18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * EAP peer/server: EAP-SIM/AKA/AKA' shared routines 38d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Copyright (c) 2004-2008, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license. 6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details. 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "includes.h" 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "common.h" 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "wpabuf.h" 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/aes_wrap.h" 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/crypto.h" 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/sha1.h" 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/sha256.h" 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/random.h" 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "eap_common/eap_defs.h" 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "eap_common/eap_sim_common.h" 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int eap_sim_prf(const u8 *key, u8 *x, size_t xlen) 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return fips186_2_prf(key, EAP_SIM_MK_LEN, x, xlen); 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_sim_derive_mk(const u8 *identity, size_t identity_len, 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *nonce_mt, u16 selected_version, 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *ver_list, size_t ver_list_len, 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int num_chal, const u8 *kc, u8 *mk) 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 sel_ver[2]; 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const unsigned char *addr[5]; 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[5]; 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = identity; 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = identity_len; 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[1] = kc; 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = num_chal * EAP_SIM_KC_LEN; 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[2] = nonce_mt; 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[2] = EAP_SIM_NONCE_MT_LEN; 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[3] = ver_list; 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[3] = ver_list_len; 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[4] = sel_ver; 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[4] = 2; 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE16(sel_ver, selected_version); 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* MK = SHA1(Identity|n*Kc|NONCE_MT|Version List|Selected Version) */ 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sha1_vector(5, addr, len, mk); 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-SIM: MK", mk, EAP_SIM_MK_LEN); 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_aka_derive_mk(const u8 *identity, size_t identity_len, 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *ik, const u8 *ck, u8 *mk) 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr[3]; 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[3]; 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = identity; 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = identity_len; 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[1] = ik; 658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = EAP_AKA_IK_LEN; 668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[2] = ck; 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[2] = EAP_AKA_CK_LEN; 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* MK = SHA1(Identity|IK|CK) */ 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sha1_vector(3, addr, len, mk); 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA: IK", ik, EAP_AKA_IK_LEN); 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA: CK", ck, EAP_AKA_CK_LEN); 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA: MK", mk, EAP_SIM_MK_LEN); 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint eap_sim_derive_keys(const u8 *mk, u8 *k_encr, u8 *k_aut, u8 *msk, u8 *emsk) 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 buf[EAP_SIM_K_ENCR_LEN + EAP_SIM_K_AUT_LEN + 808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt EAP_SIM_KEYING_DATA_LEN + EAP_EMSK_LEN], *pos; 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eap_sim_prf(mk, buf, sizeof(buf)) < 0) { 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-SIM: Failed to derive keys"); 838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = buf; 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(k_encr, pos, EAP_SIM_K_ENCR_LEN); 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += EAP_SIM_K_ENCR_LEN; 888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(k_aut, pos, EAP_SIM_K_AUT_LEN); 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += EAP_SIM_K_AUT_LEN; 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(msk, pos, EAP_SIM_KEYING_DATA_LEN); 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += EAP_SIM_KEYING_DATA_LEN; 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(emsk, pos, EAP_EMSK_LEN); 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-SIM: K_encr", 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt k_encr, EAP_SIM_K_ENCR_LEN); 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-SIM: K_aut", 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt k_aut, EAP_SIM_K_AUT_LEN); 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-SIM: keying material (MSK)", 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msk, EAP_SIM_KEYING_DATA_LEN); 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-SIM: EMSK", emsk, EAP_EMSK_LEN); 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(buf, 0, sizeof(buf)); 1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint eap_sim_derive_keys_reauth(u16 _counter, 1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *identity, size_t identity_len, 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *nonce_s, const u8 *mk, u8 *msk, 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *emsk) 1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 xkey[SHA1_MAC_LEN]; 1138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 buf[EAP_SIM_KEYING_DATA_LEN + EAP_EMSK_LEN + 32]; 1148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 counter[2]; 1158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr[4]; 1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[4]; 1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (identity_len > 0 && identity[identity_len - 1] == 0) { 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: Workaround - drop null " 1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "character from the end of identity"); 1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt identity_len--; 1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = identity; 1248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = identity_len; 1258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[1] = counter; 1268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = 2; 1278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[2] = nonce_s; 1288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[2] = EAP_SIM_NONCE_S_LEN; 1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[3] = mk; 1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[3] = EAP_SIM_MK_LEN; 1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE16(counter, _counter); 1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: Deriving keying data from reauth"); 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_ascii(MSG_DEBUG, "EAP-SIM: Identity", 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt identity, identity_len); 1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "EAP-SIM: counter", counter, 2); 1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "EAP-SIM: NONCE_S", nonce_s, 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt EAP_SIM_NONCE_S_LEN); 1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-SIM: MK", mk, EAP_SIM_MK_LEN); 1418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* XKEY' = SHA1(Identity|counter|NONCE_S|MK) */ 1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sha1_vector(4, addr, len, xkey); 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "EAP-SIM: XKEY'", xkey, SHA1_MAC_LEN); 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eap_sim_prf(xkey, buf, sizeof(buf)) < 0) { 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-SIM: Failed to derive keys"); 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msk) { 1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(msk, buf, EAP_SIM_KEYING_DATA_LEN); 1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "EAP-SIM: keying material (MSK)", 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msk, EAP_SIM_KEYING_DATA_LEN); 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (emsk) { 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(emsk, buf + EAP_SIM_KEYING_DATA_LEN, EAP_EMSK_LEN); 1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "EAP-SIM: EMSK", emsk, EAP_EMSK_LEN); 1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(buf, 0, sizeof(buf)); 1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint eap_sim_verify_mac(const u8 *k_aut, const struct wpabuf *req, 1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *mac, const u8 *extra, size_t extra_len) 1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char hmac[SHA1_MAC_LEN]; 1698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr[2]; 1708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[2]; 1718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *tmp; 1728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (mac == NULL || wpabuf_len(req) < EAP_SIM_MAC_LEN || 1748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mac < wpabuf_head_u8(req) || 1758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mac > wpabuf_head_u8(req) + wpabuf_len(req) - EAP_SIM_MAC_LEN) 1768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = os_malloc(wpabuf_len(req)); 1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tmp == NULL) 1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = tmp; 1838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = wpabuf_len(req); 1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[1] = extra; 1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = extra_len; 1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* HMAC-SHA1-128 */ 1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(tmp, wpabuf_head(req), wpabuf_len(req)); 1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(tmp + (mac - wpabuf_head_u8(req)), 0, EAP_SIM_MAC_LEN); 1908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-SIM: Verify MAC - msg", 1918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp, wpabuf_len(req)); 1928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-SIM: Verify MAC - extra data", 1938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt extra, extra_len); 1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_MSGDUMP, "EAP-SIM: Verify MAC - K_aut", 1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt k_aut, EAP_SIM_K_AUT_LEN); 1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hmac_sha1_vector(k_aut, EAP_SIM_K_AUT_LEN, 2, addr, len, hmac); 1978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-SIM: Verify MAC: MAC", 1988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hmac, EAP_SIM_MAC_LEN); 1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(tmp); 2008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return (os_memcmp(hmac, mac, EAP_SIM_MAC_LEN) == 0) ? 0 : 1; 2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_sim_add_mac(const u8 *k_aut, const u8 *msg, size_t msg_len, u8 *mac, 2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *extra, size_t extra_len) 2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char hmac[SHA1_MAC_LEN]; 2098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr[2]; 2108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[2]; 2118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = msg; 2138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = msg_len; 2148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[1] = extra; 2158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = extra_len; 2168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* HMAC-SHA1-128 */ 2188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(mac, 0, EAP_SIM_MAC_LEN); 2198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-SIM: Add MAC - msg", msg, msg_len); 2208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-SIM: Add MAC - extra data", 2218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt extra, extra_len); 2228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_MSGDUMP, "EAP-SIM: Add MAC - K_aut", 2238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt k_aut, EAP_SIM_K_AUT_LEN); 2248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hmac_sha1_vector(k_aut, EAP_SIM_K_AUT_LEN, 2, addr, len, hmac); 2258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(mac, hmac, EAP_SIM_MAC_LEN); 2268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-SIM: Add MAC: MAC", 2278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mac, EAP_SIM_MAC_LEN); 2288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#if defined(EAP_AKA_PRIME) || defined(EAP_SERVER_AKA_PRIME) 2328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void prf_prime(const u8 *k, const char *seed1, 2338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *seed2, size_t seed2_len, 2348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *seed3, size_t seed3_len, 2358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *res, size_t res_len) 2368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr[5]; 2388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[5]; 2398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 hash[SHA256_MAC_LEN]; 2408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 iter; 2418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 2438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * PRF'(K,S) = T1 | T2 | T3 | T4 | ... 2448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * T1 = HMAC-SHA-256 (K, S | 0x01) 2458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * T2 = HMAC-SHA-256 (K, T1 | S | 0x02) 2468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * T3 = HMAC-SHA-256 (K, T2 | S | 0x03) 2478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * T4 = HMAC-SHA-256 (K, T3 | S | 0x04) 2488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * ... 2498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = hash; 2528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = 0; 2538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[1] = (const u8 *) seed1; 2548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = os_strlen(seed1); 2558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[2] = seed2; 2568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[2] = seed2_len; 2578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[3] = seed3; 2588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[3] = seed3_len; 2598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[4] = &iter; 2608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[4] = 1; 2618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt iter = 0; 2638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (res_len) { 2648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t hlen; 2658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt iter++; 2668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hmac_sha256_vector(k, 32, 5, addr, len, hash); 2678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = SHA256_MAC_LEN; 2688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hlen = res_len > SHA256_MAC_LEN ? SHA256_MAC_LEN : res_len; 2698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(res, hash, hlen); 2708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res += hlen; 2718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res_len -= hlen; 2728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_aka_prime_derive_keys(const u8 *identity, size_t identity_len, 2778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *ik, const u8 *ck, u8 *k_encr, 2788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *k_aut, u8 *k_re, u8 *msk, u8 *emsk) 2798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 key[EAP_AKA_IK_LEN + EAP_AKA_CK_LEN]; 2818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 keys[EAP_SIM_K_ENCR_LEN + EAP_AKA_PRIME_K_AUT_LEN + 2828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt EAP_AKA_PRIME_K_RE_LEN + EAP_MSK_LEN + EAP_EMSK_LEN]; 2838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pos; 2848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 2868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * MK = PRF'(IK'|CK',"EAP-AKA'"|Identity) 2878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * K_encr = MK[0..127] 2888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * K_aut = MK[128..383] 2898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * K_re = MK[384..639] 2908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * MSK = MK[640..1151] 2918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * EMSK = MK[1152..1663] 2928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(key, ik, EAP_AKA_IK_LEN); 2958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(key + EAP_AKA_IK_LEN, ck, EAP_AKA_CK_LEN); 2968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prf_prime(key, "EAP-AKA'", identity, identity_len, NULL, 0, 2988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt keys, sizeof(keys)); 2998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = keys; 3018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(k_encr, pos, EAP_SIM_K_ENCR_LEN); 3028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': K_encr", 3038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt k_encr, EAP_SIM_K_ENCR_LEN); 3048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += EAP_SIM_K_ENCR_LEN; 3058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(k_aut, pos, EAP_AKA_PRIME_K_AUT_LEN); 3078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': K_aut", 3088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt k_aut, EAP_AKA_PRIME_K_AUT_LEN); 3098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += EAP_AKA_PRIME_K_AUT_LEN; 3108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(k_re, pos, EAP_AKA_PRIME_K_RE_LEN); 3128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': K_re", 3138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt k_re, EAP_AKA_PRIME_K_RE_LEN); 3148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += EAP_AKA_PRIME_K_RE_LEN; 3158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(msk, pos, EAP_MSK_LEN); 3178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': MSK", msk, EAP_MSK_LEN); 3188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += EAP_MSK_LEN; 3198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(emsk, pos, EAP_EMSK_LEN); 3218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': EMSK", emsk, EAP_EMSK_LEN); 3228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint eap_aka_prime_derive_keys_reauth(const u8 *k_re, u16 counter, 3268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *identity, size_t identity_len, 3278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *nonce_s, u8 *msk, u8 *emsk) 3288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 seed3[2 + EAP_SIM_NONCE_S_LEN]; 3308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 keys[EAP_MSK_LEN + EAP_EMSK_LEN]; 3318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pos; 3328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 3348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * MK = PRF'(K_re,"EAP-AKA' re-auth"|Identity|counter|NONCE_S) 3358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * MSK = MK[0..511] 3368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * EMSK = MK[512..1023] 3378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE16(seed3, counter); 3408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(seed3 + 2, nonce_s, EAP_SIM_NONCE_S_LEN); 3418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prf_prime(k_re, "EAP-AKA' re-auth", identity, identity_len, 3438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt seed3, sizeof(seed3), 3448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt keys, sizeof(keys)); 3458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = keys; 3478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(msk, pos, EAP_MSK_LEN); 3488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': MSK", msk, EAP_MSK_LEN); 3498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += EAP_MSK_LEN; 3508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(emsk, pos, EAP_EMSK_LEN); 3528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': EMSK", emsk, EAP_EMSK_LEN); 3538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(keys, 0, sizeof(keys)); 3558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 3578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint eap_sim_verify_mac_sha256(const u8 *k_aut, const struct wpabuf *req, 3618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *mac, const u8 *extra, size_t extra_len) 3628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char hmac[SHA256_MAC_LEN]; 3648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr[2]; 3658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[2]; 3668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *tmp; 3678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (mac == NULL || wpabuf_len(req) < EAP_SIM_MAC_LEN || 3698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mac < wpabuf_head_u8(req) || 3708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mac > wpabuf_head_u8(req) + wpabuf_len(req) - EAP_SIM_MAC_LEN) 3718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = os_malloc(wpabuf_len(req)); 3748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tmp == NULL) 3758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = tmp; 3788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = wpabuf_len(req); 3798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[1] = extra; 3808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = extra_len; 3818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* HMAC-SHA-256-128 */ 3838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(tmp, wpabuf_head(req), wpabuf_len(req)); 3848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(tmp + (mac - wpabuf_head_u8(req)), 0, EAP_SIM_MAC_LEN); 3858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-AKA': Verify MAC - msg", 3868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp, wpabuf_len(req)); 3878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-AKA': Verify MAC - extra data", 3888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt extra, extra_len); 3898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_MSGDUMP, "EAP-AKA': Verify MAC - K_aut", 3908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt k_aut, EAP_AKA_PRIME_K_AUT_LEN); 3918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hmac_sha256_vector(k_aut, EAP_AKA_PRIME_K_AUT_LEN, 2, addr, len, hmac); 3928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-AKA': Verify MAC: MAC", 3938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hmac, EAP_SIM_MAC_LEN); 3948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(tmp); 3958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return (os_memcmp(hmac, mac, EAP_SIM_MAC_LEN) == 0) ? 0 : 1; 3978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_sim_add_mac_sha256(const u8 *k_aut, const u8 *msg, size_t msg_len, 4018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *mac, const u8 *extra, size_t extra_len) 4028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char hmac[SHA256_MAC_LEN]; 4048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr[2]; 4058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[2]; 4068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = msg; 4088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = msg_len; 4098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[1] = extra; 4108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = extra_len; 4118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* HMAC-SHA-256-128 */ 4138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(mac, 0, EAP_SIM_MAC_LEN); 4148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-AKA': Add MAC - msg", msg, msg_len); 4158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-AKA': Add MAC - extra data", 4168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt extra, extra_len); 4178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_MSGDUMP, "EAP-AKA': Add MAC - K_aut", 4188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt k_aut, EAP_AKA_PRIME_K_AUT_LEN); 4198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hmac_sha256_vector(k_aut, EAP_AKA_PRIME_K_AUT_LEN, 2, addr, len, hmac); 4208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(mac, hmac, EAP_SIM_MAC_LEN); 4218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-AKA': Add MAC: MAC", 4228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mac, EAP_SIM_MAC_LEN); 4238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_aka_prime_derive_ck_ik_prime(u8 *ck, u8 *ik, const u8 *sqn_ak, 4278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *network_name, 4288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t network_name_len) 4298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 key[EAP_AKA_CK_LEN + EAP_AKA_IK_LEN]; 4318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 hash[SHA256_MAC_LEN]; 4328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr[5]; 4338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[5]; 4348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 fc; 4358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 l0[2], l1[2]; 4368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 3GPP TS 33.402 V8.0.0 4388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CK', IK') = F(CK, IK, <access network identity>) 4398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 4408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: CK', IK' generation should really be moved into the actual 4418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * AKA procedure with network name passed in there and option to use 4428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * AMF separation bit = 1 (3GPP TS 33.401). */ 4438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Change Request 33.402 CR 0033 to version 8.1.1 from 4458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 3GPP TSG-SA WG3 Meeting #53 in September 2008: 4468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 4478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * CK' || IK' = HMAC-SHA-256(Key, S) 4488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * S = FC || P0 || L0 || P1 || L1 || ... || Pn || Ln 4498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Key = CK || IK 4508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * FC = 0x20 4518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * P0 = access network identity (3GPP TS 24.302) 4528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * L0 = length of acceess network identity (2 octets, big endian) 4538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * P1 = SQN xor AK (if AK is not used, AK is treaded as 000..0 4548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * L1 = 0x00 0x06 4558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 4568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt fc = 0x20; 4588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA': Derive (CK',IK') from (CK,IK)"); 4608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': CK", ck, EAP_AKA_CK_LEN); 4618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': IK", ik, EAP_AKA_IK_LEN); 4628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA': FC = 0x%x", fc); 4638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_ascii(MSG_DEBUG, "EAP-AKA': P0 = Access network identity", 4648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt network_name, network_name_len); 4658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "EAP-AKA': P1 = SQN xor AK", sqn_ak, 6); 4668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(key, ck, EAP_AKA_CK_LEN); 4688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(key + EAP_AKA_CK_LEN, ik, EAP_AKA_IK_LEN); 4698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': Key = CK || IK", 4708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt key, sizeof(key)); 4718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = &fc; 4738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = 1; 4748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[1] = network_name; 4758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = network_name_len; 4768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE16(l0, network_name_len); 4778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[2] = l0; 4788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[2] = 2; 4798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[3] = sqn_ak; 4808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[3] = 6; 4818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE16(l1, 6); 4828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[4] = l1; 4838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[4] = 2; 4848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hmac_sha256_vector(key, sizeof(key), 5, addr, len, hash); 4868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': KDF output (CK' || IK')", 4878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hash, sizeof(hash)); 4888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(ck, hash, EAP_AKA_CK_LEN); 4908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(ik, hash + EAP_AKA_CK_LEN, EAP_AKA_IK_LEN); 4918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': CK'", ck, EAP_AKA_CK_LEN); 4928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': IK'", ik, EAP_AKA_IK_LEN); 4938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* EAP_AKA_PRIME || EAP_SERVER_AKA_PRIME */ 4958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint eap_sim_parse_attr(const u8 *start, const u8 *end, 4988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_sim_attrs *attr, int aka, int encr) 4998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *pos = start, *apos; 5018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t alen, plen, i, list_len; 5028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(attr, 0, sizeof(*attr)); 5048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->id_req = NO_ID_REQ; 5058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->notification = -1; 5068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->counter = -1; 5078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->selected_version = -1; 5088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->client_error_code = -1; 5098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pos < end) { 5118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos + 2 > end) { 5128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Attribute overflow(1)"); 5138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_MSGDUMP, "EAP-SIM: Attribute: Type=%d Len=%d", 5168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos[0], pos[1] * 4); 5178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos + pos[1] * 4 > end) { 5188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Attribute overflow " 5198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(pos=%p len=%d end=%p)", 5208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos, pos[1] * 4, end); 5218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos[1] == 0) { 5248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Attribute underflow"); 5258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt apos = pos + 2; 5288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alen = pos[1] * 4 - 2; 5298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-SIM: Attribute data", 5308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt apos, alen); 5318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (pos[0]) { 5338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_RAND: 5348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_RAND"); 5358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt apos += 2; 5368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alen -= 2; 5378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((!aka && (alen % GSM_RAND_LEN)) || 5388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (aka && alen != EAP_AKA_RAND_LEN)) { 5398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid AT_RAND" 5408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " (len %lu)", 5418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 5428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->rand = apos; 5458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->num_chal = alen / GSM_RAND_LEN; 5468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_AUTN: 5488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA: AT_AUTN"); 5498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!aka) { 5508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: " 5518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Unexpected AT_AUTN"); 5528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt apos += 2; 5558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alen -= 2; 5568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != EAP_AKA_AUTN_LEN) { 5578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-AKA: Invalid AT_AUTN" 5588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " (len %lu)", 5598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 5608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->autn = apos; 5638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_PADDING: 5658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!encr) { 5668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-SIM: Unencrypted " 5678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_PADDING"); 5688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: (encr) AT_PADDING"); 5718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 2; i < alen; i++) { 5728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (apos[i] != 0) { 5738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: (encr) " 5748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_PADDING used a non-zero" 5758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " padding byte"); 5768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "EAP-SIM: " 5778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(encr) padding bytes", 5788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt apos + 2, alen - 2); 5798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_NONCE_MT: 5848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_NONCE_MT"); 5858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2 + EAP_SIM_NONCE_MT_LEN) { 5868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid " 5878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_NONCE_MT length"); 5888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->nonce_mt = apos + 2; 5918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_PERMANENT_ID_REQ: 5938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_PERMANENT_ID_REQ"); 5948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->id_req = PERMANENT_ID; 5958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_MAC: 5978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_MAC"); 5988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2 + EAP_SIM_MAC_LEN) { 5998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid AT_MAC " 6008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length"); 6018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->mac = apos + 2; 6048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_NOTIFICATION: 6068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2) { 6078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid " 6088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_NOTIFICATION length %lu", 6098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 6108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->notification = apos[0] * 256 + apos[1]; 6138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_NOTIFICATION %d", 6148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->notification); 6158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_ANY_ID_REQ: 6178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_ANY_ID_REQ"); 6188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->id_req = ANY_ID; 6198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_IDENTITY: 6218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_IDENTITY"); 6228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt plen = WPA_GET_BE16(apos); 6238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt apos += 2; 6248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alen -= 2; 6258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (plen > alen) { 6268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid " 6278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_IDENTITY (Actual Length %lu, " 6288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "remaining length %lu)", 6298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) plen, 6308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 6318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->identity = apos; 6358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->identity_len = plen; 6368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_VERSION_LIST: 6388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (aka) { 6398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA: " 6408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Unexpected AT_VERSION_LIST"); 6418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt list_len = apos[0] * 256 + apos[1]; 6448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_VERSION_LIST"); 6458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (list_len < 2 || list_len > alen - 2) { 6468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "EAP-SIM: Invalid " 6478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_VERSION_LIST (list_len=%lu " 6488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "attr_len=%lu)", 6498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) list_len, 6508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 6518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->version_list = apos + 2; 6548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->version_list_len = list_len; 6558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_SELECTED_VERSION: 6578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_SELECTED_VERSION"); 6588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2) { 6598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid " 6608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_SELECTED_VERSION length %lu", 6618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 6628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->selected_version = apos[0] * 256 + apos[1]; 6658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_SELECTED_VERSION " 6668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%d", attr->selected_version); 6678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_FULLAUTH_ID_REQ: 6698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_FULLAUTH_ID_REQ"); 6708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->id_req = FULLAUTH_ID; 6718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_COUNTER: 6738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!encr) { 6748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-SIM: Unencrypted " 6758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_COUNTER"); 6768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2) { 6798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: (encr) Invalid " 6808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_COUNTER (alen=%lu)", 6818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 6828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->counter = apos[0] * 256 + apos[1]; 6858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: (encr) AT_COUNTER %d", 6868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->counter); 6878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_COUNTER_TOO_SMALL: 6898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!encr) { 6908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-SIM: Unencrypted " 6918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_COUNTER_TOO_SMALL"); 6928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2) { 6958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: (encr) Invalid " 6968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_COUNTER_TOO_SMALL (alen=%lu)", 6978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 6988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: (encr) " 7018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_COUNTER_TOO_SMALL"); 7028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->counter_too_small = 1; 7038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_NONCE_S: 7058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!encr) { 7068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-SIM: Unencrypted " 7078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_NONCE_S"); 7088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: (encr) " 7118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_NONCE_S"); 7128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2 + EAP_SIM_NONCE_S_LEN) { 7138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: (encr) Invalid " 7148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_NONCE_S (alen=%lu)", 7158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 7168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->nonce_s = apos + 2; 7198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_CLIENT_ERROR_CODE: 7218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2) { 7228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid " 7238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_CLIENT_ERROR_CODE length %lu", 7248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 7258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->client_error_code = apos[0] * 256 + apos[1]; 7288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_CLIENT_ERROR_CODE " 7298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%d", attr->client_error_code); 7308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_IV: 7328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_IV"); 7338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2 + EAP_SIM_MAC_LEN) { 7348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid AT_IV " 7358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %lu", (unsigned long) alen); 7368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->iv = apos + 2; 7398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_ENCR_DATA: 7418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_ENCR_DATA"); 7428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->encr_data = apos + 2; 7438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->encr_data_len = alen - 2; 7448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (attr->encr_data_len % 16) { 7458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid " 7468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_ENCR_DATA length %lu", 7478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) 7488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->encr_data_len); 7498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_NEXT_PSEUDONYM: 7538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!encr) { 7548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-SIM: Unencrypted " 7558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_NEXT_PSEUDONYM"); 7568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: (encr) " 7598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_NEXT_PSEUDONYM"); 7608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt plen = apos[0] * 256 + apos[1]; 7618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (plen > alen - 2) { 7628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: (encr) Invalid" 7638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " AT_NEXT_PSEUDONYM (actual" 7648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " len %lu, attr len %lu)", 7658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) plen, 7668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 7678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->next_pseudonym = pos + 4; 7708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->next_pseudonym_len = plen; 7718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_NEXT_REAUTH_ID: 7738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!encr) { 7748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-SIM: Unencrypted " 7758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_NEXT_REAUTH_ID"); 7768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: (encr) " 7798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_NEXT_REAUTH_ID"); 7808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt plen = apos[0] * 256 + apos[1]; 7818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (plen > alen - 2) { 7828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: (encr) Invalid" 7838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " AT_NEXT_REAUTH_ID (actual" 7848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " len %lu, attr len %lu)", 7858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) plen, 7868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 7878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->next_reauth_id = pos + 4; 7908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->next_reauth_id_len = plen; 7918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_RES: 7938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_RES"); 7948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->res_len_bits = WPA_GET_BE16(apos); 7958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt apos += 2; 7968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alen -= 2; 7978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!aka || alen < EAP_AKA_MIN_RES_LEN || 7988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alen > EAP_AKA_MAX_RES_LEN) { 7998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid AT_RES " 8008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(len %lu)", 8018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 8028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->res = apos; 8058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->res_len = alen; 8068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 8078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_AUTS: 8088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA: AT_AUTS"); 8098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!aka) { 8108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: " 8118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Unexpected AT_AUTS"); 8128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != EAP_AKA_AUTS_LEN) { 8158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-AKA: Invalid AT_AUTS" 8168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " (len %lu)", 8178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 8188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->auts = apos; 8218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 8228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_CHECKCODE: 8238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA: AT_CHECKCODE"); 8248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!aka) { 8258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: " 8268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Unexpected AT_CHECKCODE"); 8278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt apos += 2; 8308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alen -= 2; 8318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 0 && alen != EAP_AKA_CHECKCODE_LEN && 8328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alen != EAP_AKA_PRIME_CHECKCODE_LEN) { 8338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-AKA: Invalid " 8348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_CHECKCODE (len %lu)", 8358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 8368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->checkcode = apos; 8398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->checkcode_len = alen; 8408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 8418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_RESULT_IND: 8428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (encr) { 8438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-SIM: Encrypted " 8448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_RESULT_IND"); 8458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2) { 8488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid " 8498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_RESULT_IND (alen=%lu)", 8508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 8518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_RESULT_IND"); 8548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->result_ind = 1; 8558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 8568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#if defined(EAP_AKA_PRIME) || defined(EAP_SERVER_AKA_PRIME) 8578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_KDF_INPUT: 8588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (aka != 2) { 8598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-AKA: Unexpected " 8608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_KDF_INPUT"); 8618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA: AT_KDF_INPUT"); 8658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt plen = WPA_GET_BE16(apos); 8668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt apos += 2; 8678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alen -= 2; 8688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (plen > alen) { 8698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-AKA': Invalid " 8708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_KDF_INPUT (Actual Length %lu, " 8718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "remaining length %lu)", 8728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) plen, 8738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 8748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->kdf_input = apos; 8778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->kdf_input_len = plen; 8788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 8798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_KDF: 8808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (aka != 2) { 8818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-AKA: Unexpected " 8828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_KDF"); 8838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA: AT_KDF"); 8878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2) { 8888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-AKA': Invalid " 8898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_KDF (len %lu)", 8908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 8918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (attr->kdf_count == EAP_AKA_PRIME_KDF_MAX) { 8948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA': Too many " 8958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_KDF attributes - ignore this"); 8968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 8978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->kdf[attr->kdf_count] = WPA_GET_BE16(apos); 8998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->kdf_count++; 9008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 9018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_BIDDING: 9028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA: AT_BIDDING"); 9038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2) { 9048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-AKA: Invalid " 9058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_BIDDING (len %lu)", 9068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 9078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 9088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->bidding = apos; 9108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 9118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* EAP_AKA_PRIME || EAP_SERVER_AKA_PRIME */ 9128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 9138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos[0] < 128) { 9148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Unrecognized " 9158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "non-skippable attribute %d", 9168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos[0]); 9178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 9188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: Unrecognized skippable" 9218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " attribute %d ignored", pos[0]); 9228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 9238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += pos[1] * 4; 9268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: Attributes parsed successfully " 9298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(aka=%d encr=%d)", aka, encr); 9308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 9328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 9338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtu8 * eap_sim_parse_encr(const u8 *k_encr, const u8 *encr_data, 9368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t encr_data_len, const u8 *iv, 9378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_sim_attrs *attr, int aka) 9388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 9398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *decrypted; 9408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!iv) { 9428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Encrypted data, but no IV"); 9438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 9448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt decrypted = os_malloc(encr_data_len); 9478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (decrypted == NULL) 9488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 9498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(decrypted, encr_data, encr_data_len); 9508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (aes_128_cbc_decrypt(k_encr, iv, decrypted, encr_data_len)) { 9528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(decrypted); 9538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 9548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-SIM: Decrypted AT_ENCR_DATA", 9568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt decrypted, encr_data_len); 9578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eap_sim_parse_attr(decrypted, decrypted + encr_data_len, attr, 9598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt aka, 1)) { 9608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: (encr) Failed to parse " 9618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "decrypted AT_ENCR_DATA"); 9628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(decrypted); 9638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 9648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return decrypted; 9678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 9688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define EAP_SIM_INIT_LEN 128 9718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct eap_sim_msg { 9738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *buf; 9748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t mac, iv, encr; /* index from buf */ 9758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int type; 9768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 9778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct eap_sim_msg * eap_sim_msg_init(int code, int id, int type, int subtype) 9808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 9818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_sim_msg *msg; 9828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_hdr *eap; 9838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pos; 9848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg = os_zalloc(sizeof(*msg)); 9868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg == NULL) 9878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 9888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->type = type; 9908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->buf = wpabuf_alloc(EAP_SIM_INIT_LEN); 9918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg->buf == NULL) { 9928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(msg); 9938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 9948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap = wpabuf_put(msg->buf, sizeof(*eap)); 9968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap->code = code; 9978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap->identifier = id; 9988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = wpabuf_put(msg->buf, 4); 10008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = type; 10018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = subtype; 10028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = 0; /* Reserved */ 10038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = 0; /* Reserved */ 10048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return msg; 10068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 10078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct wpabuf * eap_sim_msg_finish(struct eap_sim_msg *msg, const u8 *k_aut, 10108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *extra, size_t extra_len) 10118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 10128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_hdr *eap; 10138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *buf; 10148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg == NULL) 10168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 10178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap = wpabuf_mhead(msg->buf); 10198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap->length = host_to_be16(wpabuf_len(msg->buf)); 10208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#if defined(EAP_AKA_PRIME) || defined(EAP_SERVER_AKA_PRIME) 10228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (k_aut && msg->mac && msg->type == EAP_TYPE_AKA_PRIME) { 10238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap_sim_add_mac_sha256(k_aut, (u8 *) wpabuf_head(msg->buf), 10248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_len(msg->buf), 10258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) wpabuf_mhead(msg->buf) + 10268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->mac, extra, extra_len); 10278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else 10288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* EAP_AKA_PRIME || EAP_SERVER_AKA_PRIME */ 10298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (k_aut && msg->mac) { 10308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap_sim_add_mac(k_aut, (u8 *) wpabuf_head(msg->buf), 10318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_len(msg->buf), 10328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) wpabuf_mhead(msg->buf) + msg->mac, 10338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt extra, extra_len); 10348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf = msg->buf; 10378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(msg); 10388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return buf; 10398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 10408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_sim_msg_free(struct eap_sim_msg *msg) 10438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 10448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg) { 10458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_free(msg->buf); 10468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(msg); 10478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 10498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtu8 * eap_sim_msg_add_full(struct eap_sim_msg *msg, u8 attr, 10528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *data, size_t len) 10538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 10548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int attr_len = 2 + len; 10558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pad_len; 10568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *start; 10578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg == NULL) 10598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 10608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pad_len = (4 - attr_len % 4) % 4; 10628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr_len += pad_len; 10638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpabuf_resize(&msg->buf, attr_len)) 10648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 10658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt start = wpabuf_put(msg->buf, 0); 10668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put_u8(msg->buf, attr); 10678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put_u8(msg->buf, attr_len / 4); 10688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put_data(msg->buf, data, len); 10698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pad_len) 10708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(wpabuf_put(msg->buf, pad_len), 0, pad_len); 10718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return start; 10728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 10738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtu8 * eap_sim_msg_add(struct eap_sim_msg *msg, u8 attr, u16 value, 10768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *data, size_t len) 10778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 10788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int attr_len = 4 + len; 10798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pad_len; 10808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *start; 10818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg == NULL) 10838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 10848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pad_len = (4 - attr_len % 4) % 4; 10868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr_len += pad_len; 10878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpabuf_resize(&msg->buf, attr_len)) 10888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 10898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt start = wpabuf_put(msg->buf, 0); 10908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put_u8(msg->buf, attr); 10918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put_u8(msg->buf, attr_len / 4); 10928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put_be16(msg->buf, value); 10938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (data) 10948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put_data(msg->buf, data, len); 10958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 10968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put(msg->buf, len); 10978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pad_len) 10988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(wpabuf_put(msg->buf, pad_len), 0, pad_len); 10998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return start; 11008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtu8 * eap_sim_msg_add_mac(struct eap_sim_msg *msg, u8 attr) 11048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pos = eap_sim_msg_add(msg, attr, 0, NULL, EAP_SIM_MAC_LEN); 11068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos) 11078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->mac = (pos - wpabuf_head_u8(msg->buf)) + 4; 11088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return pos; 11098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint eap_sim_msg_add_encr_start(struct eap_sim_msg *msg, u8 attr_iv, 11138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 attr_encr) 11148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pos = eap_sim_msg_add(msg, attr_iv, 0, NULL, EAP_SIM_IV_LEN); 11168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos == NULL) 11178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->iv = (pos - wpabuf_head_u8(msg->buf)) + 4; 11198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (random_get_bytes(wpabuf_mhead_u8(msg->buf) + msg->iv, 11208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt EAP_SIM_IV_LEN)) { 11218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->iv = 0; 11228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = eap_sim_msg_add(msg, attr_encr, 0, NULL, 0); 11268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos == NULL) { 11278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->iv = 0; 11288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->encr = pos - wpabuf_head_u8(msg->buf); 11318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 11338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint eap_sim_msg_add_encr_end(struct eap_sim_msg *msg, u8 *k_encr, int attr_pad) 11378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t encr_len; 11398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg == NULL || k_encr == NULL || msg->iv == 0 || msg->encr == 0) 11418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt encr_len = wpabuf_len(msg->buf) - msg->encr - 4; 11448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (encr_len % 16) { 11458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pos; 11468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pad_len = 16 - (encr_len % 16); 11478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pad_len < 4) { 11488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "EAP-SIM: " 11498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "eap_sim_msg_add_encr_end - invalid pad_len" 11508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " %d", pad_len); 11518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, " *AT_PADDING"); 11548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = eap_sim_msg_add(msg, attr_pad, 0, NULL, pad_len - 4); 11558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos == NULL) 11568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(pos + 4, 0, pad_len - 4); 11588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt encr_len += pad_len; 11598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, " (AT_ENCR_DATA data len %lu)", 11618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) encr_len); 11628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_mhead_u8(msg->buf)[msg->encr + 1] = encr_len / 4 + 1; 11638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return aes_128_cbc_encrypt(k_encr, wpabuf_head_u8(msg->buf) + msg->iv, 11648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_mhead_u8(msg->buf) + msg->encr + 4, 11658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt encr_len); 11668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_sim_report_notification(void *msg_ctx, int notification, int aka) 11708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NO_STDOUT_DEBUG 11728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *type = aka ? "AKA" : "SIM"; 11738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NO_STDOUT_DEBUG */ 11748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (notification) { 11768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_GENERAL_FAILURE_AFTER_AUTH: 11778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "EAP-%s: General failure " 11788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "notification (after authentication)", type); 11798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 11808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_TEMPORARILY_DENIED: 11818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "EAP-%s: Failure notification: " 11828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "User has been temporarily denied access to the " 11838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "requested service", type); 11848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 11858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_NOT_SUBSCRIBED: 11868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "EAP-%s: Failure notification: " 11878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "User has not subscribed to the requested service", 11888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt type); 11898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 11908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_GENERAL_FAILURE_BEFORE_AUTH: 11918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "EAP-%s: General failure " 11928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "notification (before authentication)", type); 11938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 11948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_SUCCESS: 11958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-%s: Successful authentication " 11968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "notification", type); 11978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 11988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 11998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (notification >= 32768) { 12008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-%s: Unrecognized " 12018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "non-failure notification %d", 12028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt type, notification); 12038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 12048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "EAP-%s: Unrecognized " 12058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "failure notification %d", 12068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt type, notification); 12078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1210