drivers/net/wireless/rtlink.org/rtmp_tkip.c

   1 /*
   2  ***************************************************************************
   3  * Ralink Tech Inc.
   4  * 4F, No. 2 Technology 5th Rd.
   5  * Science-based Industrial Park
   6  * Hsin-chu, Taiwan, R.O.C.
   7  *
   8  * (c) Copyright 2002, Ralink Technology, Inc.
   9  *
  10  * All rights reserved. Ralink's source code is an unpublished work and the
  11  * use of a copyright notice does not imply otherwise. This source code
  12  * contains confidential trade secret material of Ralink Tech. Any attemp
  13  * or participation in deciphering, decoding, reverse engineering or in any
  14  * way altering the source code is stricitly prohibited, unless the prior
  15  * written consent of Ralink Technology, Inc. is obtained.
  16  ***************************************************************************
  17
  18         Module Name:
  19         rtmp_tkip.c
  20
  21         Abstract:
  22
  23         Revision History:
  24         Who                     When                    What
  25         --------        ----------              ----------------------------------------------
  26         Paul Wu         02-25-02                Initial
  27 */
  28
  29 #include        "rt_config.h"
  30
  31 // Rotation functions on 32 bit values
  32 #define ROL32( A, n )   ( ((A) << (n)) | ( ((A)>>(32-(n))) ) )
  33 #define ROR32( A, n )   ROL32( (A), 32-(n) )
  34
  35 /*
  36         ========================================================================
  37
  38         Routine Description:
  39                 Convert from UCHAR[] to ULONG in a portable way
  40
  41         Arguments:
  42       pMICKey           pointer to MIC Key
  43
  44         Return Value:
  45                 None
  46
  47         Note:
  48
  49         ========================================================================
  50 */
  51 ULONG   RTMPTkipGetUInt32(
  52         IN      PUCHAR  pMICKey)
  53 {
  54         ULONG   res = 0;
  55         int             i;
  56
  57         for (i = 0; i < 4; i++)
  58         {
  59                 res |= (*pMICKey++) << (8 * i);
  60         }
  61
  62         return res;
  63 }
  64
  65 /*
  66         ========================================================================
  67
  68         Routine Description:
  69                 Convert from ULONG to UCHAR[] in a portable way
  70
  71         Arguments:
  72       pDst                      pointer to destination for convert ULONG to UCHAR[]
  73       val                       the value for convert
  74
  75         Return Value:
  76                 None
  77
  78         Note:
  79
  80         ========================================================================
  81 */
  82 VOID    RTMPTkipPutUInt32(
  83         IN OUT  PUCHAR          pDst,
  84         IN              ULONG           val)
  85 {
  86         int i;
  87
  88         for(i = 0; i < 4; i++)
  89         {
  90                 *pDst++ = (UCHAR) val;
  91                 val >>= 8;
  92         }
  93 }
  94
  95 /*
  96         ========================================================================
  97
  98         Routine Description:
  99                 Calculate the MIC Value.
 100
 101         Arguments:
 102       pAdapter          Pointer to our adapter
 103       pSrc                      Pointer to source data for Calculate MIC Value
 104       Len                       Indicate the length of the source data
 105
 106         Return Value:
 107                 None
 108
 109         Note:
 110
 111         ========================================================================
 112 */
 113 VOID    RTMPTkipAppend(
 114         IN      PTKIP_KEY_INFO  pTkip,
 115         IN      PUCHAR                  pSrc,
 116         IN      UINT                    nBytes)
 117 {
 118     register ULONG  M, L, R, nBytesInM;
 119
 120     // load data from memory to register
 121     L = pTkip->L;
 122     R = pTkip->R;
 123     nBytesInM = pTkip->nBytesInM;
 124     M = pTkip->M;
 125
 126     // Alignment case
 127     if((nBytesInM == 0) && ((((ULONG)pSrc) & 0x3) == 0))
 128     {
 129         while(nBytes >= 4)
 130         {
 131 #ifdef BIG_ENDIAN
 132             M = SWAP32(*(ULONG *)pSrc);
 133 #else
 134             M = *(ULONG *)pSrc;
 135 #endif
 136             pSrc += 4;
 137             nBytes -= 4;
 138
 139             L ^= M;
 140             R ^= ROL32( L, 17 );
 141             L += R;
 142             R ^= ((L & 0xff00ff00) >> 8) | ((L & 0x00ff00ff) << 8);
 143             L += R;
 144             R ^= ROL32( L, 3 );
 145             L += R;
 146             R ^= ROR32( L, 2 );
 147             L += R;
 148         }
 149         nBytesInM = 0;
 150         M = 0;
 151
 152         while(nBytes > 0)
 153         {
 154             M |= (*pSrc << (8* nBytesInM));
 155
 156             nBytesInM++;
 157             pSrc++;
 158             nBytes--;
 159
 160             if( nBytesInM >= 4 )
 161             {
 162                 L ^=  M;
 163                 R ^= ROL32( L, 17 );
 164                 L += R;
 165                 R ^= ((L & 0xff00ff00) >> 8) | ((L & 0x00ff00ff) << 8);
 166                 L += R;
 167                 R ^= ROL32( L, 3 );
 168                 L += R;
 169                 R ^= ROR32( L, 2 );
 170                 L += R;
 171                 // Clear the buffer
 172                 M = 0;
 173                 nBytesInM = 0;
 174             }
 175         }
 176     }
 177     else
 178     {   // misAlignment case
 179         while(nBytes > 0)
 180         {
 181             M |= (*pSrc << (8* nBytesInM));
 182             nBytesInM++;
 183
 184             pSrc++;
 185             nBytes--;
 186
 187             if( nBytesInM >= 4 )
 188             {
 189                 L ^=  M;
 190                 R ^= ROL32( L, 17 );
 191                 L += R;
 192                 R ^= ((L & 0xff00ff00) >> 8) | ((L & 0x00ff00ff) << 8);
 193                 L += R;
 194                 R ^= ROL32( L, 3 );
 195                 L += R;
 196                 R ^= ROR32( L, 2 );
 197                 L += R;
 198                 // Clear the buffer
 199                 M = 0;
 200                 nBytesInM = 0;
 201             }
 202         }
 203     }
 204
 205     // load data from register to memory
 206     pTkip->M = M;
 207     pTkip->nBytesInM = nBytesInM;
 208     pTkip->L = L;
 209     pTkip->R = R;
 210 }
 211
 212 /*
 213         ========================================================================
 214
 215         Routine Description:
 216                 Get the MIC Value.
 217
 218         Arguments:
 219       pAdapter          Pointer to our adapter
 220
 221         Return Value:
 222                 None
 223
 224         Note:
 225                 the MIC Value is store in pAdapter->PrivateInfo.MIC
 226         ========================================================================
 227 */
 228 VOID    RTMPTkipGetMIC(
 229         IN      PTKIP_KEY_INFO  pTkip)
 230 {
 231     static unsigned char Last[] = {"\x5a\x00\x00\x00\x00\x00\x00\x00"};
 232
 233     // Append the minimum padding
 234     RTMPTkipAppend(pTkip, Last, 8 - pTkip->nBytesInM);
 235
 236     // The appendByte function has already computed the result.
 237     RTMPTkipPutUInt32(pTkip->MIC, pTkip->L);
 238     RTMPTkipPutUInt32(pTkip->MIC + 4, pTkip->R);
 239 }
 240
 241 /*
 242         ========================================================================
 243
 244         Routine Description:
 245                 Compare MIC value of received MSDU
 246
 247         Arguments:
 248                 pAdapter        Pointer to our adapter
 249                 pSrc        Pointer to the received Plain text data
 250                 pDA                     Pointer to DA address
 251                 pSA                     Pointer to SA address
 252                 pMICKey         pointer to MIC Key
 253                 Len         the length of the received plain text data exclude MIC value
 254
 255         Return Value:
 256                 TRUE        MIC value matched
 257                 FALSE       MIC value mismatched
 258
 259         Note:
 260
 261         ========================================================================
 262 */
 263 BOOLEAN RTMPTkipCompareMICValue(
 264         IN      PRTMP_ADAPTER   pAdapter,
 265         IN      PUCHAR                  pSrc,
 266         IN      PUCHAR                  pDA,
 267         IN      PUCHAR                  pSA,
 268         IN      PUCHAR                  pMICKey,
 269         IN      UINT                    Len)
 270 {
 271         static UCHAR    Priority[4] = {"\x00\x00\x00\x00"};
 272
 273         // Init MIC value calculation and reset the message
 274     pAdapter->PrivateInfo.Rx.L = RTMPTkipGetUInt32(pMICKey);
 275     pAdapter->PrivateInfo.Rx.R = RTMPTkipGetUInt32(pMICKey + 4);
 276         pAdapter->PrivateInfo.Rx.nBytesInM = 0;
 277         pAdapter->PrivateInfo.Rx.M = 0;
 278
 279         // DA
 280         RTMPTkipAppend(&pAdapter->PrivateInfo.Rx, pDA, 6);
 281         // SA
 282         RTMPTkipAppend(&pAdapter->PrivateInfo.Rx, pSA, 6);
 283         // Priority + 3 bytes of 0
 284         RTMPTkipAppend(&pAdapter->PrivateInfo.Rx, Priority, 4);
 285
 286         // Calculate MIC value from plain text data
 287         RTMPTkipAppend(&pAdapter->PrivateInfo.Rx, pSrc, Len);
 288
 289         // Get MIC value from decrypted plain data
 290         RTMPTkipGetMIC(&pAdapter->PrivateInfo.Rx);
 291
 292         // Move MIC value from MSDU, this steps should move to data path.
 293         // Since the MIC value might cross MPDUs.
 294         if(!NdisEqualMemory(pAdapter->PrivateInfo.Rx.MIC, pSrc + Len, 8))
 295         {
 296             INT         i;
 297
 298                 DBGPRINT(RT_DEBUG_ERROR, "! TKIP MIC Error !\n");  //MIC error.
 299                 DBGPRINT(RT_DEBUG_INFO, "Orig MIC value =");  //MIC error.
 300                 for (i = 0; i < 8; i++)
 301                 {
 302                         DBGPRINT(RT_DEBUG_INFO, "%02x:", *(UCHAR*)(pSrc + Len + i));  //MIC error.
 303                 }
 304                 DBGPRINT(RT_DEBUG_INFO, "\n");  //MIC error.
 305                 DBGPRINT(RT_DEBUG_INFO, "Calculated MIC value =");  //MIC error.
 306                 for (i = 0; i < 8; i++)
 307                 {
 308                         DBGPRINT(RT_DEBUG_INFO, "%02x:", pAdapter->PrivateInfo.Rx.MIC[i]);  //MIC error.
 309                 }
 310                 DBGPRINT(RT_DEBUG_INFO, "\n");  //MIC error.
 311                 return (FALSE);
 312         }
 313         return (TRUE);
 314 }
 315
 316 /*
 317         ========================================================================
 318
 319         Routine Description:
 320                 Compare MIC value of received MSDU
 321
 322         Arguments:
 323                 pAdapter        Pointer to our adapter
 324                 pLLC            LLC header
 325                 pSrc        Pointer to the received Plain text data
 326                 pDA                     Pointer to DA address
 327                 pSA                     Pointer to SA address
 328                 pMICKey         pointer to MIC Key
 329                 Len         the length of the received plain text data exclude MIC value
 330
 331         Return Value:
 332                 TRUE        MIC value matched
 333                 FALSE       MIC value mismatched
 334
 335         Note:
 336
 337         ========================================================================
 338 */
 339 BOOLEAN RTMPTkipCompareMICValueWithLLC(
 340         IN      PRTMP_ADAPTER   pAdapter,
 341         IN      PUCHAR                  pLLC,
 342         IN      PUCHAR                  pSrc,
 343         IN      PUCHAR                  pDA,
 344         IN      PUCHAR                  pSA,
 345         IN      PUCHAR                  pMICKey,
 346         IN      UINT                    Len)
 347 {
 348     static UCHAR    Priority[4] = {"\x00\x00\x00\x00"};
 349
 350     // Init MIC value calculation and reset the message
 351     pAdapter->PrivateInfo.Rx.L = RTMPTkipGetUInt32(pMICKey);
 352     pAdapter->PrivateInfo.Rx.R = RTMPTkipGetUInt32(pMICKey + 4);
 353     pAdapter->PrivateInfo.Rx.nBytesInM = 0;
 354     pAdapter->PrivateInfo.Rx.M = 0;
 355
 356     // DA
 357     RTMPTkipAppend(&pAdapter->PrivateInfo.Rx, pDA, 6);
 358     // SA
 359     RTMPTkipAppend(&pAdapter->PrivateInfo.Rx, pSA, 6);
 360     // Priority + 3 bytes of 0
 361     RTMPTkipAppend(&pAdapter->PrivateInfo.Rx, Priority, 4);
 362
 363     // Start with LLC header
 364     RTMPTkipAppend(&pAdapter->PrivateInfo.Rx, pLLC, 8);
 365
 366     // Calculate MIC value from plain text data
 367     RTMPTkipAppend(&pAdapter->PrivateInfo.Rx, pSrc, Len);
 368
 369     // Get MIC value from decrypted plain data
 370     RTMPTkipGetMIC(&pAdapter->PrivateInfo.Rx);
 371
 372     // Move MIC value from MSDU, this steps should move to data path.
 373     // Since the MIC value might cross MPDUs.
 374     if(!NdisEqualMemory(pAdapter->PrivateInfo.Rx.MIC, pSrc + Len, 8))
 375     {
 376         INT             i;
 377
 378         DBGPRINT(RT_DEBUG_ERROR, "! TKIP MIC Error !\n");  //MIC error.
 379         DBGPRINT(RT_DEBUG_INFO, "Orig MIC value =");  //MIC error.
 380         for (i = 0; i < 8; i++)
 381         {
 382             DBGPRINT(RT_DEBUG_INFO, "%02x:", *(UCHAR *)(pSrc + Len + i));  //MIC error.
 383         }
 384
 385         DBGPRINT(RT_DEBUG_INFO, "\n");  //MIC error.
 386         DBGPRINT(RT_DEBUG_INFO, "Calculated MIC value =");  //MIC error.
 387         for (i = 0; i < 8; i++)
 388         {
 389             DBGPRINT(RT_DEBUG_INFO, "%02x:", pAdapter->PrivateInfo.Rx.MIC[i]);  //MIC error.
 390         }
 391
 392         DBGPRINT(RT_DEBUG_INFO, "\n");  //MIC error.
 393         return (FALSE);
 394     }
 395     return (TRUE);
 396 }
 397
 398 /*
 399         ========================================================================
 400
 401         Routine Description:
 402                 Copy frame from waiting queue into relative ring buffer and set
 403         appropriate ASIC register to kick hardware transmit function
 404
 405         Arguments:
 406                 pAdapter                Pointer to our adapter
 407                 PNDIS_PACKET    Pointer to Ndis Packet for MIC calculation
 408                 pEncap                  Pointer to LLC encap data
 409                 LenEncap                Total encap length, might be 0 which indicates no encap
 410
 411         Return Value:
 412                 None
 413
 414         Note:
 415
 416         ========================================================================
 417 */
 418 VOID RTMPCalculateMICValue(
 419     IN  PRTMP_ADAPTER   pAdapter,
 420     IN  struct sk_buff  *skb,
 421     IN  PUCHAR          pEncap,
 422     IN  INT             LenEncap,
 423     IN  PWPA_KEY        pWpaKey)
 424 {
 425     PUCHAR          pSrc;
 426     static UCHAR    Priority[4] = {"\x00\x00\x00\x00"};
 427
 428     pSrc = (PUCHAR) skb->data;
 429
 430     // Init MIC value calculation and reset the message
 431     pAdapter->PrivateInfo.Tx.L = RTMPTkipGetUInt32(pWpaKey->TxMic);
 432     pAdapter->PrivateInfo.Tx.R = RTMPTkipGetUInt32(pWpaKey->TxMic + 4);
 433     pAdapter->PrivateInfo.Tx.nBytesInM = 0;
 434     pAdapter->PrivateInfo.Tx.M = 0;
 435
 436     // DA & SA field
 437     RTMPTkipAppend(&pAdapter->PrivateInfo.Tx, pSrc, 12);
 438
 439     // Priority + 3 bytes of 0
 440     RTMPTkipAppend(&pAdapter->PrivateInfo.Tx, Priority, 4);
 441
 442     if (LenEncap > 0)
 443     {
 444         // LLC encapsulation
 445         RTMPTkipAppend(&pAdapter->PrivateInfo.Tx, pEncap, LenEncap);
 446         // Protocol Type
 447         RTMPTkipAppend(&pAdapter->PrivateInfo.Tx, pSrc + 12, skb->len - 12);
 448     }
 449     else
 450         RTMPTkipAppend(&pAdapter->PrivateInfo.Tx, pSrc + 14, skb->len - 14);
 451
 452     // Compute the final MIC Value
 453     RTMPTkipGetMIC(&pAdapter->PrivateInfo.Tx);
 454 }
 455