On Tue, Jun 17, 2008 at 06:44:27PM +0200, Johannes Berg wrote: > > crypto. It is unclear whether this can be used as-is with devices that > > use hwaccel for crypto at least before the low-level drivers and/or > > firmware have been modified to cope with the possibility of CCMP being > > used with management frames. > > b43 will be able to do this for sure, it doesn't care what sort of frame > is encrypted. The question is how drivers can indicate > support/non-support I guess. One of the problems is that CCMP as defined in IEEE 802.11i for data frames is not compatible with CCMP as defined in IEEE 802.11w for management frames (there are small differences in AAD and nonce generation). As such, if the hardware/firmware is trying to decrypt received CCMP protected frames based on the IEEE 802.11i rules even if the frame is a management frame, the end result is not going to be very good.. It would be necessary to either disable hwaccel for CCMP decryption for management frames (if possible) or add software workaround to re-encrypt the management frame incorrectly (to undo hardware/firmware operations) and then decrypt it in software.. -- Jouni Malinen PGP id EFC895FA -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
