Implementation of MACSec (IEEE 802.1AE)
Hello,
I would like to use MACSec(as in IEEE 802.1AE) to secure a physical direct link between two machines. Turns out this is supported in the Linux kernel since 2016. I was very happy about it, since most of my machines use Linux the kernel. For the few that use Windows i haven't been able to find a solution.
I know the Cisco Secure Client allows MACSec connections from a Windows host to their hardware (switches or whatever). But I dont have Cisco hardware.
I read a few things about how the network stack works in Windows, and from what I understand, to get a working MACSec link I would have to write a NDIS driver.
There I got lost a bit between the various possibilities. Reading the documentation of Npcap it looks like I either want to write an Intermediate Driver or a Protocol Driver.
Reading the Intermediate Driver docs, it seems the driver would have to be a 1-to-1 MUX Intermediate Driver.
What I am not sure of, is even if I figure out how to implement it, will I be able to plug it into the network stack ? That is can I tell the already existing upper layer (ARP,DHCP,IP,TCP...) drivers to use my MACSec driver (Protocol driver or MUX Intermediate driver, depending on which one is right) ? Or would I have to rewrite those too ?
Regards