]> git.ipfire.org Git - thirdparty/linux.git/commit
wifi: mac80211: don't send keys to driver when fips_enabled
authorJohannes Berg <johannes.berg@intel.com>
Wed, 9 Jul 2025 20:37:56 +0000 (23:37 +0300)
committerJohannes Berg <johannes.berg@intel.com>
Tue, 15 Jul 2025 09:00:38 +0000 (11:00 +0200)
commit5241526dede93e6f1011b6b5e905801e24675ece
tree7e0d8a75d55b871d784646d838487ddf0c6fd0f8
parent14450be2332a49445106403492a367412b8c23f4
wifi: mac80211: don't send keys to driver when fips_enabled

When fips_enabled is set, don't send any keys to the driver
(including possibly WoWLAN KEK/KCK material), assuming that
no device exists with the necessary certifications. If this
turns out to be false in the future, we can add a HW flag.

Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Link: https://patch.msgid.link/20250709233537.e5eebc2b19d8.I968ef8c9ffb48d464ada78685bd25d22349fb063@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
net/mac80211/driver-ops.c
net/mac80211/driver-ops.h