key.c 6.7 KB
Newer Older
1 2 3 4
/*
 * Copyright 2002-2005, Instant802 Networks, Inc.
 * Copyright 2005-2006, Devicescape Software, Inc.
 * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
J
Johannes Berg 已提交
5
 * Copyright 2007	Johannes Berg <johannes@sipsolutions.net>
6 7 8 9 10 11
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */

J
Johannes Berg 已提交
12 13 14
#include <linux/if_ether.h>
#include <linux/etherdevice.h>
#include <linux/list.h>
15
#include <linux/rcupdate.h>
16 17 18 19 20
#include <net/mac80211.h>
#include "ieee80211_i.h"
#include "debugfs_key.h"
#include "aes_ccm.h"

J
Johannes Berg 已提交
21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65

/*
 * Key handling basics
 *
 * Key handling in mac80211 is done based on per-interface (sub_if_data)
 * keys and per-station keys. Since each station belongs to an interface,
 * each station key also belongs to that interface.
 *
 * Hardware acceleration is done on a best-effort basis, for each key
 * that is eligible the hardware is asked to enable that key but if
 * it cannot do that they key is simply kept for software encryption.
 * There is currently no way of knowing this except by looking into
 * debugfs.
 *
 * All operations here are called under RTNL so no extra locking is
 * required.
 */

static const u8 bcast_addr[ETH_ALEN] = { 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF };
static const u8 zero_addr[ETH_ALEN];

static const u8 *get_mac_for_key(struct ieee80211_key *key)
{
	const u8 *addr = bcast_addr;

	/*
	 * If we're an AP we won't ever receive frames with a non-WEP
	 * group key so we tell the driver that by using the zero MAC
	 * address to indicate a transmit-only key.
	 */
	if (key->conf.alg != ALG_WEP &&
	    (key->sdata->type == IEEE80211_IF_TYPE_AP ||
	     key->sdata->type == IEEE80211_IF_TYPE_VLAN))
		addr = zero_addr;

	if (key->sta)
		addr = key->sta->addr;

	return addr;
}

static void ieee80211_key_enable_hw_accel(struct ieee80211_key *key)
{
	const u8 *addr;
	int ret;
66
	DECLARE_MAC_BUF(mac);
J
Johannes Berg 已提交
67 68 69 70 71 72 73 74 75 76 77 78 79 80 81

	if (!key->local->ops->set_key)
		return;

	addr = get_mac_for_key(key);

	ret = key->local->ops->set_key(local_to_hw(key->local), SET_KEY,
				       key->sdata->dev->dev_addr, addr,
				       &key->conf);

	if (!ret)
		key->flags |= KEY_FLAG_UPLOADED_TO_HARDWARE;

	if (ret && ret != -ENOSPC && ret != -EOPNOTSUPP)
		printk(KERN_ERR "mac80211-%s: failed to set key "
82
		       "(%d, %s) to hardware (%d)\n",
J
Johannes Berg 已提交
83
		       wiphy_name(key->local->hw.wiphy),
84
		       key->conf.keyidx, print_mac(mac, addr), ret);
J
Johannes Berg 已提交
85 86 87 88 89 90
}

static void ieee80211_key_disable_hw_accel(struct ieee80211_key *key)
{
	const u8 *addr;
	int ret;
91
	DECLARE_MAC_BUF(mac);
J
Johannes Berg 已提交
92 93 94 95 96 97 98 99 100 101 102 103 104 105 106

	if (!key->local->ops->set_key)
		return;

	if (!(key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE))
		return;

	addr = get_mac_for_key(key);

	ret = key->local->ops->set_key(local_to_hw(key->local), DISABLE_KEY,
				       key->sdata->dev->dev_addr, addr,
				       &key->conf);

	if (ret)
		printk(KERN_ERR "mac80211-%s: failed to remove key "
107
		       "(%d, %s) from hardware (%d)\n",
J
Johannes Berg 已提交
108
		       wiphy_name(key->local->hw.wiphy),
109
		       key->conf.keyidx, print_mac(mac, addr), ret);
J
Johannes Berg 已提交
110 111 112 113

	key->flags &= ~KEY_FLAG_UPLOADED_TO_HARDWARE;
}

114
struct ieee80211_key *ieee80211_key_alloc(struct ieee80211_sub_if_data *sdata,
J
Johannes Berg 已提交
115
					  struct sta_info *sta,
116
					  enum ieee80211_key_alg alg,
J
Johannes Berg 已提交
117 118 119
					  int idx,
					  size_t key_len,
					  const u8 *key_data)
120 121 122
{
	struct ieee80211_key *key;

123
	BUG_ON(idx < 0 || idx >= NUM_DEFAULT_KEYS);
J
Johannes Berg 已提交
124 125

	key = kzalloc(sizeof(struct ieee80211_key) + key_len, GFP_KERNEL);
126 127
	if (!key)
		return NULL;
J
Johannes Berg 已提交
128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158

	/*
	 * Default to software encryption; we'll later upload the
	 * key to the hardware if possible.
	 */
	key->conf.flags = 0;
	key->flags = 0;

	key->conf.alg = alg;
	key->conf.keyidx = idx;
	key->conf.keylen = key_len;
	memcpy(key->conf.key, key_data, key_len);

	key->local = sdata->local;
	key->sdata = sdata;
	key->sta = sta;

	if (alg == ALG_CCMP) {
		/*
		 * Initialize AES key state here as an optimization so that
		 * it does not need to be initialized for every packet.
		 */
		key->u.ccmp.tfm = ieee80211_aes_key_setup_encrypt(key_data);
		if (!key->u.ccmp.tfm) {
			ieee80211_key_free(key);
			return NULL;
		}
	}

	ieee80211_debugfs_key_add(key->local, key);

159 160 161 162 163 164
	/* remove key first */
	if (sta)
		ieee80211_key_free(sta->key);
	else
		ieee80211_key_free(sdata->keys[idx]);

J
Johannes Berg 已提交
165 166
	if (sta) {
		ieee80211_debugfs_key_sta_link(key, sta);
167

J
Johannes Berg 已提交
168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188
		/*
		 * some hardware cannot handle TKIP with QoS, so
		 * we indicate whether QoS could be in use.
		 */
		if (sta->flags & WLAN_STA_WME)
			key->conf.flags |= IEEE80211_KEY_FLAG_WMM_STA;
	} else {
		if (sdata->type == IEEE80211_IF_TYPE_STA) {
			struct sta_info *ap;

			/* same here, the AP could be using QoS */
			ap = sta_info_get(key->local, key->sdata->u.sta.bssid);
			if (ap) {
				if (ap->flags & WLAN_STA_WME)
					key->conf.flags |=
						IEEE80211_KEY_FLAG_WMM_STA;
				sta_info_put(ap);
			}
		}
	}

189
	/* enable hwaccel if appropriate */
J
Johannes Berg 已提交
190 191 192
	if (netif_running(key->sdata->dev))
		ieee80211_key_enable_hw_accel(key);

193 194 195 196 197 198 199
	if (sta)
		rcu_assign_pointer(sta->key, key);
	else
		rcu_assign_pointer(sdata->keys[idx], key);

	list_add(&key->list, &sdata->key_list);

200 201 202
	return key;
}

J
Johannes Berg 已提交
203
void ieee80211_key_free(struct ieee80211_key *key)
204
{
J
Johannes Berg 已提交
205 206
	if (!key)
		return;
207

J
Johannes Berg 已提交
208
	if (key->sta) {
209
		rcu_assign_pointer(key->sta->key, NULL);
J
Johannes Berg 已提交
210 211 212 213 214
	} else {
		if (key->sdata->default_key == key)
			ieee80211_set_default_key(key->sdata, -1);
		if (key->conf.keyidx >= 0 &&
		    key->conf.keyidx < NUM_DEFAULT_KEYS)
215 216
			rcu_assign_pointer(key->sdata->keys[key->conf.keyidx],
					   NULL);
J
Johannes Berg 已提交
217 218 219 220
		else
			WARN_ON(1);
	}

221 222 223 224 225 226
	/* wait for all key users to complete */
	synchronize_rcu();

	/* remove from hwaccel if appropriate */
	ieee80211_key_disable_hw_accel(key);

227
	if (key->conf.alg == ALG_CCMP)
228 229
		ieee80211_aes_key_free(key->u.ccmp.tfm);
	ieee80211_debugfs_key_remove(key);
J
Johannes Berg 已提交
230 231 232

	list_del(&key->list);

233 234
	kfree(key);
}
J
Johannes Berg 已提交
235 236 237 238 239 240 241 242 243 244 245

void ieee80211_set_default_key(struct ieee80211_sub_if_data *sdata, int idx)
{
	struct ieee80211_key *key = NULL;

	if (idx >= 0 && idx < NUM_DEFAULT_KEYS)
		key = sdata->keys[idx];

	if (sdata->default_key != key) {
		ieee80211_debugfs_key_remove_default(sdata);

246
		rcu_assign_pointer(sdata->default_key, key);
J
Johannes Berg 已提交
247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279

		if (sdata->default_key)
			ieee80211_debugfs_key_add_default(sdata);
	}
}

void ieee80211_free_keys(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_key *key, *tmp;

	list_for_each_entry_safe(key, tmp, &sdata->key_list, list)
		ieee80211_key_free(key);
}

void ieee80211_enable_keys(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_key *key;

	WARN_ON(!netif_running(sdata->dev));
	if (!netif_running(sdata->dev))
		return;

	list_for_each_entry(key, &sdata->key_list, list)
		ieee80211_key_enable_hw_accel(key);
}

void ieee80211_disable_keys(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_key *key;

	list_for_each_entry(key, &sdata->key_list, list)
		ieee80211_key_disable_hw_accel(key);
}