2 * Michael MIC implementation - optimized for TKIP MIC operations
3 * Copyright 2002-2003, Instant802 Networks, Inc.
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
9 #include <linux/types.h>
10 #include <linux/bitops.h>
11 #include <asm/unaligned.h>
15 static void michael_block(struct michael_mic_ctx *mctx, u32 val)
18 mctx->r ^= rol32(mctx->l, 17);
20 mctx->r ^= ((mctx->l & 0xff00ff00) >> 8) |
21 ((mctx->l & 0x00ff00ff) << 8);
23 mctx->r ^= rol32(mctx->l, 3);
25 mctx->r ^= ror32(mctx->l, 2);
29 static void michael_mic_hdr(struct michael_mic_ctx *mctx,
30 const u8 *key, const u8 *da, const u8 *sa, u8 priority)
32 mctx->l = get_unaligned_le32(key);
33 mctx->r = get_unaligned_le32(key + 4);
36 * A pseudo header (DA, SA, Priority, 0, 0, 0) is used in Michael MIC
37 * calculation, but it is _not_ transmitted
39 michael_block(mctx, get_unaligned_le32(da));
40 michael_block(mctx, get_unaligned_le16(&da[4]) |
41 (get_unaligned_le16(sa) << 16));
42 michael_block(mctx, get_unaligned_le32(&sa[2]));
43 michael_block(mctx, priority);
46 void michael_mic(const u8 *key, const u8 *da, const u8 *sa, u8 priority,
47 const u8 *data, size_t data_len, u8 *mic)
50 size_t block, blocks, left;
51 struct michael_mic_ctx mctx;
53 michael_mic_hdr(&mctx, key, da, sa, priority);
56 blocks = data_len / 4;
59 for (block = 0; block < blocks; block++)
60 michael_block(&mctx, get_unaligned_le32(&data[block * 4]));
62 /* Partial block of 0..3 bytes and padding: 0x5a + 4..7 zeros to make
63 * total length a multiple of 4. */
68 val |= data[blocks * 4 + left];
71 michael_block(&mctx, val);
72 michael_block(&mctx, 0);
74 put_unaligned_le32(mctx.l, mic);
75 put_unaligned_le32(mctx.r, mic + 4);