/** @file aes_cmac_rom.c
 *
 *  @brief This file defines aes cmac related function
 *
 * Copyright (C) 2014-2017, Marvell International Ltd.
 *
 * This software file (the "File") is distributed by Marvell International
 * Ltd. under the terms of the GNU General Public License Version 2, June 1991
 * (the "License").  You may use, redistribute and/or modify this File in
 * accordance with the terms and conditions of the License, a copy of which
 * is available by writing to the Free Software Foundation, Inc.,
 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
 * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
 *
 * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
 * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
 * this warranty disclaimer.
 */

/******************************************************
Change log:
    03/07/2014: Initial version
******************************************************/
#include "wl_macros.h"
#include "wltypes.h"
#include "hostsa_ext_def.h"
#include "authenticator.h"

#include "crypt_new_rom.h"
#include "aes_cmac_rom.h"

//#pragma diag_default 144
//#pragma arm section rwdata
// End - patch table entries

/* For CMAC Calculation */
static UINT8 const_Rb[16] = {
	0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
	0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x87
};

void
mrvl_aes_128(UINT8 *key, UINT8 *input, UINT8 *output)
{
//    BOOLEAN weuEnabled;

#if 0
	if (IS_AEU_CLK_ENBLD()) {
		weuEnabled = TRUE;
	} else {
		weuEnabled = FALSE;
	}
#endif
	/* keyLen = 128 bit / 8 bits/byte / 8 for MRVL API encoding == 2 */
	MRVL_AesEncrypt(key, (128 / 8) / 8, input, output);

}

/* Basic Functions */
void
xor_128(UINT8 *a, UINT8 *b, UINT8 *out)
{
	int i;
	for (i = 0; i < 16; i++) {
		out[i] = a[i] ^ b[i];
	}
}

/* AES-CMAC Generation Function */

void
leftshift_onebit(UINT8 *input, UINT8 *output)
{
	int i;
	UINT8 overflow = 0;

	for (i = 15; i >= 0; i--) {
		output[i] = input[i] << 1;
		output[i] |= overflow;
		overflow = (input[i] & 0x80) ? 1 : 0;
	}
}

void
generate_subkey(phostsa_private priv, UINT8 *key, UINT8 *K1, UINT8 *K2)
{
	hostsa_util_fns *util_fns = &priv->util_fns;

	UINT8 L[16];
	UINT8 Z[16];
	UINT8 tmp[16];

	memset(util_fns, Z, 0x00, sizeof(Z));

	mrvl_aes_128(key, Z, L);

	if ((L[0] & 0x80) == 0) {
		/* If MSB(L) = 0, then K1 = L << 1 */
		leftshift_onebit(L, K1);
	} else {
		/* Else K1 = ( L << 1 ) (+) Rb */
		leftshift_onebit(L, tmp);
		xor_128(tmp, const_Rb, K1);
	}

	if ((K1[0] & 0x80) == 0) {
		leftshift_onebit(K1, K2);
	} else {
		leftshift_onebit(K1, tmp);
		xor_128(tmp, const_Rb, K2);
	}
}

void
padding(UINT8 *lastb, UINT8 *pad, int length)
{
	int j;

	/* original last block */
	for (j = 0; j < 16; j++) {
		if (j < length) {
			pad[j] = lastb[j];
		} else if (j == length) {
			pad[j] = 0x80;
		} else {
			pad[j] = 0x00;
		}
	}
}

void
mrvl_aes_cmac(phostsa_private priv, UINT8 *key, UINT8 *input, int length,
	      UINT8 *mac)
{
	hostsa_util_fns *util_fns = &priv->util_fns;
	UINT8 X[16];
	UINT8 Y[16];
	UINT8 M_last[16];
	UINT8 padded[16];
	UINT8 K1[16];
	UINT8 K2[16];
	int n, i, flag;

	generate_subkey(priv, key, K1, K2);

	n = (length + 15) / 16;	/* n is number of rounds */

	if (n == 0) {
		n = 1;
		flag = 0;
	} else {
		if ((length % 16) == 0) {
			/* last block is a complete block */
			flag = 1;
		} else {
			/* last block is not complete block */
			flag = 0;
		}
	}

	if (flag) {
		/* last block is complete block */
		xor_128(&input[16 * (n - 1)], K1, M_last);
	} else {
		padding(&input[16 * (n - 1)], padded, length % 16);
		xor_128(padded, K2, M_last);
	}

	memset(util_fns, X, 0x00, sizeof(X));

	for (i = 0; i < n - 1; i++) {
		xor_128(X, &input[16 * i], Y);	/* Y := Mi (+) X  */
		mrvl_aes_128(key, Y, X);	/* X := AES-128(KEY, Y); */
	}

	xor_128(X, M_last, Y);
	mrvl_aes_128(key, Y, X);

	for (i = 0; i < 16; i++) {
		mac[i] = X[i];
	}
}