diff mbox series

[v6,03/17] Driver: Add key_type and Extended Key ID driver flag

Message ID 20190915200837.196283-4-alexander@wetzel-home.de
State Superseded
Headers show
Series Support seamless PTK rekeys with Extended Key ID | expand

Commit Message

Alexander Wetzel Sept. 15, 2019, 8:08 p.m. UTC
Add the new driver flag WPA_DRIVER_FLAGS_EXTENDED_KEY_ID and the key
type attribute key_type. The later will be used in other patches to
replace the boolean set_tx with something also able to handle Extended
Key ID.

Without the additional patches the changes here have no effect at all.

The new - so far unused - key types are:

  KEY_TYPE_BROADCAST
    To be set when installing a broadcast key which is not also a default
    key. (Replaces set_tx=0)

  KEY_TYPE_DEFAULT
    To be set when installing a WEP or a group key running without a
    pairwise key. Must not be used when pairwise keys are used. Never
    set when deleting a key. (Replaces set_tx=1)

  KEY_TYPE_PAIRWISE:
    Used to distinguish pairwise from broadcast keys. This is needed
    since Extended Key ID can use keyidx=1 both as a pairwise and a group
    key and we sometimes need an additional hint to distinguish them.

  KEY_TYPE_NO_AUTO_TX
    To be set when installing a pairwise key which must not be used for
    Tx, yet. (New requirement for Extended Key ID support.)

  KEY_TYPE_SET_TX
    To be set when activating Tx for a key already installed with
    KEY_TYPE_NO_AUTO_TX. (New requirement for Extended Key ID support.)

Signed-off-by: Alexander Wetzel <alexander@wetzel-home.de>
---

This could be split up in more patches to clearly differentiate between
"set_tx cleanup" and "Extended Key ID support".
But then I think having the key_types all in one patch is simpler to
follow and it looks silly to then just have a patch for adding
WPA_DRIVER_FLAGS_EXTENDED_KEY_ID...

I started out using key_flags instead an enum here. But after getting it
working it turned out that there simply is no useful case where we would
have to set more than one bit. If someone sees a better and less
invasive way we can of course do that. (In the RFC version I morphed
- incompletely - set_tx to key_flags but that was just a half-step. See
https://patchwork.ozlabs.org/project/hostap/list/?series=75270)

 src/common/wpa_common.h |  8 ++++++++
 src/drivers/driver.h    | 19 +++++++++++++++++++
 2 files changed, 27 insertions(+)

Comments

Jouni Malinen Sept. 20, 2019, 1:01 p.m. UTC | #1
On Sun, Sep 15, 2019 at 10:08:23PM +0200, Alexander Wetzel wrote:
> Add the new driver flag WPA_DRIVER_FLAGS_EXTENDED_KEY_ID and the key
> type attribute key_type. The later will be used in other patches to
> replace the boolean set_tx with something also able to handle Extended
> Key ID.

> diff --git a/src/common/wpa_common.h b/src/common/wpa_common.h
> +enum key_type {
> +	KEY_TYPE_BROADCAST,
> +	KEY_TYPE_DEFAULT,
> +	KEY_TYPE_PAIRWISE,
> +	KEY_TYPE_NO_AUTO_TX,
> +	KEY_TYPE_SET_TX,
> +};

I'm moving this into src/common/defs.h since this is internal defines
instead of specific to some external standard. Furthermore, I'm moving
this into patch 4/17 which is the first place where enum key type is
actually used.

> diff --git a/src/drivers/driver.h b/src/drivers/driver.h
> +/** Driver supports Extended Key ID */
> +#define WPA_DRIVER_FLAGS_EXTENDED_KEY_ID	0x0400000000000000ULL

This is a bit silly on its own as a commit (i.e., this is the only thing
remaining of patch 3/17 after the changes described here), but I guess
that might be the cleanest option here since patch 10/17 is the first
user of this and doing that before patch 15/17 would depend on the value
getting defined before the end of the series.

>  #define FULL_AP_CLIENT_STATE_SUPP(drv_flags) \
> @@ -2305,6 +2307,23 @@ struct wpa_driver_ops {
> +	 * @key_type: Additional instructions for key install:
..

And all these move into patch 4/17 where the new argument to the
callback function is actually added.
diff mbox series

Patch

diff --git a/src/common/wpa_common.h b/src/common/wpa_common.h
index 35bec0415..96c590e9d 100644
--- a/src/common/wpa_common.h
+++ b/src/common/wpa_common.h
@@ -199,6 +199,14 @@  struct wpa_eapol_key {
 #define FILS_ICK_MAX_LEN 48
 #define FILS_FT_MAX_LEN 48
 
+enum key_type {
+	KEY_TYPE_BROADCAST,
+	KEY_TYPE_DEFAULT,
+	KEY_TYPE_PAIRWISE,
+	KEY_TYPE_NO_AUTO_TX,
+	KEY_TYPE_SET_TX,
+};
+
 /**
  * struct wpa_ptk - WPA Pairwise Transient Key
  * IEEE Std 802.11i-2004 - 8.5.1.2 Pairwise key hierarchy
diff --git a/src/drivers/driver.h b/src/drivers/driver.h
index e9d0e4728..937702917 100644
--- a/src/drivers/driver.h
+++ b/src/drivers/driver.h
@@ -1674,6 +1674,8 @@  struct wpa_driver_capa {
 #define WPA_DRIVER_FLAGS_FTM_RESPONDER		0x0100000000000000ULL
 /** Driver support 4-way handshake offload for WPA-Personal */
 #define WPA_DRIVER_FLAGS_4WAY_HANDSHAKE_PSK	0x0200000000000000ULL
+/** Driver supports Extended Key ID */
+#define WPA_DRIVER_FLAGS_EXTENDED_KEY_ID	0x0400000000000000ULL
 	u64 flags;
 
 #define FULL_AP_CLIENT_STATE_SUPP(drv_flags) \
@@ -2305,6 +2307,23 @@  struct wpa_driver_ops {
 	 *	8-byte Rx Mic Key
 	 * @key_len: length of the key buffer in octets (WEP: 5 or 13,
 	 *	TKIP: 32, CCMP/GCMP: 16, IGTK: 16)
+	 * @key_type: Additional instructions for key install:
+	 *	%KEY_TYPE_BROADCAST:
+	 *	  Key is a broadcast but no default key.
+	 *	%KEY_TYPE_DEFAULT:
+	 *	  Key is the default key (not using pairwise keys, WEP or
+	 *	  group key only.) Must not be used when pairwise keys are
+	 *	  also in use.
+	 *	%KEY_TYPE_PAIRWISE:
+	 *	  Normal pairwise key not requiring Extended Key ID actions.
+	 *	%KEY_TYPE_NO_AUTO_TX:
+	 *	  Pairwise Key, but it must not be used for Tx, yet.
+	 *	  Can only be used when the driver supports Extended Key ID.
+	 *	%KEY_TYPE_SET_TX:
+	 *	  Key already installed with %KEY_TYPE_NO_AUTO_TX is selected as
+	 *	  the pairwise Tx key for the STA. Only @ifname, @priv, @addr
+	 *	  and @key_idx must be set and all other arguments have to be
+	 *	  zero or NULL.
 	 *
 	 * Returns: 0 on success, -1 on failure
 	 *