18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * WPA Supplicant / PC/SC smartcard interface for USIM, GSM SIM 38d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Copyright (c) 2004-2007, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 58d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This program is free software; you can redistribute it and/or modify 68d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * it under the terms of the GNU General Public License version 2 as 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * published by the Free Software Foundation. 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Alternatively, this software may be distributed under the terms of BSD 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * license. 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * See README and COPYING for more details. 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This file implements wrapper functions for accessing GSM SIM and 3GPP USIM 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * cards through PC/SC smartcard library. These functions are used to implement 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * authentication routines for EAP-SIM and EAP-AKA. 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "includes.h" 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include <winscard.h> 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "common.h" 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "pcsc_funcs.h" 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* See ETSI GSM 11.11 and ETSI TS 102 221 for details. 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * SIM commands: 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Command APDU: CLA INS P1 P2 P3 Data 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * CLA (class of instruction): A0 for GSM, 00 for USIM 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * INS (instruction) 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * P1 P2 P3 (parameters, P3 = length of Data) 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Response APDU: Data SW1 SW2 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * SW1 SW2 (Status words) 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Commands (INS P1 P2 P3): 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * SELECT: A4 00 00 02 <file_id, 2 bytes> 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * GET RESPONSE: C0 00 00 <len> 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RUN GSM ALG: 88 00 00 00 <RAND len = 10> 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RUN UMTS ALG: 88 00 81 <len=0x22> data: 0x10 | RAND | 0x10 | AUTN 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * P1 = ID of alg in card 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * P2 = ID of secret key 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * READ BINARY: B0 <offset high> <offset low> <len> 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * READ RECORD: B2 <record number> <mode> <len> 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * P2 (mode) = '02' (next record), '03' (previous record), 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * '04' (absolute mode) 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * VERIFY CHV: 20 00 <CHV number> 08 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * CHANGE CHV: 24 00 <CHV number> 10 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * DISABLE CHV: 26 00 01 08 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * ENABLE CHV: 28 00 01 08 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * UNBLOCK CHV: 2C 00 <00=CHV1, 02=CHV2> 10 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * SLEEP: FA 00 00 00 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* GSM SIM commands */ 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define SIM_CMD_SELECT 0xa0, 0xa4, 0x00, 0x00, 0x02 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define SIM_CMD_RUN_GSM_ALG 0xa0, 0x88, 0x00, 0x00, 0x10 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define SIM_CMD_GET_RESPONSE 0xa0, 0xc0, 0x00, 0x00 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define SIM_CMD_READ_BIN 0xa0, 0xb0, 0x00, 0x00 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define SIM_CMD_READ_RECORD 0xa0, 0xb2, 0x00, 0x00 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define SIM_CMD_VERIFY_CHV1 0xa0, 0x20, 0x00, 0x01, 0x08 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* USIM commands */ 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define USIM_CLA 0x00 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define USIM_CMD_RUN_UMTS_ALG 0x00, 0x88, 0x00, 0x81, 0x22 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define USIM_CMD_GET_RESPONSE 0x00, 0xc0, 0x00, 0x00 658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define SIM_RECORD_MODE_ABSOLUTE 0x04 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define USIM_FSP_TEMPL_TAG 0x62 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define USIM_TLV_FILE_DESC 0x82 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define USIM_TLV_FILE_ID 0x83 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define USIM_TLV_DF_NAME 0x84 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define USIM_TLV_PROPR_INFO 0xA5 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define USIM_TLV_LIFE_CYCLE_STATUS 0x8A 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define USIM_TLV_FILE_SIZE 0x80 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define USIM_TLV_TOTAL_FILE_SIZE 0x81 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define USIM_TLV_PIN_STATUS_TEMPLATE 0xC6 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define USIM_TLV_SHORT_FILE_ID 0x88 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define USIM_PS_DO_TAG 0x90 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define AKA_RAND_LEN 16 838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define AKA_AUTN_LEN 16 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define AKA_AUTS_LEN 14 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define RES_MAX_LEN 16 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define IK_LEN 16 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define CK_LEN 16 888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidttypedef enum { SCARD_GSM_SIM, SCARD_USIM } sim_types; 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct scard_data { 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SCARDCONTEXT ctx; 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SCARDHANDLE card; 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt DWORD protocol; 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sim_types sim_type; 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pin1_required; 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef __MINGW32_VERSION 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* MinGW does not yet support WinScard, so load the needed functions 1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * dynamically from winscard.dll for now. */ 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic HINSTANCE dll = NULL; /* winscard.dll */ 1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic const SCARD_IO_REQUEST *dll_g_rgSCardT0Pci, *dll_g_rgSCardT1Pci; 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#undef SCARD_PCI_T0 1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define SCARD_PCI_T0 (dll_g_rgSCardT0Pci) 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#undef SCARD_PCI_T1 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define SCARD_PCI_T1 (dll_g_rgSCardT1Pci) 1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic WINSCARDAPI LONG WINAPI 1148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt(*dll_SCardEstablishContext)(IN DWORD dwScope, 1158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt IN LPCVOID pvReserved1, 1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt IN LPCVOID pvReserved2, 1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt OUT LPSCARDCONTEXT phContext); 1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define SCardEstablishContext dll_SCardEstablishContext 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic long (*dll_SCardReleaseContext)(long hContext); 1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define SCardReleaseContext dll_SCardReleaseContext 1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic WINSCARDAPI LONG WINAPI 1248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt(*dll_SCardListReadersA)(IN SCARDCONTEXT hContext, 1258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt IN LPCSTR mszGroups, 1268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt OUT LPSTR mszReaders, 1278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt IN OUT LPDWORD pcchReaders); 1288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#undef SCardListReaders 1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define SCardListReaders dll_SCardListReadersA 1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic WINSCARDAPI LONG WINAPI 1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt(*dll_SCardConnectA)(IN SCARDCONTEXT hContext, 1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt IN LPCSTR szReader, 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt IN DWORD dwShareMode, 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt IN DWORD dwPreferredProtocols, 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt OUT LPSCARDHANDLE phCard, 1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt OUT LPDWORD pdwActiveProtocol); 1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#undef SCardConnect 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define SCardConnect dll_SCardConnectA 1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic WINSCARDAPI LONG WINAPI 1428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt(*dll_SCardDisconnect)(IN SCARDHANDLE hCard, 1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt IN DWORD dwDisposition); 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define SCardDisconnect dll_SCardDisconnect 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic WINSCARDAPI LONG WINAPI 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt(*dll_SCardTransmit)(IN SCARDHANDLE hCard, 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt IN LPCSCARD_IO_REQUEST pioSendPci, 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt IN LPCBYTE pbSendBuffer, 1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt IN DWORD cbSendLength, 1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt IN OUT LPSCARD_IO_REQUEST pioRecvPci, 1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt OUT LPBYTE pbRecvBuffer, 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt IN OUT LPDWORD pcbRecvLength); 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define SCardTransmit dll_SCardTransmit 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic WINSCARDAPI LONG WINAPI 1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt(*dll_SCardBeginTransaction)(IN SCARDHANDLE hCard); 1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define SCardBeginTransaction dll_SCardBeginTransaction 1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic WINSCARDAPI LONG WINAPI 1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt(*dll_SCardEndTransaction)(IN SCARDHANDLE hCard, IN DWORD dwDisposition); 1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define SCardEndTransaction dll_SCardEndTransaction 1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int mingw_load_symbols(void) 1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char *sym; 1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (dll) 1708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 1718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dll = LoadLibrary("winscard"); 1738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (dll == NULL) { 1748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WinSCard: Could not load winscard.dll " 1758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "library"); 1768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define LOADSYM(s) \ 1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sym = #s; \ 1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dll_ ## s = (void *) GetProcAddress(dll, sym); \ 1828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (dll_ ## s == NULL) \ 1838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto fail; 1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt LOADSYM(SCardEstablishContext); 1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt LOADSYM(SCardReleaseContext); 1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt LOADSYM(SCardListReadersA); 1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt LOADSYM(SCardConnectA); 1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt LOADSYM(SCardDisconnect); 1908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt LOADSYM(SCardTransmit); 1918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt LOADSYM(SCardBeginTransaction); 1928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt LOADSYM(SCardEndTransaction); 1938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt LOADSYM(g_rgSCardT0Pci); 1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt LOADSYM(g_rgSCardT1Pci); 1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#undef LOADSYM 1978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtfail: 2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "WinSCard: Could not get address for %s from " 2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "winscard.dll", sym); 2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt FreeLibrary(dll); 2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dll = NULL; 2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void mingw_unload_symbols(void) 2108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (dll == NULL) 2128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 2138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt FreeLibrary(dll); 2158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt dll = NULL; 2168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* __MINGW32_VERSION */ 2198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define mingw_load_symbols() 0 2218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define mingw_unload_symbols() do { } while (0) 2228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* __MINGW32_VERSION */ 2248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int _scard_select_file(struct scard_data *scard, unsigned short file_id, 2278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *buf, size_t *buf_len, 2288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sim_types sim_type, unsigned char *aid, 2298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t aidlen); 2308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int scard_select_file(struct scard_data *scard, unsigned short file_id, 2318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *buf, size_t *buf_len); 2328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int scard_verify_pin(struct scard_data *scard, const char *pin); 2338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int scard_get_record_len(struct scard_data *scard, 2348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char recnum, unsigned char mode); 2358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int scard_read_record(struct scard_data *scard, 2368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *data, size_t len, 2378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char recnum, unsigned char mode); 2388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int scard_parse_fsp_templ(unsigned char *buf, size_t buf_len, 2418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int *ps_do, int *file_len) 2428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *pos, *end; 2448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ps_do) 2468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *ps_do = -1; 2478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (file_len) 2488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *file_len = -1; 2498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = buf; 2518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt end = pos + buf_len; 2528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (*pos != USIM_FSP_TEMPL_TAG) { 2538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: file header did not " 2548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "start with FSP template tag"); 2558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos++; 2588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos >= end) 2598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((pos + pos[0]) < end) 2618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt end = pos + 1 + pos[0]; 2628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos++; 2638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: file header FSP template", 2648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos, end - pos); 2658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pos + 1 < end) { 2678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_MSGDUMP, "SCARD: file header TLV " 2688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "0x%02x len=%d", pos[0], pos[1]); 2698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos + 2 + pos[1] > end) 2708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos[0] == USIM_TLV_FILE_SIZE && 2738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (pos[1] == 1 || pos[1] == 2) && file_len) { 2748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos[1] == 1) 2758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *file_len = (int) pos[2]; 2768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 2778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *file_len = ((int) pos[2] << 8) | 2788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (int) pos[3]; 2798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: file_size=%d", 2808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *file_len); 2818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos[0] == USIM_TLV_PIN_STATUS_TEMPLATE && 2848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos[1] >= 2 && pos[2] == USIM_PS_DO_TAG && 2858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos[3] >= 1 && ps_do) { 2868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: PS_DO=0x%02x", 2878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos[4]); 2888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *ps_do = (int) pos[4]; 2898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += 2 + pos[1]; 2928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos == end) 2948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 2958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int scard_pin_needed(struct scard_data *scard, 3018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *hdr, size_t hlen) 3028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard->sim_type == SCARD_GSM_SIM) { 3048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (hlen > SCARD_CHV1_OFFSET && 3058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt !(hdr[SCARD_CHV1_OFFSET] & SCARD_CHV1_FLAG)) 3068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 1; 3078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 3088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard->sim_type == SCARD_USIM) { 3118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ps_do; 3128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard_parse_fsp_templ(hdr, hlen, &ps_do, NULL)) 3138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: there could be more than one PS_DO entry because of 3158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * multiple PINs in key reference.. */ 3168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ps_do > 0 && (ps_do & 0x80)) 3178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 1; 3188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 3198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int scard_get_aid(struct scard_data *scard, unsigned char *aid, 3268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t maxlen) 3278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int rlen, rec; 3298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct efdir { 3308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char appl_template_tag; /* 0x61 */ 3318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char appl_template_len; 3328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char appl_id_tag; /* 0x4f */ 3338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char aid_len; 3348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char rid[5]; 3358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char appl_code[2]; /* 0x1002 for 3G USIM */ 3368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } *efdir; 3378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char buf[100]; 3388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t blen; 3398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt efdir = (struct efdir *) buf; 3418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt blen = sizeof(buf); 3428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard_select_file(scard, SCARD_FILE_EF_DIR, buf, &blen)) { 3438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Failed to read EF_DIR"); 3448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: EF_DIR select", buf, blen); 3478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (rec = 1; rec < 10; rec++) { 3498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rlen = scard_get_record_len(scard, rec, 3508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SIM_RECORD_MODE_ABSOLUTE); 3518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (rlen < 0) { 3528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Failed to get EF_DIR " 3538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "record length"); 3548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt blen = sizeof(buf); 3578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (rlen > (int) blen) { 3588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Too long EF_DIR record"); 3598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard_read_record(scard, buf, rlen, rec, 3628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SIM_RECORD_MODE_ABSOLUTE) < 0) { 3638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Failed to read " 3648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "EF_DIR record %d", rec); 3658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: EF_DIR record", buf, rlen); 3688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (efdir->appl_template_tag != 0x61) { 3708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Unexpected application " 3718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "template tag 0x%x", 3728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt efdir->appl_template_tag); 3738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 3748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (efdir->appl_template_len > rlen - 2) { 3778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Too long application " 3788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "template (len=%d rlen=%d)", 3798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt efdir->appl_template_len, rlen); 3808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 3818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (efdir->appl_id_tag != 0x4f) { 3848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Unexpected application " 3858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "identifier tag 0x%x", efdir->appl_id_tag); 3868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 3878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (efdir->aid_len < 1 || efdir->aid_len > 16) { 3908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Invalid AID length %d", 3918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt efdir->aid_len); 3928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 3938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: AID from EF_DIR record", 3968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt efdir->rid, efdir->aid_len); 3978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (efdir->appl_code[0] == 0x10 && 3998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt efdir->appl_code[1] == 0x02) { 4008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: 3G USIM app found from " 4018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "EF_DIR record %d", rec); 4028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (rec >= 10) { 4078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: 3G USIM app not found " 4088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "from EF_DIR records"); 4098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (efdir->aid_len > maxlen) { 4138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Too long AID"); 4148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(aid, efdir->rid, efdir->aid_len); 4188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return efdir->aid_len; 4208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 4248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * scard_init - Initialize SIM/USIM connection using PC/SC 4258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @sim_type: Allowed SIM types (SIM, USIM, or both) 4268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to private data structure, or %NULL on failure 4278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 4288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is used to initialize SIM/USIM connection. PC/SC is used to 4298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * open connection to the SIM/USIM card and the card is verified to support the 4308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * selected sim_type. In addition, local flag is set if a PIN is needed to 4318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * access some of the card functions. Once the connection is not needed 4328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * anymore, scard_deinit() can be used to close it. 4338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 4348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct scard_data * scard_init(scard_sim_type sim_type) 4358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt long ret; 4378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned long len; 4388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct scard_data *scard; 4398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_NATIVE_WINDOWS 4408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TCHAR *readers = NULL; 4418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* CONFIG_NATIVE_WINDOWS */ 4428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char *readers = NULL; 4438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NATIVE_WINDOWS */ 4448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char buf[100]; 4458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t blen; 4468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int transaction = 0; 4478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pin_needed; 4488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: initializing smart card interface"); 4508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (mingw_load_symbols()) 4518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 4528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt scard = os_zalloc(sizeof(*scard)); 4538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard == NULL) 4548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 4558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = SCardEstablishContext(SCARD_SCOPE_SYSTEM, NULL, NULL, 4578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt &scard->ctx); 4588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret != SCARD_S_SUCCESS) { 4598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Could not establish smart card " 4608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "context (err=%ld)", ret); 4618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto failed; 4628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = SCardListReaders(scard->ctx, NULL, NULL, &len); 4658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret != SCARD_S_SUCCESS) { 4668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: SCardListReaders failed " 4678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(err=%ld)", ret); 4688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto failed; 4698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef UNICODE 4728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len *= 2; 4738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* UNICODE */ 4748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt readers = os_malloc(len); 4758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (readers == NULL) { 4768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "SCARD: malloc failed\n"); 4778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto failed; 4788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = SCardListReaders(scard->ctx, NULL, readers, &len); 4818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret != SCARD_S_SUCCESS) { 4828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: SCardListReaders failed(2) " 4838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(err=%ld)", ret); 4848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto failed; 4858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len < 3) { 4878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "SCARD: No smart card readers " 4888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "available."); 4898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto failed; 4908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* readers is a list of available reader. Last entry is terminated with 4928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * double NUL. 4938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * TODO: add support for selecting the reader; now just use the first 4948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * one.. */ 4958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef UNICODE 4968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Selected reader='%S'", readers); 4978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#else /* UNICODE */ 4988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Selected reader='%s'", readers); 4998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* UNICODE */ 5008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = SCardConnect(scard->ctx, readers, SCARD_SHARE_SHARED, 5028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SCARD_PROTOCOL_T0, &scard->card, &scard->protocol); 5038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret != SCARD_S_SUCCESS) { 5048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret == (long) SCARD_E_NO_SMARTCARD) 5058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "No smart card inserted."); 5068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 5078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "SCardConnect err=%lx", ret); 5088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto failed; 5098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(readers); 5128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt readers = NULL; 5138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: card=0x%x active_protocol=%lu (%s)", 5158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned int) scard->card, scard->protocol, 5168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt scard->protocol == SCARD_PROTOCOL_T0 ? "T0" : "T1"); 5178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = SCardBeginTransaction(scard->card); 5198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret != SCARD_S_SUCCESS) { 5208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Could not begin transaction: " 5218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "0x%x", (unsigned int) ret); 5228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto failed; 5238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt transaction = 1; 5258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt blen = sizeof(buf); 5278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt scard->sim_type = SCARD_GSM_SIM; 5298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sim_type == SCARD_USIM_ONLY || sim_type == SCARD_TRY_BOTH) { 5308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: verifying USIM support"); 5318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (_scard_select_file(scard, SCARD_FILE_MF, buf, &blen, 5328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SCARD_USIM, NULL, 0)) { 5338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: USIM is not supported"); 5348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sim_type == SCARD_USIM_ONLY) 5358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto failed; 5368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Trying to use GSM SIM"); 5378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt scard->sim_type = SCARD_GSM_SIM; 5388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 5398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: USIM is supported"); 5408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt scard->sim_type = SCARD_USIM; 5418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard->sim_type == SCARD_GSM_SIM) { 5458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt blen = sizeof(buf); 5468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard_select_file(scard, SCARD_FILE_MF, buf, &blen)) { 5478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Failed to read MF"); 5488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto failed; 5498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt blen = sizeof(buf); 5528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard_select_file(scard, SCARD_FILE_GSM_DF, buf, &blen)) { 5538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Failed to read GSM DF"); 5548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto failed; 5558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 5578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char aid[32]; 5588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int aid_len; 5598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt aid_len = scard_get_aid(scard, aid, sizeof(aid)); 5618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (aid_len < 0) { 5628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Failed to find AID for " 5638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "3G USIM app - try to use standard 3G RID"); 5648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(aid, "\xa0\x00\x00\x00\x87", 5); 5658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt aid_len = 5; 5668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: 3G USIM AID", aid, aid_len); 5688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Select based on AID = 3G RID from EF_DIR. This is usually 5708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * starting with A0 00 00 00 87. */ 5718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt blen = sizeof(buf); 5728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (_scard_select_file(scard, 0, buf, &blen, scard->sim_type, 5738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt aid, aid_len)) { 5748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "SCARD: Failed to read 3G USIM " 5758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "app"); 5768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_INFO, "SCARD: 3G USIM AID", 5778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt aid, aid_len); 5788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto failed; 5798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Verify whether CHV1 (PIN1) is needed to access the card. */ 5838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pin_needed = scard_pin_needed(scard, buf, blen); 5848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pin_needed < 0) { 5858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Failed to determine whether PIN " 5868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "is needed"); 5878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto failed; 5888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pin_needed) { 5908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt scard->pin1_required = 1; 5918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "PIN1 needed for SIM access"); 5928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = SCardEndTransaction(scard->card, SCARD_LEAVE_CARD); 5958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret != SCARD_S_SUCCESS) { 5968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Could not end transaction: " 5978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "0x%x", (unsigned int) ret); 5988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return scard; 6018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtfailed: 6038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (transaction) 6048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SCardEndTransaction(scard->card, SCARD_LEAVE_CARD); 6058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(readers); 6068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt scard_deinit(scard); 6078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 6088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 6098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 6128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * scard_set_pin - Set PIN (CHV1/PIN1) code for accessing SIM/USIM commands 6138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @scard: Pointer to private data from scard_init() 6148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pin: PIN code as an ASCII string (e.g., "1234") 6158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 6168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 6178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint scard_set_pin(struct scard_data *scard, const char *pin) 6188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 6198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard == NULL) 6208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Verify whether CHV1 (PIN1) is needed to access the card. */ 6238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard->pin1_required) { 6248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pin == NULL) { 6258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "No PIN configured for SIM " 6268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "access"); 6278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard_verify_pin(scard, pin)) { 6308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "PIN verification failed for " 6318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "SIM access"); 6328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 6378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 6388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 6418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * scard_deinit - Deinitialize SIM/USIM connection 6428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @scard: Pointer to private data from scard_init() 6438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 6448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function closes the SIM/USIM connect opened with scard_init(). 6458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 6468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid scard_deinit(struct scard_data *scard) 6478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 6488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt long ret; 6498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard == NULL) 6518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 6528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: deinitializing smart card interface"); 6548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard->card) { 6558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = SCardDisconnect(scard->card, SCARD_UNPOWER_CARD); 6568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret != SCARD_S_SUCCESS) { 6578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Failed to disconnect " 6588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "smart card (err=%ld)", ret); 6598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard->ctx) { 6638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = SCardReleaseContext(scard->ctx); 6648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret != SCARD_S_SUCCESS) { 6658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "Failed to release smart card " 6668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "context (err=%ld)", ret); 6678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(scard); 6708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mingw_unload_symbols(); 6718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 6728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic long scard_transmit(struct scard_data *scard, 6758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *_send, size_t send_len, 6768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *_recv, size_t *recv_len) 6778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 6788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt long ret; 6798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned long rlen; 6808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "SCARD: scard_transmit: send", 6828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _send, send_len); 6838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rlen = *recv_len; 6848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = SCardTransmit(scard->card, 6858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt scard->protocol == SCARD_PROTOCOL_T1 ? 6868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SCARD_PCI_T1 : SCARD_PCI_T0, 6878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _send, (unsigned long) send_len, 6888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt NULL, _recv, &rlen); 6898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *recv_len = rlen; 6908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret == SCARD_S_SUCCESS) { 6918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: scard_transmit: recv", 6928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _recv, rlen); 6938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 6948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "SCARD: SCardTransmit failed " 6958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(err=0x%lx)", ret); 6968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return ret; 6988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 6998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int _scard_select_file(struct scard_data *scard, unsigned short file_id, 7028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *buf, size_t *buf_len, 7038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sim_types sim_type, unsigned char *aid, 7048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t aidlen) 7058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 7068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt long ret; 7078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char resp[3]; 7088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char cmd[50] = { SIM_CMD_SELECT }; 7098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int cmdlen; 7108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char get_resp[5] = { SIM_CMD_GET_RESPONSE }; 7118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len, rlen; 7128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sim_type == SCARD_USIM) { 7148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[0] = USIM_CLA; 7158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[3] = 0x04; 7168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt get_resp[0] = USIM_CLA; 7178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: select file %04x", file_id); 7208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (aid) { 7218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: select file by AID", 7228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt aid, aidlen); 7238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (5 + aidlen > sizeof(cmd)) 7248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[2] = 0x04; /* Select by AID */ 7268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[4] = aidlen; /* len */ 7278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(cmd + 5, aid, aidlen); 7288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmdlen = 5 + aidlen; 7298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 7308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[5] = file_id >> 8; 7318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[6] = file_id & 0xff; 7328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmdlen = 7; 7338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len = sizeof(resp); 7358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = scard_transmit(scard, cmd, cmdlen, resp, &len); 7368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret != SCARD_S_SUCCESS) { 7378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "SCARD: SCardTransmit failed " 7388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(err=0x%lx)", ret); 7398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2) { 7438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "SCARD: unexpected resp len " 7448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%d (expected 2)", (int) len); 7458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (resp[0] == 0x98 && resp[1] == 0x04) { 7498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Security status not satisfied (PIN_WLAN) */ 7508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "SCARD: Security status not satisfied " 7518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(PIN_WLAN)"); 7528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (resp[0] == 0x6e) { 7568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: used CLA not supported"); 7578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (resp[0] != 0x6c && resp[0] != 0x9f && resp[0] != 0x61) { 7618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "SCARD: unexpected response 0x%02x " 7628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(expected 0x61, 0x6c, or 0x9f)", resp[0]); 7638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Normal ending of command; resp[1] bytes available */ 7668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt get_resp[4] = resp[1]; 7678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: trying to get response (%d bytes)", 7688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt resp[1]); 7698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rlen = *buf_len; 7718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = scard_transmit(scard, get_resp, sizeof(get_resp), buf, &rlen); 7728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret == SCARD_S_SUCCESS) { 7738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *buf_len = resp[1] < rlen ? resp[1] : rlen; 7748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 7758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "SCARD: SCardTransmit err=0x%lx\n", ret); 7788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 7808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int scard_select_file(struct scard_data *scard, unsigned short file_id, 7838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *buf, size_t *buf_len) 7848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 7858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return _scard_select_file(scard, file_id, buf, buf_len, 7868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt scard->sim_type, NULL, 0); 7878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 7888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int scard_get_record_len(struct scard_data *scard, unsigned char recnum, 7918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char mode) 7928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 7938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char buf[255]; 7948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char cmd[5] = { SIM_CMD_READ_RECORD /* , len */ }; 7958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t blen; 7968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt long ret; 7978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard->sim_type == SCARD_USIM) 7998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[0] = USIM_CLA; 8008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[2] = recnum; 8018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[3] = mode; 8028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[4] = sizeof(buf); 8038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt blen = sizeof(buf); 8058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = scard_transmit(scard, cmd, sizeof(cmd), buf, &blen); 8068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret != SCARD_S_SUCCESS) { 8078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: failed to determine file " 8088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length for record %d", recnum); 8098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: file length determination response", 8138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf, blen); 8148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (blen < 2 || buf[0] != 0x6c) { 8168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: unexpected response to file " 8178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length determination"); 8188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return buf[1]; 8228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 8238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int scard_read_record(struct scard_data *scard, 8268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *data, size_t len, 8278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char recnum, unsigned char mode) 8288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 8298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char cmd[5] = { SIM_CMD_READ_RECORD /* , len */ }; 8308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t blen = len + 3; 8318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *buf; 8328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt long ret; 8338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard->sim_type == SCARD_USIM) 8358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[0] = USIM_CLA; 8368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[2] = recnum; 8378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[3] = mode; 8388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[4] = len; 8398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf = os_malloc(blen); 8418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (buf == NULL) 8428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = scard_transmit(scard, cmd, sizeof(cmd), buf, &blen); 8458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret != SCARD_S_SUCCESS) { 8468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(buf); 8478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -2; 8488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (blen != len + 2) { 8508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: record read returned unexpected " 8518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %ld (expected %ld)", 8528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (long) blen, (long) len + 2); 8538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(buf); 8548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -3; 8558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (buf[len] != 0x90 || buf[len + 1] != 0x00) { 8588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: record read returned unexpected " 8598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "status %02x %02x (expected 90 00)", 8608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf[len], buf[len + 1]); 8618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(buf); 8628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -4; 8638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(data, buf, len); 8668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(buf); 8678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 8698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 8708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int scard_read_file(struct scard_data *scard, 8738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *data, size_t len) 8748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 8758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char cmd[5] = { SIM_CMD_READ_BIN /* , len */ }; 8768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t blen = len + 3; 8778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *buf; 8788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt long ret; 8798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[4] = len; 8818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf = os_malloc(blen); 8838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (buf == NULL) 8848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard->sim_type == SCARD_USIM) 8878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[0] = USIM_CLA; 8888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = scard_transmit(scard, cmd, sizeof(cmd), buf, &blen); 8898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret != SCARD_S_SUCCESS) { 8908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(buf); 8918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -2; 8928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (blen != len + 2) { 8948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: file read returned unexpected " 8958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %ld (expected %ld)", 8968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (long) blen, (long) len + 2); 8978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(buf); 8988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -3; 8998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (buf[len] != 0x90 || buf[len + 1] != 0x00) { 9028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: file read returned unexpected " 9038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "status %02x %02x (expected 90 00)", 9048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf[len], buf[len + 1]); 9058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(buf); 9068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -4; 9078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(data, buf, len); 9108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(buf); 9118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 9138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 9148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int scard_verify_pin(struct scard_data *scard, const char *pin) 9178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 9188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt long ret; 9198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char resp[3]; 9208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char cmd[5 + 8] = { SIM_CMD_VERIFY_CHV1 }; 9218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len; 9228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: verifying PIN"); 9248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pin == NULL || os_strlen(pin) > 8) 9268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 9278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard->sim_type == SCARD_USIM) 9298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[0] = USIM_CLA; 9308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(cmd + 5, pin, os_strlen(pin)); 9318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(cmd + 5 + os_strlen(pin), 0xff, 8 - os_strlen(pin)); 9328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len = sizeof(resp); 9348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = scard_transmit(scard, cmd, sizeof(cmd), resp, &len); 9358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret != SCARD_S_SUCCESS) 9368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -2; 9378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 2 || resp[0] != 0x90 || resp[1] != 0x00) { 9398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "SCARD: PIN verification failed"); 9408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 9418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: PIN verified successfully"); 9448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 9458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 9468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 9498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * scard_get_imsi - Read IMSI from SIM/USIM card 9508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @scard: Pointer to private data from scard_init() 9518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @imsi: Buffer for IMSI 9528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @len: Length of imsi buffer; set to IMSI length on success 9538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 if IMSI file cannot be selected, -2 if IMSI file 9548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * selection returns invalid result code, -3 if parsing FSP template file fails 9558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (USIM only), -4 if IMSI does not fit in the provided imsi buffer (len is set 9568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to needed length), -5 if reading IMSI file fails. 9578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 9588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function can be used to read IMSI from the SIM/USIM card. If the IMSI 9598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * file is PIN protected, scard_set_pin() must have been used to set the 9608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * correct PIN code before calling scard_get_imsi(). 9618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 9628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint scard_get_imsi(struct scard_data *scard, char *imsi, size_t *len) 9638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 9648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char buf[100]; 9658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t blen, imsilen, i; 9668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char *pos; 9678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: reading IMSI from (GSM) EF-IMSI"); 9698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt blen = sizeof(buf); 9708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard_select_file(scard, SCARD_FILE_GSM_EF_IMSI, buf, &blen)) 9718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 9728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (blen < 4) { 9738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "SCARD: too short (GSM) EF-IMSI " 9748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "header (len=%ld)", (long) blen); 9758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -2; 9768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard->sim_type == SCARD_GSM_SIM) { 9798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt blen = (buf[2] << 8) | buf[3]; 9808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 9818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int file_size; 9828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard_parse_fsp_templ(buf, blen, NULL, &file_size)) 9838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -3; 9848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt blen = file_size; 9858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (blen < 2 || blen > sizeof(buf)) { 9878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: invalid IMSI file length=%ld", 9888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (long) blen); 9898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -3; 9908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt imsilen = (blen - 2) * 2 + 1; 9938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: IMSI file length=%ld imsilen=%ld", 9948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (long) blen, (long) imsilen); 9958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (blen < 2 || imsilen > *len) { 9968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *len = imsilen; 9978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -4; 9988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard_read_file(scard, buf, blen)) 10018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -5; 10028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = imsi; 10048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = '0' + (buf[1] >> 4 & 0x0f); 10058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 2; i < blen; i++) { 10068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char digit; 10078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt digit = buf[i] & 0x0f; 10098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (digit < 10) 10108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = '0' + digit; 10118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 10128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt imsilen--; 10138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt digit = buf[i] >> 4 & 0x0f; 10158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (digit < 10) 10168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = '0' + digit; 10178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 10188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt imsilen--; 10198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *len = imsilen; 10218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 10238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 10248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 10278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * scard_gsm_auth - Run GSM authentication command on SIM card 10288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @scard: Pointer to private data from scard_init() 10298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @_rand: 16-byte RAND value from HLR/AuC 10308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @sres: 4-byte buffer for SRES 10318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @kc: 8-byte buffer for Kc 10328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 if SIM/USIM connection has not been initialized, 10338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * -2 if authentication command execution fails, -3 if unknown response code 10348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * for authentication command is received, -4 if reading of response fails, 10358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * -5 if if response data is of unexpected length 10368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 10378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function performs GSM authentication using SIM/USIM card and the 10388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * provided RAND value from HLR/AuC. If authentication command can be completed 10398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * successfully, SRES and Kc values will be written into sres and kc buffers. 10408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 10418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint scard_gsm_auth(struct scard_data *scard, const unsigned char *_rand, 10428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *sres, unsigned char *kc) 10438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 10448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char cmd[5 + 1 + 16] = { SIM_CMD_RUN_GSM_ALG }; 10458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int cmdlen; 10468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char get_resp[5] = { SIM_CMD_GET_RESPONSE }; 10478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char resp[3], buf[12 + 3 + 2]; 10488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len; 10498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt long ret; 10508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard == NULL) 10528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 10538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: GSM auth - RAND", _rand, 16); 10558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard->sim_type == SCARD_GSM_SIM) { 10568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmdlen = 5 + 16; 10578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(cmd + 5, _rand, 16); 10588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 10598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmdlen = 5 + 1 + 16; 10608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[0] = USIM_CLA; 10618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[3] = 0x80; 10628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[4] = 17; 10638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[5] = 16; 10648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(cmd + 6, _rand, 16); 10658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len = sizeof(resp); 10678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = scard_transmit(scard, cmd, cmdlen, resp, &len); 10688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret != SCARD_S_SUCCESS) 10698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -2; 10708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((scard->sim_type == SCARD_GSM_SIM && 10728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (len != 2 || resp[0] != 0x9f || resp[1] != 0x0c)) || 10738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (scard->sim_type == SCARD_USIM && 10748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (len != 2 || resp[0] != 0x61 || resp[1] != 0x0e))) { 10758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "SCARD: unexpected response for GSM " 10768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "auth request (len=%ld resp=%02x %02x)", 10778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (long) len, resp[0], resp[1]); 10788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -3; 10798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt get_resp[4] = resp[1]; 10818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len = sizeof(buf); 10838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = scard_transmit(scard, get_resp, sizeof(get_resp), buf, &len); 10848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret != SCARD_S_SUCCESS) 10858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -4; 10868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard->sim_type == SCARD_GSM_SIM) { 10888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 4 + 8 + 2) { 10898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "SCARD: unexpected data " 10908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length for GSM auth (len=%ld, expected 14)", 10918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (long) len); 10928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -5; 10938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(sres, buf, 4); 10958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(kc, buf + 4, 8); 10968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 10978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len != 1 + 4 + 1 + 8 + 2) { 10988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "SCARD: unexpected data " 10998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length for USIM auth (len=%ld, " 11008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "expected 16)", (long) len); 11018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -5; 11028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (buf[0] != 4 || buf[5] != 8) { 11048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "SCARD: unexpected SREC/Kc " 11058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length (%d %d, expected 4 8)", 11068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf[0], buf[5]); 11078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(sres, buf + 1, 4); 11098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(kc, buf + 6, 8); 11108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: GSM auth - SRES", sres, 4); 11138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: GSM auth - Kc", kc, 8); 11148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 11168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 11208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * scard_umts_auth - Run UMTS authentication command on USIM card 11218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @scard: Pointer to private data from scard_init() 11228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @_rand: 16-byte RAND value from HLR/AuC 11238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @autn: 16-byte AUTN value from HLR/AuC 11248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @res: 16-byte buffer for RES 11258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @res_len: Variable that will be set to RES length 11268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ik: 16-byte buffer for IK 11278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ck: 16-byte buffer for CK 11288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @auts: 14-byte buffer for AUTS 11298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure, or -2 if USIM reports synchronization 11308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * failure 11318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 11328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function performs AKA authentication using USIM card and the provided 11338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RAND and AUTN values from HLR/AuC. If authentication command can be 11348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * completed successfully, RES, IK, and CK values will be written into provided 11358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * buffers and res_len is set to length of received RES value. If USIM reports 11368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * synchronization failure, the received AUTS value will be written into auts 11378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * buffer. In this case, RES, IK, and CK are not valid. 11388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 11398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint scard_umts_auth(struct scard_data *scard, const unsigned char *_rand, 11408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const unsigned char *autn, 11418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *res, size_t *res_len, 11428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char *ik, unsigned char *ck, unsigned char *auts) 11438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char cmd[5 + 1 + AKA_RAND_LEN + 1 + AKA_AUTN_LEN] = 11458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt { USIM_CMD_RUN_UMTS_ALG }; 11468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char get_resp[5] = { USIM_CMD_GET_RESPONSE }; 11478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char resp[3], buf[64], *pos, *end; 11488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len; 11498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt long ret; 11508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard == NULL) 11528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (scard->sim_type == SCARD_GSM_SIM) { 11558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "SCARD: Non-USIM card - cannot do UMTS " 11568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "auth"); 11578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: UMTS auth - RAND", _rand, AKA_RAND_LEN); 11618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: UMTS auth - AUTN", autn, AKA_AUTN_LEN); 11628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[5] = AKA_RAND_LEN; 11638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(cmd + 6, _rand, AKA_RAND_LEN); 11648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cmd[6 + AKA_RAND_LEN] = AKA_AUTN_LEN; 11658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(cmd + 6 + AKA_RAND_LEN + 1, autn, AKA_AUTN_LEN); 11668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len = sizeof(resp); 11688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = scard_transmit(scard, cmd, sizeof(cmd), resp, &len); 11698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret != SCARD_S_SUCCESS) 11708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len <= sizeof(resp)) 11738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: UMTS alg response", resp, len); 11748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len == 2 && resp[0] == 0x98 && resp[1] == 0x62) { 11768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "SCARD: UMTS auth failed - " 11778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "MAC != XMAC"); 11788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else if (len != 2 || resp[0] != 0x61) { 11808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "SCARD: unexpected response for UMTS " 11818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "auth request (len=%ld resp=%02x %02x)", 11828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (long) len, resp[0], resp[1]); 11838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt get_resp[4] = resp[1]; 11868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len = sizeof(buf); 11888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ret = scard_transmit(scard, get_resp, sizeof(get_resp), buf, &len); 11898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ret != SCARD_S_SUCCESS || len > sizeof(buf)) 11908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: UMTS get response result", buf, len); 11938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len >= 2 + AKA_AUTS_LEN && buf[0] == 0xdc && 11948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf[1] == AKA_AUTS_LEN) { 11958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: UMTS Synchronization-Failure"); 11968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(auts, buf + 2, AKA_AUTS_LEN); 11978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: AUTS", auts, AKA_AUTS_LEN); 11988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -2; 11998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else if (len >= 6 + IK_LEN + CK_LEN && buf[0] == 0xdb) { 12008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = buf + 1; 12018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt end = buf + len; 12028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* RES */ 12048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos[0] > RES_MAX_LEN || pos + pos[0] > end) { 12058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Invalid RES"); 12068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 12078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *res_len = *pos++; 12098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(res, pos, *res_len); 12108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += *res_len; 12118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: RES", res, *res_len); 12128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* CK */ 12148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos[0] != CK_LEN || pos + CK_LEN > end) { 12158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Invalid CK"); 12168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 12178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos++; 12198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(ck, pos, CK_LEN); 12208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += CK_LEN; 12218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: CK", ck, CK_LEN); 12228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* IK */ 12248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos[0] != IK_LEN || pos + IK_LEN > end) { 12258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Invalid IK"); 12268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 12278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos++; 12298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(ik, pos, IK_LEN); 12308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += IK_LEN; 12318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SCARD: IK", ik, IK_LEN); 12328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 12348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SCARD: Unrecognized response"); 12378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 12388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1239