/*
 * Michael MIC implementation - optimized for TKIP MIC operations
 * Copyright 2002-2003, Instant802 Networks, Inc.
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */
#include <linux/types.h>
#include <linux/bitops.h>
#include <linux/ieee80211.h>
#include <asm/unaligned.h>

#include "michael.h"

static void michael_block(struct michael_mic_ctx *mctx, u32 val)
{
	mctx->l ^= val;
	mctx->r ^= rol32(mctx->l, 17);
	mctx->l += mctx->r;
	mctx->r ^= ((mctx->l & 0xff00ff00) >> 8) |
		   ((mctx->l & 0x00ff00ff) << 8);
	mctx->l += mctx->r;
	mctx->r ^= rol32(mctx->l, 3);
	mctx->l += mctx->r;
	mctx->r ^= ror32(mctx->l, 2);
	mctx->l += mctx->r;
}

static void michael_mic_hdr(struct michael_mic_ctx *mctx, const u8 *key,
			    struct ieee80211_hdr *hdr)
{
	u8 *da, *sa, tid;

	da = ieee80211_get_DA(hdr);
	sa = ieee80211_get_SA(hdr);
	if (ieee80211_is_data_qos(hdr->frame_control))
		tid = *ieee80211_get_qos_ctl(hdr) & IEEE80211_QOS_CTL_TID_MASK;
	else
		tid = 0;

	mctx->l = get_unaligned_le32(key);
	mctx->r = get_unaligned_le32(key + 4);

	/*
	 * A pseudo header (DA, SA, Priority, 0, 0, 0) is used in Michael MIC
	 * calculation, but it is _not_ transmitted
	 */
	michael_block(mctx, get_unaligned_le32(da));
	michael_block(mctx, get_unaligned_le16(&da[4]) |
			    (get_unaligned_le16(sa) << 16));
	michael_block(mctx, get_unaligned_le32(&sa[2]));
	michael_block(mctx, tid);
}

void michael_mic(const u8 *key, struct ieee80211_hdr *hdr,
		 const u8 *data, size_t data_len, u8 *mic)
{
	u32 val;
	size_t block, blocks, left;
	struct michael_mic_ctx mctx;

	michael_mic_hdr(&mctx, key, hdr);

	/* Real data */
	blocks = data_len / 4;
	left = data_len % 4;

	for (block = 0; block < blocks; block++)
		michael_block(&mctx, get_unaligned_le32(&data[block * 4]));

	/* Partial block of 0..3 bytes and padding: 0x5a + 4..7 zeros to make
	 * total length a multiple of 4. */
	val = 0x5a;
	while (left > 0) {
		val <<= 8;
		left--;
		val |= data[blocks * 4 + left];
	}

	michael_block(&mctx, val);
	michael_block(&mctx, 0);

	put_unaligned_le32(mctx.l, mic);
	put_unaligned_le32(mctx.r, mic + 4);
}
1fce39e08b0'>diff</a></td><td class='form'><form class='right' method='get' action='/cgit.cgi/linux/net-next.git/log/drivers/usb/gadget/udc/bdc/Kconfig'>
<input type='hidden' name='id' value='810ac7b7558d7830e72d8dbf34b851fce39e08b0'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/cgit.cgi/linux/net-next.git/commit/?id=810ac7b7558d7830e72d8dbf34b851fce39e08b0'>root</a>/<a href='/cgit.cgi/linux/net-next.git/commit/drivers?id=810ac7b7558d7830e72d8dbf34b851fce39e08b0'>drivers</a>/<a href='/cgit.cgi/linux/net-next.git/commit/drivers/usb?id=810ac7b7558d7830e72d8dbf34b851fce39e08b0'>usb</a>/<a href='/cgit.cgi/linux/net-next.git/commit/drivers/usb/gadget?id=810ac7b7558d7830e72d8dbf34b851fce39e08b0'>gadget</a>/<a href='/cgit.cgi/linux/net-next.git/commit/drivers/usb/gadget/udc?id=810ac7b7558d7830e72d8dbf34b851fce39e08b0'>udc</a>/<a href='/cgit.cgi/linux/net-next.git/commit/drivers/usb/gadget/udc/bdc?id=810ac7b7558d7830e72d8dbf34b851fce39e08b0'>bdc</a>/<a href='/cgit.cgi/linux/net-next.git/commit/drivers/usb/gadget/udc/bdc/Kconfig?id=810ac7b7558d7830e72d8dbf34b851fce39e08b0'>Kconfig</a></div><div class='content'><div class='cgit-panel'><b>diff options</b><form method='get'><input type='hidden' name='id' value='810ac7b7558d7830e72d8dbf34b851fce39e08b0'/><table><tr><td colspan='2'/></tr><tr><td class='label'>context:</td><td class='ctrl'><select name='context' onchange='this.form.submit();'><option value='1'>1</option><option value='2'>2</option><option value='3' selected='selected'>3</option><option value='4'>4</option><option value='5'>5</option><option value='6'>6</option><option value='7'>7</option><option value='8'>8</option><option value='9'>9</option><option value='10'>10</option><option value='15'>15</option><option value='20'>20</option><option value='25'>25</option><option value='30'>30</option><option value='35'>35</option><option value='40'>40</option></select></td></tr><tr><td class='label'>space:</td><td class='ctrl'><select name='ignorews' onchange='this.form.submit();'><option value='0' selected='selected'>include</option><option value='1'>ignore</option></select></td></tr><tr><td class='label'>mode:</td><td class='ctrl'><select name='dt' onchange='this.form.submit();'><option value='0' selected='selected'>unified</option><option value='1'>ssdiff</option><option value='2'>stat only</option></select></td></tr><tr><td/><td class='ctrl'><noscript><input type='submit' value='reload'/></noscript></td></tr></table></form></div><table summary='commit info' class='commit-info'>
<tr><th>author</th><td>Linus Torvalds &lt;torvalds@linux-foundation.org&gt;</td><td class='right'>2016-12-09 11:27:22 -0800</td></tr>
<tr><th>committer</th><td>Linus Torvalds &lt;torvalds@linux-foundation.org&gt;</td><td class='right'>2016-12-09 11:27:22 -0800</td></tr>
<tr><th>commit</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/commit/drivers/usb/gadget/udc/bdc/Kconfig?id=810ac7b7558d7830e72d8dbf34b851fce39e08b0'>810ac7b7558d7830e72d8dbf34b851fce39e08b0</a> (<a href='/cgit.cgi/linux/net-next.git/patch/drivers/usb/gadget/udc/bdc/Kconfig?id=810ac7b7558d7830e72d8dbf34b851fce39e08b0'>patch</a>)</td></tr>
<tr><th>tree</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/tree/?id=810ac7b7558d7830e72d8dbf34b851fce39e08b0'>5c026763a237ab9d7940d83deb9b719fb6247d42</a> /<a href='/cgit.cgi/linux/net-next.git/tree/drivers/usb/gadget/udc/bdc/Kconfig?id=810ac7b7558d7830e72d8dbf34b851fce39e08b0'>drivers/usb/gadget/udc/bdc/Kconfig</a></td></tr>
<tr><th>parent</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/commit/drivers/usb/gadget/udc/bdc/Kconfig?id=861d75d098e2d0a2d7692c9d6a30b6fd2c81387c'>861d75d098e2d0a2d7692c9d6a30b6fd2c81387c</a> (<a href='/cgit.cgi/linux/net-next.git/diff/drivers/usb/gadget/udc/bdc/Kconfig?id=810ac7b7558d7830e72d8dbf34b851fce39e08b0&amp;id2=861d75d098e2d0a2d7692c9d6a30b6fd2c81387c'>diff</a>)</td></tr><tr><th>parent</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/commit/drivers/usb/gadget/udc/bdc/Kconfig?id=325896ffdf90f7cbd59fb873b7ba20d60d1ddf3c'>325896ffdf90f7cbd59fb873b7ba20d60d1ddf3c</a> (<a href='/cgit.cgi/linux/net-next.git/diff/drivers/usb/gadget/udc/bdc/Kconfig?id=810ac7b7558d7830e72d8dbf34b851fce39e08b0&amp;id2=325896ffdf90f7cbd59fb873b7ba20d60d1ddf3c'>diff</a>)</td></tr></table>
<div class='commit-subject'>Merge branch 'libnvdimm-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm</div><div class='commit-msg'>Pull libnvdimm fixes from Dan Williams:
 "Several fixes to the DSM (ACPI device specific method) marshaling
  implementation.

  I consider these urgent enough to send for 4.9 consideration since
  they fix the kernel's handling of ARS (Address Range Scrub) commands.
  Especially for platforms without machine-check-recovery capabilities,
  successful execution of ARS commands enables the platform to
  potentially break out of an infinite reboot problem if a media error
  is present in the boot path. There is also a one line fix for a
  device-dax read-only mapping regression.

  Commits 9a901f5495e2 ("acpi, nfit: fix extended status translations
  for ACPI DSMs") and 325896ffdf90 ("device-dax: fix private mapping
  restriction, permit read-only") are true regression fixes for changes
  introduced this cycle.

  Commit efda1b5d87cb ("acpi, nfit, libnvdimm: fix / harden ars_status
  output length handling") fixes the kernel's handling of zero-length
  results, this never would have worked in the past, but we only just
  recently discovered a BIOS implementation that emits this arguably
  spec non-compliant result.

  The remaining two commits are additional fall out from thinking
  through the implications of a zero / truncated length result of the
  ARS Status command.

  In order to mitigate the risk that these changes introduce yet more
  regressions they are backstopped by a new unit test in commit
  a7de92dac9f0 ("tools/testing/nvdimm: unit test acpi_nfit_ctl()") that
  mocks up inputs to acpi_nfit_ctl()"

* 'libnvdimm-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm:
  device-dax: fix private mapping restriction, permit read-only
  tools/testing/nvdimm: unit test acpi_nfit_ctl()
  acpi, nfit: fix bus vs dimm confusion in xlat_status
  acpi, nfit: validate ars_status output buffer size
  acpi, nfit, libnvdimm: fix / harden ars_status output length handling
  acpi, nfit: fix extended status translations for ACPI DSMs
</div><div class='diffstat-header'><a href='/cgit.cgi/linux/net-next.git/diff/?id=810ac7b7558d7830e72d8dbf34b851fce39e08b0'>Diffstat</a> (limited to 'drivers/usb/gadget/udc/bdc/Kconfig')</div><table summary='diffstat' class='diffstat'>