kernel-hacking-2024-linux-s.../net
Helmut Schaa 18890d4b89 mac80211: Disable hw crypto for GTKs on AP VLAN interfaces
When using AP VLAN interfaces, each VLAN interface should be in its own
broadcast domain. Hostapd achieves this by assigning different GTKs to
different AP VLAN interfaces.

However, mac80211 drivers are not aware of AP VLAN interfaces and as
such mac80211 sends the GTK to the driver in the context of the base AP
mode interface. This causes problems when multiple AP VLAN interfaces
are used since the driver will use the same key slot for the different
GTKs (there's no way for the driver to distinguish the different GTKs
from different AP VLAN interfaces). Thus, only the clients associated
to one AP VLAN interface (the one that was created last) can actually
use broadcast traffic.

Fix this by not programming any GTKs for AP VLAN interfaces into the hw
but fall back to using software crypto. The GTK for the underlying AP
interface is still sent to the driver.

That means, broadcast traffic to stations associated to an AP VLAN
interface is encrypted in software whereas broadcast traffic to
stations associated to the non-VLAN AP interface is encrypted in
hardware.

Cc: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2010-11-22 15:48:51 -05:00
..
9p net/9p: Return error on read with NULL buffer 2010-10-28 09:08:49 -05:00
802
8021q
appletalk
atm
ax25
bluetooth
bridge
caif
can
ceph
core pktgen: Limit how much data we copy onto the stack. 2010-10-28 11:47:53 -07:00
dcb
dccp dccp ccid-2: Stop polling 2010-10-28 10:27:01 -07:00
decnet
dns_resolver
dsa
econet
ethernet
ieee802154
ipv4 ip_gre: fix fallback tunnel setup 2010-10-30 16:21:28 -07:00
ipv6 ipv6/udp: report SndbufErrors and RcvbufErrors 2010-10-30 16:17:23 -07:00
ipx
irda
iucv
key
l2tp
lapb
llc
mac80211 mac80211: Disable hw crypto for GTKs on AP VLAN interfaces 2010-11-22 15:48:51 -05:00
netfilter netfilter: xt_socket: Make tproto signed in socket_mt6_v1(). 2010-10-28 12:59:53 -07:00
netlabel
netlink
netrom
packet
phonet
rds RDS: Let rds_message_alloc_sgs() return NULL 2010-10-30 16:34:18 -07:00
rfkill rfkill: remove dead code 2010-11-15 13:24:06 -05:00
rose
rxrpc
sched
sctp
sunrpc convert get_sb_single() users 2010-10-29 04:16:28 -04:00
tipc
unix fs: allow for more than 2^31 files 2010-10-26 16:52:15 -07:00
wanrouter
wimax
wireless cfg80211: Fix regulatory bug with multiple cards and delays 2010-11-22 15:48:51 -05:00
x25
xfrm
compat.c net: Limit socket I/O iovec total length to INT_MAX. 2010-10-28 11:47:52 -07:00
Kconfig
Makefile
nonet.c
socket.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6 2010-10-30 18:42:58 -07:00
sysctl_net.c
TUNABLE