Release 4.15 net/wireless/lib80211_crypt_wep.c

/*
 * lib80211 crypt: host-based WEP encryption implementation for lib80211
 *
 * Copyright (c) 2002-2004, Jouni Malinen <j@w1.fi>
 * Copyright (c) 2008, John W. Linville <linville@tuxdriver.com>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation. See README and COPYING for
 * more details.
 */

#include <linux/err.h>
#include <linux/module.h>
#include <linux/init.h>
#include <linux/slab.h>
#include <linux/random.h>
#include <linux/scatterlist.h>
#include <linux/skbuff.h>
#include <linux/mm.h>
#include <asm/string.h>

#include <net/lib80211.h>

#include <crypto/skcipher.h>
#include <linux/crc32.h>

MODULE_AUTHOR("Jouni Malinen");
MODULE_DESCRIPTION("lib80211 crypt: WEP");
MODULE_LICENSE("GPL");


struct lib80211_wep_data {
	
u32 iv;

#define WEP_KEY_LEN 13
	
u8 key[WEP_KEY_LEN + 1];
	
u8 key_len;
	
u8 key_idx;
	
struct crypto_skcipher *tx_tfm;
	
struct crypto_skcipher *rx_tfm;
};



static void *lib80211_wep_init(int keyidx)
{
	struct lib80211_wep_data *priv;

	priv = kzalloc(sizeof(*priv), GFP_ATOMIC);
	if (priv == NULL)
		goto fail;
	priv->key_idx = keyidx;

	priv->tx_tfm = crypto_alloc_skcipher("ecb(arc4)", 0, CRYPTO_ALG_ASYNC);
	if (IS_ERR(priv->tx_tfm)) {
		priv->tx_tfm = NULL;
		goto fail;
	}

	priv->rx_tfm = crypto_alloc_skcipher("ecb(arc4)", 0, CRYPTO_ALG_ASYNC);
	if (IS_ERR(priv->rx_tfm)) {
		priv->rx_tfm = NULL;
		goto fail;
	}
	/* start WEP IV from a random value */
	get_random_bytes(&priv->iv, 4);

	return priv;

      fail:
	if (priv) {
		crypto_free_skcipher(priv->tx_tfm);
		crypto_free_skcipher(priv->rx_tfm);
		kfree(priv);
	}
	return NULL;
}

Contributors
Person
Tokens
Prop
Commits
CommitProp
Jeff Garzik
106
69.28%
3
37.50%
Yi Zhu
29
18.95%
1
12.50%
Herbert Xu
15
9.80%
2
25.00%
John W. Linville
2
1.31%
1
12.50%
Panagiotis Issaris
1
0.65%
1
12.50%
Total
153
100.00%
8
100.00%



static void lib80211_wep_deinit(void *priv)
{
	struct lib80211_wep_data *_priv = priv;
	if (_priv) {
		crypto_free_skcipher(_priv->tx_tfm);
		crypto_free_skcipher(_priv->rx_tfm);
	}
	kfree(priv);
}

Contributors
Person
Tokens
Prop
Commits
CommitProp
Jeff Garzik
28
66.67%
1
25.00%
Yi Zhu
10
23.81%
1
25.00%
Herbert Xu
2
4.76%
1
25.00%
John W. Linville
2
4.76%
1
25.00%
Total
42
100.00%
4
100.00%

/* Add WEP IV/key info to a frame that has at least 4 bytes of headroom */


static int lib80211_wep_build_iv(struct sk_buff *skb, int hdr_len,
			       u8 *key, int keylen, void *priv)
{
	struct lib80211_wep_data *wep = priv;
	u32 klen;
	u8 *pos;

	if (skb_headroom(skb) < 4 || skb->len < hdr_len)
		return -1;

	pos = skb_push(skb, 4);
	memmove(pos, pos + 4, hdr_len);
	pos += hdr_len;

	klen = 3 + wep->key_len;

	wep->iv++;

	/* Fluhrer, Mantin, and Shamir have reported weaknesses in the key
         * scheduling algorithm of RC4. At least IVs (KeyByte + 3, 0xff, N)
         * can be used to speedup attacks, so avoid using them. */
	if ((wep->iv & 0xff00) == 0xff00) {
		u8 B = (wep->iv >> 16) & 0xff;
		if (B >= 3 && B < klen)
			wep->iv += 0x0100;
	}

	/* Prepend 24-bit IV to RC4 key and TX frame */
	*pos++ = (wep->iv >> 16) & 0xff;
	*pos++ = (wep->iv >> 8) & 0xff;
	*pos++ = wep->iv & 0xff;
	*pos++ = wep->key_idx << 6;

	return 0;
}

Contributors
Person
Tokens
Prop
Commits
CommitProp
Jeff Garzik
178
93.19%
1
25.00%
Yi Zhu
7
3.66%
1
25.00%
Johannes Berg
4
2.09%
1
25.00%
John W. Linville
2
1.05%
1
25.00%
Total
191
100.00%
4
100.00%

/* Perform WEP encryption on given skb that has at least 4 bytes of headroom
 * for IV and 4 bytes of tailroom for ICV. Both IV and ICV will be transmitted,
 * so the payload length increases with 8 bytes.
 *
 * WEP frame payload: IV + TX key idx, RC4(data), ICV = RC4(CRC32(data))
 */


static int lib80211_wep_encrypt(struct sk_buff *skb, int hdr_len, void *priv)
{
	struct lib80211_wep_data *wep = priv;
	SKCIPHER_REQUEST_ON_STACK(req, wep->tx_tfm);
	u32 crc, klen, len;
	u8 *pos, *icv;
	struct scatterlist sg;
	u8 key[WEP_KEY_LEN + 3];
	int err;

	/* other checks are in lib80211_wep_build_iv */
	if (skb_tailroom(skb) < 4)
		return -1;

	/* add the IV to the frame */
	if (lib80211_wep_build_iv(skb, hdr_len, NULL, 0, priv))
		return -1;

	/* Copy the IV into the first 3 bytes of the key */
	skb_copy_from_linear_data_offset(skb, hdr_len, key, 3);

	/* Copy rest of the WEP key (the secret part) */
	memcpy(key + 3, wep->key, wep->key_len);

	len = skb->len - hdr_len - 4;
	pos = skb->data + hdr_len + 4;
	klen = 3 + wep->key_len;

	/* Append little-endian CRC32 over only the data and encrypt it to produce ICV */
	crc = ~crc32_le(~0, pos, len);
	icv = skb_put(skb, 4);
	icv[0] = crc;
	icv[1] = crc >> 8;
	icv[2] = crc >> 16;
	icv[3] = crc >> 24;

	crypto_skcipher_setkey(wep->tx_tfm, key, klen);
	sg_init_one(&sg, pos, len + 4);
	skcipher_request_set_tfm(req, wep->tx_tfm);
	skcipher_request_set_callback(req, 0, NULL, NULL);
	skcipher_request_set_crypt(req, &sg, &sg, len + 4, NULL);
	err = crypto_skcipher_encrypt(req);
	skcipher_request_zero(req);
	return err;
}

Contributors
Person
Tokens
Prop
Commits
CommitProp
Johannes Berg
113
39.65%
1
10.00%
Jeff Garzik
103
36.14%
2
20.00%
Herbert Xu
51
17.89%
2
20.00%
Jens Axboe
5
1.75%
1
10.00%
Yi Zhu
5
1.75%
2
20.00%
Arnaldo Carvalho de Melo
4
1.40%
1
10.00%
John W. Linville
4
1.40%
1
10.00%
Total
285
100.00%
10
100.00%

/* Perform WEP decryption on given buffer. Buffer includes whole WEP part of
 * the frame: IV (4 bytes), encrypted payload (including SNAP header),
 * ICV (4 bytes). len includes both IV and ICV.
 *
 * Returns 0 if frame was decrypted successfully and ICV was correct and -1 on
 * failure. If frame is OK, IV and ICV will be removed.
 */


static int lib80211_wep_decrypt(struct sk_buff *skb, int hdr_len, void *priv)
{
	struct lib80211_wep_data *wep = priv;
	SKCIPHER_REQUEST_ON_STACK(req, wep->rx_tfm);
	u32 crc, klen, plen;
	u8 key[WEP_KEY_LEN + 3];
	u8 keyidx, *pos, icv[4];
	struct scatterlist sg;
	int err;

	if (skb->len < hdr_len + 8)
		return -1;

	pos = skb->data + hdr_len;
	key[0] = *pos++;
	key[1] = *pos++;
	key[2] = *pos++;
	keyidx = *pos++ >> 6;
	if (keyidx != wep->key_idx)
		return -1;

	klen = 3 + wep->key_len;

	/* Copy rest of the WEP key (the secret part) */
	memcpy(key + 3, wep->key, wep->key_len);

	/* Apply RC4 to data and compute CRC32 over decrypted data */
	plen = skb->len - hdr_len - 8;

	crypto_skcipher_setkey(wep->rx_tfm, key, klen);
	sg_init_one(&sg, pos, plen + 4);
	skcipher_request_set_tfm(req, wep->rx_tfm);
	skcipher_request_set_callback(req, 0, NULL, NULL);
	skcipher_request_set_crypt(req, &sg, &sg, plen + 4, NULL);
	err = crypto_skcipher_decrypt(req);
	skcipher_request_zero(req);
	if (err)
		return -7;

	crc = ~crc32_le(~0, pos, plen);
	icv[0] = crc;
	icv[1] = crc >> 8;
	icv[2] = crc >> 16;
	icv[3] = crc >> 24;
	if (memcmp(icv, pos + plen, 4) != 0) {
		/* ICV mismatch - drop frame */
		return -2;
	}

	/* Remove IV and ICV */
	memmove(skb->data + 4, skb->data, hdr_len);
	skb_pull(skb, 4);
	skb_trim(skb, skb->len - 4);

	return 0;
}

Contributors
Person
Tokens
Prop
Commits
CommitProp
Jeff Garzik
292
81.79%
2
28.57%
Herbert Xu
57
15.97%
2
28.57%
Jens Axboe
5
1.40%
1
14.29%
John W. Linville
2
0.56%
1
14.29%
Yi Zhu
1
0.28%
1
14.29%
Total
357
100.00%
7
100.00%



static int lib80211_wep_set_key(void *key, int len, u8 * seq, void *priv)
{
	struct lib80211_wep_data *wep = priv;

	if (len < 0 || len > WEP_KEY_LEN)
		return -1;

	memcpy(wep->key, key, len);
	wep->key_len = len;

	return 0;
}

Contributors
Person
Tokens
Prop
Commits
CommitProp
Jeff Garzik
60
96.77%
1
50.00%
John W. Linville
2
3.23%
1
50.00%
Total
62
100.00%
2
100.00%



static int lib80211_wep_get_key(void *key, int len, u8 * seq, void *priv)
{
	struct lib80211_wep_data *wep = priv;

	if (len < wep->key_len)
		return -1;

	memcpy(key, wep->key, wep->key_len);

	return wep->key_len;
}

Contributors
Person
Tokens
Prop
Commits
CommitProp
Jeff Garzik
56
96.55%
1
50.00%
John W. Linville
2
3.45%
1
50.00%
Total
58
100.00%
2
100.00%



static void lib80211_wep_print_stats(struct seq_file *m, void *priv)
{
	struct lib80211_wep_data *wep = priv;
	seq_printf(m, "key[%d] alg=WEP len=%d\n", wep->key_idx, wep->key_len);
}

Contributors
Person
Tokens
Prop
Commits
CommitProp
Jeff Garzik
29
78.38%
1
33.33%
David Howells
6
16.22%
1
33.33%
John W. Linville
2
5.41%
1
33.33%
Total
37
100.00%
3
100.00%


static struct lib80211_crypto_ops lib80211_crypt_wep = {
	.name = "WEP",
	.init = lib80211_wep_init,
	.deinit = lib80211_wep_deinit,
	.encrypt_mpdu = lib80211_wep_encrypt,
	.decrypt_mpdu = lib80211_wep_decrypt,
	.encrypt_msdu = NULL,
	.decrypt_msdu = NULL,
	.set_key = lib80211_wep_set_key,
	.get_key = lib80211_wep_get_key,
	.print_stats = lib80211_wep_print_stats,
	.extra_mpdu_prefix_len = 4,	/* IV */
	.extra_mpdu_postfix_len = 4,	/* ICV */
	.owner = THIS_MODULE,
};



static int __init lib80211_crypto_wep_init(void)
{
	return lib80211_register_crypto_ops(&lib80211_crypt_wep);
}

Contributors
Person
Tokens
Prop
Commits
CommitProp
Jeff Garzik
13
81.25%
1
50.00%
John W. Linville
3
18.75%
1
50.00%
Total
16
100.00%
2
100.00%



static void __exit lib80211_crypto_wep_exit(void)
{
	lib80211_unregister_crypto_ops(&lib80211_crypt_wep);
}

Contributors
Person
Tokens
Prop
Commits
CommitProp
Jeff Garzik
12
80.00%
1
50.00%
John W. Linville
3
20.00%
1
50.00%
Total
15
100.00%
2
100.00%


module_init(lib80211_crypto_wep_init);

module_exit(lib80211_crypto_wep_exit);
Overall Contributors
Person
Tokens
Prop
Commits
CommitProp
Jeff Garzik
1016
73.04%
3
18.75%
Herbert Xu
131
9.42%
2
12.50%
Johannes Berg
119
8.55%
1
6.25%
Yi Zhu
57
4.10%
2
12.50%
John W. Linville
39
2.80%
1
6.25%
Jens Axboe
10
0.72%
1
6.25%
David Howells
6
0.43%
1
6.25%
Arnaldo Carvalho de Melo
4
0.29%
1
6.25%
Ralf Bächle
3
0.22%
1
6.25%
Al Viro
3
0.22%
1
6.25%
James Ketrenos
2
0.14%
1
6.25%
Panagiotis Issaris
1
0.07%
1
6.25%
Total
1391
100.00%
16
100.00%
Directory: net/wireless

Information contained on this website is for historical information purposes only and does not indicate or represent copyright ownership.