Commit 33092aca authored by Alexander Wetzel's avatar Alexander Wetzel Committed by Johannes Berg

mac80211: Fix Ptk0 rekey documentation

@IEEE80211_KEY_FLAG_GENERATE_IV setting is irrelevant for RX.
Move the requirement to the correct section in the PTK0 rekey
documentation.
Signed-off-by: default avatarAlexander Wetzel <alexander@wetzel-home.de>
Link: https://lore.kernel.org/r/20210924200514.7936-1-alexander@wetzel-home.deSigned-off-by: default avatarJohannes Berg <johannes.berg@intel.com>
parent 111461d5
...@@ -2818,13 +2818,13 @@ void ieee80211_free_txskb(struct ieee80211_hw *hw, struct sk_buff *skb); ...@@ -2818,13 +2818,13 @@ void ieee80211_free_txskb(struct ieee80211_hw *hw, struct sk_buff *skb);
* Mac80211 drivers should set the @NL80211_EXT_FEATURE_CAN_REPLACE_PTK0 flag * Mac80211 drivers should set the @NL80211_EXT_FEATURE_CAN_REPLACE_PTK0 flag
* when they are able to replace in-use PTK keys according to the following * when they are able to replace in-use PTK keys according to the following
* requirements: * requirements:
* 1) They do not hand over frames decrypted with the old key to * 1) They do not hand over frames decrypted with the old key to mac80211
mac80211 once the call to set_key() with command %DISABLE_KEY has been once the call to set_key() with command %DISABLE_KEY has been completed,
completed when also setting @IEEE80211_KEY_FLAG_GENERATE_IV for any key,
2) either drop or continue to use the old key for any outgoing frames queued 2) either drop or continue to use the old key for any outgoing frames queued
at the time of the key deletion (including re-transmits), at the time of the key deletion (including re-transmits),
3) never send out a frame queued prior to the set_key() %SET_KEY command 3) never send out a frame queued prior to the set_key() %SET_KEY command
encrypted with the new key and encrypted with the new key when also needing
@IEEE80211_KEY_FLAG_GENERATE_IV and
4) never send out a frame unencrypted when it should be encrypted. 4) never send out a frame unencrypted when it should be encrypted.
Mac80211 will not queue any new frames for a deleted key to the driver. Mac80211 will not queue any new frames for a deleted key to the driver.
*/ */
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment