Home Explore Help
Register Sign In
wareck
/
krackattacks
1
0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Tree: c1790a5ff8
Branches Tags
krackattacks
/
src
/
eap_common
/
eap_eke_common.h

eap_eke_common.h 3.5 KB
History Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114 
  1. /*
    2. 

  2.  * EAP server/peer: EAP-EKE shared routines
    3. 

  3.  * Copyright (c) 2011-2013, Jouni Malinen <j@w1.fi>
    4. 

  4.  *
    5. 

  5.  * This software may be distributed under the terms of the BSD license.
    6. 

  6.  * See README for more details.
    7. 

  7.  */
    8. 

  8. 

  9. #ifndef EAP_EKE_COMMON_H
    10. 

  10. #define EAP_EKE_COMMON_H
    11. 

  11. 

  12. /* EKE Exchange */
    13. 

  13. #define EAP_EKE_ID 1
    14. 

  14. #define EAP_EKE_COMMIT 2
    15. 

  15. #define EAP_EKE_CONFIRM 3
    16. 

  16. #define EAP_EKE_FAILURE 4
    17. 

  17. 

  18. /* Diffie-Hellman Group Registry */
    19. 

  19. #define EAP_EKE_DHGROUP_EKE_2 1
    20. 

  20. #define EAP_EKE_DHGROUP_EKE_5 2
    21. 

  21. #define EAP_EKE_DHGROUP_EKE_14 3 /* mandatory to implement */
    22. 

  22. #define EAP_EKE_DHGROUP_EKE_15 4
    23. 

  23. #define EAP_EKE_DHGROUP_EKE_16 5
    24. 

  24. 

  25. /* Encryption Algorithm Registry */
    26. 

  26. #define EAP_EKE_ENCR_AES128_CBC 1 /* mandatory to implement */
    27. 

  27. 

  28. /* Pseudo Random Function Registry */
    29. 

  29. #define EAP_EKE_PRF_HMAC_SHA1 1 /* mandatory to implement */
    30. 

  30. #define EAP_EKE_PRF_HMAC_SHA2_256 2
    31. 

  31. 

  32. /* Keyed Message Digest (MAC) Registry */
    33. 

  33. #define EAP_EKE_MAC_HMAC_SHA1 1 /* mandatory to implement */
    34. 

  34. #define EAP_EKE_MAC_HMAC_SHA2_256 2
    35. 

  35. 

  36. /* Identity Type Registry */
    37. 

  37. #define EAP_EKE_ID_OPAQUE 1
    38. 

  38. #define EAP_EKE_ID_NAI 2
    39. 

  39. #define EAP_EKE_ID_IPv4 3
    40. 

  40. #define EAP_EKE_ID_IPv6 4
    41. 

  41. #define EAP_EKE_ID_FQDN 5
    42. 

  42. #define EAP_EKE_ID_DN 6
    43. 

  43. 

  44. /* Failure-Code */
    45. 

  45. #define EAP_EKE_FAIL_NO_ERROR 1
    46. 

  46. #define EAP_EKE_FAIL_PROTO_ERROR 2
    47. 

  47. #define EAP_EKE_FAIL_PASSWD_NOT_FOUND 3
    48. 

  48. #define EAP_EKE_FAIL_AUTHENTICATION_FAIL 4
    49. 

  49. #define EAP_EKE_FAIL_AUTHORIZATION_FAIL 5
    50. 

  50. #define EAP_EKE_FAIL_NO_PROPOSAL_CHOSEN 6
    51. 

  51. #define EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR 0xffffffff
    52. 

  52. 

  53. #define EAP_EKE_MAX_DH_LEN 512
    54. 

  54. #define EAP_EKE_MAX_HASH_LEN 32
    55. 

  55. #define EAP_EKE_MAX_KEY_LEN 16
    56. 

  56. #define EAP_EKE_MAX_KE_LEN 16
    57. 

  57. #define EAP_EKE_MAX_KI_LEN 32
    58. 

  58. #define EAP_EKE_MAX_KA_LEN 32
    59. 

  59. #define EAP_EKE_MAX_NONCE_LEN 16
    60. 

  60. 

  61. struct eap_eke_session {
    62. 

  62. 	/* Selected proposal */
    63. 

  63. 	u8 dhgroup;
    64. 

  64. 	u8 encr;
    65. 

  65. 	u8 prf;
    66. 

  66. 	u8 mac;
    67. 

  67. 

  68. 	u8 shared_secret[EAP_EKE_MAX_HASH_LEN];
    69. 

  69. 	u8 ke[EAP_EKE_MAX_KE_LEN];
    70. 

  70. 	u8 ki[EAP_EKE_MAX_KI_LEN];
    71. 

  71. 	u8 ka[EAP_EKE_MAX_KA_LEN];
    72. 

  72. 

  73. 	int prf_len;
    74. 

  74. 	int nonce_len;
    75. 

  75. 	int auth_len;
    76. 

  76. 	int dhcomp_len;
    77. 

  77. 	int pnonce_len;
    78. 

  78. 	int pnonce_ps_len;
    79. 

  79. };
    80. 

  80. 

  81. int eap_eke_session_init(struct eap_eke_session *sess, u8 dhgroup, u8 encr,
    82. 

  82. 			 u8 prf, u8 mac);
    83. 

  83. void eap_eke_session_clean(struct eap_eke_session *sess);
    84. 

  84. int eap_eke_dh_init(u8 group, u8 *ret_priv, u8 *ret_pub);
    85. 

  85. int eap_eke_derive_key(struct eap_eke_session *sess,
    86. 

  86. 		       const u8 *password, size_t password_len,
    87. 

  87. 		       const u8 *id_s, size_t id_s_len, const u8 *id_p,
    88. 

  88. 		       size_t id_p_len, u8 *key);
    89. 

  89. int eap_eke_dhcomp(struct eap_eke_session *sess, const u8 *key, const u8 *dhpub,
    90. 

  90. 		   u8 *ret_dhcomp);
    91. 

  91. int eap_eke_shared_secret(struct eap_eke_session *sess, const u8 *key,
    92. 

  92. 			  const u8 *dhpriv, const u8 *peer_dhcomp);
    93. 

  93. int eap_eke_derive_ke_ki(struct eap_eke_session *sess,
    94. 

  94. 			 const u8 *id_s, size_t id_s_len,
    95. 

  95. 			 const u8 *id_p, size_t id_p_len);
    96. 

  96. int eap_eke_derive_ka(struct eap_eke_session *sess,
    97. 

  97. 		      const u8 *id_s, size_t id_s_len,
    98. 

  98. 		      const u8 *id_p, size_t id_p_len,
    99. 

  99. 		      const u8 *nonce_p, const u8 *nonce_s);
    100. 

  100. int eap_eke_derive_msk(struct eap_eke_session *sess,
    101. 

  101. 		       const u8 *id_s, size_t id_s_len,
    102. 

  102. 		       const u8 *id_p, size_t id_p_len,
    103. 

  103. 		       const u8 *nonce_p, const u8 *nonce_s,
    104. 

  104. 		       u8 *msk, u8 *emsk);
    105. 

  105. int eap_eke_prot(struct eap_eke_session *sess,
    106. 

  106. 		 const u8 *data, size_t data_len,
    107. 

  107. 		 u8 *prot, size_t *prot_len);
    108. 

  108. int eap_eke_decrypt_prot(struct eap_eke_session *sess,
    109. 

  109. 			 const u8 *prot, size_t prot_len,
    110. 

  110. 			 u8 *data, size_t *data_len);
    111. 

  111. int eap_eke_auth(struct eap_eke_session *sess, const char *label,
    112. 

  112. 		 const struct wpabuf *msgs, u8 *auth);
    113. 

  113. 

  114. #endif /* EAP_EKE_COMMON_H */
    115.