41 #define AES_BLOCK_LEN 16
61 	a[5] = val >> 16;  in WPA_PUT_BE64()
70 	a[1] = (val >> 16) & 0xff;  in WPA_PUT_BE32()
78 	return (((uint32_t) a[0] << 24) | (a[1] << 16) | (a[2] << 8) | a[3]);  in WPA_GET_BE32()
92 shift_right_block(uint8_t *v)  in shift_right_block()  argument
96 	val = WPA_GET_BE32(v + 12);  in shift_right_block()
98 	if (v[11] & 0x01)  in shift_right_block()
100 	WPA_PUT_BE32(v + 12, val);  in shift_right_block()
102 	val = WPA_GET_BE32(v + 8);  in shift_right_block()
104 	if (v[7] & 0x01)  in shift_right_block()
106 	WPA_PUT_BE32(v + 8, val);  in shift_right_block()
108 	val = WPA_GET_BE32(v + 4);  in shift_right_block()
110 	if (v[3] & 0x01)  in shift_right_block()
112 	WPA_PUT_BE32(v + 4, val);  in shift_right_block()
114 	val = WPA_GET_BE32(v);  in shift_right_block()
116 	WPA_PUT_BE32(v, val);  in shift_right_block()
124 	uint8_t v[16];  in gf_mult()  local
127 	memset(z, 0, 16); /* Z_0 = 0^128 */  in gf_mult()
128 	memcpy(v, y, 16); /* V_0 = Y */  in gf_mult()
130 	for (i = 0; i < 16; i++) {  in gf_mult()
134 				xor_block(z, v, AES_BLOCK_LEN);  in gf_mult()
139 			if (v[15] & 0x01) {  in gf_mult()
141 				shift_right_block(v);  in gf_mult()
143 				v[0] ^= 0xe1;  in gf_mult()
146 				shift_right_block(v);  in gf_mult()
156 	memset(y, 0, 16);  in ghash_start()
164 	uint8_t tmp[16];  in ghash()
166 	m = xlen / 16;  in ghash()
171 		xpos += 16;  in ghash()
177 		memcpy(y, tmp, 16);  in ghash()
193 		memcpy(y, tmp, 16);  in ghash()
215 	n = xlen / 16;  in aes_gctr()
250 	uint8_t len_buf[16];  in aes_gcm_prepare_j0()
289 	uint8_t len_buf[16];  in aes_gcm_ghash()
293 	 * v = 128 * ceil[len(A)/128] - len(A)  in aes_gcm_ghash()
294 	 * S = GHASH_H(A || 0^v || C || 0^u || [len(A)]64 || [len(C)]64)  in aes_gcm_ghash()
344 	uint8_t S[16], T[GCMP_MIC_LEN];  in ieee80211_crypto_aes_gcm_ad()
358 	if (memcmp(tag, T, 16) != 0) {  in ieee80211_crypto_aes_gcm_ad()