Page MenuHomeFreeBSD

net80211: add IGTK key slots needed for later MFP support
Needs ReviewPublic

Authored by adrian on Fri, Jun 12, 8:23 PM.
Referenced Files
F160246672: D57551.diff
Mon, Jun 22, 1:12 PM
F160245190: D57551.id179657.diff
Mon, Jun 22, 12:55 PM
F160185872: D57551.id179850.diff
Mon, Jun 22, 12:13 AM
Unknown Object (File)
Sun, Jun 21, 4:12 AM
Unknown Object (File)
Sun, Jun 21, 3:13 AM
Unknown Object (File)
Sat, Jun 20, 5:55 PM
Unknown Object (File)
Fri, Jun 19, 6:03 AM
Unknown Object (File)
Thu, Jun 18, 3:18 AM

Details

Reviewers
None
Group Reviewers
wireless
Summary

802.11w / MFP (management frame protection) - also called PMF
(protected management frames) - requires two more key slots
for the broadcast keys. The broadcast management traffic
isn't encrypted - instead each frame has an MMIC IE at the
end which verifies the frame.

This commit extends the number of keys from 4 to 6 and
adds separate functions for the IGTK key type and index.

Notably the 802.11 frame format only allows four key IDs
(0..3) and unicast management traffic is just normally
encrypted - the broadcast frames will have the actual key
index (4, 5) in the MMIC IE.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 73901
Build 70784: arc lint + arc unit

Event Timeline

sys/dev/ath/if_ath_keycache.c
480

TODO: this is wrong; i need to re-do this to set them to -1 and return 0 / mark as software handled key entries!