1  /*
2   * WPA Supplicant - Common definitions
3   * Copyright (c) 2004-2018, Jouni Malinen <j@w1.fi>
4   *
5   * This software may be distributed under the terms of the BSD license.
6   * See README for more details.
7   */
8  
9  #ifndef DEFS_H
10  #define DEFS_H
11  
12  #define WPA_CIPHER_NONE BIT(0)
13  #define WPA_CIPHER_WEP40 BIT(1)
14  #define WPA_CIPHER_WEP104 BIT(2)
15  #define WPA_CIPHER_TKIP BIT(3)
16  #define WPA_CIPHER_CCMP BIT(4)
17  #define WPA_CIPHER_AES_128_CMAC BIT(5)
18  #define WPA_CIPHER_GCMP BIT(6)
19  #define WPA_CIPHER_SMS4 BIT(7)
20  #define WPA_CIPHER_GCMP_256 BIT(8)
21  #define WPA_CIPHER_CCMP_256 BIT(9)
22  #define WPA_CIPHER_BIP_GMAC_128 BIT(11)
23  #define WPA_CIPHER_BIP_GMAC_256 BIT(12)
24  #define WPA_CIPHER_BIP_CMAC_256 BIT(13)
25  #define WPA_CIPHER_GTK_NOT_USED BIT(14)
26  
27  #define WPA_KEY_MGMT_IEEE8021X BIT(0)
28  #define WPA_KEY_MGMT_PSK BIT(1)
29  #define WPA_KEY_MGMT_NONE BIT(2)
30  #define WPA_KEY_MGMT_IEEE8021X_NO_WPA BIT(3)
31  #define WPA_KEY_MGMT_WPA_NONE BIT(4)
32  #define WPA_KEY_MGMT_FT_IEEE8021X BIT(5)
33  #define WPA_KEY_MGMT_FT_PSK BIT(6)
34  #define WPA_KEY_MGMT_IEEE8021X_SHA256 BIT(7)
35  #define WPA_KEY_MGMT_PSK_SHA256 BIT(8)
36  #define WPA_KEY_MGMT_WPS BIT(9)
37  #define WPA_KEY_MGMT_SAE BIT(10)
38  #define WPA_KEY_MGMT_FT_SAE BIT(11)
39  #define WPA_KEY_MGMT_WAPI_PSK BIT(12)
40  #define WPA_KEY_MGMT_WAPI_CERT BIT(13)
41  #define WPA_KEY_MGMT_CCKM BIT(14)
42  #define WPA_KEY_MGMT_IEEE8021X_SUITE_B BIT(16)
43  #define WPA_KEY_MGMT_IEEE8021X_SUITE_B_192 BIT(17)
44  #define WPA_KEY_MGMT_FILS_SHA256 BIT(18)
45  #define WPA_KEY_MGMT_FILS_SHA384 BIT(19)
46  #define WPA_KEY_MGMT_FT_FILS_SHA256 BIT(20)
47  #define WPA_KEY_MGMT_FT_FILS_SHA384 BIT(21)
48  #define WPA_KEY_MGMT_OWE BIT(22)
49  #define WPA_KEY_MGMT_DPP BIT(23)
50  #define WPA_KEY_MGMT_FT_IEEE8021X_SHA384 BIT(24)
51  #define WPA_KEY_MGMT_PASN BIT(25)
52  #define WPA_KEY_MGMT_SAE_EXT_KEY BIT(26)
53  #define WPA_KEY_MGMT_FT_SAE_EXT_KEY BIT(27)
54  #define WPA_KEY_MGMT_IEEE8021X_SHA384 BIT(28)
55  
56  
57  #define WPA_KEY_MGMT_FT (WPA_KEY_MGMT_FT_PSK | \
58  			 WPA_KEY_MGMT_FT_IEEE8021X | \
59  			 WPA_KEY_MGMT_FT_IEEE8021X_SHA384 | \
60  			 WPA_KEY_MGMT_FT_SAE | \
61  			 WPA_KEY_MGMT_FT_SAE_EXT_KEY | \
62  			 WPA_KEY_MGMT_FT_FILS_SHA256 | \
63  			 WPA_KEY_MGMT_FT_FILS_SHA384)
64  
wpa_key_mgmt_wpa_ieee8021x(int akm)65  static inline int wpa_key_mgmt_wpa_ieee8021x(int akm)
66  {
67  	return !!(akm & (WPA_KEY_MGMT_IEEE8021X |
68  			 WPA_KEY_MGMT_FT_IEEE8021X |
69  			 WPA_KEY_MGMT_FT_IEEE8021X_SHA384 |
70  			 WPA_KEY_MGMT_CCKM |
71  			 WPA_KEY_MGMT_IEEE8021X_SHA256 |
72  			 WPA_KEY_MGMT_IEEE8021X_SUITE_B |
73  			 WPA_KEY_MGMT_IEEE8021X_SUITE_B_192 |
74  			 WPA_KEY_MGMT_FILS_SHA256 |
75  			 WPA_KEY_MGMT_FILS_SHA384 |
76  			 WPA_KEY_MGMT_FT_FILS_SHA256 |
77  			 WPA_KEY_MGMT_FT_FILS_SHA384 |
78  			 WPA_KEY_MGMT_IEEE8021X_SHA384));
79  }
80  
wpa_key_mgmt_wpa_psk_no_sae(int akm)81  static inline int wpa_key_mgmt_wpa_psk_no_sae(int akm)
82  {
83  	return !!(akm & (WPA_KEY_MGMT_PSK |
84  			 WPA_KEY_MGMT_FT_PSK |
85  			 WPA_KEY_MGMT_PSK_SHA256));
86  }
87  
wpa_key_mgmt_wpa_psk(int akm)88  static inline int wpa_key_mgmt_wpa_psk(int akm)
89  {
90  	return !!(akm & (WPA_KEY_MGMT_PSK |
91  			 WPA_KEY_MGMT_FT_PSK |
92  			 WPA_KEY_MGMT_PSK_SHA256 |
93  			 WPA_KEY_MGMT_SAE |
94  			 WPA_KEY_MGMT_SAE_EXT_KEY |
95  			 WPA_KEY_MGMT_FT_SAE |
96  			 WPA_KEY_MGMT_FT_SAE_EXT_KEY));
97  }
98  
wpa_key_mgmt_ft(int akm)99  static inline int wpa_key_mgmt_ft(int akm)
100  {
101  	return !!(akm & WPA_KEY_MGMT_FT);
102  }
103  
wpa_key_mgmt_only_ft(int akm)104  static inline int wpa_key_mgmt_only_ft(int akm)
105  {
106  	int ft = wpa_key_mgmt_ft(akm);
107  	akm &= ~WPA_KEY_MGMT_FT;
108  	return ft && !akm;
109  }
110  
wpa_key_mgmt_ft_psk(int akm)111  static inline int wpa_key_mgmt_ft_psk(int akm)
112  {
113  	return !!(akm & WPA_KEY_MGMT_FT_PSK);
114  }
115  
wpa_key_mgmt_sae(int akm)116  static inline int wpa_key_mgmt_sae(int akm)
117  {
118  	return !!(akm & (WPA_KEY_MGMT_SAE |
119  			 WPA_KEY_MGMT_SAE_EXT_KEY |
120  			 WPA_KEY_MGMT_FT_SAE |
121  			 WPA_KEY_MGMT_FT_SAE_EXT_KEY));
122  }
123  
wpa_key_mgmt_sae_ext_key(int akm)124  static inline int wpa_key_mgmt_sae_ext_key(int akm)
125  {
126  	return !!(akm & (WPA_KEY_MGMT_SAE_EXT_KEY |
127  			 WPA_KEY_MGMT_FT_SAE_EXT_KEY));
128  }
129  
wpa_key_mgmt_only_sae(int akm)130  static inline int wpa_key_mgmt_only_sae(int akm)
131  {
132  	return wpa_key_mgmt_sae(akm) &&
133  		!(akm & ~(WPA_KEY_MGMT_SAE |
134  			  WPA_KEY_MGMT_SAE_EXT_KEY |
135  			  WPA_KEY_MGMT_FT_SAE |
136  			  WPA_KEY_MGMT_FT_SAE_EXT_KEY));
137  }
138  
wpa_key_mgmt_fils(int akm)139  static inline int wpa_key_mgmt_fils(int akm)
140  {
141  	return !!(akm & (WPA_KEY_MGMT_FILS_SHA256 |
142  			 WPA_KEY_MGMT_FILS_SHA384 |
143  			 WPA_KEY_MGMT_FT_FILS_SHA256 |
144  			 WPA_KEY_MGMT_FT_FILS_SHA384));
145  }
146  
wpa_key_mgmt_sha256(int akm)147  static inline int wpa_key_mgmt_sha256(int akm)
148  {
149  	return !!(akm & (WPA_KEY_MGMT_FT_IEEE8021X |
150  			 WPA_KEY_MGMT_PSK_SHA256 |
151  			 WPA_KEY_MGMT_IEEE8021X_SHA256 |
152  			 WPA_KEY_MGMT_SAE |
153  			 WPA_KEY_MGMT_FT_SAE |
154  			 WPA_KEY_MGMT_IEEE8021X_SUITE_B |
155  			 WPA_KEY_MGMT_FILS_SHA256 |
156  			 WPA_KEY_MGMT_FT_FILS_SHA256));
157  }
158  
wpa_key_mgmt_sha384(int akm)159  static inline int wpa_key_mgmt_sha384(int akm)
160  {
161  	return !!(akm & (WPA_KEY_MGMT_IEEE8021X_SUITE_B_192 |
162  			 WPA_KEY_MGMT_FT_IEEE8021X_SHA384 |
163  			 WPA_KEY_MGMT_FILS_SHA384 |
164  			 WPA_KEY_MGMT_FT_FILS_SHA384 |
165  			 WPA_KEY_MGMT_IEEE8021X_SHA384));
166  }
167  
wpa_key_mgmt_suite_b(int akm)168  static inline int wpa_key_mgmt_suite_b(int akm)
169  {
170  	return !!(akm & (WPA_KEY_MGMT_IEEE8021X_SUITE_B |
171  			 WPA_KEY_MGMT_IEEE8021X_SUITE_B_192));
172  }
173  
wpa_key_mgmt_wpa(int akm)174  static inline int wpa_key_mgmt_wpa(int akm)
175  {
176  	return wpa_key_mgmt_wpa_ieee8021x(akm) ||
177  		wpa_key_mgmt_wpa_psk(akm) ||
178  		wpa_key_mgmt_fils(akm) ||
179  		wpa_key_mgmt_sae(akm) ||
180  		akm == WPA_KEY_MGMT_OWE ||
181  		akm == WPA_KEY_MGMT_DPP;
182  }
183  
wpa_key_mgmt_wpa_any(int akm)184  static inline int wpa_key_mgmt_wpa_any(int akm)
185  {
186  	return wpa_key_mgmt_wpa(akm) || (akm & WPA_KEY_MGMT_WPA_NONE);
187  }
188  
wpa_key_mgmt_cckm(int akm)189  static inline int wpa_key_mgmt_cckm(int akm)
190  {
191  	return akm == WPA_KEY_MGMT_CCKM;
192  }
193  
wpa_key_mgmt_cross_akm(int akm)194  static inline int wpa_key_mgmt_cross_akm(int akm)
195  {
196  	return !!(akm & (WPA_KEY_MGMT_PSK |
197  			 WPA_KEY_MGMT_PSK_SHA256 |
198  			 WPA_KEY_MGMT_SAE |
199  			 WPA_KEY_MGMT_SAE_EXT_KEY));
200  }
201  
202  #define WPA_PROTO_WPA BIT(0)
203  #define WPA_PROTO_RSN BIT(1)
204  #define WPA_PROTO_WAPI BIT(2)
205  
206  #define WPA_AUTH_ALG_OPEN BIT(0)
207  #define WPA_AUTH_ALG_SHARED BIT(1)
208  #define WPA_AUTH_ALG_LEAP BIT(2)
209  #define WPA_AUTH_ALG_FT BIT(3)
210  #define WPA_AUTH_ALG_SAE BIT(4)
211  #define WPA_AUTH_ALG_FILS BIT(5)
212  #define WPA_AUTH_ALG_FILS_SK_PFS BIT(6)
213  
wpa_auth_alg_fils(int alg)214  static inline int wpa_auth_alg_fils(int alg)
215  {
216  	return !!(alg & (WPA_AUTH_ALG_FILS | WPA_AUTH_ALG_FILS_SK_PFS));
217  }
218  
219  enum wpa_alg {
220  	WPA_ALG_NONE,
221  	WPA_ALG_WEP,
222  	WPA_ALG_TKIP,
223  	WPA_ALG_CCMP,
224  	WPA_ALG_BIP_CMAC_128,
225  	WPA_ALG_GCMP,
226  	WPA_ALG_SMS4,
227  	WPA_ALG_KRK,
228  	WPA_ALG_GCMP_256,
229  	WPA_ALG_CCMP_256,
230  	WPA_ALG_BIP_GMAC_128,
231  	WPA_ALG_BIP_GMAC_256,
232  	WPA_ALG_BIP_CMAC_256
233  };
234  
wpa_alg_bip(enum wpa_alg alg)235  static inline int wpa_alg_bip(enum wpa_alg alg)
236  {
237  	return alg == WPA_ALG_BIP_CMAC_128 ||
238  		alg == WPA_ALG_BIP_GMAC_128 ||
239  		alg == WPA_ALG_BIP_GMAC_256 ||
240  		alg == WPA_ALG_BIP_CMAC_256;
241  }
242  
243  /**
244   * enum wpa_states - wpa_supplicant state
245   *
246   * These enumeration values are used to indicate the current wpa_supplicant
247   * state (wpa_s->wpa_state). The current state can be retrieved with
248   * wpa_supplicant_get_state() function and the state can be changed by calling
249   * wpa_supplicant_set_state(). In WPA state machine (wpa.c and preauth.c), the
250   * wrapper functions wpa_sm_get_state() and wpa_sm_set_state() should be used
251   * to access the state variable.
252   */
253  enum wpa_states {
254  	/**
255  	 * WPA_DISCONNECTED - Disconnected state
256  	 *
257  	 * This state indicates that client is not associated, but is likely to
258  	 * start looking for an access point. This state is entered when a
259  	 * connection is lost.
260  	 */
261  	WPA_DISCONNECTED,
262  
263  	/**
264  	 * WPA_INTERFACE_DISABLED - Interface disabled
265  	 *
266  	 * This state is entered if the network interface is disabled, e.g.,
267  	 * due to rfkill. wpa_supplicant refuses any new operations that would
268  	 * use the radio until the interface has been enabled.
269  	 */
270  	WPA_INTERFACE_DISABLED,
271  
272  	/**
273  	 * WPA_INACTIVE - Inactive state (wpa_supplicant disabled)
274  	 *
275  	 * This state is entered if there are no enabled networks in the
276  	 * configuration. wpa_supplicant is not trying to associate with a new
277  	 * network and external interaction (e.g., ctrl_iface call to add or
278  	 * enable a network) is needed to start association.
279  	 */
280  	WPA_INACTIVE,
281  
282  	/**
283  	 * WPA_SCANNING - Scanning for a network
284  	 *
285  	 * This state is entered when wpa_supplicant starts scanning for a
286  	 * network.
287  	 */
288  	WPA_SCANNING,
289  
290  	/**
291  	 * WPA_AUTHENTICATING - Trying to authenticate with a BSS/SSID
292  	 *
293  	 * This state is entered when wpa_supplicant has found a suitable BSS
294  	 * to authenticate with and the driver is configured to try to
295  	 * authenticate with this BSS. This state is used only with drivers
296  	 * that use wpa_supplicant as the SME.
297  	 */
298  	WPA_AUTHENTICATING,
299  
300  	/**
301  	 * WPA_ASSOCIATING - Trying to associate with a BSS/SSID
302  	 *
303  	 * This state is entered when wpa_supplicant has found a suitable BSS
304  	 * to associate with and the driver is configured to try to associate
305  	 * with this BSS in ap_scan=1 mode. When using ap_scan=2 mode, this
306  	 * state is entered when the driver is configured to try to associate
307  	 * with a network using the configured SSID and security policy.
308  	 */
309  	WPA_ASSOCIATING,
310  
311  	/**
312  	 * WPA_ASSOCIATED - Association completed
313  	 *
314  	 * This state is entered when the driver reports that association has
315  	 * been successfully completed with an AP. If IEEE 802.1X is used
316  	 * (with or without WPA/WPA2), wpa_supplicant remains in this state
317  	 * until the IEEE 802.1X/EAPOL authentication has been completed.
318  	 */
319  	WPA_ASSOCIATED,
320  
321  	/**
322  	 * WPA_4WAY_HANDSHAKE - WPA 4-Way Key Handshake in progress
323  	 *
324  	 * This state is entered when WPA/WPA2 4-Way Handshake is started. In
325  	 * case of WPA-PSK, this happens when receiving the first EAPOL-Key
326  	 * frame after association. In case of WPA-EAP, this state is entered
327  	 * when the IEEE 802.1X/EAPOL authentication has been completed.
328  	 */
329  	WPA_4WAY_HANDSHAKE,
330  
331  	/**
332  	 * WPA_GROUP_HANDSHAKE - WPA Group Key Handshake in progress
333  	 *
334  	 * This state is entered when 4-Way Key Handshake has been completed
335  	 * (i.e., when the supplicant sends out message 4/4) and when Group
336  	 * Key rekeying is started by the AP (i.e., when supplicant receives
337  	 * message 1/2).
338  	 */
339  	WPA_GROUP_HANDSHAKE,
340  
341  	/**
342  	 * WPA_COMPLETED - All authentication completed
343  	 *
344  	 * This state is entered when the full authentication process is
345  	 * completed. In case of WPA2, this happens when the 4-Way Handshake is
346  	 * successfully completed. With WPA, this state is entered after the
347  	 * Group Key Handshake; with IEEE 802.1X (non-WPA) connection is
348  	 * completed after dynamic keys are received (or if not used, after
349  	 * the EAP authentication has been completed). With static WEP keys and
350  	 * plaintext connections, this state is entered when an association
351  	 * has been completed.
352  	 *
353  	 * This state indicates that the supplicant has completed its
354  	 * processing for the association phase and that data connection is
355  	 * fully configured.
356  	 */
357  	WPA_COMPLETED
358  };
359  
360  #define MLME_SETPROTECTION_PROTECT_TYPE_NONE 0
361  #define MLME_SETPROTECTION_PROTECT_TYPE_RX 1
362  #define MLME_SETPROTECTION_PROTECT_TYPE_TX 2
363  #define MLME_SETPROTECTION_PROTECT_TYPE_RX_TX 3
364  
365  #define MLME_SETPROTECTION_KEY_TYPE_GROUP 0
366  #define MLME_SETPROTECTION_KEY_TYPE_PAIRWISE 1
367  
368  
369  /**
370   * enum mfp_options - Management frame protection (IEEE 802.11w) options
371   */
372  enum mfp_options {
373  	NO_MGMT_FRAME_PROTECTION = 0,
374  	MGMT_FRAME_PROTECTION_OPTIONAL = 1,
375  	MGMT_FRAME_PROTECTION_REQUIRED = 2,
376  };
377  #define MGMT_FRAME_PROTECTION_DEFAULT 3
378  
379  /**
380   * enum hostapd_hw_mode - Hardware mode
381   */
382  enum hostapd_hw_mode {
383  	HOSTAPD_MODE_IEEE80211B,
384  	HOSTAPD_MODE_IEEE80211G,
385  	HOSTAPD_MODE_IEEE80211A,
386  	HOSTAPD_MODE_IEEE80211AD,
387  	HOSTAPD_MODE_IEEE80211ANY,
388  	NUM_HOSTAPD_MODES
389  };
390  
391  /**
392   * enum wpa_ctrl_req_type - Control interface request types
393   */
394  enum wpa_ctrl_req_type {
395  	WPA_CTRL_REQ_UNKNOWN,
396  	WPA_CTRL_REQ_EAP_IDENTITY,
397  	WPA_CTRL_REQ_EAP_PASSWORD,
398  	WPA_CTRL_REQ_EAP_NEW_PASSWORD,
399  	WPA_CTRL_REQ_EAP_PIN,
400  	WPA_CTRL_REQ_EAP_OTP,
401  	WPA_CTRL_REQ_EAP_PASSPHRASE,
402  	WPA_CTRL_REQ_SIM,
403  	WPA_CTRL_REQ_PSK_PASSPHRASE,
404  	WPA_CTRL_REQ_EXT_CERT_CHECK,
405  	NUM_WPA_CTRL_REQS
406  };
407  
408  /* Maximum number of EAP methods to store for EAP server user information */
409  #define EAP_MAX_METHODS 8
410  
411  enum mesh_plink_state {
412  	PLINK_IDLE = 1,
413  	PLINK_OPN_SNT,
414  	PLINK_OPN_RCVD,
415  	PLINK_CNF_RCVD,
416  	PLINK_ESTAB,
417  	PLINK_HOLDING,
418  	PLINK_BLOCKED, /* not defined in the IEEE 802.11 standard */
419  };
420  
421  enum set_band {
422  	WPA_SETBAND_AUTO = 0,
423  	WPA_SETBAND_5G = BIT(0),
424  	WPA_SETBAND_2G = BIT(1),
425  	WPA_SETBAND_6G = BIT(2),
426  };
427  
428  enum wpa_radio_work_band {
429  	BAND_2_4_GHZ = BIT(0),
430  	BAND_5_GHZ = BIT(1),
431  	BAND_60_GHZ = BIT(2),
432  };
433  
434  enum beacon_rate_type {
435  	BEACON_RATE_LEGACY,
436  	BEACON_RATE_HT,
437  	BEACON_RATE_VHT,
438  	BEACON_RATE_HE
439  };
440  
441  enum eap_proxy_sim_state {
442  	SIM_STATE_ERROR,
443  };
444  
445  #define OCE_STA BIT(0)
446  #define OCE_STA_CFON BIT(1)
447  #define OCE_AP BIT(2)
448  
449  /* enum chan_width - Channel width definitions */
450  enum chan_width {
451  	CHAN_WIDTH_20_NOHT,
452  	CHAN_WIDTH_20,
453  	CHAN_WIDTH_40,
454  	CHAN_WIDTH_80,
455  	CHAN_WIDTH_80P80,
456  	CHAN_WIDTH_160,
457  	CHAN_WIDTH_2160,
458  	CHAN_WIDTH_4320,
459  	CHAN_WIDTH_6480,
460  	CHAN_WIDTH_8640,
461  	CHAN_WIDTH_320,
462  	CHAN_WIDTH_UNKNOWN
463  };
464  
465  /* VHT/EDMG/etc. channel widths
466   * Note: The first four values are used in hostapd.conf and as such, must
467   * maintain their defined values. Other values are used internally. */
468  enum oper_chan_width {
469  	CONF_OPER_CHWIDTH_USE_HT = 0,
470  	CONF_OPER_CHWIDTH_80MHZ = 1,
471  	CONF_OPER_CHWIDTH_160MHZ = 2,
472  	CONF_OPER_CHWIDTH_80P80MHZ = 3,
473  	CONF_OPER_CHWIDTH_2160MHZ,
474  	CONF_OPER_CHWIDTH_4320MHZ,
475  	CONF_OPER_CHWIDTH_6480MHZ,
476  	CONF_OPER_CHWIDTH_8640MHZ,
477  	CONF_OPER_CHWIDTH_40MHZ_6GHZ,
478  	CONF_OPER_CHWIDTH_320MHZ,
479  };
480  
481  enum key_flag {
482  	KEY_FLAG_MODIFY			= BIT(0),
483  	KEY_FLAG_DEFAULT		= BIT(1),
484  	KEY_FLAG_RX			= BIT(2),
485  	KEY_FLAG_TX			= BIT(3),
486  	KEY_FLAG_GROUP			= BIT(4),
487  	KEY_FLAG_PAIRWISE		= BIT(5),
488  	KEY_FLAG_PMK			= BIT(6),
489  	KEY_FLAG_NEXT			= BIT(7),
490  	/* Used flag combinations */
491  	KEY_FLAG_RX_TX			= KEY_FLAG_RX | KEY_FLAG_TX,
492  	KEY_FLAG_GROUP_RX_TX		= KEY_FLAG_GROUP | KEY_FLAG_RX_TX,
493  	KEY_FLAG_GROUP_RX_TX_DEFAULT	= KEY_FLAG_GROUP_RX_TX |
494  					  KEY_FLAG_DEFAULT,
495  	KEY_FLAG_GROUP_RX		= KEY_FLAG_GROUP | KEY_FLAG_RX,
496  	KEY_FLAG_GROUP_TX_DEFAULT	= KEY_FLAG_GROUP | KEY_FLAG_TX |
497  					  KEY_FLAG_DEFAULT,
498  	KEY_FLAG_PAIRWISE_RX_TX		= KEY_FLAG_PAIRWISE | KEY_FLAG_RX_TX,
499  	KEY_FLAG_PAIRWISE_RX		= KEY_FLAG_PAIRWISE | KEY_FLAG_RX,
500  	KEY_FLAG_PAIRWISE_RX_TX_MODIFY	= KEY_FLAG_PAIRWISE_RX_TX |
501  					  KEY_FLAG_MODIFY,
502  	KEY_FLAG_PAIRWISE_NEXT		= KEY_FLAG_PAIRWISE_RX | KEY_FLAG_NEXT,
503  	/* Max allowed flags for each key type */
504  	KEY_FLAG_PAIRWISE_MASK		= KEY_FLAG_PAIRWISE_RX_TX_MODIFY |
505  					  KEY_FLAG_NEXT,
506  	KEY_FLAG_GROUP_MASK		= KEY_FLAG_GROUP_RX_TX_DEFAULT,
507  	KEY_FLAG_PMK_MASK		= KEY_FLAG_PMK,
508  };
509  
check_key_flag(enum key_flag key_flag)510  static inline int check_key_flag(enum key_flag key_flag)
511  {
512  	return !!(!key_flag ||
513  		  ((key_flag & (KEY_FLAG_PAIRWISE | KEY_FLAG_MODIFY)) &&
514  		   (key_flag & ~KEY_FLAG_PAIRWISE_MASK)) ||
515  		  ((key_flag & KEY_FLAG_GROUP) &&
516  		   (key_flag & ~KEY_FLAG_GROUP_MASK)) ||
517  		  ((key_flag & KEY_FLAG_PMK) &&
518  		   (key_flag & ~KEY_FLAG_PMK_MASK)));
519  }
520  
521  enum ptk0_rekey_handling {
522  	PTK0_REKEY_ALLOW_ALWAYS,
523  	PTK0_REKEY_ALLOW_LOCAL_OK,
524  	PTK0_REKEY_ALLOW_NEVER
525  };
526  
527  enum frame_encryption {
528  	FRAME_ENCRYPTION_UNKNOWN = -1,
529  	FRAME_NOT_ENCRYPTED = 0,
530  	FRAME_ENCRYPTED = 1
531  };
532  
533  #define MAX_NUM_MLD_LINKS 15
534  
535  enum sae_pwe {
536  	SAE_PWE_HUNT_AND_PECK = 0,
537  	SAE_PWE_HASH_TO_ELEMENT = 1,
538  	SAE_PWE_BOTH = 2,
539  	SAE_PWE_FORCE_HUNT_AND_PECK = 3,
540  	SAE_PWE_NOT_SET = 4,
541  };
542  
543  enum wpa_p2p_mode {
544  	WPA_P2P_MODE_WFD_R1	= 0,
545  	WPA_P2P_MODE_WFD_R2	= 1,
546  	WPA_P2P_MODE_WFD_PCC	= 2,
547  };
548  
549  #define USEC_80211_TU 1024
550  
551  #define USEC_TO_TU(m) ((m) / USEC_80211_TU)
552  #define TU_TO_USEC(m) ((m) * USEC_80211_TU)
553  
554  #endif /* DEFS_H */
555