2 * Copyright 2002-2004, Instant802 Networks, Inc.
4 * This program is free software; you can redistribute it and/or modify
5 * it under the terms of the GNU General Public License version 2 as
6 * published by the Free Software Foundation.
9 #include <linux/netdevice.h>
10 #include <linux/types.h>
11 #include <linux/slab.h>
12 #include <linux/skbuff.h>
13 #include <linux/compiler.h>
14 #include <net/mac80211.h>
16 #include "ieee80211_i.h"
22 static int ieee80211_get_hdr_info(const struct sk_buff
*skb
, u8
**sa
, u8
**da
,
23 u8
*qos_tid
, u8
**data
, size_t *data_len
)
25 struct ieee80211_hdr
*hdr
;
31 hdr
= (struct ieee80211_hdr
*) skb
->data
;
32 fc
= le16_to_cpu(hdr
->frame_control
);
35 if ((fc
& (IEEE80211_FCTL_FROMDS
| IEEE80211_FCTL_TODS
)) ==
36 (IEEE80211_FCTL_FROMDS
| IEEE80211_FCTL_TODS
)) {
40 } else if (fc
& IEEE80211_FCTL_FROMDS
) {
43 } else if (fc
& IEEE80211_FCTL_TODS
) {
54 *data
= skb
->data
+ hdrlen
;
55 *data_len
= skb
->len
- hdrlen
;
57 a4_included
= (fc
& (IEEE80211_FCTL_TODS
| IEEE80211_FCTL_FROMDS
)) ==
58 (IEEE80211_FCTL_TODS
| IEEE80211_FCTL_FROMDS
);
59 if ((fc
& IEEE80211_FCTL_FTYPE
) == IEEE80211_FTYPE_DATA
&&
60 fc
& IEEE80211_STYPE_QOS_DATA
) {
61 pos
= (u8
*) &hdr
->addr4
;
64 *qos_tid
= pos
[0] & 0x0f;
65 *qos_tid
|= 0x80; /* qos_included flag */
69 return skb
->len
< hdrlen
? -1 : 0;
74 ieee80211_tx_h_michael_mic_add(struct ieee80211_txrx_data
*tx
)
76 u8
*data
, *sa
, *da
, *key
, *mic
, qos_tid
;
79 struct sk_buff
*skb
= tx
->skb
;
85 if (!tx
->key
|| tx
->key
->conf
.alg
!= ALG_TKIP
|| skb
->len
< 24 ||
86 !WLAN_FC_DATA_PRESENT(fc
))
89 if (ieee80211_get_hdr_info(skb
, &sa
, &da
, &qos_tid
, &data
, &data_len
))
92 if ((tx
->key
->flags
& KEY_FLAG_UPLOADED_TO_HARDWARE
) &&
93 !(tx
->flags
& IEEE80211_TXRXD_FRAGMENTED
) &&
94 !(tx
->key
->conf
.flags
& IEEE80211_KEY_FLAG_GENERATE_MMIC
) &&
96 /* hwaccel - with no need for preallocated room for Michael MIC
101 if (skb_tailroom(skb
) < MICHAEL_MIC_LEN
) {
102 I802_DEBUG_INC(tx
->local
->tx_expand_skb_head
);
103 if (unlikely(pskb_expand_head(skb
, TKIP_IV_LEN
,
104 MICHAEL_MIC_LEN
+ TKIP_ICV_LEN
,
106 printk(KERN_DEBUG
"%s: failed to allocate more memory "
107 "for Michael MIC\n", tx
->dev
->name
);
113 authenticator
= fc
& IEEE80211_FCTL_FROMDS
; /* FIX */
117 key
= &tx
->key
->conf
.key
[authenticator
? ALG_TKIP_TEMP_AUTH_TX_MIC_KEY
:
118 ALG_TKIP_TEMP_AUTH_RX_MIC_KEY
];
119 mic
= skb_put(skb
, MICHAEL_MIC_LEN
);
120 michael_mic(key
, da
, sa
, qos_tid
& 0x0f, data
, data_len
, mic
);
122 return TXRX_CONTINUE
;
126 ieee80211_txrx_result
127 ieee80211_rx_h_michael_mic_verify(struct ieee80211_txrx_data
*rx
)
129 u8
*data
, *sa
, *da
, *key
= NULL
, qos_tid
;
132 u8 mic
[MICHAEL_MIC_LEN
];
133 struct sk_buff
*skb
= rx
->skb
;
134 int authenticator
= 1, wpa_test
= 0;
139 * No way to verify the MIC if the hardware stripped it
141 if (rx
->u
.rx
.status
->flag
& RX_FLAG_MMIC_STRIPPED
)
142 return TXRX_CONTINUE
;
144 if (!rx
->key
|| rx
->key
->conf
.alg
!= ALG_TKIP
||
145 !(rx
->fc
& IEEE80211_FCTL_PROTECTED
) || !WLAN_FC_DATA_PRESENT(fc
))
146 return TXRX_CONTINUE
;
148 if (ieee80211_get_hdr_info(skb
, &sa
, &da
, &qos_tid
, &data
, &data_len
)
149 || data_len
< MICHAEL_MIC_LEN
)
152 data_len
-= MICHAEL_MIC_LEN
;
155 authenticator
= fc
& IEEE80211_FCTL_TODS
; /* FIX */
159 key
= &rx
->key
->conf
.key
[authenticator
? ALG_TKIP_TEMP_AUTH_RX_MIC_KEY
:
160 ALG_TKIP_TEMP_AUTH_TX_MIC_KEY
];
161 michael_mic(key
, da
, sa
, qos_tid
& 0x0f, data
, data_len
, mic
);
162 if (memcmp(mic
, data
+ data_len
, MICHAEL_MIC_LEN
) != 0 || wpa_test
) {
163 if (!(rx
->flags
& IEEE80211_TXRXD_RXRA_MATCH
))
166 printk(KERN_DEBUG
"%s: invalid Michael MIC in data frame from "
167 MAC_FMT
"\n", rx
->dev
->name
, MAC_ARG(sa
));
169 mac80211_ev_michael_mic_failure(rx
->dev
, rx
->key
->conf
.keyidx
,
174 /* remove Michael MIC from payload */
175 skb_trim(skb
, skb
->len
- MICHAEL_MIC_LEN
);
177 return TXRX_CONTINUE
;
181 static int tkip_encrypt_skb(struct ieee80211_txrx_data
*tx
,
182 struct sk_buff
*skb
, int test
)
184 struct ieee80211_hdr
*hdr
= (struct ieee80211_hdr
*) skb
->data
;
185 struct ieee80211_key
*key
= tx
->key
;
186 int hdrlen
, len
, tailneed
;
190 fc
= le16_to_cpu(hdr
->frame_control
);
191 hdrlen
= ieee80211_get_hdrlen(fc
);
192 len
= skb
->len
- hdrlen
;
194 if (tx
->key
->flags
& KEY_FLAG_UPLOADED_TO_HARDWARE
)
197 tailneed
= TKIP_ICV_LEN
;
199 if ((skb_headroom(skb
) < TKIP_IV_LEN
||
200 skb_tailroom(skb
) < tailneed
)) {
201 I802_DEBUG_INC(tx
->local
->tx_expand_skb_head
);
202 if (unlikely(pskb_expand_head(skb
, TKIP_IV_LEN
, tailneed
,
207 pos
= skb_push(skb
, TKIP_IV_LEN
);
208 memmove(pos
, pos
+ TKIP_IV_LEN
, hdrlen
);
211 /* Increase IV for the frame */
213 if (key
->u
.tkip
.iv16
== 0)
216 if (tx
->key
->flags
& KEY_FLAG_UPLOADED_TO_HARDWARE
) {
217 hdr
= (struct ieee80211_hdr
*)skb
->data
;
219 /* hwaccel - with preallocated room for IV */
220 ieee80211_tkip_add_iv(pos
, key
,
221 (u8
) (key
->u
.tkip
.iv16
>> 8),
222 (u8
) (((key
->u
.tkip
.iv16
>> 8) | 0x20) &
224 (u8
) key
->u
.tkip
.iv16
);
226 tx
->u
.tx
.control
->key_idx
= tx
->key
->conf
.hw_key_idx
;
230 /* Add room for ICV */
231 skb_put(skb
, TKIP_ICV_LEN
);
233 hdr
= (struct ieee80211_hdr
*) skb
->data
;
234 ieee80211_tkip_encrypt_data(tx
->local
->wep_tx_tfm
,
235 key
, pos
, len
, hdr
->addr2
);
240 ieee80211_txrx_result
241 ieee80211_tx_h_tkip_encrypt(struct ieee80211_txrx_data
*tx
)
243 struct ieee80211_hdr
*hdr
= (struct ieee80211_hdr
*) tx
->skb
->data
;
245 struct ieee80211_key
*key
= tx
->key
;
246 struct sk_buff
*skb
= tx
->skb
;
247 int wpa_test
= 0, test
= 0;
249 fc
= le16_to_cpu(hdr
->frame_control
);
251 if (!key
|| key
->conf
.alg
!= ALG_TKIP
|| !WLAN_FC_DATA_PRESENT(fc
))
252 return TXRX_CONTINUE
;
254 tx
->u
.tx
.control
->icv_len
= TKIP_ICV_LEN
;
255 tx
->u
.tx
.control
->iv_len
= TKIP_IV_LEN
;
256 ieee80211_tx_set_iswep(tx
);
258 if ((tx
->key
->flags
& KEY_FLAG_UPLOADED_TO_HARDWARE
) &&
259 !(tx
->key
->conf
.flags
& IEEE80211_KEY_FLAG_GENERATE_IV
) &&
261 /* hwaccel - with no need for preallocated room for IV/ICV */
262 tx
->u
.tx
.control
->key_idx
= tx
->key
->conf
.hw_key_idx
;
263 return TXRX_CONTINUE
;
266 if (tkip_encrypt_skb(tx
, skb
, test
) < 0)
269 if (tx
->u
.tx
.extra_frag
) {
271 for (i
= 0; i
< tx
->u
.tx
.num_extra_frag
; i
++) {
272 if (tkip_encrypt_skb(tx
, tx
->u
.tx
.extra_frag
[i
], test
)
278 return TXRX_CONTINUE
;
282 ieee80211_txrx_result
283 ieee80211_rx_h_tkip_decrypt(struct ieee80211_txrx_data
*rx
)
285 struct ieee80211_hdr
*hdr
= (struct ieee80211_hdr
*) rx
->skb
->data
;
287 int hdrlen
, res
, hwaccel
= 0, wpa_test
= 0;
288 struct ieee80211_key
*key
= rx
->key
;
289 struct sk_buff
*skb
= rx
->skb
;
291 fc
= le16_to_cpu(hdr
->frame_control
);
292 hdrlen
= ieee80211_get_hdrlen(fc
);
294 if (!rx
->key
|| rx
->key
->conf
.alg
!= ALG_TKIP
||
295 !(rx
->fc
& IEEE80211_FCTL_PROTECTED
) ||
296 (rx
->fc
& IEEE80211_FCTL_FTYPE
) != IEEE80211_FTYPE_DATA
)
297 return TXRX_CONTINUE
;
299 if (!rx
->sta
|| skb
->len
- hdrlen
< 12)
302 if (rx
->u
.rx
.status
->flag
& RX_FLAG_DECRYPTED
) {
303 if (rx
->u
.rx
.status
->flag
& RX_FLAG_IV_STRIPPED
) {
305 * Hardware took care of all processing, including
306 * replay protection, and stripped the ICV/IV so
307 * we cannot do any checks here.
309 return TXRX_CONTINUE
;
312 /* let TKIP code verify IV, but skip decryption */
316 res
= ieee80211_tkip_decrypt_data(rx
->local
->wep_rx_tfm
,
317 key
, skb
->data
+ hdrlen
,
318 skb
->len
- hdrlen
, rx
->sta
->addr
,
319 hwaccel
, rx
->u
.rx
.queue
);
320 if (res
!= TKIP_DECRYPT_OK
|| wpa_test
) {
321 printk(KERN_DEBUG
"%s: TKIP decrypt failed for RX frame from "
322 MAC_FMT
" (res=%d)\n",
323 rx
->dev
->name
, MAC_ARG(rx
->sta
->addr
), res
);
328 skb_trim(skb
, skb
->len
- TKIP_ICV_LEN
);
331 memmove(skb
->data
+ TKIP_IV_LEN
, skb
->data
, hdrlen
);
332 skb_pull(skb
, TKIP_IV_LEN
);
334 return TXRX_CONTINUE
;
338 static void ccmp_special_blocks(struct sk_buff
*skb
, u8
*pn
, u8
*b_0
, u8
*aad
,
342 int a4_included
, qos_included
;
343 u8 qos_tid
, *fc_pos
, *data
, *sa
, *da
;
346 struct ieee80211_hdr
*hdr
= (struct ieee80211_hdr
*) skb
->data
;
348 fc_pos
= (u8
*) &hdr
->frame_control
;
349 fc
= fc_pos
[0] ^ (fc_pos
[1] << 8);
350 a4_included
= (fc
& (IEEE80211_FCTL_TODS
| IEEE80211_FCTL_FROMDS
)) ==
351 (IEEE80211_FCTL_TODS
| IEEE80211_FCTL_FROMDS
);
353 ieee80211_get_hdr_info(skb
, &sa
, &da
, &qos_tid
, &data
, &data_len
);
354 data_len
-= CCMP_HDR_LEN
+ (encrypted
? CCMP_MIC_LEN
: 0);
355 if (qos_tid
& 0x80) {
360 /* First block, b_0 */
362 b_0
[0] = 0x59; /* flags: Adata: 1, M: 011, L: 001 */
363 /* Nonce: QoS Priority | A2 | PN */
365 memcpy(&b_0
[2], hdr
->addr2
, 6);
366 memcpy(&b_0
[8], pn
, CCMP_PN_LEN
);
368 b_0
[14] = (data_len
>> 8) & 0xff;
369 b_0
[15] = data_len
& 0xff;
372 /* AAD (extra authenticate-only data) / masked 802.11 header
373 * FC | A1 | A2 | A3 | SC | [A4] | [QC] */
375 len_a
= a4_included
? 28 : 22;
379 aad
[0] = 0; /* (len_a >> 8) & 0xff; */
380 aad
[1] = len_a
& 0xff;
381 /* Mask FC: zero subtype b4 b5 b6 */
382 aad
[2] = fc_pos
[0] & ~(BIT(4) | BIT(5) | BIT(6));
383 /* Retry, PwrMgt, MoreData; set Protected */
384 aad
[3] = (fc_pos
[1] & ~(BIT(3) | BIT(4) | BIT(5))) | BIT(6);
385 memcpy(&aad
[4], &hdr
->addr1
, 18);
387 /* Mask Seq#, leave Frag# */
388 aad
[22] = *((u8
*) &hdr
->seq_ctrl
) & 0x0f;
391 memcpy(&aad
[24], hdr
->addr4
, 6);
395 memset(&aad
[24], 0, 8);
397 u8
*dpos
= &aad
[a4_included
? 30 : 24];
399 /* Mask QoS Control field */
406 static inline void ccmp_pn2hdr(u8
*hdr
, u8
*pn
, int key_id
)
411 hdr
[3] = 0x20 | (key_id
<< 6);
419 static inline int ccmp_hdr2pn(u8
*pn
, u8
*hdr
)
427 return (hdr
[3] >> 6) & 0x03;
431 static int ccmp_encrypt_skb(struct ieee80211_txrx_data
*tx
,
432 struct sk_buff
*skb
, int test
)
434 struct ieee80211_hdr
*hdr
= (struct ieee80211_hdr
*) skb
->data
;
435 struct ieee80211_key
*key
= tx
->key
;
436 int hdrlen
, len
, tailneed
;
438 u8
*pos
, *pn
, *b_0
, *aad
, *scratch
;
441 scratch
= key
->u
.ccmp
.tx_crypto_buf
;
442 b_0
= scratch
+ 3 * AES_BLOCK_LEN
;
443 aad
= scratch
+ 4 * AES_BLOCK_LEN
;
445 fc
= le16_to_cpu(hdr
->frame_control
);
446 hdrlen
= ieee80211_get_hdrlen(fc
);
447 len
= skb
->len
- hdrlen
;
449 if (key
->flags
& KEY_FLAG_UPLOADED_TO_HARDWARE
)
452 tailneed
= CCMP_MIC_LEN
;
454 if ((skb_headroom(skb
) < CCMP_HDR_LEN
||
455 skb_tailroom(skb
) < tailneed
)) {
456 I802_DEBUG_INC(tx
->local
->tx_expand_skb_head
);
457 if (unlikely(pskb_expand_head(skb
, CCMP_HDR_LEN
, tailneed
,
462 pos
= skb_push(skb
, CCMP_HDR_LEN
);
463 memmove(pos
, pos
+ CCMP_HDR_LEN
, hdrlen
);
464 hdr
= (struct ieee80211_hdr
*) pos
;
468 pn
= key
->u
.ccmp
.tx_pn
;
470 for (i
= CCMP_PN_LEN
- 1; i
>= 0; i
--) {
476 ccmp_pn2hdr(pos
, pn
, key
->conf
.keyidx
);
478 if (key
->flags
& KEY_FLAG_UPLOADED_TO_HARDWARE
) {
479 /* hwaccel - with preallocated room for CCMP header */
480 tx
->u
.tx
.control
->key_idx
= key
->conf
.hw_key_idx
;
485 ccmp_special_blocks(skb
, pn
, b_0
, aad
, 0);
486 ieee80211_aes_ccm_encrypt(key
->u
.ccmp
.tfm
, scratch
, b_0
, aad
, pos
, len
,
487 pos
, skb_put(skb
, CCMP_MIC_LEN
));
493 ieee80211_txrx_result
494 ieee80211_tx_h_ccmp_encrypt(struct ieee80211_txrx_data
*tx
)
496 struct ieee80211_hdr
*hdr
= (struct ieee80211_hdr
*) tx
->skb
->data
;
497 struct ieee80211_key
*key
= tx
->key
;
499 struct sk_buff
*skb
= tx
->skb
;
502 fc
= le16_to_cpu(hdr
->frame_control
);
504 if (!key
|| key
->conf
.alg
!= ALG_CCMP
|| !WLAN_FC_DATA_PRESENT(fc
))
505 return TXRX_CONTINUE
;
507 tx
->u
.tx
.control
->icv_len
= CCMP_MIC_LEN
;
508 tx
->u
.tx
.control
->iv_len
= CCMP_HDR_LEN
;
509 ieee80211_tx_set_iswep(tx
);
511 if ((tx
->key
->flags
& KEY_FLAG_UPLOADED_TO_HARDWARE
) &&
512 !(tx
->key
->conf
.flags
& IEEE80211_KEY_FLAG_GENERATE_IV
)) {
513 /* hwaccel - with no need for preallocated room for CCMP "
514 * header or MIC fields */
515 tx
->u
.tx
.control
->key_idx
= tx
->key
->conf
.hw_key_idx
;
516 return TXRX_CONTINUE
;
519 if (ccmp_encrypt_skb(tx
, skb
, test
) < 0)
522 if (tx
->u
.tx
.extra_frag
) {
524 for (i
= 0; i
< tx
->u
.tx
.num_extra_frag
; i
++) {
525 if (ccmp_encrypt_skb(tx
, tx
->u
.tx
.extra_frag
[i
], test
)
531 return TXRX_CONTINUE
;
535 ieee80211_txrx_result
536 ieee80211_rx_h_ccmp_decrypt(struct ieee80211_txrx_data
*rx
)
538 struct ieee80211_hdr
*hdr
= (struct ieee80211_hdr
*) rx
->skb
->data
;
541 struct ieee80211_key
*key
= rx
->key
;
542 struct sk_buff
*skb
= rx
->skb
;
546 fc
= le16_to_cpu(hdr
->frame_control
);
547 hdrlen
= ieee80211_get_hdrlen(fc
);
549 if (!key
|| key
->conf
.alg
!= ALG_CCMP
||
550 !(rx
->fc
& IEEE80211_FCTL_PROTECTED
) ||
551 (rx
->fc
& IEEE80211_FCTL_FTYPE
) != IEEE80211_FTYPE_DATA
)
552 return TXRX_CONTINUE
;
554 data_len
= skb
->len
- hdrlen
- CCMP_HDR_LEN
- CCMP_MIC_LEN
;
555 if (!rx
->sta
|| data_len
< 0)
558 if ((rx
->u
.rx
.status
->flag
& RX_FLAG_DECRYPTED
) &&
559 (rx
->u
.rx
.status
->flag
& RX_FLAG_IV_STRIPPED
))
560 return TXRX_CONTINUE
;
562 (void) ccmp_hdr2pn(pn
, skb
->data
+ hdrlen
);
564 if (memcmp(pn
, key
->u
.ccmp
.rx_pn
[rx
->u
.rx
.queue
], CCMP_PN_LEN
) <= 0) {
565 #ifdef CONFIG_MAC80211_DEBUG
566 u8
*ppn
= key
->u
.ccmp
.rx_pn
[rx
->u
.rx
.queue
];
567 printk(KERN_DEBUG
"%s: CCMP replay detected for RX frame from "
568 MAC_FMT
" (RX PN %02x%02x%02x%02x%02x%02x <= prev. PN "
569 "%02x%02x%02x%02x%02x%02x)\n", rx
->dev
->name
,
570 MAC_ARG(rx
->sta
->addr
),
571 pn
[0], pn
[1], pn
[2], pn
[3], pn
[4], pn
[5],
572 ppn
[0], ppn
[1], ppn
[2], ppn
[3], ppn
[4], ppn
[5]);
573 #endif /* CONFIG_MAC80211_DEBUG */
574 key
->u
.ccmp
.replays
++;
578 if (!(rx
->u
.rx
.status
->flag
& RX_FLAG_DECRYPTED
)) {
579 /* hardware didn't decrypt/verify MIC */
580 u8
*scratch
, *b_0
, *aad
;
582 scratch
= key
->u
.ccmp
.rx_crypto_buf
;
583 b_0
= scratch
+ 3 * AES_BLOCK_LEN
;
584 aad
= scratch
+ 4 * AES_BLOCK_LEN
;
586 ccmp_special_blocks(skb
, pn
, b_0
, aad
, 1);
588 if (ieee80211_aes_ccm_decrypt(
589 key
->u
.ccmp
.tfm
, scratch
, b_0
, aad
,
590 skb
->data
+ hdrlen
+ CCMP_HDR_LEN
, data_len
,
591 skb
->data
+ skb
->len
- CCMP_MIC_LEN
,
592 skb
->data
+ hdrlen
+ CCMP_HDR_LEN
)) {
593 printk(KERN_DEBUG
"%s: CCMP decrypt failed for RX "
594 "frame from " MAC_FMT
"\n", rx
->dev
->name
,
595 MAC_ARG(rx
->sta
->addr
));
600 memcpy(key
->u
.ccmp
.rx_pn
[rx
->u
.rx
.queue
], pn
, CCMP_PN_LEN
);
602 /* Remove CCMP header and MIC */
603 skb_trim(skb
, skb
->len
- CCMP_MIC_LEN
);
604 memmove(skb
->data
+ CCMP_HDR_LEN
, skb
->data
, hdrlen
);
605 skb_pull(skb
, CCMP_HDR_LEN
);
607 return TXRX_CONTINUE
;