3  * Copyright (c) 2005-2009, Jouni Malinen <j@w1.fi>
5  * Copyright (c) 2013-2014, Qualcomm Atheros, Inc.
55 #pragma pack(push, 1)
85 static void __macsec_drv_init(struct macsec_qca_data *drv)  in __macsec_drv_init()  argument
91 	wpa_printf(MSG_INFO, "%s: secy_id=%d", __func__, drv->secy_id);  in __macsec_drv_init()
94 	ret = nss_macsec_secy_en_set(drv->secy_id, true);  in __macsec_drv_init()
98 	ret = nss_macsec_secy_sc_sa_mapping_mode_set(drv->secy_id,  in __macsec_drv_init()
105 	rx_ctl_filt.bypass = 1;  in __macsec_drv_init()
109 	ret = nss_macsec_secy_rx_ctl_filt_set(drv->secy_id, 0, &rx_ctl_filt);  in __macsec_drv_init()
114 	tx_ctl_filt.bypass = 1;  in __macsec_drv_init()
118 	ret = nss_macsec_secy_tx_ctl_filt_set(drv->secy_id, 0, &tx_ctl_filt);  in __macsec_drv_init()
124 static void __macsec_drv_deinit(struct macsec_qca_data *drv)  in __macsec_drv_deinit()  argument
126 	nss_macsec_secy_en_set(drv->secy_id, false);  in __macsec_drv_deinit()
127 	nss_macsec_secy_rx_sc_del_all(drv->secy_id);  in __macsec_drv_deinit()
128 	nss_macsec_secy_tx_sc_del_all(drv->secy_id);  in __macsec_drv_deinit()
153 	switch (ntohs(hdr->ethertype)) {  in macsec_qca_handle_data()
156 		sa = hdr->src;  in macsec_qca_handle_data()
161 		pos = (u8 *) (hdr + 1);  in macsec_qca_handle_data()
162 		left = len - sizeof(*hdr);  in macsec_qca_handle_data()
167 			   ntohs(hdr->ethertype));  in macsec_qca_handle_data()
191 static int macsec_qca_init_sockets(struct macsec_qca_data *drv, u8 *own_addr)  in macsec_qca_init_sockets()  argument
197 	drv->common.sock = socket(PF_PACKET, SOCK_RAW, htons(ETH_P_PAE));  in macsec_qca_init_sockets()
198 	if (drv->common.sock < 0) {  in macsec_qca_init_sockets()
201 		return -1;  in macsec_qca_init_sockets()
204 	if (eloop_register_read_sock(drv->common.sock, macsec_qca_handle_read,  in macsec_qca_init_sockets()
205 				     drv->common.ctx, NULL)) {  in macsec_qca_init_sockets()
207 		return -1;  in macsec_qca_init_sockets()
211 	os_strlcpy(ifr.ifr_name, drv->common.ifname, sizeof(ifr.ifr_name));  in macsec_qca_init_sockets()
212 	if (ioctl(drv->common.sock, SIOCGIFINDEX, &ifr) != 0) {  in macsec_qca_init_sockets()
215 		return -1;  in macsec_qca_init_sockets()
224 	if (bind(drv->common.sock, (struct sockaddr *) &addr,  in macsec_qca_init_sockets()
227 		return -1;  in macsec_qca_init_sockets()
231 	if (wired_multicast_membership(drv->common.sock, ifr.ifr_ifindex,  in macsec_qca_init_sockets()
232 				       pae_group_addr, 1) < 0) {  in macsec_qca_init_sockets()
235 		return -1;  in macsec_qca_init_sockets()
239 	os_strlcpy(ifr.ifr_name, drv->common.ifname, sizeof(ifr.ifr_name));  in macsec_qca_init_sockets()
240 	if (ioctl(drv->common.sock, SIOCGIFHWADDR, &ifr) != 0) {  in macsec_qca_init_sockets()
243 		return -1;  in macsec_qca_init_sockets()
247 		wpa_printf(MSG_INFO, "Invalid HW-addr family 0x%04x",  in macsec_qca_init_sockets()
249 		return -1;  in macsec_qca_init_sockets()
255 	return -1;  in macsec_qca_init_sockets()
268 		*secy_id = 1;  in macsec_qca_secy_id_get()
276 		*secy_id = 1;  in macsec_qca_secy_id_get()
278 		*secy_id = -1;  in macsec_qca_secy_id_get()
279 		return -1;  in macsec_qca_secy_id_get()
289 	struct macsec_qca_data *drv;  in macsec_qca_init()  local
291 	drv = os_zalloc(sizeof(*drv));  in macsec_qca_init()
292 	if (drv == NULL)  in macsec_qca_init()
295 	if (macsec_qca_secy_id_get(ifname, &drv->secy_id)) {  in macsec_qca_init()
298 		os_free(drv);  in macsec_qca_init()
302 	if (driver_wired_init_common(&drv->common, ifname, ctx) < 0) {  in macsec_qca_init()
303 		os_free(drv);  in macsec_qca_init()
307 	return drv;  in macsec_qca_init()
313 	struct macsec_qca_data *drv = priv;  in macsec_qca_deinit()  local
315 	driver_wired_deinit_common(&drv->common);  in macsec_qca_deinit()
316 	os_free(drv);  in macsec_qca_deinit()
323 	struct macsec_qca_data *drv;  in macsec_qca_hapd_init()  local
325 	drv = os_zalloc(sizeof(struct macsec_qca_data));  in macsec_qca_hapd_init()
326 	if (!drv) {  in macsec_qca_hapd_init()
332 	if (macsec_qca_secy_id_get(params->ifname, &drv->secy_id)) {  in macsec_qca_hapd_init()
335 			   params->ifname);  in macsec_qca_hapd_init()
336 		os_free(drv);  in macsec_qca_hapd_init()
340 	drv->common.ctx = hapd;  in macsec_qca_hapd_init()
341 	os_strlcpy(drv->common.ifname, params->ifname,  in macsec_qca_hapd_init()
342 		   sizeof(drv->common.ifname));  in macsec_qca_hapd_init()
343 	drv->use_pae_group_addr = params->use_pae_group_addr;  in macsec_qca_hapd_init()
345 	if (macsec_qca_init_sockets(drv, params->own_addr)) {  in macsec_qca_hapd_init()
346 		os_free(drv);  in macsec_qca_hapd_init()
350 	return drv;  in macsec_qca_hapd_init()
356 	struct macsec_qca_data *drv = priv;  in macsec_qca_hapd_deinit()  local
358 	if (drv->common.sock >= 0) {  in macsec_qca_hapd_deinit()
359 		eloop_unregister_read_sock(drv->common.sock);  in macsec_qca_hapd_deinit()
360 		close(drv->common.sock);  in macsec_qca_hapd_deinit()
363 	os_free(drv);  in macsec_qca_hapd_deinit()
371 	struct macsec_qca_data *drv = priv;  in macsec_qca_send_eapol()  local
383 		return -1;  in macsec_qca_send_eapol()
386 	os_memcpy(hdr->dest, drv->use_pae_group_addr ? pae_group_addr : addr,  in macsec_qca_send_eapol()
388 	os_memcpy(hdr->src, own_addr, ETH_ALEN);  in macsec_qca_send_eapol()
389 	hdr->ethertype = htons(ETH_P_PAE);  in macsec_qca_send_eapol()
391 	pos = (u8 *) (hdr + 1);  in macsec_qca_send_eapol()
394 	res = send(drv->common.sock, (u8 *) hdr, len, 0);  in macsec_qca_send_eapol()
399 			   "macsec_qca_send_eapol - packet len: %lu - failed: send: %s",  in macsec_qca_send_eapol()
409 	struct macsec_qca_data *drv = priv;  in macsec_qca_macsec_init()  local
411 	drv->always_include_sci = params->always_include_sci;  in macsec_qca_macsec_init()
412 	drv->use_es = params->use_es;  in macsec_qca_macsec_init()
413 	drv->use_scb = params->use_scb;  in macsec_qca_macsec_init()
416 		   __func__, drv->use_es, drv->use_scb,  in macsec_qca_macsec_init()
417 		   drv->always_include_sci);  in macsec_qca_macsec_init()
419 	__macsec_drv_init(drv);  in macsec_qca_macsec_init()
427 	struct macsec_qca_data *drv = priv;  in macsec_qca_macsec_deinit()  local
431 	__macsec_drv_deinit(drv);  in macsec_qca_macsec_deinit()
449 	struct macsec_qca_data *drv = priv;  in macsec_qca_enable_protect_frames()  local
454 	drv->protect_frames = enabled;  in macsec_qca_enable_protect_frames()
463 	struct macsec_qca_data *drv = priv;  in macsec_qca_set_replay_protect()  local
469 	drv->replay_protect = enabled;  in macsec_qca_set_replay_protect()
470 	drv->replay_window = window;  in macsec_qca_set_replay_protect()
488 	struct macsec_qca_data *drv = priv;  in macsec_qca_set_current_cipher_suite()  local
495 		return -1;  in macsec_qca_set_current_cipher_suite()
501 	return nss_macsec_secy_cipher_suite_set(drv->secy_id, cs_type);  in macsec_qca_set_current_cipher_suite()
507 	struct macsec_qca_data *drv = priv;  in macsec_qca_enable_controlled_port()  local
512 	ret += nss_macsec_secy_controlled_port_en_set(drv->secy_id, enabled);  in macsec_qca_enable_controlled_port()
532 	return -1;  in macsec_qca_lookup_channel()
544 static int macsec_qca_lookup_receive_channel(struct macsec_qca_data *drv,  in macsec_qca_lookup_receive_channel()  argument
548 	return macsec_qca_lookup_channel(drv->receive_channel_map, &sc->sci,  in macsec_qca_lookup_receive_channel()
553 static void macsec_qca_register_receive_channel(struct macsec_qca_data *drv,  in macsec_qca_register_receive_channel()  argument
557 	macsec_qca_register_channel(drv->receive_channel_map, &sc->sci,  in macsec_qca_register_receive_channel()
562 static int macsec_qca_lookup_transmit_channel(struct macsec_qca_data *drv,  in macsec_qca_lookup_transmit_channel()  argument
566 	return macsec_qca_lookup_channel(drv->transmit_channel_map, &sc->sci,  in macsec_qca_lookup_transmit_channel()
571 static void macsec_qca_register_transmit_channel(struct macsec_qca_data *drv,  in macsec_qca_register_transmit_channel()  argument
575 	macsec_qca_register_channel(drv->transmit_channel_map, &sc->sci,  in macsec_qca_register_transmit_channel()
582 	struct macsec_qca_data *drv = priv;  in macsec_qca_get_receive_lowest_pn()  local
589 	ret = macsec_qca_lookup_receive_channel(priv, sa->sc, &channel);  in macsec_qca_get_receive_lowest_pn()
593 	ret += nss_macsec_secy_rx_sa_next_pn_get(drv->secy_id, channel, sa->an,  in macsec_qca_get_receive_lowest_pn()
595 	ret += nss_macsec_secy_rx_sc_replay_protect_get(drv->secy_id, channel,  in macsec_qca_get_receive_lowest_pn()
597 	ret += nss_macsec_secy_rx_sc_anti_replay_window_get(drv->secy_id,  in macsec_qca_get_receive_lowest_pn()
601 		sa->lowest_pn = (next_pn > win) ? (next_pn - win) : 1;  in macsec_qca_get_receive_lowest_pn()
603 		sa->lowest_pn = next_pn;  in macsec_qca_get_receive_lowest_pn()
605 	wpa_printf(MSG_DEBUG, "%s: lpn=0x%x", __func__, sa->lowest_pn);  in macsec_qca_get_receive_lowest_pn()
613 	struct macsec_qca_data *drv = priv;  in macsec_qca_get_transmit_next_pn()  local
617 	ret = macsec_qca_lookup_transmit_channel(priv, sa->sc, &channel);  in macsec_qca_get_transmit_next_pn()
621 	ret += nss_macsec_secy_tx_sa_next_pn_get(drv->secy_id, channel, sa->an,  in macsec_qca_get_transmit_next_pn()
622 						 &sa->next_pn);  in macsec_qca_get_transmit_next_pn()
624 	wpa_printf(MSG_DEBUG, "%s: npn=0x%x", __func__, sa->next_pn);  in macsec_qca_get_transmit_next_pn()
632 	struct macsec_qca_data *drv = priv;  in macsec_qca_set_transmit_next_pn()  local
636 	ret = macsec_qca_lookup_transmit_channel(priv, sa->sc, &channel);  in macsec_qca_set_transmit_next_pn()
640 	ret += nss_macsec_secy_tx_sa_next_pn_set(drv->secy_id, channel, sa->an,  in macsec_qca_set_transmit_next_pn()
641 						 sa->next_pn);  in macsec_qca_set_transmit_next_pn()
643 	wpa_printf(MSG_INFO, "%s: npn=0x%x", __func__, sa->next_pn);  in macsec_qca_set_transmit_next_pn()
651 	struct macsec_qca_data *drv = priv;  in macsec_qca_get_available_receive_sc()  local
657 		ret = nss_macsec_secy_rx_sc_in_used_get(drv->secy_id, sc_ch,  in macsec_qca_get_available_receive_sc()
672 	return -1;  in macsec_qca_get_available_receive_sc()
680 	struct macsec_qca_data *drv = priv;  in macsec_qca_create_receive_sc()  local
686 	const u8 *sci_addr = sc->sci.addr;  in macsec_qca_create_receive_sc()
687 	u16 sci_port = be_to_host16(sc->sci.port);  in macsec_qca_create_receive_sc()
703 	entry.valid = 1;  in macsec_qca_create_receive_sc()
716 	ret += nss_macsec_secy_rx_prc_lut_set(drv->secy_id, channel, &entry);  in macsec_qca_create_receive_sc()
717 	ret += nss_macsec_secy_rx_sc_create(drv->secy_id, channel);  in macsec_qca_create_receive_sc()
718 	ret += nss_macsec_secy_rx_sc_validate_frame_set(drv->secy_id, channel,  in macsec_qca_create_receive_sc()
720 	ret += nss_macsec_secy_rx_sc_replay_protect_set(drv->secy_id, channel,  in macsec_qca_create_receive_sc()
721 							drv->replay_protect);  in macsec_qca_create_receive_sc()
722 	ret += nss_macsec_secy_rx_sc_anti_replay_window_set(drv->secy_id,  in macsec_qca_create_receive_sc()
724 							    drv->replay_window);  in macsec_qca_create_receive_sc()
726 	macsec_qca_register_receive_channel(drv, sc, channel);  in macsec_qca_create_receive_sc()
734 	struct macsec_qca_data *drv = priv;  in macsec_qca_delete_receive_sc()  local
748 	ret += nss_macsec_secy_rx_sc_del(drv->secy_id, channel);  in macsec_qca_delete_receive_sc()
749 	ret += nss_macsec_secy_rx_prc_lut_set(drv->secy_id, channel, &entry);  in macsec_qca_delete_receive_sc()
757 	struct macsec_qca_data *drv = priv;  in macsec_qca_create_receive_sa()  local
765 	ret = macsec_qca_lookup_receive_channel(priv, sa->sc, &channel);  in macsec_qca_create_receive_sa()
770 		   __func__, channel, sa->an, sa->lowest_pn);  in macsec_qca_create_receive_sa()
773 	rx_sak.sak_len = sa->pkey->key_len;  in macsec_qca_create_receive_sa()
774 	if (sa->pkey->key_len == SAK_128_LEN) {  in macsec_qca_create_receive_sa()
776 			rx_sak.sak[i] = sa->pkey->key[15 - i];  in macsec_qca_create_receive_sa()
777 	} else if (sa->pkey->key_len == SAK_256_LEN) {  in macsec_qca_create_receive_sa()
779 			rx_sak.sak1[i] = sa->pkey->key[15 - i];  in macsec_qca_create_receive_sa()
780 			rx_sak.sak[i] = sa->pkey->key[31 - i];  in macsec_qca_create_receive_sa()
783 		return -1;  in macsec_qca_create_receive_sa()
786 	if (sa->pkey->confidentiality_offset == CONFIDENTIALITY_OFFSET_0)  in macsec_qca_create_receive_sa()
788 	else if (sa->pkey->confidentiality_offset == CONFIDENTIALITY_OFFSET_30)  in macsec_qca_create_receive_sa()
790 	else if (sa->pkey->confidentiality_offset == CONFIDENTIALITY_OFFSET_50)  in macsec_qca_create_receive_sa()
793 		return -1;  in macsec_qca_create_receive_sa()
794 	ret += nss_macsec_secy_rx_prc_lut_get(drv->secy_id, channel, &entry);  in macsec_qca_create_receive_sa()
796 	ret += nss_macsec_secy_rx_prc_lut_set(drv->secy_id, channel, &entry);  in macsec_qca_create_receive_sa()
797 	ret += nss_macsec_secy_rx_sa_create(drv->secy_id, channel, sa->an);  in macsec_qca_create_receive_sa()
798 	ret += nss_macsec_secy_rx_sak_set(drv->secy_id, channel, sa->an,  in macsec_qca_create_receive_sa()
807 	struct macsec_qca_data *drv = priv;  in macsec_qca_enable_receive_sa()  local
811 	ret = macsec_qca_lookup_receive_channel(priv, sa->sc, &channel);  in macsec_qca_enable_receive_sa()
816 		   sa->an);  in macsec_qca_enable_receive_sa()
818 	ret += nss_macsec_secy_rx_sa_en_set(drv->secy_id, channel, sa->an,  in macsec_qca_enable_receive_sa()
827 	struct macsec_qca_data *drv = priv;  in macsec_qca_disable_receive_sa()  local
831 	ret = macsec_qca_lookup_receive_channel(priv, sa->sc, &channel);  in macsec_qca_disable_receive_sa()
836 		   sa->an);  in macsec_qca_disable_receive_sa()
838 	ret += nss_macsec_secy_rx_sa_en_set(drv->secy_id, channel, sa->an,  in macsec_qca_disable_receive_sa()
847 	struct macsec_qca_data *drv = priv;  in macsec_qca_get_available_transmit_sc()  local
852 		if (nss_macsec_secy_tx_sc_in_used_get(drv->secy_id, sc_ch,  in macsec_qca_get_available_transmit_sc()
866 	return -1;  in macsec_qca_get_available_transmit_sc()
873 	struct macsec_qca_data *drv = priv;  in macsec_qca_create_transmit_sc()  local
878 	u16 sci_port = be_to_host16(sc->sci.port);  in macsec_qca_create_transmit_sc()
889 	entry.valid = 1;  in macsec_qca_create_transmit_sc()
893 	os_memcpy(psci, sc->sci.addr, ETH_ALEN);  in macsec_qca_create_transmit_sc()
897 	ret += nss_macsec_secy_tx_class_lut_set(drv->secy_id, channel, &entry);  in macsec_qca_create_transmit_sc()
898 	ret += nss_macsec_secy_tx_sc_create(drv->secy_id, channel, psci, 8);  in macsec_qca_create_transmit_sc()
899 	ret += nss_macsec_secy_tx_sc_protect_set(drv->secy_id, channel,  in macsec_qca_create_transmit_sc()
900 						 drv->protect_frames);  in macsec_qca_create_transmit_sc()
901 	ret += nss_macsec_secy_tx_sc_confidentiality_offset_set(drv->secy_id,  in macsec_qca_create_transmit_sc()
905 	macsec_qca_register_transmit_channel(drv, sc, channel);  in macsec_qca_create_transmit_sc()
913 	struct macsec_qca_data *drv = priv;  in macsec_qca_delete_transmit_sc()  local
927 	ret += nss_macsec_secy_tx_class_lut_set(drv->secy_id, channel, &entry);  in macsec_qca_delete_transmit_sc()
928 	ret += nss_macsec_secy_tx_sc_del(drv->secy_id, channel);  in macsec_qca_delete_transmit_sc()
936 	struct macsec_qca_data *drv = priv;  in macsec_qca_create_transmit_sa()  local
944 	ret = macsec_qca_lookup_transmit_channel(priv, sa->sc, &channel);  in macsec_qca_create_transmit_sa()
950 		   __func__, channel, sa->an, sa->next_pn, sa->confidentiality);  in macsec_qca_create_transmit_sa()
952 	if (drv->always_include_sci)  in macsec_qca_create_transmit_sa()
954 	else if (drv->use_es)  in macsec_qca_create_transmit_sa()
956 	else if (drv->use_scb)  in macsec_qca_create_transmit_sa()
959 	if (sa->confidentiality)  in macsec_qca_create_transmit_sa()
963 	tx_sak.sak_len = sa->pkey->key_len;  in macsec_qca_create_transmit_sa()
964 	if (sa->pkey->key_len == SAK_128_LEN) {  in macsec_qca_create_transmit_sa()
966 			tx_sak.sak[i] = sa->pkey->key[15 - i];  in macsec_qca_create_transmit_sa()
967 	} else if (sa->pkey->key_len == SAK_256_LEN) {  in macsec_qca_create_transmit_sa()
969 			tx_sak.sak1[i] = sa->pkey->key[15 - i];  in macsec_qca_create_transmit_sa()
970 			tx_sak.sak[i] = sa->pkey->key[31 - i];  in macsec_qca_create_transmit_sa()
973 		return -1;  in macsec_qca_create_transmit_sa()
976 	if (sa->pkey->confidentiality_offset == CONFIDENTIALITY_OFFSET_0)  in macsec_qca_create_transmit_sa()
978 	else if (sa->pkey->confidentiality_offset == CONFIDENTIALITY_OFFSET_30)  in macsec_qca_create_transmit_sa()
980 	else if (sa->pkey->confidentiality_offset == CONFIDENTIALITY_OFFSET_50)  in macsec_qca_create_transmit_sa()
983 		return -1;  in macsec_qca_create_transmit_sa()
984 	ret += nss_macsec_secy_tx_sc_confidentiality_offset_set(drv->secy_id,  in macsec_qca_create_transmit_sa()
987 	ret += nss_macsec_secy_tx_sa_next_pn_set(drv->secy_id, channel, sa->an,  in macsec_qca_create_transmit_sa()
988 						 sa->next_pn);  in macsec_qca_create_transmit_sa()
989 	ret += nss_macsec_secy_tx_sak_set(drv->secy_id, channel, sa->an,  in macsec_qca_create_transmit_sa()
991 	ret += nss_macsec_secy_tx_sc_tci_7_2_set(drv->secy_id, channel,  in macsec_qca_create_transmit_sa()
993 	ret += nss_macsec_secy_tx_sc_an_set(drv->secy_id, channel, sa->an);  in macsec_qca_create_transmit_sa()
1001 	struct macsec_qca_data *drv = priv;  in macsec_qca_enable_transmit_sa()  local
1005 	ret = macsec_qca_lookup_transmit_channel(priv, sa->sc, &channel);  in macsec_qca_enable_transmit_sa()
1010 		   sa->an);  in macsec_qca_enable_transmit_sa()
1012 	ret += nss_macsec_secy_tx_sa_en_set(drv->secy_id, channel, sa->an,  in macsec_qca_enable_transmit_sa()
1021 	struct macsec_qca_data *drv = priv;  in macsec_qca_disable_transmit_sa()  local
1025 	ret = macsec_qca_lookup_transmit_channel(priv, sa->sc, &channel);  in macsec_qca_disable_transmit_sa()
1030 		   sa->an);  in macsec_qca_disable_transmit_sa()
1032 	ret += nss_macsec_secy_tx_sa_en_set(drv->secy_id, channel, sa->an,  in macsec_qca_disable_transmit_sa()