xref: /linux/drivers/net/wireless/realtek/rtw89/cam.c (revision 14ea4cd1b19162888f629c4ce1ba268c683b0f12)
1 // SPDX-License-Identifier: GPL-2.0 OR BSD-3-Clause
2 /* Copyright(c) 2019-2020  Realtek Corporation
3  */
4 
5 #include "cam.h"
6 #include "debug.h"
7 #include "fw.h"
8 #include "mac.h"
9 
10 static struct sk_buff *
11 rtw89_cam_get_sec_key_cmd(struct rtw89_dev *rtwdev,
12 			  struct rtw89_sec_cam_entry *sec_cam,
13 			  bool ext_key)
14 {
15 	struct sk_buff *skb;
16 	u32 cmd_len = H2C_SEC_CAM_LEN;
17 	u32 key32[4];
18 	u8 *cmd;
19 	int i, j;
20 
21 	skb = rtw89_fw_h2c_alloc_skb_with_hdr(rtwdev, cmd_len);
22 	if (!skb)
23 		return NULL;
24 
25 	skb_put_zero(skb, cmd_len);
26 
27 	for (i = 0; i < 4; i++) {
28 		j = i * 4;
29 		j += ext_key ? 16 : 0;
30 		key32[i] = FIELD_PREP(GENMASK(7, 0), sec_cam->key[j + 0]) |
31 			   FIELD_PREP(GENMASK(15, 8), sec_cam->key[j + 1]) |
32 			   FIELD_PREP(GENMASK(23, 16), sec_cam->key[j + 2]) |
33 			   FIELD_PREP(GENMASK(31, 24), sec_cam->key[j + 3]);
34 	}
35 
36 	cmd = skb->data;
37 	RTW89_SET_FWCMD_SEC_IDX(cmd, sec_cam->sec_cam_idx + (ext_key ? 1 : 0));
38 	RTW89_SET_FWCMD_SEC_OFFSET(cmd, sec_cam->offset);
39 	RTW89_SET_FWCMD_SEC_LEN(cmd, sec_cam->len);
40 	RTW89_SET_FWCMD_SEC_TYPE(cmd, sec_cam->type);
41 	RTW89_SET_FWCMD_SEC_EXT_KEY(cmd, ext_key);
42 	RTW89_SET_FWCMD_SEC_SPP_MODE(cmd, sec_cam->spp_mode);
43 	RTW89_SET_FWCMD_SEC_KEY0(cmd, key32[0]);
44 	RTW89_SET_FWCMD_SEC_KEY1(cmd, key32[1]);
45 	RTW89_SET_FWCMD_SEC_KEY2(cmd, key32[2]);
46 	RTW89_SET_FWCMD_SEC_KEY3(cmd, key32[3]);
47 
48 	return skb;
49 }
50 
51 static int rtw89_cam_send_sec_key_cmd(struct rtw89_dev *rtwdev,
52 				      struct rtw89_sec_cam_entry *sec_cam)
53 {
54 	struct sk_buff *skb, *ext_skb;
55 	int ret;
56 
57 	skb = rtw89_cam_get_sec_key_cmd(rtwdev, sec_cam, false);
58 	if (!skb) {
59 		rtw89_err(rtwdev, "failed to get sec key command\n");
60 		return -ENOMEM;
61 	}
62 
63 	rtw89_h2c_pkt_set_hdr(rtwdev, skb,
64 			      FWCMD_TYPE_H2C,
65 			      H2C_CAT_MAC,
66 			      H2C_CL_MAC_SEC_CAM,
67 			      H2C_FUNC_MAC_SEC_UPD, 1, 0,
68 			      H2C_SEC_CAM_LEN);
69 	ret = rtw89_h2c_tx(rtwdev, skb, false);
70 	if (ret) {
71 		rtw89_err(rtwdev, "failed to send sec key h2c: %d\n", ret);
72 		dev_kfree_skb(skb);
73 		return ret;
74 	}
75 
76 	if (!sec_cam->ext_key)
77 		return 0;
78 
79 	ext_skb = rtw89_cam_get_sec_key_cmd(rtwdev, sec_cam, true);
80 	if (!ext_skb) {
81 		rtw89_err(rtwdev, "failed to get ext sec key command\n");
82 		return -ENOMEM;
83 	}
84 
85 	rtw89_h2c_pkt_set_hdr(rtwdev, ext_skb,
86 			      FWCMD_TYPE_H2C,
87 			      H2C_CAT_MAC,
88 			      H2C_CL_MAC_SEC_CAM,
89 			      H2C_FUNC_MAC_SEC_UPD,
90 			      1, 0, H2C_SEC_CAM_LEN);
91 	ret = rtw89_h2c_tx(rtwdev, ext_skb, false);
92 	if (ret) {
93 		rtw89_err(rtwdev, "failed to send ext sec key h2c: %d\n", ret);
94 		dev_kfree_skb(ext_skb);
95 		return ret;
96 	}
97 
98 	return 0;
99 }
100 
101 static int rtw89_cam_get_avail_sec_cam(struct rtw89_dev *rtwdev,
102 				       u8 *sec_cam_idx, bool ext_key)
103 {
104 	const struct rtw89_chip_info *chip = rtwdev->chip;
105 	struct rtw89_cam_info *cam_info = &rtwdev->cam_info;
106 	u8 sec_cam_num = chip->scam_num;
107 	u8 idx = 0;
108 
109 	if (!ext_key) {
110 		idx = find_first_zero_bit(cam_info->sec_cam_map, sec_cam_num);
111 		if (idx >= sec_cam_num)
112 			return -EBUSY;
113 
114 		set_bit(idx, cam_info->sec_cam_map);
115 		*sec_cam_idx = idx;
116 
117 		return 0;
118 	}
119 
120 again:
121 	idx = find_next_zero_bit(cam_info->sec_cam_map, sec_cam_num, idx);
122 	if (idx >= sec_cam_num - 1)
123 		return -EBUSY;
124 	/* ext keys need two cam entries for 256-bit key */
125 	if (test_bit(idx + 1, cam_info->sec_cam_map)) {
126 		idx++;
127 		goto again;
128 	}
129 
130 	set_bit(idx, cam_info->sec_cam_map);
131 	set_bit(idx + 1, cam_info->sec_cam_map);
132 	*sec_cam_idx = idx;
133 
134 	return 0;
135 }
136 
137 static int rtw89_cam_get_addr_cam_key_idx(struct rtw89_addr_cam_entry *addr_cam,
138 					  const struct rtw89_sec_cam_entry *sec_cam,
139 					  const struct ieee80211_key_conf *key,
140 					  u8 *key_idx)
141 {
142 	u8 idx;
143 
144 	/* RTW89_ADDR_CAM_SEC_NONE	: not enabled
145 	 * RTW89_ADDR_CAM_SEC_ALL_UNI	: 0 - 6 unicast
146 	 * RTW89_ADDR_CAM_SEC_NORMAL	: 0 - 1 unicast, 2 - 4 group, 5 - 6 BIP
147 	 * RTW89_ADDR_CAM_SEC_4GROUP	: 0 - 1 unicast, 2 - 5 group, 6 BIP
148 	 */
149 	switch (addr_cam->sec_ent_mode) {
150 	case RTW89_ADDR_CAM_SEC_NONE:
151 		return -EINVAL;
152 	case RTW89_ADDR_CAM_SEC_ALL_UNI:
153 		idx = find_first_zero_bit(addr_cam->sec_cam_map,
154 					  RTW89_SEC_CAM_IN_ADDR_CAM);
155 		if (idx >= RTW89_SEC_CAM_IN_ADDR_CAM)
156 			return -EBUSY;
157 		*key_idx = idx;
158 		break;
159 	case RTW89_ADDR_CAM_SEC_NORMAL:
160 		if (sec_cam->type == RTW89_SEC_KEY_TYPE_BIP_CCMP128) {
161 			idx = find_next_zero_bit(addr_cam->sec_cam_map,
162 						 RTW89_SEC_CAM_IN_ADDR_CAM, 5);
163 			if (idx > 6)
164 				return -EBUSY;
165 			*key_idx = idx;
166 			break;
167 		}
168 
169 		if (key->flags & IEEE80211_KEY_FLAG_PAIRWISE) {
170 			idx = find_next_zero_bit(addr_cam->sec_cam_map,
171 						 RTW89_SEC_CAM_IN_ADDR_CAM, 0);
172 			if (idx > 1)
173 				return -EBUSY;
174 			*key_idx = idx;
175 			break;
176 		}
177 
178 		/* Group keys */
179 		idx = find_next_zero_bit(addr_cam->sec_cam_map,
180 					 RTW89_SEC_CAM_IN_ADDR_CAM, 2);
181 		if (idx > 4)
182 			return -EBUSY;
183 		*key_idx = idx;
184 		break;
185 	case RTW89_ADDR_CAM_SEC_4GROUP:
186 		if (sec_cam->type == RTW89_SEC_KEY_TYPE_BIP_CCMP128) {
187 			if (test_bit(6, addr_cam->sec_cam_map))
188 				return -EINVAL;
189 			*key_idx = 6;
190 			break;
191 		}
192 
193 		if (key->flags & IEEE80211_KEY_FLAG_PAIRWISE) {
194 			idx = find_next_zero_bit(addr_cam->sec_cam_map,
195 						 RTW89_SEC_CAM_IN_ADDR_CAM, 0);
196 			if (idx > 1)
197 				return -EBUSY;
198 			*key_idx = idx;
199 			break;
200 		}
201 
202 		/* Group keys */
203 		idx = find_next_zero_bit(addr_cam->sec_cam_map,
204 					 RTW89_SEC_CAM_IN_ADDR_CAM, 2);
205 		if (idx > 5)
206 			return -EBUSY;
207 		*key_idx = idx;
208 		break;
209 	}
210 
211 	return 0;
212 }
213 
214 static int __rtw89_cam_detach_sec_cam(struct rtw89_dev *rtwdev,
215 				      struct rtw89_vif_link *rtwvif_link,
216 				      struct rtw89_sta_link *rtwsta_link,
217 				      const struct rtw89_sec_cam_entry *sec_cam,
218 				      bool inform_fw)
219 {
220 	struct rtw89_addr_cam_entry *addr_cam;
221 	unsigned int i;
222 	int ret = 0;
223 
224 	addr_cam = rtw89_get_addr_cam_of(rtwvif_link, rtwsta_link);
225 
226 	for_each_set_bit(i, addr_cam->sec_cam_map, RTW89_SEC_CAM_IN_ADDR_CAM) {
227 		if (addr_cam->sec_ent[i] != sec_cam->sec_cam_idx)
228 			continue;
229 
230 		clear_bit(i, addr_cam->sec_cam_map);
231 	}
232 
233 	if (inform_fw) {
234 		ret = rtw89_chip_h2c_dctl_sec_cam(rtwdev, rtwvif_link, rtwsta_link);
235 		if (ret)
236 			rtw89_err(rtwdev,
237 				  "failed to update dctl cam del key: %d\n", ret);
238 		ret = rtw89_fw_h2c_cam(rtwdev, rtwvif_link, rtwsta_link, NULL);
239 		if (ret)
240 			rtw89_err(rtwdev, "failed to update cam del key: %d\n", ret);
241 	}
242 
243 	return ret;
244 }
245 
246 static int __rtw89_cam_attach_sec_cam(struct rtw89_dev *rtwdev,
247 				      struct rtw89_vif_link *rtwvif_link,
248 				      struct rtw89_sta_link *rtwsta_link,
249 				      const struct ieee80211_key_conf *key,
250 				      const struct rtw89_sec_cam_entry *sec_cam)
251 {
252 	struct rtw89_addr_cam_entry *addr_cam;
253 	u8 key_idx = 0;
254 	int ret;
255 
256 	addr_cam = rtw89_get_addr_cam_of(rtwvif_link, rtwsta_link);
257 
258 	if (key->cipher == WLAN_CIPHER_SUITE_WEP40 ||
259 	    key->cipher == WLAN_CIPHER_SUITE_WEP104)
260 		addr_cam->sec_ent_mode = RTW89_ADDR_CAM_SEC_ALL_UNI;
261 
262 	ret = rtw89_cam_get_addr_cam_key_idx(addr_cam, sec_cam, key, &key_idx);
263 	if (ret) {
264 		rtw89_err(rtwdev, "failed to get addr cam key idx %d, %d\n",
265 			  addr_cam->sec_ent_mode, sec_cam->type);
266 		return ret;
267 	}
268 
269 	addr_cam->sec_ent_keyid[key_idx] = key->keyidx;
270 	addr_cam->sec_ent[key_idx] = sec_cam->sec_cam_idx;
271 	set_bit(key_idx, addr_cam->sec_cam_map);
272 	ret = rtw89_chip_h2c_dctl_sec_cam(rtwdev, rtwvif_link, rtwsta_link);
273 	if (ret) {
274 		rtw89_err(rtwdev, "failed to update dctl cam sec entry: %d\n",
275 			  ret);
276 		return ret;
277 	}
278 	ret = rtw89_fw_h2c_cam(rtwdev, rtwvif_link, rtwsta_link, NULL);
279 	if (ret) {
280 		rtw89_err(rtwdev, "failed to update addr cam sec entry: %d\n",
281 			  ret);
282 		clear_bit(key_idx, addr_cam->sec_cam_map);
283 		return ret;
284 	}
285 
286 	return 0;
287 }
288 
289 int rtw89_cam_attach_link_sec_cam(struct rtw89_dev *rtwdev,
290 				  struct rtw89_vif_link *rtwvif_link,
291 				  struct rtw89_sta_link *rtwsta_link,
292 				  u8 sec_cam_idx)
293 {
294 	struct rtw89_cam_info *cam_info = &rtwdev->cam_info;
295 	const struct rtw89_sec_cam_entry *sec_cam;
296 
297 	sec_cam = cam_info->sec_entries[sec_cam_idx];
298 	if (!sec_cam)
299 		return -ENOENT;
300 
301 	return __rtw89_cam_attach_sec_cam(rtwdev, rtwvif_link, rtwsta_link,
302 					  sec_cam->key_conf, sec_cam);
303 }
304 
305 static int rtw89_cam_detach_sec_cam(struct rtw89_dev *rtwdev,
306 				    struct ieee80211_vif *vif,
307 				    struct ieee80211_sta *sta,
308 				    const struct rtw89_sec_cam_entry *sec_cam,
309 				    bool inform_fw)
310 {
311 	struct rtw89_sta *rtwsta = sta_to_rtwsta_safe(sta);
312 	struct rtw89_sta_link *rtwsta_link;
313 	struct rtw89_vif_link *rtwvif_link;
314 	struct rtw89_vif *rtwvif;
315 	unsigned int link_id;
316 	int ret;
317 
318 	if (!vif) {
319 		rtw89_err(rtwdev, "No iface for deleting sec cam\n");
320 		return -EINVAL;
321 	}
322 
323 	rtwvif = vif_to_rtwvif(vif);
324 
325 	if (rtwsta)
326 		clear_bit(sec_cam->sec_cam_idx, rtwsta->pairwise_sec_cam_map);
327 
328 	rtw89_vif_for_each_link(rtwvif, rtwvif_link, link_id) {
329 		rtwsta_link = rtwsta ? rtwsta->links[link_id] : NULL;
330 		if (rtwsta && !rtwsta_link)
331 			continue;
332 
333 		ret = __rtw89_cam_detach_sec_cam(rtwdev, rtwvif_link, rtwsta_link,
334 						 sec_cam, inform_fw);
335 		if (ret)
336 			return ret;
337 	}
338 
339 	return 0;
340 }
341 
342 static int rtw89_cam_attach_sec_cam(struct rtw89_dev *rtwdev,
343 				    struct ieee80211_vif *vif,
344 				    struct ieee80211_sta *sta,
345 				    struct ieee80211_key_conf *key,
346 				    struct rtw89_sec_cam_entry *sec_cam)
347 {
348 	struct rtw89_sta *rtwsta = sta_to_rtwsta_safe(sta);
349 	struct rtw89_sta_link *rtwsta_link;
350 	struct rtw89_vif_link *rtwvif_link;
351 	struct rtw89_vif *rtwvif;
352 	unsigned int link_id;
353 	int key_link_id;
354 	int ret;
355 
356 	if (!vif) {
357 		rtw89_err(rtwdev, "No iface for adding sec cam\n");
358 		return -EINVAL;
359 	}
360 
361 	rtwvif = vif_to_rtwvif(vif);
362 
363 	key_link_id = ieee80211_vif_is_mld(vif) ? key->link_id : 0;
364 	if (key_link_id >= 0) {
365 		rtwvif_link = rtwvif->links[key_link_id];
366 		rtwsta_link = rtwsta ? rtwsta->links[key_link_id] : NULL;
367 
368 		if (!rtwvif_link || (rtwsta && !rtwsta_link)) {
369 			rtw89_err(rtwdev, "No drv link for adding sec cam\n");
370 			return -ENOLINK;
371 		}
372 
373 		return __rtw89_cam_attach_sec_cam(rtwdev, rtwvif_link,
374 						  rtwsta_link, key, sec_cam);
375 	}
376 
377 	/* key_link_id < 0: MLD pairwise key */
378 	if (!rtwsta) {
379 		rtw89_err(rtwdev, "No sta for adding MLD pairwise sec cam\n");
380 		return -EINVAL;
381 	}
382 
383 	rtw89_sta_for_each_link(rtwsta, rtwsta_link, link_id) {
384 		rtwvif_link = rtwsta_link->rtwvif_link;
385 		ret = __rtw89_cam_attach_sec_cam(rtwdev, rtwvif_link,
386 						 rtwsta_link, key, sec_cam);
387 		if (ret)
388 			return ret;
389 	}
390 
391 	set_bit(sec_cam->sec_cam_idx, rtwsta->pairwise_sec_cam_map);
392 
393 	return 0;
394 }
395 
396 static int rtw89_cam_sec_key_install(struct rtw89_dev *rtwdev,
397 				     struct ieee80211_vif *vif,
398 				     struct ieee80211_sta *sta,
399 				     struct ieee80211_key_conf *key,
400 				     u8 hw_key_type, bool ext_key)
401 {
402 	struct rtw89_sec_cam_entry *sec_cam = NULL;
403 	struct rtw89_cam_info *cam_info = &rtwdev->cam_info;
404 	u8 sec_cam_idx;
405 	int ret;
406 
407 	/* maximum key length 256-bit */
408 	if (key->keylen > 32) {
409 		rtw89_err(rtwdev, "invalid sec key length %d\n", key->keylen);
410 		return -EINVAL;
411 	}
412 
413 	ret = rtw89_cam_get_avail_sec_cam(rtwdev, &sec_cam_idx, ext_key);
414 	if (ret) {
415 		rtw89_warn(rtwdev, "no available sec cam: %d ext: %d\n",
416 			   ret, ext_key);
417 		return ret;
418 	}
419 
420 	sec_cam = kzalloc(sizeof(*sec_cam), GFP_KERNEL);
421 	if (!sec_cam) {
422 		ret = -ENOMEM;
423 		goto err_release_cam;
424 	}
425 
426 	key->hw_key_idx = sec_cam_idx;
427 	cam_info->sec_entries[sec_cam_idx] = sec_cam;
428 
429 	sec_cam->sec_cam_idx = sec_cam_idx;
430 	sec_cam->type = hw_key_type;
431 	sec_cam->len = RTW89_SEC_CAM_LEN;
432 	sec_cam->ext_key = ext_key;
433 	memcpy(sec_cam->key, key->key, key->keylen);
434 
435 	sec_cam->key_conf = key;
436 
437 	ret = rtw89_cam_send_sec_key_cmd(rtwdev, sec_cam);
438 	if (ret) {
439 		rtw89_err(rtwdev, "failed to send sec key cmd: %d\n", ret);
440 		goto err_release_cam;
441 	}
442 
443 	/* associate with addr cam */
444 	ret = rtw89_cam_attach_sec_cam(rtwdev, vif, sta, key, sec_cam);
445 	if (ret) {
446 		rtw89_err(rtwdev, "failed to attach sec cam: %d\n", ret);
447 		goto err_release_cam;
448 	}
449 
450 	return 0;
451 
452 err_release_cam:
453 	cam_info->sec_entries[sec_cam_idx] = NULL;
454 	kfree(sec_cam);
455 	clear_bit(sec_cam_idx, cam_info->sec_cam_map);
456 	if (ext_key)
457 		clear_bit(sec_cam_idx + 1, cam_info->sec_cam_map);
458 
459 	return ret;
460 }
461 
462 int rtw89_cam_sec_key_add(struct rtw89_dev *rtwdev,
463 			  struct ieee80211_vif *vif,
464 			  struct ieee80211_sta *sta,
465 			  struct ieee80211_key_conf *key)
466 {
467 	const struct rtw89_chip_info *chip = rtwdev->chip;
468 	u8 hw_key_type;
469 	bool ext_key = false;
470 	int ret;
471 
472 	switch (key->cipher) {
473 	case WLAN_CIPHER_SUITE_WEP40:
474 		hw_key_type = RTW89_SEC_KEY_TYPE_WEP40;
475 		break;
476 	case WLAN_CIPHER_SUITE_WEP104:
477 		hw_key_type = RTW89_SEC_KEY_TYPE_WEP104;
478 		break;
479 	case WLAN_CIPHER_SUITE_CCMP:
480 		hw_key_type = RTW89_SEC_KEY_TYPE_CCMP128;
481 		if (!chip->hw_mgmt_tx_encrypt)
482 			key->flags |= IEEE80211_KEY_FLAG_SW_MGMT_TX;
483 		break;
484 	case WLAN_CIPHER_SUITE_CCMP_256:
485 		hw_key_type = RTW89_SEC_KEY_TYPE_CCMP256;
486 		if (!chip->hw_mgmt_tx_encrypt)
487 			key->flags |= IEEE80211_KEY_FLAG_SW_MGMT_TX;
488 		ext_key = true;
489 		break;
490 	case WLAN_CIPHER_SUITE_GCMP:
491 		hw_key_type = RTW89_SEC_KEY_TYPE_GCMP128;
492 		if (!chip->hw_mgmt_tx_encrypt)
493 			key->flags |= IEEE80211_KEY_FLAG_SW_MGMT_TX;
494 		break;
495 	case WLAN_CIPHER_SUITE_GCMP_256:
496 		hw_key_type = RTW89_SEC_KEY_TYPE_GCMP256;
497 		if (!chip->hw_mgmt_tx_encrypt)
498 			key->flags |= IEEE80211_KEY_FLAG_SW_MGMT_TX;
499 		ext_key = true;
500 		break;
501 	case WLAN_CIPHER_SUITE_AES_CMAC:
502 		hw_key_type = RTW89_SEC_KEY_TYPE_BIP_CCMP128;
503 		break;
504 	default:
505 		return -EOPNOTSUPP;
506 	}
507 
508 	if (!chip->hw_sec_hdr)
509 		key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
510 
511 	ret = rtw89_cam_sec_key_install(rtwdev, vif, sta, key, hw_key_type,
512 					ext_key);
513 	if (ret) {
514 		rtw89_err(rtwdev, "failed to install key type %d ext %d: %d\n",
515 			  hw_key_type, ext_key, ret);
516 		return ret;
517 	}
518 
519 	return 0;
520 }
521 
522 int rtw89_cam_sec_key_del(struct rtw89_dev *rtwdev,
523 			  struct ieee80211_vif *vif,
524 			  struct ieee80211_sta *sta,
525 			  struct ieee80211_key_conf *key,
526 			  bool inform_fw)
527 {
528 	struct rtw89_cam_info *cam_info = &rtwdev->cam_info;
529 	const struct rtw89_sec_cam_entry *sec_cam;
530 	u8 sec_cam_idx;
531 	int ret;
532 
533 	sec_cam_idx = key->hw_key_idx;
534 	sec_cam = cam_info->sec_entries[sec_cam_idx];
535 	if (!sec_cam)
536 		return -EINVAL;
537 
538 	ret = rtw89_cam_detach_sec_cam(rtwdev, vif, sta, sec_cam, inform_fw);
539 
540 	/* clear valid bit in addr cam will disable sec cam,
541 	 * so we don't need to send H2C command again
542 	 */
543 	cam_info->sec_entries[sec_cam_idx] = NULL;
544 	clear_bit(sec_cam_idx, cam_info->sec_cam_map);
545 	if (sec_cam->ext_key)
546 		clear_bit(sec_cam_idx + 1, cam_info->sec_cam_map);
547 
548 	kfree(sec_cam);
549 
550 	return ret;
551 }
552 
553 static void rtw89_cam_reset_key_iter(struct ieee80211_hw *hw,
554 				     struct ieee80211_vif *vif,
555 				     struct ieee80211_sta *sta,
556 				     struct ieee80211_key_conf *key,
557 				     void *data)
558 {
559 	struct rtw89_dev *rtwdev = (struct rtw89_dev *)data;
560 
561 	rtw89_cam_sec_key_del(rtwdev, vif, sta, key, false);
562 }
563 
564 void rtw89_cam_deinit_addr_cam(struct rtw89_dev *rtwdev,
565 			       struct rtw89_addr_cam_entry *addr_cam)
566 {
567 	struct rtw89_cam_info *cam_info = &rtwdev->cam_info;
568 
569 	addr_cam->valid = false;
570 	clear_bit(addr_cam->addr_cam_idx, cam_info->addr_cam_map);
571 }
572 
573 void rtw89_cam_deinit_bssid_cam(struct rtw89_dev *rtwdev,
574 				struct rtw89_bssid_cam_entry *bssid_cam)
575 {
576 	struct rtw89_cam_info *cam_info = &rtwdev->cam_info;
577 
578 	bssid_cam->valid = false;
579 	clear_bit(bssid_cam->bssid_cam_idx, cam_info->bssid_cam_map);
580 }
581 
582 void rtw89_cam_deinit(struct rtw89_dev *rtwdev, struct rtw89_vif_link *rtwvif_link)
583 {
584 	struct rtw89_addr_cam_entry *addr_cam = &rtwvif_link->addr_cam;
585 	struct rtw89_bssid_cam_entry *bssid_cam = &rtwvif_link->bssid_cam;
586 
587 	rtw89_cam_deinit_addr_cam(rtwdev, addr_cam);
588 	rtw89_cam_deinit_bssid_cam(rtwdev, bssid_cam);
589 }
590 
591 void rtw89_cam_reset_keys(struct rtw89_dev *rtwdev)
592 {
593 	rcu_read_lock();
594 	ieee80211_iter_keys_rcu(rtwdev->hw, NULL, rtw89_cam_reset_key_iter, rtwdev);
595 	rcu_read_unlock();
596 }
597 
598 static int rtw89_cam_get_avail_addr_cam(struct rtw89_dev *rtwdev,
599 					u8 *addr_cam_idx)
600 {
601 	const struct rtw89_chip_info *chip = rtwdev->chip;
602 	struct rtw89_cam_info *cam_info = &rtwdev->cam_info;
603 	u8 addr_cam_num = chip->acam_num;
604 	u8 idx;
605 
606 	idx = find_first_zero_bit(cam_info->addr_cam_map, addr_cam_num);
607 	if (idx >= addr_cam_num)
608 		return -EBUSY;
609 
610 	set_bit(idx, cam_info->addr_cam_map);
611 	*addr_cam_idx = idx;
612 
613 	return 0;
614 }
615 
616 static u8 rtw89_get_addr_cam_entry_size(struct rtw89_dev *rtwdev)
617 {
618 	const struct rtw89_chip_info *chip = rtwdev->chip;
619 
620 	switch (chip->chip_id) {
621 	case RTL8852A:
622 	case RTL8852B:
623 	case RTL8851B:
624 	case RTL8852BT:
625 		return ADDR_CAM_ENT_SIZE;
626 	default:
627 		return ADDR_CAM_ENT_SHORT_SIZE;
628 	}
629 }
630 
631 int rtw89_cam_init_addr_cam(struct rtw89_dev *rtwdev,
632 			    struct rtw89_addr_cam_entry *addr_cam,
633 			    const struct rtw89_bssid_cam_entry *bssid_cam)
634 {
635 	u8 addr_cam_idx;
636 	int i;
637 	int ret;
638 
639 	if (unlikely(addr_cam->valid)) {
640 		rtw89_debug(rtwdev, RTW89_DBG_FW,
641 			    "addr cam is already valid; skip init\n");
642 		return 0;
643 	}
644 
645 	ret = rtw89_cam_get_avail_addr_cam(rtwdev, &addr_cam_idx);
646 	if (ret) {
647 		rtw89_err(rtwdev, "failed to get available addr cam\n");
648 		return ret;
649 	}
650 
651 	addr_cam->addr_cam_idx = addr_cam_idx;
652 	addr_cam->len = rtw89_get_addr_cam_entry_size(rtwdev);
653 	addr_cam->offset = 0;
654 	addr_cam->valid = true;
655 	addr_cam->addr_mask = 0;
656 	addr_cam->mask_sel = RTW89_NO_MSK;
657 	addr_cam->sec_ent_mode = RTW89_ADDR_CAM_SEC_NORMAL;
658 	bitmap_zero(addr_cam->sec_cam_map, RTW89_SEC_CAM_IN_ADDR_CAM);
659 
660 	for (i = 0; i < RTW89_SEC_CAM_IN_ADDR_CAM; i++) {
661 		addr_cam->sec_ent_keyid[i] = 0;
662 		addr_cam->sec_ent[i] = 0;
663 	}
664 
665 	/* associate addr cam with bssid cam */
666 	addr_cam->bssid_cam_idx = bssid_cam->bssid_cam_idx;
667 
668 	return 0;
669 }
670 
671 static int rtw89_cam_get_avail_bssid_cam(struct rtw89_dev *rtwdev,
672 					 u8 *bssid_cam_idx)
673 {
674 	const struct rtw89_chip_info *chip = rtwdev->chip;
675 	struct rtw89_cam_info *cam_info = &rtwdev->cam_info;
676 	u8 bssid_cam_num = chip->bcam_num;
677 	u8 idx;
678 
679 	idx = find_first_zero_bit(cam_info->bssid_cam_map, bssid_cam_num);
680 	if (idx >= bssid_cam_num)
681 		return -EBUSY;
682 
683 	set_bit(idx, cam_info->bssid_cam_map);
684 	*bssid_cam_idx = idx;
685 
686 	return 0;
687 }
688 
689 int rtw89_cam_init_bssid_cam(struct rtw89_dev *rtwdev,
690 			     struct rtw89_vif_link *rtwvif_link,
691 			     struct rtw89_bssid_cam_entry *bssid_cam,
692 			     const u8 *bssid)
693 {
694 	u8 bssid_cam_idx;
695 	int ret;
696 
697 	if (unlikely(bssid_cam->valid)) {
698 		rtw89_debug(rtwdev, RTW89_DBG_FW,
699 			    "bssid cam is already valid; skip init\n");
700 		return 0;
701 	}
702 
703 	ret = rtw89_cam_get_avail_bssid_cam(rtwdev, &bssid_cam_idx);
704 	if (ret) {
705 		rtw89_err(rtwdev, "failed to get available bssid cam\n");
706 		return ret;
707 	}
708 
709 	bssid_cam->bssid_cam_idx = bssid_cam_idx;
710 	bssid_cam->phy_idx = rtwvif_link->phy_idx;
711 	bssid_cam->len = BSSID_CAM_ENT_SIZE;
712 	bssid_cam->offset = 0;
713 	bssid_cam->valid = true;
714 	ether_addr_copy(bssid_cam->bssid, bssid);
715 
716 	return 0;
717 }
718 
719 void rtw89_cam_bssid_changed(struct rtw89_dev *rtwdev, struct rtw89_vif_link *rtwvif_link)
720 {
721 	struct rtw89_bssid_cam_entry *bssid_cam = &rtwvif_link->bssid_cam;
722 
723 	ether_addr_copy(bssid_cam->bssid, rtwvif_link->bssid);
724 }
725 
726 int rtw89_cam_init(struct rtw89_dev *rtwdev, struct rtw89_vif_link *rtwvif_link)
727 {
728 	struct rtw89_addr_cam_entry *addr_cam = &rtwvif_link->addr_cam;
729 	struct rtw89_bssid_cam_entry *bssid_cam = &rtwvif_link->bssid_cam;
730 	int ret;
731 
732 	ret = rtw89_cam_init_bssid_cam(rtwdev, rtwvif_link, bssid_cam,
733 				       rtwvif_link->bssid);
734 	if (ret) {
735 		rtw89_err(rtwdev, "failed to init bssid cam\n");
736 		return ret;
737 	}
738 
739 	ret = rtw89_cam_init_addr_cam(rtwdev, addr_cam, bssid_cam);
740 	if (ret) {
741 		rtw89_err(rtwdev, "failed to init addr cam\n");
742 		return ret;
743 	}
744 
745 	return 0;
746 }
747 
748 int rtw89_cam_fill_bssid_cam_info(struct rtw89_dev *rtwdev,
749 				  struct rtw89_vif_link *rtwvif_link,
750 				  struct rtw89_sta_link *rtwsta_link, u8 *cmd)
751 {
752 	struct rtw89_bssid_cam_entry *bssid_cam = rtw89_get_bssid_cam_of(rtwvif_link,
753 									 rtwsta_link);
754 	struct ieee80211_bss_conf *bss_conf;
755 	u8 bss_color;
756 	u8 bss_mask;
757 
758 	rcu_read_lock();
759 
760 	bss_conf = rtw89_vif_rcu_dereference_link(rtwvif_link, false);
761 	bss_color = bss_conf->he_bss_color.color;
762 
763 	if (bss_conf->nontransmitted)
764 		bss_mask = RTW89_BSSID_MATCH_5_BYTES;
765 	else
766 		bss_mask = RTW89_BSSID_MATCH_ALL;
767 
768 	rcu_read_unlock();
769 
770 	FWCMD_SET_ADDR_BSSID_IDX(cmd, bssid_cam->bssid_cam_idx);
771 	FWCMD_SET_ADDR_BSSID_OFFSET(cmd, bssid_cam->offset);
772 	FWCMD_SET_ADDR_BSSID_LEN(cmd, bssid_cam->len);
773 	FWCMD_SET_ADDR_BSSID_VALID(cmd, bssid_cam->valid);
774 	FWCMD_SET_ADDR_BSSID_MASK(cmd, bss_mask);
775 	FWCMD_SET_ADDR_BSSID_BB_SEL(cmd, bssid_cam->phy_idx);
776 	FWCMD_SET_ADDR_BSSID_BSS_COLOR(cmd, bss_color);
777 
778 	FWCMD_SET_ADDR_BSSID_BSSID0(cmd, bssid_cam->bssid[0]);
779 	FWCMD_SET_ADDR_BSSID_BSSID1(cmd, bssid_cam->bssid[1]);
780 	FWCMD_SET_ADDR_BSSID_BSSID2(cmd, bssid_cam->bssid[2]);
781 	FWCMD_SET_ADDR_BSSID_BSSID3(cmd, bssid_cam->bssid[3]);
782 	FWCMD_SET_ADDR_BSSID_BSSID4(cmd, bssid_cam->bssid[4]);
783 	FWCMD_SET_ADDR_BSSID_BSSID5(cmd, bssid_cam->bssid[5]);
784 
785 	return 0;
786 }
787 
788 static u8 rtw89_cam_addr_hash(u8 start, const u8 *addr)
789 {
790 	u8 hash = 0;
791 	u8 i;
792 
793 	for (i = start; i < ETH_ALEN; i++)
794 		hash ^= addr[i];
795 
796 	return hash;
797 }
798 
799 void rtw89_cam_fill_addr_cam_info(struct rtw89_dev *rtwdev,
800 				  struct rtw89_vif_link *rtwvif_link,
801 				  struct rtw89_sta_link *rtwsta_link,
802 				  const u8 *scan_mac_addr,
803 				  u8 *cmd)
804 {
805 	struct ieee80211_vif *vif = rtwvif_link_to_vif(rtwvif_link);
806 	struct rtw89_addr_cam_entry *addr_cam =
807 		rtw89_get_addr_cam_of(rtwvif_link, rtwsta_link);
808 	struct ieee80211_sta *sta = rtwsta_link_to_sta_safe(rtwsta_link);
809 	struct ieee80211_link_sta *link_sta;
810 	const u8 *sma = scan_mac_addr ? scan_mac_addr : rtwvif_link->mac_addr;
811 	u8 sma_hash, tma_hash, addr_msk_start;
812 	u8 sma_start = 0;
813 	u8 tma_start = 0;
814 	const u8 *tma;
815 
816 	rcu_read_lock();
817 
818 	if (sta) {
819 		link_sta = rtw89_sta_rcu_dereference_link(rtwsta_link, true);
820 		tma = link_sta->addr;
821 	} else {
822 		tma = rtwvif_link->bssid;
823 	}
824 
825 	if (addr_cam->addr_mask != 0) {
826 		addr_msk_start = __ffs(addr_cam->addr_mask);
827 		if (addr_cam->mask_sel == RTW89_SMA)
828 			sma_start = addr_msk_start;
829 		else if (addr_cam->mask_sel == RTW89_TMA)
830 			tma_start = addr_msk_start;
831 	}
832 	sma_hash = rtw89_cam_addr_hash(sma_start, sma);
833 	tma_hash = rtw89_cam_addr_hash(tma_start, tma);
834 
835 	FWCMD_SET_ADDR_IDX(cmd, addr_cam->addr_cam_idx);
836 	FWCMD_SET_ADDR_OFFSET(cmd, addr_cam->offset);
837 	FWCMD_SET_ADDR_LEN(cmd, addr_cam->len);
838 
839 	FWCMD_SET_ADDR_VALID(cmd, addr_cam->valid);
840 	FWCMD_SET_ADDR_NET_TYPE(cmd, rtwvif_link->net_type);
841 	FWCMD_SET_ADDR_BCN_HIT_COND(cmd, rtwvif_link->bcn_hit_cond);
842 	FWCMD_SET_ADDR_HIT_RULE(cmd, rtwvif_link->hit_rule);
843 	FWCMD_SET_ADDR_BB_SEL(cmd, rtwvif_link->phy_idx);
844 	FWCMD_SET_ADDR_ADDR_MASK(cmd, addr_cam->addr_mask);
845 	FWCMD_SET_ADDR_MASK_SEL(cmd, addr_cam->mask_sel);
846 	FWCMD_SET_ADDR_SMA_HASH(cmd, sma_hash);
847 	FWCMD_SET_ADDR_TMA_HASH(cmd, tma_hash);
848 
849 	FWCMD_SET_ADDR_BSSID_CAM_IDX(cmd, addr_cam->bssid_cam_idx);
850 
851 	FWCMD_SET_ADDR_SMA0(cmd, sma[0]);
852 	FWCMD_SET_ADDR_SMA1(cmd, sma[1]);
853 	FWCMD_SET_ADDR_SMA2(cmd, sma[2]);
854 	FWCMD_SET_ADDR_SMA3(cmd, sma[3]);
855 	FWCMD_SET_ADDR_SMA4(cmd, sma[4]);
856 	FWCMD_SET_ADDR_SMA5(cmd, sma[5]);
857 
858 	FWCMD_SET_ADDR_TMA0(cmd, tma[0]);
859 	FWCMD_SET_ADDR_TMA1(cmd, tma[1]);
860 	FWCMD_SET_ADDR_TMA2(cmd, tma[2]);
861 	FWCMD_SET_ADDR_TMA3(cmd, tma[3]);
862 	FWCMD_SET_ADDR_TMA4(cmd, tma[4]);
863 	FWCMD_SET_ADDR_TMA5(cmd, tma[5]);
864 
865 	FWCMD_SET_ADDR_PORT_INT(cmd, rtwvif_link->port);
866 	FWCMD_SET_ADDR_TSF_SYNC(cmd, rtwvif_link->port);
867 	FWCMD_SET_ADDR_TF_TRS(cmd, rtwvif_link->trigger);
868 	FWCMD_SET_ADDR_LSIG_TXOP(cmd, rtwvif_link->lsig_txop);
869 	FWCMD_SET_ADDR_TGT_IND(cmd, rtwvif_link->tgt_ind);
870 	FWCMD_SET_ADDR_FRM_TGT_IND(cmd, rtwvif_link->frm_tgt_ind);
871 	FWCMD_SET_ADDR_MACID(cmd, rtwsta_link ? rtwsta_link->mac_id :
872 						rtwvif_link->mac_id);
873 	if (rtwvif_link->net_type == RTW89_NET_TYPE_INFRA)
874 		FWCMD_SET_ADDR_AID12(cmd, vif->cfg.aid & 0xfff);
875 	else if (rtwvif_link->net_type == RTW89_NET_TYPE_AP_MODE)
876 		FWCMD_SET_ADDR_AID12(cmd, sta ? sta->aid & 0xfff : 0);
877 	FWCMD_SET_ADDR_WOL_PATTERN(cmd, rtwvif_link->wowlan_pattern);
878 	FWCMD_SET_ADDR_WOL_UC(cmd, rtwvif_link->wowlan_uc);
879 	FWCMD_SET_ADDR_WOL_MAGIC(cmd, rtwvif_link->wowlan_magic);
880 	FWCMD_SET_ADDR_WAPI(cmd, addr_cam->wapi);
881 	FWCMD_SET_ADDR_SEC_ENT_MODE(cmd, addr_cam->sec_ent_mode);
882 	FWCMD_SET_ADDR_SEC_ENT0_KEYID(cmd, addr_cam->sec_ent_keyid[0]);
883 	FWCMD_SET_ADDR_SEC_ENT1_KEYID(cmd, addr_cam->sec_ent_keyid[1]);
884 	FWCMD_SET_ADDR_SEC_ENT2_KEYID(cmd, addr_cam->sec_ent_keyid[2]);
885 	FWCMD_SET_ADDR_SEC_ENT3_KEYID(cmd, addr_cam->sec_ent_keyid[3]);
886 	FWCMD_SET_ADDR_SEC_ENT4_KEYID(cmd, addr_cam->sec_ent_keyid[4]);
887 	FWCMD_SET_ADDR_SEC_ENT5_KEYID(cmd, addr_cam->sec_ent_keyid[5]);
888 	FWCMD_SET_ADDR_SEC_ENT6_KEYID(cmd, addr_cam->sec_ent_keyid[6]);
889 
890 	FWCMD_SET_ADDR_SEC_ENT_VALID(cmd, addr_cam->sec_cam_map[0] & 0xff);
891 	FWCMD_SET_ADDR_SEC_ENT0(cmd, addr_cam->sec_ent[0]);
892 	FWCMD_SET_ADDR_SEC_ENT1(cmd, addr_cam->sec_ent[1]);
893 	FWCMD_SET_ADDR_SEC_ENT2(cmd, addr_cam->sec_ent[2]);
894 	FWCMD_SET_ADDR_SEC_ENT3(cmd, addr_cam->sec_ent[3]);
895 	FWCMD_SET_ADDR_SEC_ENT4(cmd, addr_cam->sec_ent[4]);
896 	FWCMD_SET_ADDR_SEC_ENT5(cmd, addr_cam->sec_ent[5]);
897 	FWCMD_SET_ADDR_SEC_ENT6(cmd, addr_cam->sec_ent[6]);
898 
899 	rcu_read_unlock();
900 }
901 
902 void rtw89_cam_fill_dctl_sec_cam_info_v1(struct rtw89_dev *rtwdev,
903 					 struct rtw89_vif_link *rtwvif_link,
904 					 struct rtw89_sta_link *rtwsta_link,
905 					 struct rtw89_h2c_dctlinfo_ud_v1 *h2c)
906 {
907 	struct rtw89_addr_cam_entry *addr_cam =
908 		rtw89_get_addr_cam_of(rtwvif_link, rtwsta_link);
909 	struct rtw89_wow_param *rtw_wow = &rtwdev->wow;
910 	u8 *ptk_tx_iv = rtw_wow->key_info.ptk_tx_iv;
911 
912 	h2c->c0 = le32_encode_bits(rtwsta_link ? rtwsta_link->mac_id :
913 						 rtwvif_link->mac_id,
914 				   DCTLINFO_V1_C0_MACID) |
915 		  le32_encode_bits(1, DCTLINFO_V1_C0_OP);
916 
917 	h2c->w4 = le32_encode_bits(addr_cam->sec_ent_keyid[0],
918 				   DCTLINFO_V1_W4_SEC_ENT0_KEYID) |
919 		  le32_encode_bits(addr_cam->sec_ent_keyid[1],
920 				   DCTLINFO_V1_W4_SEC_ENT1_KEYID) |
921 		  le32_encode_bits(addr_cam->sec_ent_keyid[2],
922 				   DCTLINFO_V1_W4_SEC_ENT2_KEYID) |
923 		  le32_encode_bits(addr_cam->sec_ent_keyid[3],
924 				   DCTLINFO_V1_W4_SEC_ENT3_KEYID) |
925 		  le32_encode_bits(addr_cam->sec_ent_keyid[4],
926 				   DCTLINFO_V1_W4_SEC_ENT4_KEYID) |
927 		  le32_encode_bits(addr_cam->sec_ent_keyid[5],
928 				   DCTLINFO_V1_W4_SEC_ENT5_KEYID) |
929 		  le32_encode_bits(addr_cam->sec_ent_keyid[6],
930 				   DCTLINFO_V1_W4_SEC_ENT6_KEYID);
931 	h2c->m4 = cpu_to_le32(DCTLINFO_V1_W4_SEC_ENT0_KEYID |
932 			      DCTLINFO_V1_W4_SEC_ENT1_KEYID |
933 			      DCTLINFO_V1_W4_SEC_ENT2_KEYID |
934 			      DCTLINFO_V1_W4_SEC_ENT3_KEYID |
935 			      DCTLINFO_V1_W4_SEC_ENT4_KEYID |
936 			      DCTLINFO_V1_W4_SEC_ENT5_KEYID |
937 			      DCTLINFO_V1_W4_SEC_ENT6_KEYID);
938 
939 	h2c->w5 = le32_encode_bits(addr_cam->sec_cam_map[0] & 0xff,
940 				   DCTLINFO_V1_W5_SEC_ENT_VALID) |
941 		  le32_encode_bits(addr_cam->sec_ent[0],
942 				   DCTLINFO_V1_W5_SEC_ENT0) |
943 		  le32_encode_bits(addr_cam->sec_ent[1],
944 				   DCTLINFO_V1_W5_SEC_ENT1) |
945 		  le32_encode_bits(addr_cam->sec_ent[2],
946 				   DCTLINFO_V1_W5_SEC_ENT2);
947 	h2c->m5 = cpu_to_le32(DCTLINFO_V1_W5_SEC_ENT_VALID |
948 			      DCTLINFO_V1_W5_SEC_ENT0      |
949 			      DCTLINFO_V1_W5_SEC_ENT1      |
950 			      DCTLINFO_V1_W5_SEC_ENT2);
951 
952 	h2c->w6 = le32_encode_bits(addr_cam->sec_ent[3],
953 				   DCTLINFO_V1_W6_SEC_ENT3) |
954 		  le32_encode_bits(addr_cam->sec_ent[4],
955 				   DCTLINFO_V1_W6_SEC_ENT4) |
956 		  le32_encode_bits(addr_cam->sec_ent[5],
957 				   DCTLINFO_V1_W6_SEC_ENT5) |
958 		  le32_encode_bits(addr_cam->sec_ent[6],
959 				   DCTLINFO_V1_W6_SEC_ENT6);
960 	h2c->m6 = cpu_to_le32(DCTLINFO_V1_W6_SEC_ENT3 |
961 			      DCTLINFO_V1_W6_SEC_ENT4 |
962 			      DCTLINFO_V1_W6_SEC_ENT5 |
963 			      DCTLINFO_V1_W6_SEC_ENT6);
964 
965 	if (rtw_wow->ptk_alg) {
966 		h2c->w0 = le32_encode_bits(ptk_tx_iv[0] | ptk_tx_iv[1] << 8,
967 					   DCTLINFO_V1_W0_AES_IV_L);
968 		h2c->m0 = cpu_to_le32(DCTLINFO_V1_W0_AES_IV_L);
969 
970 		h2c->w1 = le32_encode_bits(ptk_tx_iv[4]       |
971 					   ptk_tx_iv[5] << 8  |
972 					   ptk_tx_iv[6] << 16 |
973 					   ptk_tx_iv[7] << 24,
974 					   DCTLINFO_V1_W1_AES_IV_H);
975 		h2c->m1 = cpu_to_le32(DCTLINFO_V1_W1_AES_IV_H);
976 
977 		h2c->w4 |= le32_encode_bits(rtw_wow->ptk_keyidx,
978 					    DCTLINFO_V1_W4_SEC_KEY_ID);
979 		h2c->m4 |= cpu_to_le32(DCTLINFO_V1_W4_SEC_KEY_ID);
980 	}
981 }
982 
983 void rtw89_cam_fill_dctl_sec_cam_info_v2(struct rtw89_dev *rtwdev,
984 					 struct rtw89_vif_link *rtwvif_link,
985 					 struct rtw89_sta_link *rtwsta_link,
986 					 struct rtw89_h2c_dctlinfo_ud_v2 *h2c)
987 {
988 	struct ieee80211_sta *sta = rtwsta_link_to_sta_safe(rtwsta_link);
989 	struct ieee80211_vif *vif = rtwvif_to_vif(rtwvif_link->rtwvif);
990 	struct rtw89_vif *rtwvif = rtwvif_link->rtwvif;
991 	struct rtw89_addr_cam_entry *addr_cam =
992 		rtw89_get_addr_cam_of(rtwvif_link, rtwsta_link);
993 	bool is_mld = sta ? sta->mlo : ieee80211_vif_is_mld(vif);
994 	struct rtw89_wow_param *rtw_wow = &rtwdev->wow;
995 	u8 *ptk_tx_iv = rtw_wow->key_info.ptk_tx_iv;
996 	u8 *mld_sma, *mld_tma, *mld_bssid;
997 
998 	h2c->c0 = le32_encode_bits(rtwsta_link ? rtwsta_link->mac_id :
999 						 rtwvif_link->mac_id,
1000 				   DCTLINFO_V2_C0_MACID) |
1001 		  le32_encode_bits(1, DCTLINFO_V2_C0_OP);
1002 
1003 	h2c->w2 = le32_encode_bits(is_mld, DCTLINFO_V2_W2_IS_MLD);
1004 	h2c->m2 = cpu_to_le32(DCTLINFO_V2_W2_IS_MLD);
1005 
1006 	h2c->w4 = le32_encode_bits(addr_cam->sec_ent_keyid[0],
1007 				   DCTLINFO_V2_W4_SEC_ENT0_KEYID) |
1008 		  le32_encode_bits(addr_cam->sec_ent_keyid[1],
1009 				   DCTLINFO_V2_W4_SEC_ENT1_KEYID) |
1010 		  le32_encode_bits(addr_cam->sec_ent_keyid[2],
1011 				   DCTLINFO_V2_W4_SEC_ENT2_KEYID) |
1012 		  le32_encode_bits(addr_cam->sec_ent_keyid[3],
1013 				   DCTLINFO_V2_W4_SEC_ENT3_KEYID) |
1014 		  le32_encode_bits(addr_cam->sec_ent_keyid[4],
1015 				   DCTLINFO_V2_W4_SEC_ENT4_KEYID) |
1016 		  le32_encode_bits(addr_cam->sec_ent_keyid[5],
1017 				   DCTLINFO_V2_W4_SEC_ENT5_KEYID) |
1018 		  le32_encode_bits(addr_cam->sec_ent_keyid[6],
1019 				   DCTLINFO_V2_W4_SEC_ENT6_KEYID);
1020 	h2c->m4 = cpu_to_le32(DCTLINFO_V2_W4_SEC_ENT0_KEYID |
1021 			      DCTLINFO_V2_W4_SEC_ENT1_KEYID |
1022 			      DCTLINFO_V2_W4_SEC_ENT2_KEYID |
1023 			      DCTLINFO_V2_W4_SEC_ENT3_KEYID |
1024 			      DCTLINFO_V2_W4_SEC_ENT4_KEYID |
1025 			      DCTLINFO_V2_W4_SEC_ENT5_KEYID |
1026 			      DCTLINFO_V2_W4_SEC_ENT6_KEYID);
1027 
1028 	h2c->w5 = le32_encode_bits(addr_cam->sec_cam_map[0],
1029 				   DCTLINFO_V2_W5_SEC_ENT_VALID_V1) |
1030 		  le32_encode_bits(addr_cam->sec_ent[0],
1031 				   DCTLINFO_V2_W5_SEC_ENT0_V1);
1032 	h2c->m5 = cpu_to_le32(DCTLINFO_V2_W5_SEC_ENT_VALID_V1 |
1033 			      DCTLINFO_V2_W5_SEC_ENT0_V1);
1034 
1035 	h2c->w6 = le32_encode_bits(addr_cam->sec_ent[1],
1036 				   DCTLINFO_V2_W6_SEC_ENT1_V1) |
1037 		  le32_encode_bits(addr_cam->sec_ent[2],
1038 				   DCTLINFO_V2_W6_SEC_ENT2_V1) |
1039 		  le32_encode_bits(addr_cam->sec_ent[3],
1040 				   DCTLINFO_V2_W6_SEC_ENT3_V1) |
1041 		  le32_encode_bits(addr_cam->sec_ent[4],
1042 				   DCTLINFO_V2_W6_SEC_ENT4_V1);
1043 	h2c->m6 = cpu_to_le32(DCTLINFO_V2_W6_SEC_ENT1_V1 |
1044 			      DCTLINFO_V2_W6_SEC_ENT2_V1 |
1045 			      DCTLINFO_V2_W6_SEC_ENT3_V1 |
1046 			      DCTLINFO_V2_W6_SEC_ENT4_V1);
1047 
1048 	h2c->w7 = le32_encode_bits(addr_cam->sec_ent[5],
1049 				   DCTLINFO_V2_W7_SEC_ENT5_V1) |
1050 		  le32_encode_bits(addr_cam->sec_ent[6],
1051 				   DCTLINFO_V2_W7_SEC_ENT6_V1);
1052 	h2c->m7 = cpu_to_le32(DCTLINFO_V2_W7_SEC_ENT5_V1 |
1053 			      DCTLINFO_V2_W7_SEC_ENT6_V1);
1054 
1055 	if (rtw_wow->ptk_alg) {
1056 		h2c->w0 = le32_encode_bits(ptk_tx_iv[0] | ptk_tx_iv[1] << 8,
1057 					   DCTLINFO_V2_W0_AES_IV_L);
1058 		h2c->m0 = cpu_to_le32(DCTLINFO_V2_W0_AES_IV_L);
1059 
1060 		h2c->w1 = le32_encode_bits(ptk_tx_iv[4] |
1061 					   ptk_tx_iv[5] << 8 |
1062 					   ptk_tx_iv[6] << 16 |
1063 					   ptk_tx_iv[7] << 24,
1064 					   DCTLINFO_V2_W1_AES_IV_H);
1065 		h2c->m1 = cpu_to_le32(DCTLINFO_V2_W1_AES_IV_H);
1066 
1067 		h2c->w4 |= le32_encode_bits(rtw_wow->ptk_keyidx,
1068 					    DCTLINFO_V2_W4_SEC_KEY_ID);
1069 		h2c->m4 |= cpu_to_le32(DCTLINFO_V2_W4_SEC_KEY_ID);
1070 	}
1071 
1072 	if (!is_mld)
1073 		return;
1074 
1075 	if (rtwvif_link->net_type == RTW89_NET_TYPE_INFRA) {
1076 		mld_sma = rtwvif->mac_addr;
1077 		mld_tma = vif->cfg.ap_addr;
1078 		mld_bssid = vif->cfg.ap_addr;
1079 	} else if (rtwvif_link->net_type == RTW89_NET_TYPE_AP_MODE && sta) {
1080 		mld_sma = rtwvif->mac_addr;
1081 		mld_tma = sta->addr;
1082 		mld_bssid = rtwvif->mac_addr;
1083 	} else {
1084 		return;
1085 	}
1086 
1087 	h2c->w8 = le32_encode_bits(mld_sma[0], DCTLINFO_V2_W8_MLD_SMA_0) |
1088 		  le32_encode_bits(mld_sma[1], DCTLINFO_V2_W8_MLD_SMA_1) |
1089 		  le32_encode_bits(mld_sma[2], DCTLINFO_V2_W8_MLD_SMA_2) |
1090 		  le32_encode_bits(mld_sma[3], DCTLINFO_V2_W8_MLD_SMA_3);
1091 	h2c->m8 = cpu_to_le32(DCTLINFO_V2_W8_ALL);
1092 
1093 	h2c->w9 = le32_encode_bits(mld_sma[4], DCTLINFO_V2_W9_MLD_SMA_4) |
1094 		  le32_encode_bits(mld_sma[5], DCTLINFO_V2_W9_MLD_SMA_5) |
1095 		  le32_encode_bits(mld_tma[0], DCTLINFO_V2_W9_MLD_TMA_0) |
1096 		  le32_encode_bits(mld_tma[1], DCTLINFO_V2_W9_MLD_TMA_1);
1097 	h2c->m9 = cpu_to_le32(DCTLINFO_V2_W9_ALL);
1098 
1099 	h2c->w10 = le32_encode_bits(mld_tma[2], DCTLINFO_V2_W10_MLD_TMA_2) |
1100 		   le32_encode_bits(mld_tma[3], DCTLINFO_V2_W10_MLD_TMA_3) |
1101 		   le32_encode_bits(mld_tma[4], DCTLINFO_V2_W10_MLD_TMA_4) |
1102 		   le32_encode_bits(mld_tma[5], DCTLINFO_V2_W10_MLD_TMA_5);
1103 	h2c->m10 = cpu_to_le32(DCTLINFO_V2_W10_ALL);
1104 
1105 	h2c->w11 = le32_encode_bits(mld_bssid[0], DCTLINFO_V2_W11_MLD_BSSID_0) |
1106 		   le32_encode_bits(mld_bssid[1], DCTLINFO_V2_W11_MLD_BSSID_1) |
1107 		   le32_encode_bits(mld_bssid[2], DCTLINFO_V2_W11_MLD_BSSID_2) |
1108 		   le32_encode_bits(mld_bssid[3], DCTLINFO_V2_W11_MLD_BSSID_3);
1109 	h2c->m11 = cpu_to_le32(DCTLINFO_V2_W11_ALL);
1110 
1111 	h2c->w12 = le32_encode_bits(mld_bssid[4], DCTLINFO_V2_W12_MLD_BSSID_4) |
1112 		   le32_encode_bits(mld_bssid[5], DCTLINFO_V2_W12_MLD_BSSID_5);
1113 	h2c->m12 = cpu_to_le32(DCTLINFO_V2_W12_ALL);
1114 }
1115