1 /* 2 * linux/include/linux/sunrpc/gss_krb5_types.h 3 * 4 * Adapted from MIT Kerberos 5-1.2.1 lib/include/krb5.h, 5 * lib/gssapi/krb5/gssapiP_krb5.h, and others 6 * 7 * Copyright (c) 2000 The Regents of the University of Michigan. 8 * All rights reserved. 9 * 10 * Andy Adamson <andros@umich.edu> 11 * Bruce Fields <bfields@umich.edu> 12 */ 13 14 /* 15 * Copyright 1995 by the Massachusetts Institute of Technology. 16 * All Rights Reserved. 17 * 18 * Export of this software from the United States of America may 19 * require a specific license from the United States Government. 20 * It is the responsibility of any person or organization contemplating 21 * export to obtain such a license before exporting. 22 * 23 * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and 24 * distribute this software and its documentation for any purpose and 25 * without fee is hereby granted, provided that the above copyright 26 * notice appear in all copies and that both that copyright notice and 27 * this permission notice appear in supporting documentation, and that 28 * the name of M.I.T. not be used in advertising or publicity pertaining 29 * to distribution of the software without specific, written prior 30 * permission. Furthermore if you modify this software you must label 31 * your software as modified software and not distribute it in such a 32 * fashion that it might be confused with the original M.I.T. software. 33 * M.I.T. makes no representations about the suitability of 34 * this software for any purpose. It is provided "as is" without express 35 * or implied warranty. 36 * 37 */ 38 39 #include <linux/sunrpc/auth_gss.h> 40 #include <linux/sunrpc/gss_err.h> 41 #include <linux/sunrpc/gss_asn1.h> 42 43 struct krb5_ctx { 44 int initiate; /* 1 = initiating, 0 = accepting */ 45 struct crypto_blkcipher *enc; 46 struct crypto_blkcipher *seq; 47 s32 endtime; 48 u32 seq_send; 49 struct xdr_netobj mech_used; 50 }; 51 52 extern spinlock_t krb5_seq_lock; 53 54 /* The length of the Kerberos GSS token header */ 55 #define GSS_KRB5_TOK_HDR_LEN (16) 56 57 #define KG_TOK_MIC_MSG 0x0101 58 #define KG_TOK_WRAP_MSG 0x0201 59 60 enum sgn_alg { 61 SGN_ALG_DES_MAC_MD5 = 0x0000, 62 SGN_ALG_MD2_5 = 0x0001, 63 SGN_ALG_DES_MAC = 0x0002, 64 SGN_ALG_3 = 0x0003, /* not published */ 65 SGN_ALG_HMAC_MD5 = 0x0011, /* microsoft w2k; no support */ 66 SGN_ALG_HMAC_SHA1_DES3_KD = 0x0004 67 }; 68 enum seal_alg { 69 SEAL_ALG_NONE = 0xffff, 70 SEAL_ALG_DES = 0x0000, 71 SEAL_ALG_1 = 0x0001, /* not published */ 72 SEAL_ALG_MICROSOFT_RC4 = 0x0010,/* microsoft w2k; no support */ 73 SEAL_ALG_DES3KD = 0x0002 74 }; 75 76 #define CKSUMTYPE_CRC32 0x0001 77 #define CKSUMTYPE_RSA_MD4 0x0002 78 #define CKSUMTYPE_RSA_MD4_DES 0x0003 79 #define CKSUMTYPE_DESCBC 0x0004 80 #define CKSUMTYPE_RSA_MD5 0x0007 81 #define CKSUMTYPE_RSA_MD5_DES 0x0008 82 #define CKSUMTYPE_NIST_SHA 0x0009 83 #define CKSUMTYPE_HMAC_SHA1_DES3 0x000c 84 85 /* from gssapi_err_krb5.h */ 86 #define KG_CCACHE_NOMATCH (39756032L) 87 #define KG_KEYTAB_NOMATCH (39756033L) 88 #define KG_TGT_MISSING (39756034L) 89 #define KG_NO_SUBKEY (39756035L) 90 #define KG_CONTEXT_ESTABLISHED (39756036L) 91 #define KG_BAD_SIGN_TYPE (39756037L) 92 #define KG_BAD_LENGTH (39756038L) 93 #define KG_CTX_INCOMPLETE (39756039L) 94 #define KG_CONTEXT (39756040L) 95 #define KG_CRED (39756041L) 96 #define KG_ENC_DESC (39756042L) 97 #define KG_BAD_SEQ (39756043L) 98 #define KG_EMPTY_CCACHE (39756044L) 99 #define KG_NO_CTYPES (39756045L) 100 101 /* per Kerberos v5 protocol spec crypto types from the wire. 102 * these get mapped to linux kernel crypto routines. 103 */ 104 #define ENCTYPE_NULL 0x0000 105 #define ENCTYPE_DES_CBC_CRC 0x0001 /* DES cbc mode with CRC-32 */ 106 #define ENCTYPE_DES_CBC_MD4 0x0002 /* DES cbc mode with RSA-MD4 */ 107 #define ENCTYPE_DES_CBC_MD5 0x0003 /* DES cbc mode with RSA-MD5 */ 108 #define ENCTYPE_DES_CBC_RAW 0x0004 /* DES cbc mode raw */ 109 /* XXX deprecated? */ 110 #define ENCTYPE_DES3_CBC_SHA 0x0005 /* DES-3 cbc mode with NIST-SHA */ 111 #define ENCTYPE_DES3_CBC_RAW 0x0006 /* DES-3 cbc mode raw */ 112 #define ENCTYPE_DES_HMAC_SHA1 0x0008 113 #define ENCTYPE_DES3_CBC_SHA1 0x0010 114 #define ENCTYPE_UNKNOWN 0x01ff 115 116 s32 117 make_checksum(char *, char *header, int hdrlen, struct xdr_buf *body, 118 int body_offset, struct xdr_netobj *cksum); 119 120 u32 gss_get_mic_kerberos(struct gss_ctx *, struct xdr_buf *, 121 struct xdr_netobj *); 122 123 u32 gss_verify_mic_kerberos(struct gss_ctx *, struct xdr_buf *, 124 struct xdr_netobj *); 125 126 u32 127 gss_wrap_kerberos(struct gss_ctx *ctx_id, int offset, 128 struct xdr_buf *outbuf, struct page **pages); 129 130 u32 131 gss_unwrap_kerberos(struct gss_ctx *ctx_id, int offset, 132 struct xdr_buf *buf); 133 134 135 u32 136 krb5_encrypt(struct crypto_blkcipher *key, 137 void *iv, void *in, void *out, int length); 138 139 u32 140 krb5_decrypt(struct crypto_blkcipher *key, 141 void *iv, void *in, void *out, int length); 142 143 int 144 gss_encrypt_xdr_buf(struct crypto_blkcipher *tfm, struct xdr_buf *outbuf, 145 int offset, struct page **pages); 146 147 int 148 gss_decrypt_xdr_buf(struct crypto_blkcipher *tfm, struct xdr_buf *inbuf, 149 int offset); 150 151 s32 152 krb5_make_seq_num(struct crypto_blkcipher *key, 153 int direction, 154 u32 seqnum, unsigned char *cksum, unsigned char *buf); 155 156 s32 157 krb5_get_seq_num(struct crypto_blkcipher *key, 158 unsigned char *cksum, 159 unsigned char *buf, int *direction, u32 *seqnum); 160