• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2  * EAP server/peer: EAP-EKE shared routines
3  * Copyright (c) 2011-2013, Jouni Malinen <j@w1.fi>
4  *
5  * This software may be distributed under the terms of the BSD license.
6  * See README for more details.
7  */
8 
9 #ifndef EAP_EKE_COMMON_H
10 #define EAP_EKE_COMMON_H
11 
12 /* EKE Exchange */
13 #define EAP_EKE_ID 1
14 #define EAP_EKE_COMMIT 2
15 #define EAP_EKE_CONFIRM 3
16 #define EAP_EKE_FAILURE 4
17 
18 /* Diffie-Hellman Group Registry */
19 #define EAP_EKE_DHGROUP_EKE_2 1
20 #define EAP_EKE_DHGROUP_EKE_5 2
21 #define EAP_EKE_DHGROUP_EKE_14 3 /* mandatory to implement */
22 #define EAP_EKE_DHGROUP_EKE_15 4
23 #define EAP_EKE_DHGROUP_EKE_16 5
24 
25 /* Encryption Algorithm Registry */
26 #define EAP_EKE_ENCR_AES128_CBC 1 /* mandatory to implement */
27 
28 /* Pseudo Random Function Registry */
29 #define EAP_EKE_PRF_HMAC_SHA1 1 /* mandatory to implement */
30 #define EAP_EKE_PRF_HMAC_SHA2_256 2
31 
32 /* Keyed Message Digest (MAC) Registry */
33 #define EAP_EKE_MAC_HMAC_SHA1 1 /* mandatory to implement */
34 #define EAP_EKE_MAC_HMAC_SHA2_256 2
35 
36 /* Identity Type Registry */
37 #define EAP_EKE_ID_OPAQUE 1
38 #define EAP_EKE_ID_NAI 2
39 #define EAP_EKE_ID_IPv4 3
40 #define EAP_EKE_ID_IPv6 4
41 #define EAP_EKE_ID_FQDN 5
42 #define EAP_EKE_ID_DN 6
43 
44 /* Failure-Code */
45 #define EAP_EKE_FAIL_NO_ERROR 1
46 #define EAP_EKE_FAIL_PROTO_ERROR 2
47 #define EAP_EKE_FAIL_PASSWD_NOT_FOUND 3
48 #define EAP_EKE_FAIL_AUTHENTICATION_FAIL 4
49 #define EAP_EKE_FAIL_AUTHORIZATION_FAIL 5
50 #define EAP_EKE_FAIL_NO_PROPOSAL_CHOSEN 6
51 #define EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR 0xffffffff
52 
53 #define EAP_EKE_MAX_DH_LEN 512
54 #define EAP_EKE_MAX_HASH_LEN 32
55 #define EAP_EKE_MAX_KEY_LEN 16
56 #define EAP_EKE_MAX_KE_LEN 16
57 #define EAP_EKE_MAX_KI_LEN 32
58 #define EAP_EKE_MAX_KA_LEN 32
59 #define EAP_EKE_MAX_NONCE_LEN 16
60 
61 struct eap_eke_session {
62 	/* Selected proposal */
63 	u8 dhgroup;
64 	u8 encr;
65 	u8 prf;
66 	u8 mac;
67 
68 	u8 shared_secret[EAP_EKE_MAX_HASH_LEN];
69 	u8 ke[EAP_EKE_MAX_KE_LEN];
70 	u8 ki[EAP_EKE_MAX_KI_LEN];
71 	u8 ka[EAP_EKE_MAX_KA_LEN];
72 
73 	int prf_len;
74 	int nonce_len;
75 	int auth_len;
76 	int dhcomp_len;
77 	int pnonce_len;
78 	int pnonce_ps_len;
79 };
80 
81 int eap_eke_session_init(struct eap_eke_session *sess, u8 dhgroup, u8 encr,
82 			 u8 prf, u8 mac);
83 void eap_eke_session_clean(struct eap_eke_session *sess);
84 int eap_eke_dh_init(u8 group, u8 *ret_priv, u8 *ret_pub);
85 int eap_eke_derive_key(struct eap_eke_session *sess,
86 		       const u8 *password, size_t password_len,
87 		       const u8 *id_s, size_t id_s_len, const u8 *id_p,
88 		       size_t id_p_len, u8 *key);
89 int eap_eke_dhcomp(struct eap_eke_session *sess, const u8 *key, const u8 *dhpub,
90 		   u8 *ret_dhcomp);
91 int eap_eke_shared_secret(struct eap_eke_session *sess, const u8 *key,
92 			  const u8 *dhpriv, const u8 *peer_dhcomp);
93 int eap_eke_derive_ke_ki(struct eap_eke_session *sess,
94 			 const u8 *id_s, size_t id_s_len,
95 			 const u8 *id_p, size_t id_p_len);
96 int eap_eke_derive_ka(struct eap_eke_session *sess,
97 		      const u8 *id_s, size_t id_s_len,
98 		      const u8 *id_p, size_t id_p_len,
99 		      const u8 *nonce_p, const u8 *nonce_s);
100 int eap_eke_derive_msk(struct eap_eke_session *sess,
101 		       const u8 *id_s, size_t id_s_len,
102 		       const u8 *id_p, size_t id_p_len,
103 		       const u8 *nonce_p, const u8 *nonce_s,
104 		       u8 *msk, u8 *emsk);
105 int eap_eke_prot(struct eap_eke_session *sess,
106 		 const u8 *data, size_t data_len,
107 		 u8 *prot, size_t *prot_len);
108 int eap_eke_decrypt_prot(struct eap_eke_session *sess,
109 			 const u8 *prot, size_t prot_len,
110 			 u8 *data, size_t *data_len);
111 int eap_eke_auth(struct eap_eke_session *sess, const char *label,
112 		 const struct wpabuf *msgs, u8 *auth);
113 
114 #endif /* EAP_EKE_COMMON_H */
115