Commit 813d7669 authored by Johannes Berg's avatar Johannes Berg Committed by John W. Linville

mac80211: move control.hw_key assignment

When mac80211 asks a driver to encrypt a frame, it
must assign the control.hw_key pointer for it to
know which key to use etc. Currently, mac80211 does
this whenever it would software-encrypt a frame.

Change the logic of this code to assign the hw_key
pointer when selecting the key, and later check it
when deciding whether to encrypt the frame or let
it be encrypted by the hardware. This allows us to
later simply skip the encryption function since it
no longer modifies the TX control.
Signed-off-by: default avatarJohannes Berg <johannes@sipsolutions.net>
Signed-off-by: default avatarJohn W. Linville <linville@tuxdriver.com>
parent a6bae9e7
...@@ -195,11 +195,13 @@ void ieee80211_get_tkip_key(struct ieee80211_key_conf *keyconf, ...@@ -195,11 +195,13 @@ void ieee80211_get_tkip_key(struct ieee80211_key_conf *keyconf,
} }
EXPORT_SYMBOL(ieee80211_get_tkip_key); EXPORT_SYMBOL(ieee80211_get_tkip_key);
/* Encrypt packet payload with TKIP using @key. @pos is a pointer to the /*
* Encrypt packet payload with TKIP using @key. @pos is a pointer to the
* beginning of the buffer containing payload. This payload must include * beginning of the buffer containing payload. This payload must include
* headroom of eight octets for IV and Ext. IV and taildroom of four octets * the IV/Ext.IV and space for (taildroom) four octets for ICV.
* for ICV. @payload_len is the length of payload (_not_ including extra * @payload_len is the length of payload (_not_ including IV/ICV length).
* headroom and tailroom). @ta is the transmitter addresses. */ * @ta is the transmitter addresses.
*/
void ieee80211_tkip_encrypt_data(struct crypto_blkcipher *tfm, void ieee80211_tkip_encrypt_data(struct crypto_blkcipher *tfm,
struct ieee80211_key *key, struct ieee80211_key *key,
u8 *pos, size_t payload_len, u8 *ta) u8 *pos, size_t payload_len, u8 *ta)
...@@ -214,7 +216,6 @@ void ieee80211_tkip_encrypt_data(struct crypto_blkcipher *tfm, ...@@ -214,7 +216,6 @@ void ieee80211_tkip_encrypt_data(struct crypto_blkcipher *tfm,
tkip_mixing_phase2(tk, ctx, ctx->iv16, rc4key); tkip_mixing_phase2(tk, ctx, ctx->iv16, rc4key);
pos = ieee80211_tkip_add_iv(pos, key, key->u.tkip.tx.iv16);
ieee80211_wep_encrypt_data(tfm, rc4key, 16, pos, payload_len); ieee80211_wep_encrypt_data(tfm, rc4key, 16, pos, payload_len);
} }
......
...@@ -529,6 +529,8 @@ ieee80211_tx_h_select_key(struct ieee80211_tx_data *tx) ...@@ -529,6 +529,8 @@ ieee80211_tx_h_select_key(struct ieee80211_tx_data *tx)
tx->key = NULL; tx->key = NULL;
if (tx->key) { if (tx->key) {
bool skip_hw = false;
tx->key->tx_rx_count++; tx->key->tx_rx_count++;
/* TODO: add threshold stuff again */ /* TODO: add threshold stuff again */
...@@ -545,12 +547,19 @@ ieee80211_tx_h_select_key(struct ieee80211_tx_data *tx) ...@@ -545,12 +547,19 @@ ieee80211_tx_h_select_key(struct ieee80211_tx_data *tx)
!ieee80211_use_mfp(hdr->frame_control, tx->sta, !ieee80211_use_mfp(hdr->frame_control, tx->sta,
tx->skb)) tx->skb))
tx->key = NULL; tx->key = NULL;
skip_hw = (tx->key->conf.flags &
IEEE80211_KEY_FLAG_SW_MGMT) &&
ieee80211_is_mgmt(hdr->frame_control);
break; break;
case ALG_AES_CMAC: case ALG_AES_CMAC:
if (!ieee80211_is_mgmt(hdr->frame_control)) if (!ieee80211_is_mgmt(hdr->frame_control))
tx->key = NULL; tx->key = NULL;
break; break;
} }
if (!skip_hw &&
tx->key->conf.flags & KEY_FLAG_UPLOADED_TO_HARDWARE)
info->control.hw_key = &tx->key->conf;
} }
return TX_CONTINUE; return TX_CONTINUE;
......
...@@ -305,20 +305,20 @@ static int wep_encrypt_skb(struct ieee80211_tx_data *tx, struct sk_buff *skb) ...@@ -305,20 +305,20 @@ static int wep_encrypt_skb(struct ieee80211_tx_data *tx, struct sk_buff *skb)
{ {
struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
if (!(tx->key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE)) { if (!info->control.hw_key) {
if (ieee80211_wep_encrypt(tx->local, skb, tx->key->conf.key, if (ieee80211_wep_encrypt(tx->local, skb, tx->key->conf.key,
tx->key->conf.keylen, tx->key->conf.keylen,
tx->key->conf.keyidx)) tx->key->conf.keyidx))
return -1; return -1;
} else { }
info->control.hw_key = &tx->key->conf;
if (tx->key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_IV) { if (info->control.hw_key->flags & IEEE80211_KEY_FLAG_GENERATE_IV) {
if (!ieee80211_wep_add_iv(tx->local, skb, if (!ieee80211_wep_add_iv(tx->local, skb,
tx->key->conf.keylen, tx->key->conf.keylen,
tx->key->conf.keyidx)) tx->key->conf.keyidx))
return -1; return -1;
} }
}
return 0; return 0;
} }
......
...@@ -31,8 +31,8 @@ ieee80211_tx_h_michael_mic_add(struct ieee80211_tx_data *tx) ...@@ -31,8 +31,8 @@ ieee80211_tx_h_michael_mic_add(struct ieee80211_tx_data *tx)
unsigned int hdrlen; unsigned int hdrlen;
struct ieee80211_hdr *hdr; struct ieee80211_hdr *hdr;
struct sk_buff *skb = tx->skb; struct sk_buff *skb = tx->skb;
struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
int authenticator; int authenticator;
int wpa_test = 0;
int tail; int tail;
hdr = (struct ieee80211_hdr *)skb->data; hdr = (struct ieee80211_hdr *)skb->data;
...@@ -47,16 +47,15 @@ ieee80211_tx_h_michael_mic_add(struct ieee80211_tx_data *tx) ...@@ -47,16 +47,15 @@ ieee80211_tx_h_michael_mic_add(struct ieee80211_tx_data *tx)
data = skb->data + hdrlen; data = skb->data + hdrlen;
data_len = skb->len - hdrlen; data_len = skb->len - hdrlen;
if ((tx->key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE) && if (info->control.hw_key &&
!(tx->flags & IEEE80211_TX_FRAGMENTED) && !(tx->flags & IEEE80211_TX_FRAGMENTED) &&
!(tx->key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_MMIC) && !(tx->key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_MMIC)) {
!wpa_test) { /* hwaccel - with no need for SW-generated MMIC */
/* hwaccel - with no need for preallocated room for MMIC */
return TX_CONTINUE; return TX_CONTINUE;
} }
tail = MICHAEL_MIC_LEN; tail = MICHAEL_MIC_LEN;
if (!(tx->key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE)) if (!info->control.hw_key)
tail += TKIP_ICV_LEN; tail += TKIP_ICV_LEN;
if (WARN_ON(skb_tailroom(skb) < tail || if (WARN_ON(skb_tailroom(skb) < tail ||
...@@ -147,17 +146,16 @@ static int tkip_encrypt_skb(struct ieee80211_tx_data *tx, struct sk_buff *skb) ...@@ -147,17 +146,16 @@ static int tkip_encrypt_skb(struct ieee80211_tx_data *tx, struct sk_buff *skb)
int len, tail; int len, tail;
u8 *pos; u8 *pos;
if ((tx->key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE) && if (info->control.hw_key &&
!(tx->key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_IV)) { !(info->control.hw_key->flags & IEEE80211_KEY_FLAG_GENERATE_IV)) {
/* hwaccel - with no need for preallocated room for IV/ICV */ /* hwaccel - with no need for software-generated IV */
info->control.hw_key = &tx->key->conf;
return 0; return 0;
} }
hdrlen = ieee80211_hdrlen(hdr->frame_control); hdrlen = ieee80211_hdrlen(hdr->frame_control);
len = skb->len - hdrlen; len = skb->len - hdrlen;
if (tx->key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE) if (info->control.hw_key)
tail = 0; tail = 0;
else else
tail = TKIP_ICV_LEN; tail = TKIP_ICV_LEN;
...@@ -175,13 +173,11 @@ static int tkip_encrypt_skb(struct ieee80211_tx_data *tx, struct sk_buff *skb) ...@@ -175,13 +173,11 @@ static int tkip_encrypt_skb(struct ieee80211_tx_data *tx, struct sk_buff *skb)
if (key->u.tkip.tx.iv16 == 0) if (key->u.tkip.tx.iv16 == 0)
key->u.tkip.tx.iv32++; key->u.tkip.tx.iv32++;
if (tx->key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE) { pos = ieee80211_tkip_add_iv(pos, key, key->u.tkip.tx.iv16);
/* hwaccel - with preallocated room for IV */
ieee80211_tkip_add_iv(pos, key, key->u.tkip.tx.iv16);
info->control.hw_key = &tx->key->conf; /* hwaccel - with software IV */
if (info->control.hw_key)
return 0; return 0;
}
/* Add room for ICV */ /* Add room for ICV */
skb_put(skb, TKIP_ICV_LEN); skb_put(skb, TKIP_ICV_LEN);
...@@ -363,24 +359,20 @@ static int ccmp_encrypt_skb(struct ieee80211_tx_data *tx, struct sk_buff *skb) ...@@ -363,24 +359,20 @@ static int ccmp_encrypt_skb(struct ieee80211_tx_data *tx, struct sk_buff *skb)
int hdrlen, len, tail; int hdrlen, len, tail;
u8 *pos, *pn; u8 *pos, *pn;
int i; int i;
bool skip_hw;
skip_hw = (tx->key->conf.flags & IEEE80211_KEY_FLAG_SW_MGMT) && if (info->control.hw_key &&
ieee80211_is_mgmt(hdr->frame_control); !(info->control.hw_key->flags & IEEE80211_KEY_FLAG_GENERATE_IV)) {
/*
if ((tx->key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE) && * hwaccel has no need for preallocated room for CCMP
!(tx->key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_IV) && * header or MIC fields
!skip_hw) { */
/* hwaccel - with no need for preallocated room for CCMP
* header or MIC fields */
info->control.hw_key = &tx->key->conf;
return 0; return 0;
} }
hdrlen = ieee80211_hdrlen(hdr->frame_control); hdrlen = ieee80211_hdrlen(hdr->frame_control);
len = skb->len - hdrlen; len = skb->len - hdrlen;
if (key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE) if (info->control.hw_key)
tail = 0; tail = 0;
else else
tail = CCMP_MIC_LEN; tail = CCMP_MIC_LEN;
...@@ -405,11 +397,9 @@ static int ccmp_encrypt_skb(struct ieee80211_tx_data *tx, struct sk_buff *skb) ...@@ -405,11 +397,9 @@ static int ccmp_encrypt_skb(struct ieee80211_tx_data *tx, struct sk_buff *skb)
ccmp_pn2hdr(pos, pn, key->conf.keyidx); ccmp_pn2hdr(pos, pn, key->conf.keyidx);
if ((key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE) && !skip_hw) { /* hwaccel - with software CCMP header */
/* hwaccel - with preallocated room for CCMP header */ if (info->control.hw_key)
info->control.hw_key = &tx->key->conf;
return 0; return 0;
}
pos += CCMP_HDR_LEN; pos += CCMP_HDR_LEN;
ccmp_special_blocks(skb, pn, key->u.ccmp.tx_crypto_buf, 0); ccmp_special_blocks(skb, pn, key->u.ccmp.tx_crypto_buf, 0);
...@@ -525,11 +515,8 @@ ieee80211_crypto_aes_cmac_encrypt(struct ieee80211_tx_data *tx) ...@@ -525,11 +515,8 @@ ieee80211_crypto_aes_cmac_encrypt(struct ieee80211_tx_data *tx)
u8 *pn, aad[20]; u8 *pn, aad[20];
int i; int i;
if (tx->key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE) { if (info->control.hw_key)
/* hwaccel */
info->control.hw_key = &tx->key->conf;
return 0; return 0;
}
if (WARN_ON(skb_tailroom(skb) < sizeof(*mmie))) if (WARN_ON(skb_tailroom(skb) < sizeof(*mmie)))
return TX_DROP; return TX_DROP;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment