Page MenuHomeFreeBSD

net80211: add IGTK key slots needed for later MFP support
Needs ReviewPublic

Authored by adrian on Fri, Jun 12, 8:23 PM.
Referenced Files
F160074950: D57551.diff
Sun, Jun 21, 4:12 AM
F160070758: D57551.diff
Sun, Jun 21, 3:13 AM
F160030029: D57551.diff
Sat, Jun 20, 5:55 PM
Unknown Object (File)
Fri, Jun 19, 6:03 AM
Unknown Object (File)
Thu, Jun 18, 3:18 AM
Unknown Object (File)
Wed, Jun 17, 9:42 PM
Unknown Object (File)
Tue, Jun 16, 9:31 PM
Unknown Object (File)
Tue, Jun 16, 4:46 PM

Details

Reviewers
None
Group Reviewers
wireless
Summary

802.11w / MFP (management frame protection) - also called PMF
(protected management frames) - requires two more key slots
for the broadcast keys. The broadcast management traffic
isn't encrypted - instead each frame has an MMIC IE at the
end which verifies the frame.

This commit extends the number of keys from 4 to 6 and
adds separate functions for the IGTK key type and index.

Notably the 802.11 frame format only allows four key IDs
(0..3) and unicast management traffic is just normally
encrypted - the broadcast frames will have the actual key
index (4, 5) in the MMIC IE.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 73843
Build 70726: arc lint + arc unit

Event Timeline

sys/dev/ath/if_ath_keycache.c
468

TODO: this is wrong; i need to re-do this to set them to -1 and return 0 / mark as software handled key entries!