2 * Copyright 2002-2004, Instant802 Networks, Inc.
3 * Copyright 2008, Jouni Malinen <j@w1.fi>
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
10 #include <linux/netdevice.h>
11 #include <linux/types.h>
12 #include <linux/skbuff.h>
13 #include <linux/compiler.h>
14 #include <linux/ieee80211.h>
15 #include <linux/gfp.h>
16 #include <asm/unaligned.h>
17 #include <net/mac80211.h>
18 #include <crypto/aes.h>
20 #include "ieee80211_i.h"
28 ieee80211_tx_h_michael_mic_add(struct ieee80211_tx_data *tx)
33 struct ieee80211_hdr *hdr;
34 struct sk_buff *skb = tx->skb;
35 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
38 hdr = (struct ieee80211_hdr *)skb->data;
39 if (!tx->key || tx->key->conf.cipher != WLAN_CIPHER_SUITE_TKIP ||
40 skb->len < 24 || !ieee80211_is_data_present(hdr->frame_control))
43 hdrlen = ieee80211_hdrlen(hdr->frame_control);
44 if (skb->len < hdrlen)
47 data = skb->data + hdrlen;
48 data_len = skb->len - hdrlen;
50 if (unlikely(info->flags & IEEE80211_TX_INTFL_TKIP_MIC_FAILURE)) {
51 /* Need to use software crypto for the test */
52 info->control.hw_key = NULL;
55 if (info->control.hw_key &&
56 (info->flags & IEEE80211_TX_CTL_DONTFRAG ||
57 tx->local->ops->set_frag_threshold) &&
58 !(tx->key->conf.flags & IEEE80211_KEY_FLAG_GENERATE_MMIC)) {
59 /* hwaccel - with no need for SW-generated MMIC */
63 tail = MICHAEL_MIC_LEN;
64 if (!info->control.hw_key)
65 tail += IEEE80211_TKIP_ICV_LEN;
67 if (WARN(skb_tailroom(skb) < tail ||
68 skb_headroom(skb) < IEEE80211_TKIP_IV_LEN,
69 "mmic: not enough head/tail (%d/%d,%d/%d)\n",
70 skb_headroom(skb), IEEE80211_TKIP_IV_LEN,
71 skb_tailroom(skb), tail))
74 key = &tx->key->conf.key[NL80211_TKIP_DATA_OFFSET_TX_MIC_KEY];
75 mic = skb_put(skb, MICHAEL_MIC_LEN);
76 michael_mic(key, hdr, data, data_len, mic);
77 if (unlikely(info->flags & IEEE80211_TX_INTFL_TKIP_MIC_FAILURE))
85 ieee80211_rx_h_michael_mic_verify(struct ieee80211_rx_data *rx)
87 u8 *data, *key = NULL;
90 u8 mic[MICHAEL_MIC_LEN];
91 struct sk_buff *skb = rx->skb;
92 struct ieee80211_rx_status *status = IEEE80211_SKB_RXCB(skb);
93 struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data;
96 * it makes no sense to check for MIC errors on anything other
99 if (!ieee80211_is_data_present(hdr->frame_control))
103 * No way to verify the MIC if the hardware stripped it or
104 * the IV with the key index. In this case we have solely rely
105 * on the driver to set RX_FLAG_MMIC_ERROR in the event of a
106 * MIC failure report.
108 if (status->flag & (RX_FLAG_MMIC_STRIPPED | RX_FLAG_IV_STRIPPED)) {
109 if (status->flag & RX_FLAG_MMIC_ERROR)
110 goto mic_fail_no_key;
112 if (!(status->flag & RX_FLAG_IV_STRIPPED) && rx->key &&
113 rx->key->conf.cipher == WLAN_CIPHER_SUITE_TKIP)
120 * Some hardware seems to generate Michael MIC failure reports; even
121 * though, the frame was not encrypted with TKIP and therefore has no
122 * MIC. Ignore the flag them to avoid triggering countermeasures.
124 if (!rx->key || rx->key->conf.cipher != WLAN_CIPHER_SUITE_TKIP ||
125 !(status->flag & RX_FLAG_DECRYPTED))
128 if (rx->sdata->vif.type == NL80211_IFTYPE_AP && rx->key->conf.keyidx) {
130 * APs with pairwise keys should never receive Michael MIC
131 * errors for non-zero keyidx because these are reserved for
132 * group keys and only the AP is sending real multicast
135 return RX_DROP_UNUSABLE;
138 if (status->flag & RX_FLAG_MMIC_ERROR)
141 hdrlen = ieee80211_hdrlen(hdr->frame_control);
142 if (skb->len < hdrlen + MICHAEL_MIC_LEN)
143 return RX_DROP_UNUSABLE;
145 if (skb_linearize(rx->skb))
146 return RX_DROP_UNUSABLE;
147 hdr = (void *)skb->data;
149 data = skb->data + hdrlen;
150 data_len = skb->len - hdrlen - MICHAEL_MIC_LEN;
151 key = &rx->key->conf.key[NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY];
152 michael_mic(key, hdr, data, data_len, mic);
153 if (memcmp(mic, data + data_len, MICHAEL_MIC_LEN) != 0)
156 /* remove Michael MIC from payload */
157 skb_trim(skb, skb->len - MICHAEL_MIC_LEN);
160 /* update IV in key information to be able to detect replays */
161 rx->key->u.tkip.rx[rx->security_idx].iv32 = rx->tkip_iv32;
162 rx->key->u.tkip.rx[rx->security_idx].iv16 = rx->tkip_iv16;
167 rx->key->u.tkip.mic_failures++;
171 * In some cases the key can be unset - e.g. a multicast packet, in
172 * a driver that supports HW encryption. Send up the key idx only if
175 mac80211_ev_michael_mic_failure(rx->sdata,
176 rx->key ? rx->key->conf.keyidx : -1,
177 (void *) skb->data, NULL, GFP_ATOMIC);
178 return RX_DROP_UNUSABLE;
182 static int tkip_encrypt_skb(struct ieee80211_tx_data *tx, struct sk_buff *skb)
184 struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data;
185 struct ieee80211_key *key = tx->key;
186 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
191 if (info->control.hw_key &&
192 !(info->control.hw_key->flags & IEEE80211_KEY_FLAG_GENERATE_IV) &&
193 !(info->control.hw_key->flags & IEEE80211_KEY_FLAG_PUT_IV_SPACE)) {
194 /* hwaccel - with no need for software-generated IV */
198 hdrlen = ieee80211_hdrlen(hdr->frame_control);
199 len = skb->len - hdrlen;
201 if (info->control.hw_key)
204 tail = IEEE80211_TKIP_ICV_LEN;
206 if (WARN_ON(skb_tailroom(skb) < tail ||
207 skb_headroom(skb) < IEEE80211_TKIP_IV_LEN))
210 pos = skb_push(skb, IEEE80211_TKIP_IV_LEN);
211 memmove(pos, pos + IEEE80211_TKIP_IV_LEN, hdrlen);
214 /* the HW only needs room for the IV, but not the actual IV */
215 if (info->control.hw_key &&
216 (info->control.hw_key->flags & IEEE80211_KEY_FLAG_PUT_IV_SPACE))
219 /* Increase IV for the frame */
220 spin_lock(&key->u.tkip.txlock);
221 key->u.tkip.tx.iv16++;
222 if (key->u.tkip.tx.iv16 == 0)
223 key->u.tkip.tx.iv32++;
224 pos = ieee80211_tkip_add_iv(pos, key);
225 spin_unlock(&key->u.tkip.txlock);
227 /* hwaccel - with software IV */
228 if (info->control.hw_key)
231 /* Add room for ICV */
232 skb_put(skb, IEEE80211_TKIP_ICV_LEN);
234 return ieee80211_tkip_encrypt_data(tx->local->wep_tx_tfm,
240 ieee80211_crypto_tkip_encrypt(struct ieee80211_tx_data *tx)
244 ieee80211_tx_set_protected(tx);
246 skb_queue_walk(&tx->skbs, skb) {
247 if (tkip_encrypt_skb(tx, skb) < 0)
256 ieee80211_crypto_tkip_decrypt(struct ieee80211_rx_data *rx)
258 struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) rx->skb->data;
259 int hdrlen, res, hwaccel = 0;
260 struct ieee80211_key *key = rx->key;
261 struct sk_buff *skb = rx->skb;
262 struct ieee80211_rx_status *status = IEEE80211_SKB_RXCB(skb);
264 hdrlen = ieee80211_hdrlen(hdr->frame_control);
266 if (!ieee80211_is_data(hdr->frame_control))
269 if (!rx->sta || skb->len - hdrlen < 12)
270 return RX_DROP_UNUSABLE;
272 /* it may be possible to optimize this a bit more */
273 if (skb_linearize(rx->skb))
274 return RX_DROP_UNUSABLE;
275 hdr = (void *)skb->data;
278 * Let TKIP code verify IV, but skip decryption.
279 * In the case where hardware checks the IV as well,
280 * we don't even get here, see ieee80211_rx_h_decrypt()
282 if (status->flag & RX_FLAG_DECRYPTED)
285 res = ieee80211_tkip_decrypt_data(rx->local->wep_rx_tfm,
286 key, skb->data + hdrlen,
287 skb->len - hdrlen, rx->sta->sta.addr,
288 hdr->addr1, hwaccel, rx->security_idx,
291 if (res != TKIP_DECRYPT_OK)
292 return RX_DROP_UNUSABLE;
295 skb_trim(skb, skb->len - IEEE80211_TKIP_ICV_LEN);
298 memmove(skb->data + IEEE80211_TKIP_IV_LEN, skb->data, hdrlen);
299 skb_pull(skb, IEEE80211_TKIP_IV_LEN);
305 static void ccmp_special_blocks(struct sk_buff *skb, u8 *pn, u8 *b_0, u8 *aad)
308 int a4_included, mgmt;
312 struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data;
315 * Mask FC: zero subtype b4 b5 b6 (if not mgmt)
316 * Retry, PwrMgt, MoreData; set Protected
318 mgmt = ieee80211_is_mgmt(hdr->frame_control);
319 mask_fc = hdr->frame_control;
320 mask_fc &= ~cpu_to_le16(IEEE80211_FCTL_RETRY |
321 IEEE80211_FCTL_PM | IEEE80211_FCTL_MOREDATA);
323 mask_fc &= ~cpu_to_le16(0x0070);
324 mask_fc |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
326 hdrlen = ieee80211_hdrlen(hdr->frame_control);
328 a4_included = ieee80211_has_a4(hdr->frame_control);
330 if (ieee80211_is_data_qos(hdr->frame_control))
331 qos_tid = *ieee80211_get_qos_ctl(hdr) & IEEE80211_QOS_CTL_TID_MASK;
335 /* In CCM, the initial vectors (IV) used for CTR mode encryption and CBC
336 * mode authentication are not allowed to collide, yet both are derived
337 * from this vector b_0. We only set L := 1 here to indicate that the
338 * data size can be represented in (L+1) bytes. The CCM layer will take
339 * care of storing the data length in the top (L+1) bytes and setting
340 * and clearing the other bits as is required to derive the two IVs.
344 /* Nonce: Nonce Flags | A2 | PN
345 * Nonce Flags: Priority (b0..b3) | Management (b4) | Reserved (b5..b7)
347 b_0[1] = qos_tid | (mgmt << 4);
348 memcpy(&b_0[2], hdr->addr2, ETH_ALEN);
349 memcpy(&b_0[8], pn, IEEE80211_CCMP_PN_LEN);
351 /* AAD (extra authenticate-only data) / masked 802.11 header
352 * FC | A1 | A2 | A3 | SC | [A4] | [QC] */
353 put_unaligned_be16(len_a, &aad[0]);
354 put_unaligned(mask_fc, (__le16 *)&aad[2]);
355 memcpy(&aad[4], &hdr->addr1, 3 * ETH_ALEN);
357 /* Mask Seq#, leave Frag# */
358 aad[22] = *((u8 *) &hdr->seq_ctrl) & 0x0f;
362 memcpy(&aad[24], hdr->addr4, ETH_ALEN);
366 memset(&aad[24], 0, ETH_ALEN + IEEE80211_QOS_CTL_LEN);
372 static inline void ccmp_pn2hdr(u8 *hdr, u8 *pn, int key_id)
377 hdr[3] = 0x20 | (key_id << 6);
385 static inline void ccmp_hdr2pn(u8 *pn, u8 *hdr)
396 static int ccmp_encrypt_skb(struct ieee80211_tx_data *tx, struct sk_buff *skb)
398 struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data;
399 struct ieee80211_key *key = tx->key;
400 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
401 int hdrlen, len, tail;
405 u8 aad[2 * AES_BLOCK_SIZE];
406 u8 b_0[AES_BLOCK_SIZE];
408 if (info->control.hw_key &&
409 !(info->control.hw_key->flags & IEEE80211_KEY_FLAG_GENERATE_IV) &&
410 !(info->control.hw_key->flags & IEEE80211_KEY_FLAG_PUT_IV_SPACE) &&
411 !((info->control.hw_key->flags &
412 IEEE80211_KEY_FLAG_GENERATE_IV_MGMT) &&
413 ieee80211_is_mgmt(hdr->frame_control))) {
415 * hwaccel has no need for preallocated room for CCMP
416 * header or MIC fields
421 hdrlen = ieee80211_hdrlen(hdr->frame_control);
422 len = skb->len - hdrlen;
424 if (info->control.hw_key)
427 tail = IEEE80211_CCMP_MIC_LEN;
429 if (WARN_ON(skb_tailroom(skb) < tail ||
430 skb_headroom(skb) < IEEE80211_CCMP_HDR_LEN))
433 pos = skb_push(skb, IEEE80211_CCMP_HDR_LEN);
434 memmove(pos, pos + IEEE80211_CCMP_HDR_LEN, hdrlen);
436 /* the HW only needs room for the IV, but not the actual IV */
437 if (info->control.hw_key &&
438 (info->control.hw_key->flags & IEEE80211_KEY_FLAG_PUT_IV_SPACE))
441 hdr = (struct ieee80211_hdr *) pos;
444 pn64 = atomic64_inc_return(&key->u.ccmp.tx_pn);
453 ccmp_pn2hdr(pos, pn, key->conf.keyidx);
455 /* hwaccel - with software CCMP header */
456 if (info->control.hw_key)
459 pos += IEEE80211_CCMP_HDR_LEN;
460 ccmp_special_blocks(skb, pn, b_0, aad);
461 ieee80211_aes_ccm_encrypt(key->u.ccmp.tfm, b_0, aad, pos, len,
462 skb_put(skb, IEEE80211_CCMP_MIC_LEN));
469 ieee80211_crypto_ccmp_encrypt(struct ieee80211_tx_data *tx)
473 ieee80211_tx_set_protected(tx);
475 skb_queue_walk(&tx->skbs, skb) {
476 if (ccmp_encrypt_skb(tx, skb) < 0)
485 ieee80211_crypto_ccmp_decrypt(struct ieee80211_rx_data *rx)
487 struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)rx->skb->data;
489 struct ieee80211_key *key = rx->key;
490 struct sk_buff *skb = rx->skb;
491 struct ieee80211_rx_status *status = IEEE80211_SKB_RXCB(skb);
492 u8 pn[IEEE80211_CCMP_PN_LEN];
496 hdrlen = ieee80211_hdrlen(hdr->frame_control);
498 if (!ieee80211_is_data(hdr->frame_control) &&
499 !ieee80211_is_robust_mgmt_frame(skb))
502 data_len = skb->len - hdrlen - IEEE80211_CCMP_HDR_LEN -
503 IEEE80211_CCMP_MIC_LEN;
504 if (!rx->sta || data_len < 0)
505 return RX_DROP_UNUSABLE;
507 if (status->flag & RX_FLAG_DECRYPTED) {
508 if (!pskb_may_pull(rx->skb, hdrlen + IEEE80211_CCMP_HDR_LEN))
509 return RX_DROP_UNUSABLE;
511 if (skb_linearize(rx->skb))
512 return RX_DROP_UNUSABLE;
515 ccmp_hdr2pn(pn, skb->data + hdrlen);
517 queue = rx->security_idx;
519 if (memcmp(pn, key->u.ccmp.rx_pn[queue], IEEE80211_CCMP_PN_LEN) <= 0) {
520 key->u.ccmp.replays++;
521 return RX_DROP_UNUSABLE;
524 if (!(status->flag & RX_FLAG_DECRYPTED)) {
525 u8 aad[2 * AES_BLOCK_SIZE];
526 u8 b_0[AES_BLOCK_SIZE];
527 /* hardware didn't decrypt/verify MIC */
528 ccmp_special_blocks(skb, pn, b_0, aad);
530 if (ieee80211_aes_ccm_decrypt(
531 key->u.ccmp.tfm, b_0, aad,
532 skb->data + hdrlen + IEEE80211_CCMP_HDR_LEN,
534 skb->data + skb->len - IEEE80211_CCMP_MIC_LEN))
535 return RX_DROP_UNUSABLE;
538 memcpy(key->u.ccmp.rx_pn[queue], pn, IEEE80211_CCMP_PN_LEN);
540 /* Remove CCMP header and MIC */
541 if (pskb_trim(skb, skb->len - IEEE80211_CCMP_MIC_LEN))
542 return RX_DROP_UNUSABLE;
543 memmove(skb->data + IEEE80211_CCMP_HDR_LEN, skb->data, hdrlen);
544 skb_pull(skb, IEEE80211_CCMP_HDR_LEN);
549 static ieee80211_tx_result
550 ieee80211_crypto_cs_encrypt(struct ieee80211_tx_data *tx,
553 struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data;
554 struct ieee80211_key *key = tx->key;
555 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
556 const struct ieee80211_cipher_scheme *cs = key->sta->cipher_scheme;
560 if (info->control.hw_key &&
561 !(info->control.hw_key->flags & IEEE80211_KEY_FLAG_PUT_IV_SPACE)) {
562 /* hwaccel has no need for preallocated head room */
566 if (unlikely(skb_headroom(skb) < cs->hdr_len &&
567 pskb_expand_head(skb, cs->hdr_len, 0, GFP_ATOMIC)))
570 hdrlen = ieee80211_hdrlen(hdr->frame_control);
572 pos = skb_push(skb, cs->hdr_len);
573 memmove(pos, pos + cs->hdr_len, hdrlen);
578 static inline int ieee80211_crypto_cs_pn_compare(u8 *pn1, u8 *pn2, int len)
582 /* pn is little endian */
583 for (i = len - 1; i >= 0; i--) {
586 else if (pn1[i] > pn2[i])
593 static ieee80211_rx_result
594 ieee80211_crypto_cs_decrypt(struct ieee80211_rx_data *rx)
596 struct ieee80211_key *key = rx->key;
597 struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)rx->skb->data;
598 const struct ieee80211_cipher_scheme *cs = NULL;
599 int hdrlen = ieee80211_hdrlen(hdr->frame_control);
600 struct ieee80211_rx_status *status = IEEE80211_SKB_RXCB(rx->skb);
606 if (!rx->sta || !rx->sta->cipher_scheme ||
607 !(status->flag & RX_FLAG_DECRYPTED))
608 return RX_DROP_UNUSABLE;
610 if (!ieee80211_is_data(hdr->frame_control))
613 cs = rx->sta->cipher_scheme;
615 data_len = rx->skb->len - hdrlen - cs->hdr_len;
618 return RX_DROP_UNUSABLE;
620 if (ieee80211_is_data_qos(hdr->frame_control))
621 qos_tid = *ieee80211_get_qos_ctl(hdr) &
622 IEEE80211_QOS_CTL_TID_MASK;
626 if (skb_linearize(rx->skb))
627 return RX_DROP_UNUSABLE;
629 hdr = (struct ieee80211_hdr *)rx->skb->data;
631 rx_pn = key->u.gen.rx_pn[qos_tid];
632 skb_pn = rx->skb->data + hdrlen + cs->pn_off;
634 if (ieee80211_crypto_cs_pn_compare(skb_pn, rx_pn, cs->pn_len) <= 0)
635 return RX_DROP_UNUSABLE;
637 memcpy(rx_pn, skb_pn, cs->pn_len);
639 /* remove security header and MIC */
640 if (pskb_trim(rx->skb, rx->skb->len - cs->mic_len))
641 return RX_DROP_UNUSABLE;
643 memmove(rx->skb->data + cs->hdr_len, rx->skb->data, hdrlen);
644 skb_pull(rx->skb, cs->hdr_len);
649 static void bip_aad(struct sk_buff *skb, u8 *aad)
652 struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data;
654 /* BIP AAD: FC(masked) || A1 || A2 || A3 */
656 /* FC type/subtype */
657 /* Mask FC Retry, PwrMgt, MoreData flags to zero */
658 mask_fc = hdr->frame_control;
659 mask_fc &= ~cpu_to_le16(IEEE80211_FCTL_RETRY | IEEE80211_FCTL_PM |
660 IEEE80211_FCTL_MOREDATA);
661 put_unaligned(mask_fc, (__le16 *) &aad[0]);
663 memcpy(aad + 2, &hdr->addr1, 3 * ETH_ALEN);
667 static inline void bip_ipn_set64(u8 *d, u64 pn)
677 static inline void bip_ipn_swap(u8 *d, const u8 *s)
689 ieee80211_crypto_aes_cmac_encrypt(struct ieee80211_tx_data *tx)
692 struct ieee80211_tx_info *info;
693 struct ieee80211_key *key = tx->key;
694 struct ieee80211_mmie *mmie;
698 if (WARN_ON(skb_queue_len(&tx->skbs) != 1))
701 skb = skb_peek(&tx->skbs);
703 info = IEEE80211_SKB_CB(skb);
705 if (info->control.hw_key)
708 if (WARN_ON(skb_tailroom(skb) < sizeof(*mmie)))
711 mmie = (struct ieee80211_mmie *) skb_put(skb, sizeof(*mmie));
712 mmie->element_id = WLAN_EID_MMIE;
713 mmie->length = sizeof(*mmie) - 2;
714 mmie->key_id = cpu_to_le16(key->conf.keyidx);
717 pn64 = atomic64_inc_return(&key->u.aes_cmac.tx_pn);
719 bip_ipn_set64(mmie->sequence_number, pn64);
724 * MIC = AES-128-CMAC(IGTK, AAD || Management Frame Body || MMIE, 64)
726 ieee80211_aes_cmac(key->u.aes_cmac.tfm, aad,
727 skb->data + 24, skb->len - 24, mmie->mic);
734 ieee80211_crypto_aes_cmac_decrypt(struct ieee80211_rx_data *rx)
736 struct sk_buff *skb = rx->skb;
737 struct ieee80211_rx_status *status = IEEE80211_SKB_RXCB(skb);
738 struct ieee80211_key *key = rx->key;
739 struct ieee80211_mmie *mmie;
740 u8 aad[20], mic[8], ipn[6];
741 struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data;
743 if (!ieee80211_is_mgmt(hdr->frame_control))
746 /* management frames are already linear */
748 if (skb->len < 24 + sizeof(*mmie))
749 return RX_DROP_UNUSABLE;
751 mmie = (struct ieee80211_mmie *)
752 (skb->data + skb->len - sizeof(*mmie));
753 if (mmie->element_id != WLAN_EID_MMIE ||
754 mmie->length != sizeof(*mmie) - 2)
755 return RX_DROP_UNUSABLE; /* Invalid MMIE */
757 bip_ipn_swap(ipn, mmie->sequence_number);
759 if (memcmp(ipn, key->u.aes_cmac.rx_pn, 6) <= 0) {
760 key->u.aes_cmac.replays++;
761 return RX_DROP_UNUSABLE;
764 if (!(status->flag & RX_FLAG_DECRYPTED)) {
765 /* hardware didn't decrypt/verify MIC */
767 ieee80211_aes_cmac(key->u.aes_cmac.tfm, aad,
768 skb->data + 24, skb->len - 24, mic);
769 if (memcmp(mic, mmie->mic, sizeof(mmie->mic)) != 0) {
770 key->u.aes_cmac.icverrors++;
771 return RX_DROP_UNUSABLE;
775 memcpy(key->u.aes_cmac.rx_pn, ipn, 6);
778 skb_trim(skb, skb->len - sizeof(*mmie));
784 ieee80211_crypto_hw_encrypt(struct ieee80211_tx_data *tx)
787 struct ieee80211_tx_info *info = NULL;
788 ieee80211_tx_result res;
790 skb_queue_walk(&tx->skbs, skb) {
791 info = IEEE80211_SKB_CB(skb);
793 /* handle hw-only algorithm */
794 if (!info->control.hw_key)
797 if (tx->key->sta->cipher_scheme) {
798 res = ieee80211_crypto_cs_encrypt(tx, skb);
799 if (res != TX_CONTINUE)
804 ieee80211_tx_set_protected(tx);
810 ieee80211_crypto_hw_decrypt(struct ieee80211_rx_data *rx)
812 if (rx->sta && rx->sta->cipher_scheme)
813 return ieee80211_crypto_cs_decrypt(rx);
815 return RX_DROP_UNUSABLE;