Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame^] | 1 | /* |
| 2 | * hostapd / EAP-MSCHAPv2 (draft-kamath-pppext-eap-mschapv2-00.txt) server |
| 3 | * Copyright (c) 2004-2007, Jouni Malinen <j@w1.fi> |
| 4 | * |
| 5 | * This program is free software; you can redistribute it and/or modify |
| 6 | * it under the terms of the GNU General Public License version 2 as |
| 7 | * published by the Free Software Foundation. |
| 8 | * |
| 9 | * Alternatively, this software may be distributed under the terms of BSD |
| 10 | * license. |
| 11 | * |
| 12 | * See README and COPYING for more details. |
| 13 | */ |
| 14 | |
| 15 | #include "includes.h" |
| 16 | |
| 17 | #include "common.h" |
| 18 | #include "crypto/ms_funcs.h" |
| 19 | #include "crypto/random.h" |
| 20 | #include "eap_i.h" |
| 21 | |
| 22 | |
| 23 | struct eap_mschapv2_hdr { |
| 24 | u8 op_code; /* MSCHAPV2_OP_* */ |
| 25 | u8 mschapv2_id; /* must be changed for challenges, but not for |
| 26 | * success/failure */ |
| 27 | u8 ms_length[2]; /* Note: misaligned; length - 5 */ |
| 28 | /* followed by data */ |
| 29 | } STRUCT_PACKED; |
| 30 | |
| 31 | #define MSCHAPV2_OP_CHALLENGE 1 |
| 32 | #define MSCHAPV2_OP_RESPONSE 2 |
| 33 | #define MSCHAPV2_OP_SUCCESS 3 |
| 34 | #define MSCHAPV2_OP_FAILURE 4 |
| 35 | #define MSCHAPV2_OP_CHANGE_PASSWORD 7 |
| 36 | |
| 37 | #define MSCHAPV2_RESP_LEN 49 |
| 38 | |
| 39 | #define ERROR_RESTRICTED_LOGON_HOURS 646 |
| 40 | #define ERROR_ACCT_DISABLED 647 |
| 41 | #define ERROR_PASSWD_EXPIRED 648 |
| 42 | #define ERROR_NO_DIALIN_PERMISSION 649 |
| 43 | #define ERROR_AUTHENTICATION_FAILURE 691 |
| 44 | #define ERROR_CHANGING_PASSWORD 709 |
| 45 | |
| 46 | #define PASSWD_CHANGE_CHAL_LEN 16 |
| 47 | #define MSCHAPV2_KEY_LEN 16 |
| 48 | |
| 49 | |
| 50 | #define CHALLENGE_LEN 16 |
| 51 | |
| 52 | struct eap_mschapv2_data { |
| 53 | u8 auth_challenge[CHALLENGE_LEN]; |
| 54 | int auth_challenge_from_tls; |
| 55 | u8 *peer_challenge; |
| 56 | u8 auth_response[20]; |
| 57 | enum { CHALLENGE, SUCCESS_REQ, FAILURE_REQ, SUCCESS, FAILURE } state; |
| 58 | u8 resp_mschapv2_id; |
| 59 | u8 master_key[16]; |
| 60 | int master_key_valid; |
| 61 | }; |
| 62 | |
| 63 | |
| 64 | static void * eap_mschapv2_init(struct eap_sm *sm) |
| 65 | { |
| 66 | struct eap_mschapv2_data *data; |
| 67 | |
| 68 | data = os_zalloc(sizeof(*data)); |
| 69 | if (data == NULL) |
| 70 | return NULL; |
| 71 | data->state = CHALLENGE; |
| 72 | |
| 73 | if (sm->auth_challenge) { |
| 74 | os_memcpy(data->auth_challenge, sm->auth_challenge, |
| 75 | CHALLENGE_LEN); |
| 76 | data->auth_challenge_from_tls = 1; |
| 77 | } |
| 78 | |
| 79 | if (sm->peer_challenge) { |
| 80 | data->peer_challenge = os_malloc(CHALLENGE_LEN); |
| 81 | if (data->peer_challenge == NULL) { |
| 82 | os_free(data); |
| 83 | return NULL; |
| 84 | } |
| 85 | os_memcpy(data->peer_challenge, sm->peer_challenge, |
| 86 | CHALLENGE_LEN); |
| 87 | } |
| 88 | |
| 89 | return data; |
| 90 | } |
| 91 | |
| 92 | |
| 93 | static void eap_mschapv2_reset(struct eap_sm *sm, void *priv) |
| 94 | { |
| 95 | struct eap_mschapv2_data *data = priv; |
| 96 | if (data == NULL) |
| 97 | return; |
| 98 | |
| 99 | os_free(data->peer_challenge); |
| 100 | os_free(data); |
| 101 | } |
| 102 | |
| 103 | |
| 104 | static struct wpabuf * eap_mschapv2_build_challenge( |
| 105 | struct eap_sm *sm, struct eap_mschapv2_data *data, u8 id) |
| 106 | { |
| 107 | struct wpabuf *req; |
| 108 | struct eap_mschapv2_hdr *ms; |
| 109 | char *name = "hostapd"; /* TODO: make this configurable */ |
| 110 | size_t ms_len; |
| 111 | |
| 112 | if (!data->auth_challenge_from_tls && |
| 113 | random_get_bytes(data->auth_challenge, CHALLENGE_LEN)) { |
| 114 | wpa_printf(MSG_ERROR, "EAP-MSCHAPV2: Failed to get random " |
| 115 | "data"); |
| 116 | data->state = FAILURE; |
| 117 | return NULL; |
| 118 | } |
| 119 | |
| 120 | ms_len = sizeof(*ms) + 1 + CHALLENGE_LEN + os_strlen(name); |
| 121 | req = eap_msg_alloc(EAP_VENDOR_IETF, EAP_TYPE_MSCHAPV2, ms_len, |
| 122 | EAP_CODE_REQUEST, id); |
| 123 | if (req == NULL) { |
| 124 | wpa_printf(MSG_ERROR, "EAP-MSCHAPV2: Failed to allocate memory" |
| 125 | " for request"); |
| 126 | data->state = FAILURE; |
| 127 | return NULL; |
| 128 | } |
| 129 | |
| 130 | ms = wpabuf_put(req, sizeof(*ms)); |
| 131 | ms->op_code = MSCHAPV2_OP_CHALLENGE; |
| 132 | ms->mschapv2_id = id; |
| 133 | WPA_PUT_BE16(ms->ms_length, ms_len); |
| 134 | |
| 135 | wpabuf_put_u8(req, CHALLENGE_LEN); |
| 136 | if (!data->auth_challenge_from_tls) |
| 137 | wpabuf_put_data(req, data->auth_challenge, CHALLENGE_LEN); |
| 138 | else |
| 139 | wpabuf_put(req, CHALLENGE_LEN); |
| 140 | wpa_hexdump(MSG_MSGDUMP, "EAP-MSCHAPV2: Challenge", |
| 141 | data->auth_challenge, CHALLENGE_LEN); |
| 142 | wpabuf_put_data(req, name, os_strlen(name)); |
| 143 | |
| 144 | return req; |
| 145 | } |
| 146 | |
| 147 | |
| 148 | static struct wpabuf * eap_mschapv2_build_success_req( |
| 149 | struct eap_sm *sm, struct eap_mschapv2_data *data, u8 id) |
| 150 | { |
| 151 | struct wpabuf *req; |
| 152 | struct eap_mschapv2_hdr *ms; |
| 153 | u8 *msg; |
| 154 | char *message = "OK"; |
| 155 | size_t ms_len; |
| 156 | |
| 157 | ms_len = sizeof(*ms) + 2 + 2 * sizeof(data->auth_response) + 1 + 2 + |
| 158 | os_strlen(message); |
| 159 | req = eap_msg_alloc(EAP_VENDOR_IETF, EAP_TYPE_MSCHAPV2, ms_len, |
| 160 | EAP_CODE_REQUEST, id); |
| 161 | if (req == NULL) { |
| 162 | wpa_printf(MSG_ERROR, "EAP-MSCHAPV2: Failed to allocate memory" |
| 163 | " for request"); |
| 164 | data->state = FAILURE; |
| 165 | return NULL; |
| 166 | } |
| 167 | |
| 168 | ms = wpabuf_put(req, sizeof(*ms)); |
| 169 | ms->op_code = MSCHAPV2_OP_SUCCESS; |
| 170 | ms->mschapv2_id = data->resp_mschapv2_id; |
| 171 | WPA_PUT_BE16(ms->ms_length, ms_len); |
| 172 | msg = (u8 *) (ms + 1); |
| 173 | |
| 174 | wpabuf_put_u8(req, 'S'); |
| 175 | wpabuf_put_u8(req, '='); |
| 176 | wpa_snprintf_hex_uppercase( |
| 177 | wpabuf_put(req, sizeof(data->auth_response) * 2), |
| 178 | sizeof(data->auth_response) * 2 + 1, |
| 179 | data->auth_response, sizeof(data->auth_response)); |
| 180 | wpabuf_put_u8(req, ' '); |
| 181 | wpabuf_put_u8(req, 'M'); |
| 182 | wpabuf_put_u8(req, '='); |
| 183 | wpabuf_put_data(req, message, os_strlen(message)); |
| 184 | |
| 185 | wpa_hexdump_ascii(MSG_MSGDUMP, "EAP-MSCHAPV2: Success Request Message", |
| 186 | msg, ms_len - sizeof(*ms)); |
| 187 | |
| 188 | return req; |
| 189 | } |
| 190 | |
| 191 | |
| 192 | static struct wpabuf * eap_mschapv2_build_failure_req( |
| 193 | struct eap_sm *sm, struct eap_mschapv2_data *data, u8 id) |
| 194 | { |
| 195 | struct wpabuf *req; |
| 196 | struct eap_mschapv2_hdr *ms; |
| 197 | char *message = "E=691 R=0 C=00000000000000000000000000000000 V=3 " |
| 198 | "M=FAILED"; |
| 199 | size_t ms_len; |
| 200 | |
| 201 | ms_len = sizeof(*ms) + os_strlen(message); |
| 202 | req = eap_msg_alloc(EAP_VENDOR_IETF, EAP_TYPE_MSCHAPV2, ms_len, |
| 203 | EAP_CODE_REQUEST, id); |
| 204 | if (req == NULL) { |
| 205 | wpa_printf(MSG_ERROR, "EAP-MSCHAPV2: Failed to allocate memory" |
| 206 | " for request"); |
| 207 | data->state = FAILURE; |
| 208 | return NULL; |
| 209 | } |
| 210 | |
| 211 | ms = wpabuf_put(req, sizeof(*ms)); |
| 212 | ms->op_code = MSCHAPV2_OP_FAILURE; |
| 213 | ms->mschapv2_id = data->resp_mschapv2_id; |
| 214 | WPA_PUT_BE16(ms->ms_length, ms_len); |
| 215 | |
| 216 | wpabuf_put_data(req, message, os_strlen(message)); |
| 217 | |
| 218 | wpa_hexdump_ascii(MSG_MSGDUMP, "EAP-MSCHAPV2: Failure Request Message", |
| 219 | (u8 *) message, os_strlen(message)); |
| 220 | |
| 221 | return req; |
| 222 | } |
| 223 | |
| 224 | |
| 225 | static struct wpabuf * eap_mschapv2_buildReq(struct eap_sm *sm, void *priv, |
| 226 | u8 id) |
| 227 | { |
| 228 | struct eap_mschapv2_data *data = priv; |
| 229 | |
| 230 | switch (data->state) { |
| 231 | case CHALLENGE: |
| 232 | return eap_mschapv2_build_challenge(sm, data, id); |
| 233 | case SUCCESS_REQ: |
| 234 | return eap_mschapv2_build_success_req(sm, data, id); |
| 235 | case FAILURE_REQ: |
| 236 | return eap_mschapv2_build_failure_req(sm, data, id); |
| 237 | default: |
| 238 | wpa_printf(MSG_DEBUG, "EAP-MSCHAPV2: Unknown state %d in " |
| 239 | "buildReq", data->state); |
| 240 | break; |
| 241 | } |
| 242 | return NULL; |
| 243 | } |
| 244 | |
| 245 | |
| 246 | static Boolean eap_mschapv2_check(struct eap_sm *sm, void *priv, |
| 247 | struct wpabuf *respData) |
| 248 | { |
| 249 | struct eap_mschapv2_data *data = priv; |
| 250 | struct eap_mschapv2_hdr *resp; |
| 251 | const u8 *pos; |
| 252 | size_t len; |
| 253 | |
| 254 | pos = eap_hdr_validate(EAP_VENDOR_IETF, EAP_TYPE_MSCHAPV2, respData, |
| 255 | &len); |
| 256 | if (pos == NULL || len < 1) { |
| 257 | wpa_printf(MSG_INFO, "EAP-MSCHAPV2: Invalid frame"); |
| 258 | return TRUE; |
| 259 | } |
| 260 | |
| 261 | resp = (struct eap_mschapv2_hdr *) pos; |
| 262 | if (data->state == CHALLENGE && |
| 263 | resp->op_code != MSCHAPV2_OP_RESPONSE) { |
| 264 | wpa_printf(MSG_DEBUG, "EAP-MSCHAPV2: Expected Response - " |
| 265 | "ignore op %d", resp->op_code); |
| 266 | return TRUE; |
| 267 | } |
| 268 | |
| 269 | if (data->state == SUCCESS_REQ && |
| 270 | resp->op_code != MSCHAPV2_OP_SUCCESS && |
| 271 | resp->op_code != MSCHAPV2_OP_FAILURE) { |
| 272 | wpa_printf(MSG_DEBUG, "EAP-MSCHAPV2: Expected Success or " |
| 273 | "Failure - ignore op %d", resp->op_code); |
| 274 | return TRUE; |
| 275 | } |
| 276 | |
| 277 | if (data->state == FAILURE_REQ && |
| 278 | resp->op_code != MSCHAPV2_OP_FAILURE) { |
| 279 | wpa_printf(MSG_DEBUG, "EAP-MSCHAPV2: Expected Failure " |
| 280 | "- ignore op %d", resp->op_code); |
| 281 | return TRUE; |
| 282 | } |
| 283 | |
| 284 | return FALSE; |
| 285 | } |
| 286 | |
| 287 | |
| 288 | static void eap_mschapv2_process_response(struct eap_sm *sm, |
| 289 | struct eap_mschapv2_data *data, |
| 290 | struct wpabuf *respData) |
| 291 | { |
| 292 | struct eap_mschapv2_hdr *resp; |
| 293 | const u8 *pos, *end, *peer_challenge, *nt_response, *name; |
| 294 | u8 flags; |
| 295 | size_t len, name_len, i; |
| 296 | u8 expected[24]; |
| 297 | const u8 *username, *user; |
| 298 | size_t username_len, user_len; |
| 299 | int res; |
| 300 | |
| 301 | pos = eap_hdr_validate(EAP_VENDOR_IETF, EAP_TYPE_MSCHAPV2, respData, |
| 302 | &len); |
| 303 | if (pos == NULL || len < 1) |
| 304 | return; /* Should not happen - frame already validated */ |
| 305 | |
| 306 | end = pos + len; |
| 307 | resp = (struct eap_mschapv2_hdr *) pos; |
| 308 | pos = (u8 *) (resp + 1); |
| 309 | |
| 310 | if (len < sizeof(*resp) + 1 + 49 || |
| 311 | resp->op_code != MSCHAPV2_OP_RESPONSE || |
| 312 | pos[0] != 49) { |
| 313 | wpa_hexdump_buf(MSG_DEBUG, "EAP-MSCHAPV2: Invalid response", |
| 314 | respData); |
| 315 | data->state = FAILURE; |
| 316 | return; |
| 317 | } |
| 318 | data->resp_mschapv2_id = resp->mschapv2_id; |
| 319 | pos++; |
| 320 | peer_challenge = pos; |
| 321 | pos += 16 + 8; |
| 322 | nt_response = pos; |
| 323 | pos += 24; |
| 324 | flags = *pos++; |
| 325 | name = pos; |
| 326 | name_len = end - name; |
| 327 | |
| 328 | if (data->peer_challenge) { |
| 329 | wpa_printf(MSG_DEBUG, "EAP-MSCHAPV2: Using pre-configured " |
| 330 | "Peer-Challenge"); |
| 331 | peer_challenge = data->peer_challenge; |
| 332 | } |
| 333 | wpa_hexdump(MSG_MSGDUMP, "EAP-MSCHAPV2: Peer-Challenge", |
| 334 | peer_challenge, 16); |
| 335 | wpa_hexdump(MSG_MSGDUMP, "EAP-MSCHAPV2: NT-Response", nt_response, 24); |
| 336 | wpa_printf(MSG_MSGDUMP, "EAP-MSCHAPV2: Flags 0x%x", flags); |
| 337 | wpa_hexdump_ascii(MSG_MSGDUMP, "EAP-MSCHAPV2: Name", name, name_len); |
| 338 | |
| 339 | /* MSCHAPv2 does not include optional domain name in the |
| 340 | * challenge-response calculation, so remove domain prefix |
| 341 | * (if present). */ |
| 342 | username = sm->identity; |
| 343 | username_len = sm->identity_len; |
| 344 | for (i = 0; i < username_len; i++) { |
| 345 | if (username[i] == '\\') { |
| 346 | username_len -= i + 1; |
| 347 | username += i + 1; |
| 348 | break; |
| 349 | } |
| 350 | } |
| 351 | |
| 352 | user = name; |
| 353 | user_len = name_len; |
| 354 | for (i = 0; i < user_len; i++) { |
| 355 | if (user[i] == '\\') { |
| 356 | user_len -= i + 1; |
| 357 | user += i + 1; |
| 358 | break; |
| 359 | } |
| 360 | } |
| 361 | |
| 362 | if (username_len != user_len || |
| 363 | os_memcmp(username, user, username_len) != 0) { |
| 364 | wpa_printf(MSG_DEBUG, "EAP-MSCHAPV2: Mismatch in user names"); |
| 365 | wpa_hexdump_ascii(MSG_DEBUG, "EAP-MSCHAPV2: Expected user " |
| 366 | "name", username, username_len); |
| 367 | wpa_hexdump_ascii(MSG_DEBUG, "EAP-MSCHAPV2: Received user " |
| 368 | "name", user, user_len); |
| 369 | data->state = FAILURE; |
| 370 | return; |
| 371 | } |
| 372 | |
| 373 | wpa_hexdump_ascii(MSG_MSGDUMP, "EAP-MSCHAPV2: User name", |
| 374 | username, username_len); |
| 375 | |
| 376 | if (sm->user->password_hash) { |
| 377 | res = generate_nt_response_pwhash(data->auth_challenge, |
| 378 | peer_challenge, |
| 379 | username, username_len, |
| 380 | sm->user->password, |
| 381 | expected); |
| 382 | } else { |
| 383 | res = generate_nt_response(data->auth_challenge, |
| 384 | peer_challenge, |
| 385 | username, username_len, |
| 386 | sm->user->password, |
| 387 | sm->user->password_len, |
| 388 | expected); |
| 389 | } |
| 390 | if (res) { |
| 391 | data->state = FAILURE; |
| 392 | return; |
| 393 | } |
| 394 | |
| 395 | if (os_memcmp(nt_response, expected, 24) == 0) { |
| 396 | const u8 *pw_hash; |
| 397 | u8 pw_hash_buf[16], pw_hash_hash[16]; |
| 398 | |
| 399 | wpa_printf(MSG_DEBUG, "EAP-MSCHAPV2: Correct NT-Response"); |
| 400 | data->state = SUCCESS_REQ; |
| 401 | |
| 402 | /* Authenticator response is not really needed yet, but |
| 403 | * calculate it here so that peer_challenge and username need |
| 404 | * not be saved. */ |
| 405 | if (sm->user->password_hash) { |
| 406 | pw_hash = sm->user->password; |
| 407 | } else { |
| 408 | nt_password_hash(sm->user->password, |
| 409 | sm->user->password_len, |
| 410 | pw_hash_buf); |
| 411 | pw_hash = pw_hash_buf; |
| 412 | } |
| 413 | generate_authenticator_response_pwhash( |
| 414 | pw_hash, peer_challenge, data->auth_challenge, |
| 415 | username, username_len, nt_response, |
| 416 | data->auth_response); |
| 417 | |
| 418 | hash_nt_password_hash(pw_hash, pw_hash_hash); |
| 419 | get_master_key(pw_hash_hash, nt_response, data->master_key); |
| 420 | data->master_key_valid = 1; |
| 421 | wpa_hexdump_key(MSG_DEBUG, "EAP-MSCHAPV2: Derived Master Key", |
| 422 | data->master_key, MSCHAPV2_KEY_LEN); |
| 423 | } else { |
| 424 | wpa_hexdump(MSG_MSGDUMP, "EAP-MSCHAPV2: Expected NT-Response", |
| 425 | expected, 24); |
| 426 | wpa_printf(MSG_DEBUG, "EAP-MSCHAPV2: Invalid NT-Response"); |
| 427 | data->state = FAILURE_REQ; |
| 428 | } |
| 429 | } |
| 430 | |
| 431 | |
| 432 | static void eap_mschapv2_process_success_resp(struct eap_sm *sm, |
| 433 | struct eap_mschapv2_data *data, |
| 434 | struct wpabuf *respData) |
| 435 | { |
| 436 | struct eap_mschapv2_hdr *resp; |
| 437 | const u8 *pos; |
| 438 | size_t len; |
| 439 | |
| 440 | pos = eap_hdr_validate(EAP_VENDOR_IETF, EAP_TYPE_MSCHAPV2, respData, |
| 441 | &len); |
| 442 | if (pos == NULL || len < 1) |
| 443 | return; /* Should not happen - frame already validated */ |
| 444 | |
| 445 | resp = (struct eap_mschapv2_hdr *) pos; |
| 446 | |
| 447 | if (resp->op_code == MSCHAPV2_OP_SUCCESS) { |
| 448 | wpa_printf(MSG_DEBUG, "EAP-MSCHAPV2: Received Success Response" |
| 449 | " - authentication completed successfully"); |
| 450 | data->state = SUCCESS; |
| 451 | } else { |
| 452 | wpa_printf(MSG_DEBUG, "EAP-MSCHAPV2: Did not receive Success " |
| 453 | "Response - peer rejected authentication"); |
| 454 | data->state = FAILURE; |
| 455 | } |
| 456 | } |
| 457 | |
| 458 | |
| 459 | static void eap_mschapv2_process_failure_resp(struct eap_sm *sm, |
| 460 | struct eap_mschapv2_data *data, |
| 461 | struct wpabuf *respData) |
| 462 | { |
| 463 | struct eap_mschapv2_hdr *resp; |
| 464 | const u8 *pos; |
| 465 | size_t len; |
| 466 | |
| 467 | pos = eap_hdr_validate(EAP_VENDOR_IETF, EAP_TYPE_MSCHAPV2, respData, |
| 468 | &len); |
| 469 | if (pos == NULL || len < 1) |
| 470 | return; /* Should not happen - frame already validated */ |
| 471 | |
| 472 | resp = (struct eap_mschapv2_hdr *) pos; |
| 473 | |
| 474 | if (resp->op_code == MSCHAPV2_OP_FAILURE) { |
| 475 | wpa_printf(MSG_DEBUG, "EAP-MSCHAPV2: Received Failure Response" |
| 476 | " - authentication failed"); |
| 477 | } else { |
| 478 | wpa_printf(MSG_DEBUG, "EAP-MSCHAPV2: Did not receive Failure " |
| 479 | "Response - authentication failed"); |
| 480 | } |
| 481 | |
| 482 | data->state = FAILURE; |
| 483 | } |
| 484 | |
| 485 | |
| 486 | static void eap_mschapv2_process(struct eap_sm *sm, void *priv, |
| 487 | struct wpabuf *respData) |
| 488 | { |
| 489 | struct eap_mschapv2_data *data = priv; |
| 490 | |
| 491 | if (sm->user == NULL || sm->user->password == NULL) { |
| 492 | wpa_printf(MSG_INFO, "EAP-MSCHAPV2: Password not configured"); |
| 493 | data->state = FAILURE; |
| 494 | return; |
| 495 | } |
| 496 | |
| 497 | switch (data->state) { |
| 498 | case CHALLENGE: |
| 499 | eap_mschapv2_process_response(sm, data, respData); |
| 500 | break; |
| 501 | case SUCCESS_REQ: |
| 502 | eap_mschapv2_process_success_resp(sm, data, respData); |
| 503 | break; |
| 504 | case FAILURE_REQ: |
| 505 | eap_mschapv2_process_failure_resp(sm, data, respData); |
| 506 | break; |
| 507 | default: |
| 508 | wpa_printf(MSG_DEBUG, "EAP-MSCHAPV2: Unknown state %d in " |
| 509 | "process", data->state); |
| 510 | break; |
| 511 | } |
| 512 | } |
| 513 | |
| 514 | |
| 515 | static Boolean eap_mschapv2_isDone(struct eap_sm *sm, void *priv) |
| 516 | { |
| 517 | struct eap_mschapv2_data *data = priv; |
| 518 | return data->state == SUCCESS || data->state == FAILURE; |
| 519 | } |
| 520 | |
| 521 | |
| 522 | static u8 * eap_mschapv2_getKey(struct eap_sm *sm, void *priv, size_t *len) |
| 523 | { |
| 524 | struct eap_mschapv2_data *data = priv; |
| 525 | u8 *key; |
| 526 | |
| 527 | if (data->state != SUCCESS || !data->master_key_valid) |
| 528 | return NULL; |
| 529 | |
| 530 | *len = 2 * MSCHAPV2_KEY_LEN; |
| 531 | key = os_malloc(*len); |
| 532 | if (key == NULL) |
| 533 | return NULL; |
| 534 | /* MSK = server MS-MPPE-Recv-Key | MS-MPPE-Send-Key */ |
| 535 | get_asymetric_start_key(data->master_key, key, MSCHAPV2_KEY_LEN, 0, 1); |
| 536 | get_asymetric_start_key(data->master_key, key + MSCHAPV2_KEY_LEN, |
| 537 | MSCHAPV2_KEY_LEN, 1, 1); |
| 538 | wpa_hexdump_key(MSG_DEBUG, "EAP-MSCHAPV2: Derived key", key, *len); |
| 539 | |
| 540 | return key; |
| 541 | } |
| 542 | |
| 543 | |
| 544 | static Boolean eap_mschapv2_isSuccess(struct eap_sm *sm, void *priv) |
| 545 | { |
| 546 | struct eap_mschapv2_data *data = priv; |
| 547 | return data->state == SUCCESS; |
| 548 | } |
| 549 | |
| 550 | |
| 551 | int eap_server_mschapv2_register(void) |
| 552 | { |
| 553 | struct eap_method *eap; |
| 554 | int ret; |
| 555 | |
| 556 | eap = eap_server_method_alloc(EAP_SERVER_METHOD_INTERFACE_VERSION, |
| 557 | EAP_VENDOR_IETF, EAP_TYPE_MSCHAPV2, |
| 558 | "MSCHAPV2"); |
| 559 | if (eap == NULL) |
| 560 | return -1; |
| 561 | |
| 562 | eap->init = eap_mschapv2_init; |
| 563 | eap->reset = eap_mschapv2_reset; |
| 564 | eap->buildReq = eap_mschapv2_buildReq; |
| 565 | eap->check = eap_mschapv2_check; |
| 566 | eap->process = eap_mschapv2_process; |
| 567 | eap->isDone = eap_mschapv2_isDone; |
| 568 | eap->getKey = eap_mschapv2_getKey; |
| 569 | eap->isSuccess = eap_mschapv2_isSuccess; |
| 570 | |
| 571 | ret = eap_server_method_register(eap); |
| 572 | if (ret) |
| 573 | eap_server_method_free(eap); |
| 574 | return ret; |
| 575 | } |