Commit | Line | Data |
---|---|---|
d2912cb1 | 1 | // SPDX-License-Identifier: GPL-2.0-only |
765cb46a JM |
2 | /* |
3 | * AES-128-CMAC with TLen 16 for IEEE 802.11w BIP | |
4 | * Copyright 2008, Jouni Malinen <j@w1.fi> | |
765cb46a JM |
5 | */ |
6 | ||
7 | #include <linux/kernel.h> | |
8 | #include <linux/types.h> | |
9 | #include <linux/crypto.h> | |
4afebd63 | 10 | #include <linux/export.h> |
765cb46a | 11 | #include <linux/err.h> |
0cd20a27 | 12 | #include <crypto/aes.h> |
765cb46a JM |
13 | |
14 | #include <net/mac80211.h> | |
15 | #include "key.h" | |
16 | #include "aes_cmac.h" | |
17 | ||
765cb46a | 18 | #define CMAC_TLEN 8 /* CMAC TLen = 64 bits (8 octets) */ |
56c52da2 | 19 | #define CMAC_TLEN_256 16 /* CMAC TLen = 128 bits (16 octets) */ |
765cb46a JM |
20 | #define AAD_LEN 20 |
21 | ||
26717828 | 22 | static const u8 zero[CMAC_TLEN_256]; |
765cb46a | 23 | |
26717828 | 24 | void ieee80211_aes_cmac(struct crypto_shash *tfm, const u8 *aad, |
765cb46a JM |
25 | const u8 *data, size_t data_len, u8 *mic) |
26 | { | |
26717828 AB |
27 | SHASH_DESC_ON_STACK(desc, tfm); |
28 | u8 out[AES_BLOCK_SIZE]; | |
765cb46a | 29 | |
26717828 | 30 | desc->tfm = tfm; |
765cb46a | 31 | |
26717828 AB |
32 | crypto_shash_init(desc); |
33 | crypto_shash_update(desc, aad, AAD_LEN); | |
34 | crypto_shash_update(desc, data, data_len - CMAC_TLEN); | |
35 | crypto_shash_finup(desc, zero, CMAC_TLEN, out); | |
36 | ||
37 | memcpy(mic, out, CMAC_TLEN); | |
765cb46a JM |
38 | } |
39 | ||
26717828 | 40 | void ieee80211_aes_cmac_256(struct crypto_shash *tfm, const u8 *aad, |
56c52da2 JM |
41 | const u8 *data, size_t data_len, u8 *mic) |
42 | { | |
26717828 | 43 | SHASH_DESC_ON_STACK(desc, tfm); |
56c52da2 | 44 | |
26717828 | 45 | desc->tfm = tfm; |
56c52da2 | 46 | |
26717828 AB |
47 | crypto_shash_init(desc); |
48 | crypto_shash_update(desc, aad, AAD_LEN); | |
49 | crypto_shash_update(desc, data, data_len - CMAC_TLEN_256); | |
50 | crypto_shash_finup(desc, zero, CMAC_TLEN_256, mic); | |
56c52da2 | 51 | } |
765cb46a | 52 | |
26717828 AB |
53 | struct crypto_shash *ieee80211_aes_cmac_key_setup(const u8 key[], |
54 | size_t key_len) | |
765cb46a | 55 | { |
26717828 | 56 | struct crypto_shash *tfm; |
765cb46a | 57 | |
26717828 | 58 | tfm = crypto_alloc_shash("cmac(aes)", 0, 0); |
1ac62ba7 | 59 | if (!IS_ERR(tfm)) |
26717828 | 60 | crypto_shash_setkey(tfm, key, key_len); |
765cb46a JM |
61 | |
62 | return tfm; | |
63 | } | |
64 | ||
26717828 | 65 | void ieee80211_aes_cmac_key_free(struct crypto_shash *tfm) |
765cb46a | 66 | { |
26717828 | 67 | crypto_free_shash(tfm); |
765cb46a | 68 | } |