Yakun Xu 06e210fe89 [sub-mac] redo security processing for every (re)transmission (#13093) ...

Retransmissions of frames containing time-dependent header Information
Elements (IEs), such as CSL or Time Sync, require updates to these
IEs to reflect the exact time of sending. If the frame counter is not
incremented for these retransmissions, it leads to nonce reuse in
AES-CCM encryption, which is a security vulnerability.

This commit addresses this issue by ensuring that every transmission
attempt (initial or retry) uses a fresh frame counter:
- Deferred security processing from `SubMac::Send()` to
  `SubMac::BeginTransmit()`.
- Upon retransmission in `SubMac::HandleTransmitDone()`, the frame is
  restored to plaintext via `TxFrame::DecryptTransmitAesCcm()` and
  security flags are cleared.
- This allows time-dependent IEs to be updated and a new frame counter
  to be assigned for every attempt.

Added a Nexus test case `retransmission_security` to verify that both
CSL and standard MAC retransmissions use incrementing frame counters
and updated CSL phases.

2026-05-26 10:36:55 -07:00

..

apps

[cli] remove invalid log when tx buffer is full (#13091)

2026-05-11 18:25:38 -07:00

config

[border-agent] implement Border Admitter (#12201)

2026-02-09 14:31:34 -08:00

platforms

[sub-mac] redo security processing for every (re)transmission (#13093)

2026-05-26 10:36:55 -07:00

CMakeLists.txt

[cmake] initial implementation (#4112)

2019-11-26 00:53:35 +08:00