16  *	n = ceiling(k / 128)
17  *	K(0) = zeros
18  *	K(i) = CMAC(key, K(i-1) | i | constant | 0x00 | k)
19  *	DR(key, constant) = k-truncate(K(1) | K(2) | ... | K(n))
31 	struct krb5_buffer K, data;  in rfc6803_calc_KDF_FEEDBACK_CMAC()  local
36 	u32 i = 0, k = result->len * 8;  in rfc6803_calc_KDF_FEEDBACK_CMAC()  local
48 	K.len = crypto_shash_digestsize(shash);  in rfc6803_calc_KDF_FEEDBACK_CMAC()
49 	data.len = K.len + 4 + constant->len + 1 + 4;  in rfc6803_calc_KDF_FEEDBACK_CMAC()
52 		crypto_roundup(K.len) +  in rfc6803_calc_KDF_FEEDBACK_CMAC()
61 	K.data = buffer +  in rfc6803_calc_KDF_FEEDBACK_CMAC()
67 		crypto_roundup(K.len);  in rfc6803_calc_KDF_FEEDBACK_CMAC()
69 	p = data.data + K.len + 4;  in rfc6803_calc_KDF_FEEDBACK_CMAC()
73 	tmp = htonl(k);  in rfc6803_calc_KDF_FEEDBACK_CMAC()
85 		memcpy(p, K.data, K.len);  in rfc6803_calc_KDF_FEEDBACK_CMAC()
86 		p += K.len;  in rfc6803_calc_KDF_FEEDBACK_CMAC()
92 		ret = crypto_shash_finup(desc, data.data, data.len, K.data);  in rfc6803_calc_KDF_FEEDBACK_CMAC()
96 		seg = min_t(size_t, result->len - offset, K.len);  in rfc6803_calc_KDF_FEEDBACK_CMAC()
97 		memcpy(result->data + offset, K.data, seg);  in rfc6803_calc_KDF_FEEDBACK_CMAC()
224 	.key_bytes	= 32,
225 	.key_len	= 32,
226 	.Kc_len		= 32,
227 	.Ke_len		= 32,
228 	.Ki_len		= 32,