From: Juraj Šarinay Date: Tue, 2 Sep 2025 11:36:28 +0000 (+0200) Subject: net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms X-Git-Tag: v6.18-rc1~132^2~263 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=21f82062d0f241e55dd59eb630e8710862cc90b4;p=thirdparty%2Fkernel%2Fstable.git net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms An exchange with a NFC target must complete within NCI_DATA_TIMEOUT. A delay of 700 ms is not sufficient for cryptographic operations on smart cards. CardOS 6.0 may need up to 1.3 seconds to perform 256-bit ECDH or 3072-bit RSA. To prevent brute-force attacks, passports and similar documents introduce even longer delays into access control protocols (BAC/PACE). The timeout should be higher, but not too much. The expiration allows us to detect that a NFC target has disappeared. Signed-off-by: Juraj Šarinay Reviewed-by: Krzysztof Kozlowski Link: https://patch.msgid.link/20250902113630.62393-1-juraj@sarinay.com Signed-off-by: Jakub Kicinski --- diff --git a/include/net/nfc/nci_core.h b/include/net/nfc/nci_core.h index e180bdf2f82b0..664d5058e66e0 100644 --- a/include/net/nfc/nci_core.h +++ b/include/net/nfc/nci_core.h @@ -52,7 +52,7 @@ enum nci_state { #define NCI_RF_DISC_SELECT_TIMEOUT 5000 #define NCI_RF_DEACTIVATE_TIMEOUT 30000 #define NCI_CMD_TIMEOUT 5000 -#define NCI_DATA_TIMEOUT 700 +#define NCI_DATA_TIMEOUT 3000 struct nci_dev;