|
wpa_supplicant / hostapd 2.0
|
|
wpa_supplicant / hostapd 2.0
|
00001 00010 #ifndef EAP_SIM_COMMON_H 00011 #define EAP_SIM_COMMON_H 00012 00013 #define EAP_SIM_NONCE_S_LEN 16 00014 #define EAP_SIM_NONCE_MT_LEN 16 00015 #define EAP_SIM_MAC_LEN 16 00016 #define EAP_SIM_MK_LEN 20 00017 #define EAP_SIM_K_AUT_LEN 16 00018 #define EAP_SIM_K_ENCR_LEN 16 00019 #define EAP_SIM_KEYING_DATA_LEN 64 00020 #define EAP_SIM_IV_LEN 16 00021 #define EAP_SIM_KC_LEN 8 00022 #define EAP_SIM_SRES_LEN 4 00023 00024 #define GSM_RAND_LEN 16 00025 00026 #define EAP_SIM_VERSION 1 00027 00028 /* EAP-SIM Subtypes */ 00029 #define EAP_SIM_SUBTYPE_START 10 00030 #define EAP_SIM_SUBTYPE_CHALLENGE 11 00031 #define EAP_SIM_SUBTYPE_NOTIFICATION 12 00032 #define EAP_SIM_SUBTYPE_REAUTHENTICATION 13 00033 #define EAP_SIM_SUBTYPE_CLIENT_ERROR 14 00034 00035 /* AT_CLIENT_ERROR_CODE error codes */ 00036 #define EAP_SIM_UNABLE_TO_PROCESS_PACKET 0 00037 #define EAP_SIM_UNSUPPORTED_VERSION 1 00038 #define EAP_SIM_INSUFFICIENT_NUM_OF_CHAL 2 00039 #define EAP_SIM_RAND_NOT_FRESH 3 00040 00041 #define EAP_SIM_MAX_FAST_REAUTHS 1000 00042 00043 #define EAP_SIM_MAX_CHAL 3 00044 00045 00046 /* EAP-AKA Subtypes */ 00047 #define EAP_AKA_SUBTYPE_CHALLENGE 1 00048 #define EAP_AKA_SUBTYPE_AUTHENTICATION_REJECT 2 00049 #define EAP_AKA_SUBTYPE_SYNCHRONIZATION_FAILURE 4 00050 #define EAP_AKA_SUBTYPE_IDENTITY 5 00051 #define EAP_AKA_SUBTYPE_NOTIFICATION 12 00052 #define EAP_AKA_SUBTYPE_REAUTHENTICATION 13 00053 #define EAP_AKA_SUBTYPE_CLIENT_ERROR 14 00054 00055 /* AT_CLIENT_ERROR_CODE error codes */ 00056 #define EAP_AKA_UNABLE_TO_PROCESS_PACKET 0 00057 00058 #define EAP_AKA_RAND_LEN 16 00059 #define EAP_AKA_AUTN_LEN 16 00060 #define EAP_AKA_AUTS_LEN 14 00061 #define EAP_AKA_RES_MAX_LEN 16 00062 #define EAP_AKA_IK_LEN 16 00063 #define EAP_AKA_CK_LEN 16 00064 #define EAP_AKA_MAX_FAST_REAUTHS 1000 00065 #define EAP_AKA_MIN_RES_LEN 4 00066 #define EAP_AKA_MAX_RES_LEN 16 00067 #define EAP_AKA_CHECKCODE_LEN 20 00068 00069 #define EAP_AKA_PRIME_K_AUT_LEN 32 00070 #define EAP_AKA_PRIME_CHECKCODE_LEN 32 00071 #define EAP_AKA_PRIME_K_RE_LEN 32 00072 00073 struct wpabuf; 00074 00075 void eap_sim_derive_mk(const u8 *identity, size_t identity_len, 00076 const u8 *nonce_mt, u16 selected_version, 00077 const u8 *ver_list, size_t ver_list_len, 00078 int num_chal, const u8 *kc, u8 *mk); 00079 void eap_aka_derive_mk(const u8 *identity, size_t identity_len, 00080 const u8 *ik, const u8 *ck, u8 *mk); 00081 int eap_sim_derive_keys(const u8 *mk, u8 *k_encr, u8 *k_aut, u8 *msk, 00082 u8 *emsk); 00083 int eap_sim_derive_keys_reauth(u16 _counter, 00084 const u8 *identity, size_t identity_len, 00085 const u8 *nonce_s, const u8 *mk, u8 *msk, 00086 u8 *emsk); 00087 int eap_sim_verify_mac(const u8 *k_aut, const struct wpabuf *req, 00088 const u8 *mac, const u8 *extra, size_t extra_len); 00089 void eap_sim_add_mac(const u8 *k_aut, const u8 *msg, size_t msg_len, u8 *mac, 00090 const u8 *extra, size_t extra_len); 00091 00092 #if defined(EAP_AKA_PRIME) || defined(EAP_SERVER_AKA_PRIME) 00093 void eap_aka_prime_derive_keys(const u8 *identity, size_t identity_len, 00094 const u8 *ik, const u8 *ck, u8 *k_encr, 00095 u8 *k_aut, u8 *k_re, u8 *msk, u8 *emsk); 00096 int eap_aka_prime_derive_keys_reauth(const u8 *k_re, u16 counter, 00097 const u8 *identity, size_t identity_len, 00098 const u8 *nonce_s, u8 *msk, u8 *emsk); 00099 int eap_sim_verify_mac_sha256(const u8 *k_aut, const struct wpabuf *req, 00100 const u8 *mac, const u8 *extra, 00101 size_t extra_len); 00102 void eap_sim_add_mac_sha256(const u8 *k_aut, const u8 *msg, size_t msg_len, 00103 u8 *mac, const u8 *extra, size_t extra_len); 00104 00105 void eap_aka_prime_derive_ck_ik_prime(u8 *ck, u8 *ik, const u8 *sqn_ak, 00106 const u8 *network_name, 00107 size_t network_name_len); 00108 #else /* EAP_AKA_PRIME || EAP_SERVER_AKA_PRIME */ 00109 static inline void eap_aka_prime_derive_keys(const u8 *identity, 00110 size_t identity_len, 00111 const u8 *ik, const u8 *ck, 00112 u8 *k_encr, u8 *k_aut, u8 *k_re, 00113 u8 *msk, u8 *emsk) 00114 { 00115 } 00116 00117 static inline int eap_aka_prime_derive_keys_reauth(const u8 *k_re, u16 counter, 00118 const u8 *identity, 00119 size_t identity_len, 00120 const u8 *nonce_s, u8 *msk, 00121 u8 *emsk) 00122 { 00123 return -1; 00124 } 00125 00126 static inline int eap_sim_verify_mac_sha256(const u8 *k_aut, 00127 const struct wpabuf *req, 00128 const u8 *mac, const u8 *extra, 00129 size_t extra_len) 00130 { 00131 return -1; 00132 } 00133 #endif /* EAP_AKA_PRIME || EAP_SERVER_AKA_PRIME */ 00134 00135 00136 /* EAP-SIM/AKA Attributes (0..127 non-skippable) */ 00137 #define EAP_SIM_AT_RAND 1 00138 #define EAP_SIM_AT_AUTN 2 /* only AKA */ 00139 #define EAP_SIM_AT_RES 3 /* only AKA, only peer->server */ 00140 #define EAP_SIM_AT_AUTS 4 /* only AKA, only peer->server */ 00141 #define EAP_SIM_AT_PADDING 6 /* only encrypted */ 00142 #define EAP_SIM_AT_NONCE_MT 7 /* only SIM, only send */ 00143 #define EAP_SIM_AT_PERMANENT_ID_REQ 10 00144 #define EAP_SIM_AT_MAC 11 00145 #define EAP_SIM_AT_NOTIFICATION 12 00146 #define EAP_SIM_AT_ANY_ID_REQ 13 00147 #define EAP_SIM_AT_IDENTITY 14 /* only send */ 00148 #define EAP_SIM_AT_VERSION_LIST 15 /* only SIM */ 00149 #define EAP_SIM_AT_SELECTED_VERSION 16 /* only SIM */ 00150 #define EAP_SIM_AT_FULLAUTH_ID_REQ 17 00151 #define EAP_SIM_AT_COUNTER 19 /* only encrypted */ 00152 #define EAP_SIM_AT_COUNTER_TOO_SMALL 20 /* only encrypted */ 00153 #define EAP_SIM_AT_NONCE_S 21 /* only encrypted */ 00154 #define EAP_SIM_AT_CLIENT_ERROR_CODE 22 /* only send */ 00155 #define EAP_SIM_AT_KDF_INPUT 23 /* only AKA' */ 00156 #define EAP_SIM_AT_KDF 24 /* only AKA' */ 00157 #define EAP_SIM_AT_IV 129 00158 #define EAP_SIM_AT_ENCR_DATA 130 00159 #define EAP_SIM_AT_NEXT_PSEUDONYM 132 /* only encrypted */ 00160 #define EAP_SIM_AT_NEXT_REAUTH_ID 133 /* only encrypted */ 00161 #define EAP_SIM_AT_CHECKCODE 134 /* only AKA */ 00162 #define EAP_SIM_AT_RESULT_IND 135 00163 #define EAP_SIM_AT_BIDDING 136 00164 00165 /* AT_NOTIFICATION notification code values */ 00166 #define EAP_SIM_GENERAL_FAILURE_AFTER_AUTH 0 00167 #define EAP_SIM_TEMPORARILY_DENIED 1026 00168 #define EAP_SIM_NOT_SUBSCRIBED 1031 00169 #define EAP_SIM_GENERAL_FAILURE_BEFORE_AUTH 16384 00170 #define EAP_SIM_SUCCESS 32768 00171 00172 /* EAP-AKA' AT_KDF Key Derivation Function values */ 00173 #define EAP_AKA_PRIME_KDF 1 00174 00175 /* AT_BIDDING flags */ 00176 #define EAP_AKA_BIDDING_FLAG_D 0x8000 00177 00178 00179 enum eap_sim_id_req { 00180 NO_ID_REQ, ANY_ID, FULLAUTH_ID, PERMANENT_ID 00181 }; 00182 00183 00184 struct eap_sim_attrs { 00185 const u8 *rand, *autn, *mac, *iv, *encr_data, *version_list, *nonce_s; 00186 const u8 *next_pseudonym, *next_reauth_id; 00187 const u8 *nonce_mt, *identity, *res, *auts; 00188 const u8 *checkcode; 00189 const u8 *kdf_input; 00190 const u8 *bidding; 00191 size_t num_chal, version_list_len, encr_data_len; 00192 size_t next_pseudonym_len, next_reauth_id_len, identity_len, res_len; 00193 size_t res_len_bits; 00194 size_t checkcode_len; 00195 size_t kdf_input_len; 00196 enum eap_sim_id_req id_req; 00197 int notification, counter, selected_version, client_error_code; 00198 int counter_too_small; 00199 int result_ind; 00200 #define EAP_AKA_PRIME_KDF_MAX 10 00201 u16 kdf[EAP_AKA_PRIME_KDF_MAX]; 00202 size_t kdf_count; 00203 }; 00204 00205 int eap_sim_parse_attr(const u8 *start, const u8 *end, 00206 struct eap_sim_attrs *attr, int aka, int encr); 00207 u8 * eap_sim_parse_encr(const u8 *k_encr, const u8 *encr_data, 00208 size_t encr_data_len, const u8 *iv, 00209 struct eap_sim_attrs *attr, int aka); 00210 00211 00212 struct eap_sim_msg; 00213 00214 struct eap_sim_msg * eap_sim_msg_init(int code, int id, int type, int subtype); 00215 struct wpabuf * eap_sim_msg_finish(struct eap_sim_msg *msg, const u8 *k_aut, 00216 const u8 *extra, size_t extra_len); 00217 void eap_sim_msg_free(struct eap_sim_msg *msg); 00218 u8 * eap_sim_msg_add_full(struct eap_sim_msg *msg, u8 attr, 00219 const u8 *data, size_t len); 00220 u8 * eap_sim_msg_add(struct eap_sim_msg *msg, u8 attr, 00221 u16 value, const u8 *data, size_t len); 00222 u8 * eap_sim_msg_add_mac(struct eap_sim_msg *msg, u8 attr); 00223 int eap_sim_msg_add_encr_start(struct eap_sim_msg *msg, u8 attr_iv, 00224 u8 attr_encr); 00225 int eap_sim_msg_add_encr_end(struct eap_sim_msg *msg, u8 *k_encr, 00226 int attr_pad); 00227 00228 void eap_sim_report_notification(void *msg_ctx, int notification, int aka); 00229 00230 #endif /* EAP_SIM_COMMON_H */ 00231
1.7.3
