->frame_control);
320
	mask_fc = hdr->frame_control;
321
	mask_fc &= ~cpu_to_le16(IEEE80211_FCTL_RETRY |
322
				IEEE80211_FCTL_PM | IEEE80211_FCTL_MOREDATA);
323
324
	if (!mgmt)
		mask_fc &= ~cpu_to_le16(0x0070);
325
326
327
328
329
	mask_fc |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);

	hdrlen = ieee80211_hdrlen(hdr->frame_control);
	len_a = hdrlen - 2;
	a4_included = ieee80211_has_a4(hdr->frame_control);
330

331
332
333
334
335
336
337
338
339
340
	if (ieee80211_is_data_qos(hdr->frame_control))
		qos_tid = *ieee80211_get_qos_ctl(hdr) & IEEE80211_QOS_CTL_TID_MASK;
	else
		qos_tid = 0;

	data_len = skb->len - hdrlen - CCMP_HDR_LEN;
	if (encrypted)
		data_len -= CCMP_MIC_LEN;

	/* First block, b_0 */
341
	b_0[0] = 0x59; /* flags: Adata: 1, M: 011, L: 001 */
342
343
344
345
	/* Nonce: Nonce Flags | A2 | PN
	 * Nonce Flags: Priority (b0..b3) | Management (b4) | Reserved (b5..b7)
	 */
	b_0[1] = qos_tid | (mgmt << 4);
346
	memcpy(&b_0[2], hdr->addr2, ETH_ALEN);
347
348
	memcpy(&b_0[8], pn, CCMP_PN_LEN);
	/* l(m) */
349
	put_unaligned_be16(data_len, &b_0[14]);
350
351
352

	/* AAD (extra authenticate-only data) / masked 802.11 header
	 * FC | A1 | A2 | A3 | SC | [A4] | [QC] */
353
354
	put_unaligned_be16(len_a, &aad[0]);
	put_unaligned(mask_fc, (__le16 *)&aad[2]);
355
	memcpy(&aad[4], &hdr->addr1, 3 * ETH_ALEN);
356
357
358
359

	/* Mask Seq#, leave Frag# */
	aad[22] = *((u8 *) &hdr->seq_ctrl) & 0x0f;
	aad[23] = 0;
360

361
	if (a4_included) {
362
		memcpy(&aad[24], hdr->addr4, ETH_ALEN);
363
		aad[30] = qos_tid;
364
		aad[31] = 0;
365
	} else {
366
		memset(&aad[24], 0, ETH_ALEN + IEEE80211_QOS_CTL_LEN);
367
		aad[24] = qos_tid;
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
	}
}


static inline void ccmp_pn2hdr(u8 *hdr, u8 *pn, int key_id)
{
	hdr[0] = pn[5];
	hdr[1] = pn[4];
	hdr[2] = 0;
	hdr[3] = 0x20 | (key_id << 6);
	hdr[4] = pn[3];
	hdr[5] = pn[2];
	hdr[6] = pn[1];
	hdr[7] = pn[0];
}


Johannes Berg's avatar
Johannes Berg committed
385
static inline void ccmp_hdr2pn(u8 *pn, u8 *hdr)
386
387
388
389
390
391
392
393
394
395
{
	pn[0] = hdr[7];
	pn[1] = hdr[6];
	pn[2] = hdr[5];
	pn[3] = hdr[4];
	pn[4] = hdr[1];
	pn[5] = hdr[0];
}


396
static int ccmp_encrypt_skb(struct ieee80211_tx_data *tx, struct sk_buff *skb)
397
398
399
{
	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data;
	struct ieee80211_key *key = tx->key;
400
	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
401
	int hdrlen, len, tail;
Johannes Berg's avatar
Johannes Berg committed
402
403
404
	u8 *pos;
	u8 pn[6];
	u64 pn64;
Johannes Berg's avatar
Johannes Berg committed
405
	u8 scratch[6 * AES_BLOCK_SIZE];
406

407
	if (info->control.hw_key &&
408
409
	    !(info->control.hw_key->flags & IEEE80211_KEY_FLAG_GENERATE_IV) &&
	    !(info->control.hw_key->flags & IEEE80211_KEY_FLAG_PUT_IV_SPACE)) {
410
411
412
413
		/*
		 * hwaccel has no need for preallocated room for CCMP
		 * header or MIC fields
		 */
414
		return 0;
415
416
	}

417
	hdrlen = ieee80211_hdrlen(hdr->frame_control);
418
419
	len = skb->len - hdrlen;

420
	if (info->control.hw_key)
421
		tail = 0;
422
	else
423
424
425
426
427
		tail = CCMP_MIC_LEN;

	if (WARN_ON(skb_tailroom(skb) < tail ||
		    skb_headroom(skb) < CCMP_HDR_LEN))
		return -1;
428
429
430

	pos = skb_push(skb, CCMP_HDR_LEN);
	memmove(pos, pos + CCMP_HDR_LEN, hdrlen);
431
432

	/* the HW only needs room for the IV, but not the actual IV */
433
434
	if (info->control.hw_key &&
	    (info->control.hw_key->flags & IEEE80211_KEY_FLAG_PUT_IV_SPACE))
435
436
		return 0;

437
438
439
	hdr = (struct ieee80211_hdr *) pos;
	pos += hdrlen;

Johannes Berg's avatar
Johannes Berg committed
440
	pn64 = atomic64_inc_return(&key->u.ccmp.tx_pn);
441

Johannes Berg's avatar
Johannes Berg committed
442
443
444
445
446
447
	pn[5] = pn64;
	pn[4] = pn64 >> 8;
	pn[3] = pn64 >> 16;
	pn[2] = pn64 >> 24;
	pn[1] = pn64 >> 32;
	pn[0] = pn64 >> 40;
448

449
	ccmp_pn2hdr(pos, pn, key->conf.keyidx);
450

451
452
	/* hwaccel - with software CCMP header */
	if (info->control.hw_key)
453
454
455
		return 0;

	pos += CCMP_HDR_LEN;
Johannes Berg's avatar
Johannes Berg committed
456
457
	ccmp_special_blocks(skb, pn, scratch, 0);
	ieee80211_aes_ccm_encrypt(key->u.ccmp.tfm, scratch, pos, len,
458
459
460
461
462
463
				  pos, skb_put(skb, CCMP_MIC_LEN));

	return 0;
}


464
ieee80211_tx_result
465
ieee80211_crypto_ccmp_encrypt(struct ieee80211_tx_data *tx)
466
{
467
	struct sk_buff *skb;
468

469
	ieee80211_tx_set_protected(tx);
470

471
	skb_queue_walk(&tx->skbs, skb) {
472
473
		if (ccmp_encrypt_skb(tx, skb) < 0)
			return TX_DROP;
474
	}
475

476
	return TX_CONTINUE;
477
478
479
}


480
ieee80211_rx_result
481
ieee80211_crypto_ccmp_decrypt(struct ieee80211_rx_data *rx)
482
{
483
	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)rx->skb->data;
484
485
486
	int hdrlen;
	struct ieee80211_key *key = rx->key;
	struct sk_buff *skb = rx->skb;
Johannes Berg's avatar
Johannes Berg committed
487
	struct ieee80211_rx_status *status = IEEE80211_SKB_RXCB(skb);
488
489
	u8 pn[CCMP_PN_LEN];
	int data_len;
490
	int queue;
491

492
	hdrlen = ieee80211_hdrlen(hdr->frame_control);
493

494
495
	if (!ieee80211_is_data(hdr->frame_control) &&
	    !ieee80211_is_robust_mgmt_frame(hdr))
496
		return RX_CONTINUE;
497
498
499

	data_len = skb->len - hdrlen - CCMP_HDR_LEN - CCMP_MIC_LEN;
	if (!rx->sta || data_len < 0)
Johannes Berg's avatar
Johannes Berg committed
500
		return RX_DROP_UNUSABLE;
501

502
503
504
505
506
507
508
509
	if (status->flag & RX_FLAG_DECRYPTED) {
		if (!pskb_may_pull(rx->skb, hdrlen + CCMP_HDR_LEN))
			return RX_DROP_UNUSABLE;
	} else {
		if (skb_linearize(rx->skb))
			return RX_DROP_UNUSABLE;
	}

Johannes Berg's avatar
Johannes Berg committed
510
	ccmp_hdr2pn(pn, skb->data + hdrlen);
511

512
	queue = rx->security_idx;
513
514

	if (memcmp(pn, key->u.ccmp.rx_pn[queue], CCMP_PN_LEN) <= 0) {
515
		key->u.ccmp.replays++;
Johannes Berg's avatar
Johannes Berg committed
516
		return RX_DROP_UNUSABLE;
517
518
	}

Johannes Berg's avatar
Johannes Berg committed
519
	if (!(status->flag & RX_FLAG_DECRYPTED)) {
Johannes Berg's avatar
Johannes Berg committed
520
		u8 scratch[6 * AES_BLOCK_SIZE];
521
		/* hardware didn't decrypt/verify MIC */
Johannes Berg's avatar
Johannes Berg committed
522
		ccmp_special_blocks(skb, pn, scratch, 1);
523
524

		if (ieee80211_aes_ccm_decrypt(
Johannes Berg's avatar
Johannes Berg committed
525
			    key->u.ccmp.tfm, scratch,
526
527
			    skb->data + hdrlen + CCMP_HDR_LEN, data_len,
			    skb->data + skb->len - CCMP_MIC_LEN,
Johannes Berg's avatar
Johannes Berg committed
528
			    skb->data + hdrlen + CCMP_HDR_LEN))
Johannes Berg's avatar
Johannes Berg committed
529
			return RX_DROP_UNUSABLE;
530
531
	}

532
	memcpy(key->u.ccmp.rx_pn[queue], pn, CCMP_PN_LEN);
533
534

	/* Remove CCMP header and MIC */
535
536
	if (pskb_trim(skb, skb->len - CCMP_MIC_LEN))
		return RX_DROP_UNUSABLE;
537
538
539
	memmove(skb->data + CCMP_HDR_LEN, skb->data, hdrlen);
	skb_pull(skb, CCMP_HDR_LEN);

540
	return RX_CONTINUE;
541
}
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556


static void bip_aad(struct sk_buff *skb, u8 *aad)
{
	/* BIP AAD: FC(masked) || A1 || A2 || A3 */

	/* FC type/subtype */
	aad[0] = skb->data[0];
	/* Mask FC Retry, PwrMgt, MoreData flags to zero */
	aad[1] = skb->data[1] & ~(BIT(4) | BIT(5) | BIT(6));
	/* A1 || A2 || A3 */
	memcpy(aad + 2, skb->data + 4, 3 * ETH_ALEN);
}


Johannes Berg's avatar
Johannes Berg committed
557
558
559
560
561
562
563
564
565
566
static inline void bip_ipn_set64(u8 *d, u64 pn)
{
	*d++ = pn;
	*d++ = pn >> 8;
	*d++ = pn >> 16;
	*d++ = pn >> 24;
	*d++ = pn >> 32;
	*d = pn >> 40;
}

567
568
569
570
571
572
573
574
575
576
577
578
579
580
static inline void bip_ipn_swap(u8 *d, const u8 *s)
{
	*d++ = s[5];
	*d++ = s[4];
	*d++ = s[3];
	*d++ = s[2];
	*d++ = s[1];
	*d = s[0];
}


ieee80211_tx_result
ieee80211_crypto_aes_cmac_encrypt(struct ieee80211_tx_data *tx)
{
581
582
	struct sk_buff *skb;
	struct ieee80211_tx_info *info;
583
584
	struct ieee80211_key *key = tx->key;
	struct ieee80211_mmie *mmie;
Johannes Berg's avatar
Johannes Berg committed
585
586
	u8 aad[20];
	u64 pn64;
587

588
589
590
591
592
593
594
	if (WARN_ON(skb_queue_len(&tx->skbs) != 1))
		return TX_DROP;

	skb = skb_peek(&tx->skbs);

	info = IEEE80211_SKB_CB(skb);

595
	if (info->control.hw_key)
596
		return TX_CONTINUE;
597
598
599
600
601
602
603
604
605
606

	if (WARN_ON(skb_tailroom(skb) < sizeof(*mmie)))
		return TX_DROP;

	mmie = (struct ieee80211_mmie *) skb_put(skb, sizeof(*mmie));
	mmie->element_id = WLAN_EID_MMIE;
	mmie->length = sizeof(*mmie) - 2;
	mmie->key_id = cpu_to_le16(key->conf.keyidx);

	/* PN = PN + 1 */
Johannes Berg's avatar
Johannes Berg committed
607
	pn64 = atomic64_inc_return(&key->u.aes_cmac.tx_pn);
608

Johannes Berg's avatar
Johannes Berg committed
609
	bip_ipn_set64(mmie->sequence_number, pn64);
610
611
612
613
614
615

	bip_aad(skb, aad);

	/*
	 * MIC = AES-128-CMAC(IGTK, AAD || Management Frame Body || MMIE, 64)
	 */
Johannes Berg's avatar
Johannes Berg committed
616
617
	ieee80211_aes_cmac(key->u.aes_cmac.tfm, aad,
			   skb->data + 24, skb->len - 24, mmie->mic);
618
619
620
621
622
623
624
625
626

	return TX_CONTINUE;
}


ieee80211_rx_result
ieee80211_crypto_aes_cmac_decrypt(struct ieee80211_rx_data *rx)
{
	struct sk_buff *skb = rx->skb;
Johannes Berg's avatar
Johannes Berg committed
627
	struct ieee80211_rx_status *status = IEEE80211_SKB_RXCB(skb);
628
629
630
631
632
633
634
635
	struct ieee80211_key *key = rx->key;
	struct ieee80211_mmie *mmie;
	u8 aad[20], mic[8], ipn[6];
	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data;

	if (!ieee80211_is_mgmt(hdr->frame_control))
		return RX_CONTINUE;

636
637
	/* management frames are already linear */

638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
	if (skb->len < 24 + sizeof(*mmie))
		return RX_DROP_UNUSABLE;

	mmie = (struct ieee80211_mmie *)
		(skb->data + skb->len - sizeof(*mmie));
	if (mmie->element_id != WLAN_EID_MMIE ||
	    mmie->length != sizeof(*mmie) - 2)
		return RX_DROP_UNUSABLE; /* Invalid MMIE */

	bip_ipn_swap(ipn, mmie->sequence_number);

	if (memcmp(ipn, key->u.aes_cmac.rx_pn, 6) <= 0) {
		key->u.aes_cmac.replays++;
		return RX_DROP_UNUSABLE;
	}

Johannes Berg's avatar
Johannes Berg committed
654
	if (!(status->flag & RX_FLAG_DECRYPTED)) {
655
656
		/* hardware didn't decrypt/verify MIC */
		bip_aad(skb, aad);
Johannes Berg's avatar
Johannes Berg committed
657
		ieee80211_aes_cmac(key->u.aes_cmac.tfm, aad,
658
659
660
661
662
663
664
665
666
667
668
669
670
671
				   skb->data + 24, skb->len - 24, mic);
		if (memcmp(mic, mmie->mic, sizeof(mmie->mic)) != 0) {
			key->u.aes_cmac.icverrors++;
			return RX_DROP_UNUSABLE;
		}
	}

	memcpy(key->u.aes_cmac.rx_pn, ipn, 6);

	/* Remove MMIE */
	skb_trim(skb, skb->len - sizeof(*mmie));

	return RX_CONTINUE;
}
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690

ieee80211_tx_result
ieee80211_crypto_hw_encrypt(struct ieee80211_tx_data *tx)
{
	struct sk_buff *skb;
	struct ieee80211_tx_info *info = NULL;

	skb_queue_walk(&tx->skbs, skb) {
		info  = IEEE80211_SKB_CB(skb);

		/* handle hw-only algorithm */
		if (!info->control.hw_key)
			return TX_DROP;
	}

	ieee80211_tx_set_protected(tx);

	return TX_CONTINUE;
}