1 // SPDX-License-Identifier: GPL-2.0
2 /*
3 * Driver for KeyStream wireless LAN
4 *
5 * Copyright (C) 2005-2008 KeyStream Corp.
6 * Copyright (C) 2009 Renesas Technology Corp.
7 */
8
9 #include <asm/unaligned.h>
10 #include <linux/bitops.h>
11 #include <linux/string.h>
12 #include "michael_mic.h"
13
14
15 // Reset the state to the empty message.
michael_clear(struct michael_mic * mic)16 static inline void michael_clear(struct michael_mic *mic)
17 {
18 mic->l = mic->k0;
19 mic->r = mic->k1;
20 mic->m_bytes = 0;
21 }
22
michael_init(struct michael_mic * mic,u8 * key)23 static void michael_init(struct michael_mic *mic, u8 *key)
24 {
25 // Set the key
26 mic->k0 = get_unaligned_le32(key);
27 mic->k1 = get_unaligned_le32(key + 4);
28
29 //clear();
30 michael_clear(mic);
31 }
32
michael_block(struct michael_mic * mic)33 static inline void michael_block(struct michael_mic *mic)
34 {
35 mic->r ^= rol32(mic->l, 17);
36 mic->l += mic->r;
37 mic->r ^= ((mic->l & 0xff00ff00) >> 8) |
38 ((mic->l & 0x00ff00ff) << 8);
39 mic->l += mic->r;
40 mic->r ^= rol32(mic->l, 3);
41 mic->l += mic->r;
42 mic->r ^= ror32(mic->l, 2);
43 mic->l += mic->r;
44 }
45
michael_append(struct michael_mic * mic,u8 * src,int bytes)46 static void michael_append(struct michael_mic *mic, u8 *src, int bytes)
47 {
48 int addlen;
49
50 if (mic->m_bytes) {
51 addlen = 4 - mic->m_bytes;
52 if (addlen > bytes)
53 addlen = bytes;
54 memcpy(&mic->m[mic->m_bytes], src, addlen);
55 mic->m_bytes += addlen;
56 src += addlen;
57 bytes -= addlen;
58
59 if (mic->m_bytes < 4)
60 return;
61
62 mic->l ^= get_unaligned_le32(mic->m);
63 michael_block(mic);
64 mic->m_bytes = 0;
65 }
66
67 while (bytes >= 4) {
68 mic->l ^= get_unaligned_le32(src);
69 michael_block(mic);
70 src += 4;
71 bytes -= 4;
72 }
73
74 if (bytes > 0) {
75 mic->m_bytes = bytes;
76 memcpy(mic->m, src, bytes);
77 }
78 }
79
michael_get_mic(struct michael_mic * mic,u8 * dst)80 static void michael_get_mic(struct michael_mic *mic, u8 *dst)
81 {
82 u8 *data = mic->m;
83
84 switch (mic->m_bytes) {
85 case 0:
86 mic->l ^= 0x5a;
87 break;
88 case 1:
89 mic->l ^= data[0] | 0x5a00;
90 break;
91 case 2:
92 mic->l ^= data[0] | (data[1] << 8) | 0x5a0000;
93 break;
94 case 3:
95 mic->l ^= data[0] | (data[1] << 8) | (data[2] << 16) |
96 0x5a000000;
97 break;
98 }
99 michael_block(mic);
100 michael_block(mic);
101 // The appendByte function has already computed the result.
102 put_unaligned_le32(mic->l, dst);
103 put_unaligned_le32(mic->r, dst + 4);
104
105 // Reset to the empty message.
106 michael_clear(mic);
107 }
108
michael_mic_function(struct michael_mic * mic,u8 * key,u8 * data,unsigned int len,u8 priority,u8 * result)109 void michael_mic_function(struct michael_mic *mic, u8 *key,
110 u8 *data, unsigned int len, u8 priority, u8 *result)
111 {
112 u8 pad_data[4] = { priority, 0, 0, 0 };
113 // Compute the MIC value
114 /*
115 * IEEE802.11i page 47
116 * Figure 43g TKIP MIC processing format
117 * +--+--+--------+--+----+--+--+--+--+--+--+--+--+
118 * |6 |6 |1 |3 |M |1 |1 |1 |1 |1 |1 |1 |1 | Octet
119 * +--+--+--------+--+----+--+--+--+--+--+--+--+--+
120 * |DA|SA|Priority|0 |Data|M0|M1|M2|M3|M4|M5|M6|M7|
121 * +--+--+--------+--+----+--+--+--+--+--+--+--+--+
122 */
123 michael_init(mic, key);
124 michael_append(mic, data, 12); /* |DA|SA| */
125 michael_append(mic, pad_data, 4); /* |Priority|0|0|0| */
126 michael_append(mic, data + 12, len - 12); /* |Data| */
127 michael_get_mic(mic, result);
128 }
129