Forest Bond | 92b9679 | 2009-06-13 07:38:31 -0400 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (c) 1996, 2003 VIA Networking Technologies, Inc. |
| 3 | * All rights reserved. |
| 4 | * |
| 5 | * This program is free software; you can redistribute it and/or modify |
| 6 | * it under the terms of the GNU General Public License as published by |
| 7 | * the Free Software Foundation; either version 2 of the License, or |
| 8 | * (at your option) any later version. |
| 9 | * |
| 10 | * This program is distributed in the hope that it will be useful, |
| 11 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 12 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| 13 | * GNU General Public License for more details. |
| 14 | * |
| 15 | * You should have received a copy of the GNU General Public License along |
| 16 | * with this program; if not, write to the Free Software Foundation, Inc., |
| 17 | * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. |
| 18 | * |
| 19 | * |
| 20 | * File: wpa2.c |
| 21 | * |
| 22 | * Purpose: Handles the Basic Service Set & Node Database functions |
| 23 | * |
| 24 | * Functions: |
| 25 | * |
| 26 | * Revision History: |
| 27 | * |
| 28 | * Author: Yiching Chen |
| 29 | * |
| 30 | * Date: Oct. 4, 2004 |
| 31 | * |
| 32 | */ |
Forest Bond | 92b9679 | 2009-06-13 07:38:31 -0400 | [diff] [blame] | 33 | |
Jim Lieb | 9d26d60 | 2009-08-12 14:54:08 -0700 | [diff] [blame] | 34 | #include "wpa2.h" |
Jim Lieb | 9d26d60 | 2009-08-12 14:54:08 -0700 | [diff] [blame] | 35 | #include "device.h" |
Forest Bond | 92b9679 | 2009-06-13 07:38:31 -0400 | [diff] [blame] | 36 | |
| 37 | /*--------------------- Static Definitions -------------------------*/ |
| 38 | static int msglevel =MSG_LEVEL_INFO; |
| 39 | //static int msglevel =MSG_LEVEL_DEBUG; |
| 40 | /*--------------------- Static Classes ----------------------------*/ |
| 41 | |
| 42 | /*--------------------- Static Variables --------------------------*/ |
| 43 | |
| 44 | const BYTE abyOUIGK[4] = { 0x00, 0x0F, 0xAC, 0x00 }; |
| 45 | const BYTE abyOUIWEP40[4] = { 0x00, 0x0F, 0xAC, 0x01 }; |
| 46 | const BYTE abyOUIWEP104[4] = { 0x00, 0x0F, 0xAC, 0x05 }; |
| 47 | const BYTE abyOUITKIP[4] = { 0x00, 0x0F, 0xAC, 0x02 }; |
| 48 | const BYTE abyOUICCMP[4] = { 0x00, 0x0F, 0xAC, 0x04 }; |
| 49 | |
| 50 | const BYTE abyOUI8021X[4] = { 0x00, 0x0F, 0xAC, 0x01 }; |
| 51 | const BYTE abyOUIPSK[4] = { 0x00, 0x0F, 0xAC, 0x02 }; |
| 52 | |
| 53 | |
| 54 | /*--------------------- Static Functions --------------------------*/ |
| 55 | |
| 56 | /*--------------------- Export Variables --------------------------*/ |
| 57 | |
| 58 | /*--------------------- Export Functions --------------------------*/ |
| 59 | |
| 60 | /*+ |
| 61 | * |
| 62 | * Description: |
| 63 | * Clear RSN information in BSSList. |
| 64 | * |
| 65 | * Parameters: |
| 66 | * In: |
| 67 | * pBSSNode - BSS list. |
| 68 | * Out: |
| 69 | * none |
| 70 | * |
| 71 | * Return Value: none. |
| 72 | * |
| 73 | -*/ |
| 74 | VOID |
| 75 | WPA2_ClearRSN ( |
| 76 | IN PKnownBSS pBSSNode |
| 77 | ) |
| 78 | { |
| 79 | int ii; |
| 80 | |
| 81 | pBSSNode->bWPA2Valid = FALSE; |
| 82 | |
| 83 | pBSSNode->byCSSGK = WLAN_11i_CSS_CCMP; |
| 84 | for (ii=0; ii < 4; ii ++) |
| 85 | pBSSNode->abyCSSPK[ii] = WLAN_11i_CSS_CCMP; |
| 86 | pBSSNode->wCSSPKCount = 1; |
| 87 | for (ii=0; ii < 4; ii ++) |
| 88 | pBSSNode->abyAKMSSAuthType[ii] = WLAN_11i_AKMSS_802_1X; |
| 89 | pBSSNode->wAKMSSAuthCount = 1; |
| 90 | pBSSNode->sRSNCapObj.bRSNCapExist = FALSE; |
| 91 | pBSSNode->sRSNCapObj.wRSNCap = 0; |
| 92 | } |
| 93 | |
| 94 | /*+ |
| 95 | * |
| 96 | * Description: |
| 97 | * Parse RSN IE. |
| 98 | * |
| 99 | * Parameters: |
| 100 | * In: |
| 101 | * pBSSNode - BSS list. |
| 102 | * pRSN - Pointer to the RSN IE. |
| 103 | * Out: |
| 104 | * none |
| 105 | * |
| 106 | * Return Value: none. |
| 107 | * |
| 108 | -*/ |
| 109 | VOID |
| 110 | WPA2vParseRSN ( |
| 111 | IN PKnownBSS pBSSNode, |
| 112 | IN PWLAN_IE_RSN pRSN |
| 113 | ) |
| 114 | { |
| 115 | int i, j; |
| 116 | WORD m = 0, n = 0; |
| 117 | PBYTE pbyOUI; |
| 118 | BOOL bUseGK = FALSE; |
| 119 | |
| 120 | DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"WPA2_ParseRSN: [%d]\n", pRSN->len); |
| 121 | |
| 122 | WPA2_ClearRSN(pBSSNode); |
| 123 | |
| 124 | if (pRSN->len == 2) { // ver(2) |
| 125 | if ((pRSN->byElementID == WLAN_EID_RSN) && (pRSN->wVersion == 1)) { |
| 126 | pBSSNode->bWPA2Valid = TRUE; |
| 127 | } |
| 128 | return; |
| 129 | } |
| 130 | |
| 131 | if (pRSN->len < 6) { // ver(2) + GK(4) |
| 132 | // invalid CSS, P802.11i/D10.0, p31 |
| 133 | return; |
| 134 | } |
| 135 | |
| 136 | // information element header makes sense |
| 137 | if ((pRSN->byElementID == WLAN_EID_RSN) && |
| 138 | (pRSN->wVersion == 1)) { |
| 139 | |
| 140 | DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Legal 802.11i RSN\n"); |
| 141 | |
| 142 | pbyOUI = &(pRSN->abyRSN[0]); |
Jim Lieb | 3e36259 | 2009-08-12 14:54:11 -0700 | [diff] [blame^] | 143 | if ( !memcmp(pbyOUI, abyOUIWEP40, 4)) |
Forest Bond | 92b9679 | 2009-06-13 07:38:31 -0400 | [diff] [blame] | 144 | pBSSNode->byCSSGK = WLAN_11i_CSS_WEP40; |
Jim Lieb | 3e36259 | 2009-08-12 14:54:11 -0700 | [diff] [blame^] | 145 | else if ( !memcmp(pbyOUI, abyOUITKIP, 4)) |
Forest Bond | 92b9679 | 2009-06-13 07:38:31 -0400 | [diff] [blame] | 146 | pBSSNode->byCSSGK = WLAN_11i_CSS_TKIP; |
Jim Lieb | 3e36259 | 2009-08-12 14:54:11 -0700 | [diff] [blame^] | 147 | else if ( !memcmp(pbyOUI, abyOUICCMP, 4)) |
Forest Bond | 92b9679 | 2009-06-13 07:38:31 -0400 | [diff] [blame] | 148 | pBSSNode->byCSSGK = WLAN_11i_CSS_CCMP; |
Jim Lieb | 3e36259 | 2009-08-12 14:54:11 -0700 | [diff] [blame^] | 149 | else if ( !memcmp(pbyOUI, abyOUIWEP104, 4)) |
Forest Bond | 92b9679 | 2009-06-13 07:38:31 -0400 | [diff] [blame] | 150 | pBSSNode->byCSSGK = WLAN_11i_CSS_WEP104; |
Jim Lieb | 3e36259 | 2009-08-12 14:54:11 -0700 | [diff] [blame^] | 151 | else if ( !memcmp(pbyOUI, abyOUIGK, 4)) { |
Forest Bond | 92b9679 | 2009-06-13 07:38:31 -0400 | [diff] [blame] | 152 | // invalid CSS, P802.11i/D10.0, p32 |
| 153 | return; |
| 154 | } else |
| 155 | // any vendor checks here |
| 156 | pBSSNode->byCSSGK = WLAN_11i_CSS_UNKNOWN; |
| 157 | |
| 158 | DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"802.11i CSS: %X\n", pBSSNode->byCSSGK); |
| 159 | |
| 160 | if (pRSN->len == 6) { |
| 161 | pBSSNode->bWPA2Valid = TRUE; |
| 162 | return; |
| 163 | } |
| 164 | |
| 165 | if (pRSN->len >= 8) { // ver(2) + GK(4) + PK count(2) |
| 166 | pBSSNode->wCSSPKCount = *((PWORD) &(pRSN->abyRSN[4])); |
| 167 | j = 0; |
| 168 | pbyOUI = &(pRSN->abyRSN[6]); |
| 169 | |
| 170 | for (i = 0; (i < pBSSNode->wCSSPKCount) && (j < sizeof(pBSSNode->abyCSSPK)/sizeof(BYTE)); i++) { |
| 171 | |
| 172 | if (pRSN->len >= 8+i*4+4) { // ver(2)+GK(4)+PKCnt(2)+PKS(4*i) |
Jim Lieb | 3e36259 | 2009-08-12 14:54:11 -0700 | [diff] [blame^] | 173 | if ( !memcmp(pbyOUI, abyOUIGK, 4)) { |
Forest Bond | 92b9679 | 2009-06-13 07:38:31 -0400 | [diff] [blame] | 174 | pBSSNode->abyCSSPK[j++] = WLAN_11i_CSS_USE_GROUP; |
| 175 | bUseGK = TRUE; |
Jim Lieb | 3e36259 | 2009-08-12 14:54:11 -0700 | [diff] [blame^] | 176 | } else if ( !memcmp(pbyOUI, abyOUIWEP40, 4)) { |
Forest Bond | 92b9679 | 2009-06-13 07:38:31 -0400 | [diff] [blame] | 177 | // Invialid CSS, continue to parsing |
Jim Lieb | 3e36259 | 2009-08-12 14:54:11 -0700 | [diff] [blame^] | 178 | } else if ( !memcmp(pbyOUI, abyOUITKIP, 4)) { |
Forest Bond | 92b9679 | 2009-06-13 07:38:31 -0400 | [diff] [blame] | 179 | if (pBSSNode->byCSSGK != WLAN_11i_CSS_CCMP) |
| 180 | pBSSNode->abyCSSPK[j++] = WLAN_11i_CSS_TKIP; |
| 181 | else |
| 182 | ; // Invialid CSS, continue to parsing |
Jim Lieb | 3e36259 | 2009-08-12 14:54:11 -0700 | [diff] [blame^] | 183 | } else if ( !memcmp(pbyOUI, abyOUICCMP, 4)) { |
Forest Bond | 92b9679 | 2009-06-13 07:38:31 -0400 | [diff] [blame] | 184 | pBSSNode->abyCSSPK[j++] = WLAN_11i_CSS_CCMP; |
Jim Lieb | 3e36259 | 2009-08-12 14:54:11 -0700 | [diff] [blame^] | 185 | } else if ( !memcmp(pbyOUI, abyOUIWEP104, 4)) { |
Forest Bond | 92b9679 | 2009-06-13 07:38:31 -0400 | [diff] [blame] | 186 | // Invialid CSS, continue to parsing |
| 187 | } else { |
| 188 | // any vendor checks here |
| 189 | pBSSNode->abyCSSPK[j++] = WLAN_11i_CSS_UNKNOWN; |
| 190 | } |
| 191 | pbyOUI += 4; |
| 192 | DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"abyCSSPK[%d]: %X\n", j-1, pBSSNode->abyCSSPK[j-1]); |
| 193 | } else |
| 194 | break; |
| 195 | } //for |
| 196 | |
| 197 | if (bUseGK == TRUE) { |
| 198 | if (j != 1) { |
| 199 | // invalid CSS, This should be only PK CSS. |
| 200 | return; |
| 201 | } |
| 202 | if (pBSSNode->byCSSGK == WLAN_11i_CSS_CCMP) { |
| 203 | // invalid CSS, If CCMP is enable , PK can't be CSSGK. |
| 204 | return; |
| 205 | } |
| 206 | } |
| 207 | if ((pBSSNode->wCSSPKCount != 0) && (j == 0)) { |
| 208 | // invalid CSS, No valid PK. |
| 209 | return; |
| 210 | } |
| 211 | pBSSNode->wCSSPKCount = (WORD)j; |
| 212 | DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"wCSSPKCount: %d\n", pBSSNode->wCSSPKCount); |
| 213 | } |
| 214 | |
| 215 | m = *((PWORD) &(pRSN->abyRSN[4])); |
| 216 | |
| 217 | if (pRSN->len >= 10+m*4) { // ver(2) + GK(4) + PK count(2) + PKS(4*m) + AKMSS count(2) |
| 218 | pBSSNode->wAKMSSAuthCount = *((PWORD) &(pRSN->abyRSN[6+4*m]));; |
| 219 | j = 0; |
| 220 | pbyOUI = &(pRSN->abyRSN[8+4*m]); |
| 221 | for (i = 0; (i < pBSSNode->wAKMSSAuthCount) && (j < sizeof(pBSSNode->abyAKMSSAuthType)/sizeof(BYTE)); i++) { |
| 222 | if (pRSN->len >= 10+(m+i)*4+4) { // ver(2)+GK(4)+PKCnt(2)+PKS(4*m)+AKMSS(2)+AKS(4*i) |
Jim Lieb | 3e36259 | 2009-08-12 14:54:11 -0700 | [diff] [blame^] | 223 | if ( !memcmp(pbyOUI, abyOUI8021X, 4)) |
Forest Bond | 92b9679 | 2009-06-13 07:38:31 -0400 | [diff] [blame] | 224 | pBSSNode->abyAKMSSAuthType[j++] = WLAN_11i_AKMSS_802_1X; |
Jim Lieb | 3e36259 | 2009-08-12 14:54:11 -0700 | [diff] [blame^] | 225 | else if ( !memcmp(pbyOUI, abyOUIPSK, 4)) |
Forest Bond | 92b9679 | 2009-06-13 07:38:31 -0400 | [diff] [blame] | 226 | pBSSNode->abyAKMSSAuthType[j++] = WLAN_11i_AKMSS_PSK; |
| 227 | else |
| 228 | // any vendor checks here |
| 229 | pBSSNode->abyAKMSSAuthType[j++] = WLAN_11i_AKMSS_UNKNOWN; |
| 230 | DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"abyAKMSSAuthType[%d]: %X\n", j-1, pBSSNode->abyAKMSSAuthType[j-1]); |
| 231 | } else |
| 232 | break; |
| 233 | } |
| 234 | pBSSNode->wAKMSSAuthCount = (WORD)j; |
| 235 | DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"wAKMSSAuthCount: %d\n", pBSSNode->wAKMSSAuthCount); |
| 236 | |
| 237 | n = *((PWORD) &(pRSN->abyRSN[6+4*m]));; |
| 238 | if (pRSN->len >= 12+4*m+4*n) { // ver(2)+GK(4)+PKCnt(2)+PKS(4*m)+AKMSSCnt(2)+AKMSS(4*n)+Cap(2) |
| 239 | pBSSNode->sRSNCapObj.bRSNCapExist = TRUE; |
| 240 | pBSSNode->sRSNCapObj.wRSNCap = *((PWORD) &(pRSN->abyRSN[8+4*m+4*n])); |
| 241 | } |
| 242 | } |
| 243 | //ignore PMKID lists bcs only (Re)Assocrequest has this field |
| 244 | pBSSNode->bWPA2Valid = TRUE; |
| 245 | } |
| 246 | } |
| 247 | |
| 248 | |
| 249 | /*+ |
| 250 | * |
| 251 | * Description: |
| 252 | * Set WPA IEs |
| 253 | * |
| 254 | * Parameters: |
| 255 | * In: |
| 256 | * pMgmtHandle - Pointer to management object |
| 257 | * Out: |
| 258 | * pRSNIEs - Pointer to the RSN IE to set. |
| 259 | * |
| 260 | * Return Value: length of IEs. |
| 261 | * |
| 262 | -*/ |
| 263 | UINT |
| 264 | WPA2uSetIEs( |
| 265 | IN PVOID pMgmtHandle, |
| 266 | OUT PWLAN_IE_RSN pRSNIEs |
| 267 | ) |
| 268 | { |
| 269 | PSMgmtObject pMgmt = (PSMgmtObject) pMgmtHandle; |
| 270 | PBYTE pbyBuffer = NULL; |
| 271 | UINT ii = 0; |
| 272 | PWORD pwPMKID = NULL; |
| 273 | |
| 274 | if (pRSNIEs == NULL) { |
| 275 | return(0); |
| 276 | } |
| 277 | if (((pMgmt->eAuthenMode == WMAC_AUTH_WPA2) || |
| 278 | (pMgmt->eAuthenMode == WMAC_AUTH_WPA2PSK)) && |
| 279 | (pMgmt->pCurrBSS != NULL)) { |
| 280 | /* WPA2 IE */ |
| 281 | pbyBuffer = (PBYTE) pRSNIEs; |
| 282 | pRSNIEs->byElementID = WLAN_EID_RSN; |
| 283 | pRSNIEs->len = 6; //Version(2)+GK(4) |
| 284 | pRSNIEs->wVersion = 1; |
| 285 | //Group Key Cipher Suite |
| 286 | pRSNIEs->abyRSN[0] = 0x00; |
| 287 | pRSNIEs->abyRSN[1] = 0x0F; |
| 288 | pRSNIEs->abyRSN[2] = 0xAC; |
| 289 | if (pMgmt->byCSSGK == KEY_CTL_WEP) { |
| 290 | pRSNIEs->abyRSN[3] = pMgmt->pCurrBSS->byCSSGK; |
| 291 | } else if (pMgmt->byCSSGK == KEY_CTL_TKIP) { |
| 292 | pRSNIEs->abyRSN[3] = WLAN_11i_CSS_TKIP; |
| 293 | } else if (pMgmt->byCSSGK == KEY_CTL_CCMP) { |
| 294 | pRSNIEs->abyRSN[3] = WLAN_11i_CSS_CCMP; |
| 295 | } else { |
| 296 | pRSNIEs->abyRSN[3] = WLAN_11i_CSS_UNKNOWN; |
| 297 | } |
| 298 | |
| 299 | // Pairwise Key Cipher Suite |
| 300 | pRSNIEs->abyRSN[4] = 1; |
| 301 | pRSNIEs->abyRSN[5] = 0; |
| 302 | pRSNIEs->abyRSN[6] = 0x00; |
| 303 | pRSNIEs->abyRSN[7] = 0x0F; |
| 304 | pRSNIEs->abyRSN[8] = 0xAC; |
| 305 | if (pMgmt->byCSSPK == KEY_CTL_TKIP) { |
| 306 | pRSNIEs->abyRSN[9] = WLAN_11i_CSS_TKIP; |
| 307 | } else if (pMgmt->byCSSPK == KEY_CTL_CCMP) { |
| 308 | pRSNIEs->abyRSN[9] = WLAN_11i_CSS_CCMP; |
| 309 | } else if (pMgmt->byCSSPK == KEY_CTL_NONE) { |
| 310 | pRSNIEs->abyRSN[9] = WLAN_11i_CSS_USE_GROUP; |
| 311 | } else { |
| 312 | pRSNIEs->abyRSN[9] = WLAN_11i_CSS_UNKNOWN; |
| 313 | } |
| 314 | pRSNIEs->len += 6; |
| 315 | |
| 316 | // Auth Key Management Suite |
| 317 | pRSNIEs->abyRSN[10] = 1; |
| 318 | pRSNIEs->abyRSN[11] = 0; |
| 319 | pRSNIEs->abyRSN[12] = 0x00; |
| 320 | pRSNIEs->abyRSN[13] = 0x0F; |
| 321 | pRSNIEs->abyRSN[14] = 0xAC; |
| 322 | if (pMgmt->eAuthenMode == WMAC_AUTH_WPA2PSK) { |
| 323 | pRSNIEs->abyRSN[15] = WLAN_11i_AKMSS_PSK; |
| 324 | } else if (pMgmt->eAuthenMode == WMAC_AUTH_WPA2) { |
| 325 | pRSNIEs->abyRSN[15] = WLAN_11i_AKMSS_802_1X; |
| 326 | } else { |
| 327 | pRSNIEs->abyRSN[15] = WLAN_11i_AKMSS_UNKNOWN; |
| 328 | } |
| 329 | pRSNIEs->len +=6; |
| 330 | |
| 331 | // RSN Capabilites |
| 332 | if (pMgmt->pCurrBSS->sRSNCapObj.bRSNCapExist == TRUE) { |
Jim Lieb | 3e36259 | 2009-08-12 14:54:11 -0700 | [diff] [blame^] | 333 | memcpy(&pRSNIEs->abyRSN[16], &pMgmt->pCurrBSS->sRSNCapObj.wRSNCap, 2); |
Forest Bond | 92b9679 | 2009-06-13 07:38:31 -0400 | [diff] [blame] | 334 | } else { |
| 335 | pRSNIEs->abyRSN[16] = 0; |
| 336 | pRSNIEs->abyRSN[17] = 0; |
| 337 | } |
| 338 | pRSNIEs->len +=2; |
| 339 | |
| 340 | if ((pMgmt->gsPMKIDCache.BSSIDInfoCount > 0) && |
| 341 | (pMgmt->bRoaming == TRUE) && |
| 342 | (pMgmt->eAuthenMode == WMAC_AUTH_WPA2)) { |
| 343 | // RSN PMKID |
| 344 | pwPMKID = (PWORD)(&pRSNIEs->abyRSN[18]); // Point to PMKID count |
| 345 | *pwPMKID = 0; // Initialize PMKID count |
| 346 | pbyBuffer = &pRSNIEs->abyRSN[20]; // Point to PMKID list |
| 347 | for (ii = 0; ii < pMgmt->gsPMKIDCache.BSSIDInfoCount; ii++) { |
Jim Lieb | 3e36259 | 2009-08-12 14:54:11 -0700 | [diff] [blame^] | 348 | if ( !memcmp(&pMgmt->gsPMKIDCache.BSSIDInfo[ii].abyBSSID[0], pMgmt->abyCurrBSSID, U_ETHER_ADDR_LEN)) { |
Forest Bond | 92b9679 | 2009-06-13 07:38:31 -0400 | [diff] [blame] | 349 | (*pwPMKID) ++; |
Jim Lieb | 3e36259 | 2009-08-12 14:54:11 -0700 | [diff] [blame^] | 350 | memcpy(pbyBuffer, pMgmt->gsPMKIDCache.BSSIDInfo[ii].abyPMKID, 16); |
Forest Bond | 92b9679 | 2009-06-13 07:38:31 -0400 | [diff] [blame] | 351 | pbyBuffer += 16; |
| 352 | } |
| 353 | } |
| 354 | if (*pwPMKID != 0) { |
| 355 | pRSNIEs->len += (2 + (*pwPMKID)*16); |
| 356 | } else { |
| 357 | pbyBuffer = &pRSNIEs->abyRSN[18]; |
| 358 | } |
| 359 | } |
| 360 | return(pRSNIEs->len + WLAN_IEHDR_LEN); |
| 361 | } |
| 362 | return(0); |
| 363 | } |