On Friday 02 May 2008, Johannes Berg wrote: > > > Now there you mention something. Looking at the Legacy driver, they only mention > > ICV during the TX, but never during RX. I did find that the MMIC is appended at the > > end of the frame, which is good, but they never do anything that looks like the > > stripping of the ICV data... > > So I assume it is stripped in the hardware, but no descriptor definition indicates > > a ICV field like there is for IV and EIV. Unless.... they do have a 32bits "reserved" field > > located directly after the IV/EIV fields.. makes one curious if that accidently contains ICV data. ;) > > Heh. Maybe the hardware actually does replay protection so it doesn't > matter? The comments in the legacy driver indicates the IV/EIV data was provided for replay attack checking, and I do see a lot of ReplayCounters being memcpy'ed and memcmp() in the driver. What is missing is the intialization of those counters to anything other then 0, and the actual usage of the IV/EIV data in the Rx descriptor. ;) Ivo -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
