eap_sim_common.c revision 8d520ff1dc2da35cdca849e982051b86468016d8
18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * EAP peer/server: EAP-SIM/AKA/AKA' shared routines 38d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Copyright (c) 2004-2008, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 58d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This program is free software; you can redistribute it and/or modify 68d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * it under the terms of the GNU General Public License version 2 as 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * published by the Free Software Foundation. 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Alternatively, this software may be distributed under the terms of BSD 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * license. 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * See README and COPYING for more details. 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "includes.h" 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "common.h" 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "wpabuf.h" 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/aes_wrap.h" 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/crypto.h" 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/sha1.h" 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/sha256.h" 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/random.h" 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "eap_common/eap_defs.h" 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "eap_common/eap_sim_common.h" 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int eap_sim_prf(const u8 *key, u8 *x, size_t xlen) 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return fips186_2_prf(key, EAP_SIM_MK_LEN, x, xlen); 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_sim_derive_mk(const u8 *identity, size_t identity_len, 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *nonce_mt, u16 selected_version, 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *ver_list, size_t ver_list_len, 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int num_chal, const u8 *kc, u8 *mk) 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 sel_ver[2]; 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const unsigned char *addr[5]; 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[5]; 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = identity; 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = identity_len; 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[1] = kc; 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = num_chal * EAP_SIM_KC_LEN; 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[2] = nonce_mt; 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[2] = EAP_SIM_NONCE_MT_LEN; 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[3] = ver_list; 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[3] = ver_list_len; 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[4] = sel_ver; 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[4] = 2; 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE16(sel_ver, selected_version); 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* MK = SHA1(Identity|n*Kc|NONCE_MT|Version List|Selected Version) */ 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sha1_vector(5, addr, len, mk); 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-SIM: MK", mk, EAP_SIM_MK_LEN); 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_aka_derive_mk(const u8 *identity, size_t identity_len, 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *ik, const u8 *ck, u8 *mk) 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr[3]; 668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[3]; 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = identity; 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = identity_len; 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[1] = ik; 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = EAP_AKA_IK_LEN; 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[2] = ck; 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[2] = EAP_AKA_CK_LEN; 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* MK = SHA1(Identity|IK|CK) */ 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sha1_vector(3, addr, len, mk); 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA: IK", ik, EAP_AKA_IK_LEN); 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA: CK", ck, EAP_AKA_CK_LEN); 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA: MK", mk, EAP_SIM_MK_LEN); 808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint eap_sim_derive_keys(const u8 *mk, u8 *k_encr, u8 *k_aut, u8 *msk, u8 *emsk) 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 buf[EAP_SIM_K_ENCR_LEN + EAP_SIM_K_AUT_LEN + 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt EAP_SIM_KEYING_DATA_LEN + EAP_EMSK_LEN], *pos; 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eap_sim_prf(mk, buf, sizeof(buf)) < 0) { 888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-SIM: Failed to derive keys"); 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = buf; 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(k_encr, pos, EAP_SIM_K_ENCR_LEN); 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += EAP_SIM_K_ENCR_LEN; 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(k_aut, pos, EAP_SIM_K_AUT_LEN); 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += EAP_SIM_K_AUT_LEN; 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(msk, pos, EAP_SIM_KEYING_DATA_LEN); 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += EAP_SIM_KEYING_DATA_LEN; 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(emsk, pos, EAP_EMSK_LEN); 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-SIM: K_encr", 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt k_encr, EAP_SIM_K_ENCR_LEN); 1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-SIM: K_aut", 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt k_aut, EAP_SIM_K_AUT_LEN); 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-SIM: keying material (MSK)", 1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msk, EAP_SIM_KEYING_DATA_LEN); 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-SIM: EMSK", emsk, EAP_EMSK_LEN); 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(buf, 0, sizeof(buf)); 1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint eap_sim_derive_keys_reauth(u16 _counter, 1148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *identity, size_t identity_len, 1158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *nonce_s, const u8 *mk, u8 *msk, 1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *emsk) 1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 xkey[SHA1_MAC_LEN]; 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 buf[EAP_SIM_KEYING_DATA_LEN + EAP_EMSK_LEN + 32]; 1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 counter[2]; 1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr[4]; 1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[4]; 1238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (identity_len > 0 && identity[identity_len - 1] == 0) { 1258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: Workaround - drop null " 1268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "character from the end of identity"); 1278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt identity_len--; 1288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = identity; 1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = identity_len; 1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[1] = counter; 1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = 2; 1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[2] = nonce_s; 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[2] = EAP_SIM_NONCE_S_LEN; 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[3] = mk; 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[3] = EAP_SIM_MK_LEN; 1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE16(counter, _counter); 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: Deriving keying data from reauth"); 1418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_ascii(MSG_DEBUG, "EAP-SIM: Identity", 1428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt identity, identity_len); 1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "EAP-SIM: counter", counter, 2); 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "EAP-SIM: NONCE_S", nonce_s, 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt EAP_SIM_NONCE_S_LEN); 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-SIM: MK", mk, EAP_SIM_MK_LEN); 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* XKEY' = SHA1(Identity|counter|NONCE_S|MK) */ 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sha1_vector(4, addr, len, xkey); 1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "EAP-SIM: XKEY'", xkey, SHA1_MAC_LEN); 1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eap_sim_prf(xkey, buf, sizeof(buf)) < 0) { 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-SIM: Failed to derive keys"); 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msk) { 1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(msk, buf, EAP_SIM_KEYING_DATA_LEN); 1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "EAP-SIM: keying material (MSK)", 1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msk, EAP_SIM_KEYING_DATA_LEN); 1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (emsk) { 1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(emsk, buf + EAP_SIM_KEYING_DATA_LEN, EAP_EMSK_LEN); 1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "EAP-SIM: EMSK", emsk, EAP_EMSK_LEN); 1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(buf, 0, sizeof(buf)); 1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint eap_sim_verify_mac(const u8 *k_aut, const struct wpabuf *req, 1728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *mac, const u8 *extra, size_t extra_len) 1738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char hmac[SHA1_MAC_LEN]; 1758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr[2]; 1768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[2]; 1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *tmp; 1788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (mac == NULL || wpabuf_len(req) < EAP_SIM_MAC_LEN || 1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mac < wpabuf_head_u8(req) || 1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mac > wpabuf_head_u8(req) + wpabuf_len(req) - EAP_SIM_MAC_LEN) 1828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = os_malloc(wpabuf_len(req)); 1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tmp == NULL) 1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = tmp; 1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = wpabuf_len(req); 1908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[1] = extra; 1918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = extra_len; 1928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* HMAC-SHA1-128 */ 1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(tmp, wpabuf_head(req), wpabuf_len(req)); 1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(tmp + (mac - wpabuf_head_u8(req)), 0, EAP_SIM_MAC_LEN); 1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-SIM: Verify MAC - msg", 1978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp, wpabuf_len(req)); 1988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-SIM: Verify MAC - extra data", 1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt extra, extra_len); 2008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_MSGDUMP, "EAP-SIM: Verify MAC - K_aut", 2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt k_aut, EAP_SIM_K_AUT_LEN); 2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hmac_sha1_vector(k_aut, EAP_SIM_K_AUT_LEN, 2, addr, len, hmac); 2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-SIM: Verify MAC: MAC", 2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hmac, EAP_SIM_MAC_LEN); 2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(tmp); 2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return (os_memcmp(hmac, mac, EAP_SIM_MAC_LEN) == 0) ? 0 : 1; 2088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_sim_add_mac(const u8 *k_aut, const u8 *msg, size_t msg_len, u8 *mac, 2128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *extra, size_t extra_len) 2138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char hmac[SHA1_MAC_LEN]; 2158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr[2]; 2168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[2]; 2178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = msg; 2198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = msg_len; 2208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[1] = extra; 2218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = extra_len; 2228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* HMAC-SHA1-128 */ 2248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(mac, 0, EAP_SIM_MAC_LEN); 2258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-SIM: Add MAC - msg", msg, msg_len); 2268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-SIM: Add MAC - extra data", 2278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt extra, extra_len); 2288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_MSGDUMP, "EAP-SIM: Add MAC - K_aut", 2298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt k_aut, EAP_SIM_K_AUT_LEN); 2308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hmac_sha1_vector(k_aut, EAP_SIM_K_AUT_LEN, 2, addr, len, hmac); 2318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(mac, hmac, EAP_SIM_MAC_LEN); 2328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-SIM: Add MAC: MAC", 2338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mac, EAP_SIM_MAC_LEN); 2348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#if defined(EAP_AKA_PRIME) || defined(EAP_SERVER_AKA_PRIME) 2388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void prf_prime(const u8 *k, const char *seed1, 2398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *seed2, size_t seed2_len, 2408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *seed3, size_t seed3_len, 2418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *res, size_t res_len) 2428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr[5]; 2448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[5]; 2458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 hash[SHA256_MAC_LEN]; 2468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 iter; 2478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 2498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * PRF'(K,S) = T1 | T2 | T3 | T4 | ... 2508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * T1 = HMAC-SHA-256 (K, S | 0x01) 2518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * T2 = HMAC-SHA-256 (K, T1 | S | 0x02) 2528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * T3 = HMAC-SHA-256 (K, T2 | S | 0x03) 2538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * T4 = HMAC-SHA-256 (K, T3 | S | 0x04) 2548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * ... 2558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = hash; 2588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = 0; 2598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[1] = (const u8 *) seed1; 2608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = os_strlen(seed1); 2618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[2] = seed2; 2628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[2] = seed2_len; 2638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[3] = seed3; 2648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[3] = seed3_len; 2658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[4] = &iter; 2668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[4] = 1; 2678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt iter = 0; 2698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (res_len) { 2708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t hlen; 2718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt iter++; 2728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hmac_sha256_vector(k, 32, 5, addr, len, hash); 2738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = SHA256_MAC_LEN; 2748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hlen = res_len > SHA256_MAC_LEN ? SHA256_MAC_LEN : res_len; 2758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(res, hash, hlen); 2768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res += hlen; 2778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res_len -= hlen; 2788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_aka_prime_derive_keys(const u8 *identity, size_t identity_len, 2838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *ik, const u8 *ck, u8 *k_encr, 2848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *k_aut, u8 *k_re, u8 *msk, u8 *emsk) 2858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 key[EAP_AKA_IK_LEN + EAP_AKA_CK_LEN]; 2878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 keys[EAP_SIM_K_ENCR_LEN + EAP_AKA_PRIME_K_AUT_LEN + 2888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt EAP_AKA_PRIME_K_RE_LEN + EAP_MSK_LEN + EAP_EMSK_LEN]; 2898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pos; 2908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 2928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * MK = PRF'(IK'|CK',"EAP-AKA'"|Identity) 2938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * K_encr = MK[0..127] 2948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * K_aut = MK[128..383] 2958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * K_re = MK[384..639] 2968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * MSK = MK[640..1151] 2978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * EMSK = MK[1152..1663] 2988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(key, ik, EAP_AKA_IK_LEN); 3018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(key + EAP_AKA_IK_LEN, ck, EAP_AKA_CK_LEN); 3028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prf_prime(key, "EAP-AKA'", identity, identity_len, NULL, 0, 3048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt keys, sizeof(keys)); 3058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = keys; 3078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(k_encr, pos, EAP_SIM_K_ENCR_LEN); 3088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': K_encr", 3098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt k_encr, EAP_SIM_K_ENCR_LEN); 3108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += EAP_SIM_K_ENCR_LEN; 3118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(k_aut, pos, EAP_AKA_PRIME_K_AUT_LEN); 3138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': K_aut", 3148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt k_aut, EAP_AKA_PRIME_K_AUT_LEN); 3158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += EAP_AKA_PRIME_K_AUT_LEN; 3168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(k_re, pos, EAP_AKA_PRIME_K_RE_LEN); 3188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': K_re", 3198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt k_re, EAP_AKA_PRIME_K_RE_LEN); 3208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += EAP_AKA_PRIME_K_RE_LEN; 3218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(msk, pos, EAP_MSK_LEN); 3238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': MSK", msk, EAP_MSK_LEN); 3248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += EAP_MSK_LEN; 3258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(emsk, pos, EAP_EMSK_LEN); 3278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': EMSK", emsk, EAP_EMSK_LEN); 3288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint eap_aka_prime_derive_keys_reauth(const u8 *k_re, u16 counter, 3328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *identity, size_t identity_len, 3338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *nonce_s, u8 *msk, u8 *emsk) 3348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 seed3[2 + EAP_SIM_NONCE_S_LEN]; 3368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 keys[EAP_MSK_LEN + EAP_EMSK_LEN]; 3378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pos; 3388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 3408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * MK = PRF'(K_re,"EAP-AKA' re-auth"|Identity|counter|NONCE_S) 3418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * MSK = MK[0..511] 3428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * EMSK = MK[512..1023] 3438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE16(seed3, counter); 3468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(seed3 + 2, nonce_s, EAP_SIM_NONCE_S_LEN); 3478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prf_prime(k_re, "EAP-AKA' re-auth", identity, identity_len, 3498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt seed3, sizeof(seed3), 3508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt keys, sizeof(keys)); 3518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = keys; 3538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(msk, pos, EAP_MSK_LEN); 3548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': MSK", msk, EAP_MSK_LEN); 3558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += EAP_MSK_LEN; 3568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(emsk, pos, EAP_EMSK_LEN); 3588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': EMSK", emsk, EAP_EMSK_LEN); 3598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(keys, 0, sizeof(keys)); 3618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 3638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint eap_sim_verify_mac_sha256(const u8 *k_aut, const struct wpabuf *req, 3678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *mac, const u8 *extra, size_t extra_len) 3688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char hmac[SHA256_MAC_LEN]; 3708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr[2]; 3718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[2]; 3728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *tmp; 3738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (mac == NULL || wpabuf_len(req) < EAP_SIM_MAC_LEN || 3758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mac < wpabuf_head_u8(req) || 3768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mac > wpabuf_head_u8(req) + wpabuf_len(req) - EAP_SIM_MAC_LEN) 3778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = os_malloc(wpabuf_len(req)); 3808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tmp == NULL) 3818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = tmp; 3848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = wpabuf_len(req); 3858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[1] = extra; 3868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = extra_len; 3878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* HMAC-SHA-256-128 */ 3898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(tmp, wpabuf_head(req), wpabuf_len(req)); 3908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(tmp + (mac - wpabuf_head_u8(req)), 0, EAP_SIM_MAC_LEN); 3918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-AKA': Verify MAC - msg", 3928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp, wpabuf_len(req)); 3938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-AKA': Verify MAC - extra data", 3948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt extra, extra_len); 3958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_MSGDUMP, "EAP-AKA': Verify MAC - K_aut", 3968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt k_aut, EAP_AKA_PRIME_K_AUT_LEN); 3978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hmac_sha256_vector(k_aut, EAP_AKA_PRIME_K_AUT_LEN, 2, addr, len, hmac); 3988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-AKA': Verify MAC: MAC", 3998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hmac, EAP_SIM_MAC_LEN); 4008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(tmp); 4018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return (os_memcmp(hmac, mac, EAP_SIM_MAC_LEN) == 0) ? 0 : 1; 4038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_sim_add_mac_sha256(const u8 *k_aut, const u8 *msg, size_t msg_len, 4078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *mac, const u8 *extra, size_t extra_len) 4088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char hmac[SHA256_MAC_LEN]; 4108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr[2]; 4118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[2]; 4128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = msg; 4148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = msg_len; 4158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[1] = extra; 4168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = extra_len; 4178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* HMAC-SHA-256-128 */ 4198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(mac, 0, EAP_SIM_MAC_LEN); 4208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-AKA': Add MAC - msg", msg, msg_len); 4218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-AKA': Add MAC - extra data", 4228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt extra, extra_len); 4238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_MSGDUMP, "EAP-AKA': Add MAC - K_aut", 4248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt k_aut, EAP_AKA_PRIME_K_AUT_LEN); 4258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hmac_sha256_vector(k_aut, EAP_AKA_PRIME_K_AUT_LEN, 2, addr, len, hmac); 4268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(mac, hmac, EAP_SIM_MAC_LEN); 4278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-AKA': Add MAC: MAC", 4288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt mac, EAP_SIM_MAC_LEN); 4298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_aka_prime_derive_ck_ik_prime(u8 *ck, u8 *ik, const u8 *sqn_ak, 4338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *network_name, 4348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t network_name_len) 4358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 key[EAP_AKA_CK_LEN + EAP_AKA_IK_LEN]; 4378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 hash[SHA256_MAC_LEN]; 4388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr[5]; 4398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len[5]; 4408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 fc; 4418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 l0[2], l1[2]; 4428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 3GPP TS 33.402 V8.0.0 4448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CK', IK') = F(CK, IK, <access network identity>) 4458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 4468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: CK', IK' generation should really be moved into the actual 4478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * AKA procedure with network name passed in there and option to use 4488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * AMF separation bit = 1 (3GPP TS 33.401). */ 4498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Change Request 33.402 CR 0033 to version 8.1.1 from 4518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 3GPP TSG-SA WG3 Meeting #53 in September 2008: 4528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 4538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * CK' || IK' = HMAC-SHA-256(Key, S) 4548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * S = FC || P0 || L0 || P1 || L1 || ... || Pn || Ln 4558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Key = CK || IK 4568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * FC = 0x20 4578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * P0 = access network identity (3GPP TS 24.302) 4588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * L0 = length of acceess network identity (2 octets, big endian) 4598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * P1 = SQN xor AK (if AK is not used, AK is treaded as 000..0 4608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * L1 = 0x00 0x06 4618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 4628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt fc = 0x20; 4648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA': Derive (CK',IK') from (CK,IK)"); 4668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': CK", ck, EAP_AKA_CK_LEN); 4678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': IK", ik, EAP_AKA_IK_LEN); 4688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA': FC = 0x%x", fc); 4698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_ascii(MSG_DEBUG, "EAP-AKA': P0 = Access network identity", 4708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt network_name, network_name_len); 4718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "EAP-AKA': P1 = SQN xor AK", sqn_ak, 6); 4728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(key, ck, EAP_AKA_CK_LEN); 4748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(key + EAP_AKA_CK_LEN, ik, EAP_AKA_IK_LEN); 4758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': Key = CK || IK", 4768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt key, sizeof(key)); 4778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[0] = &fc; 4798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[0] = 1; 4808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[1] = network_name; 4818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[1] = network_name_len; 4828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE16(l0, network_name_len); 4838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[2] = l0; 4848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[2] = 2; 4858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[3] = sqn_ak; 4868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[3] = 6; 4878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_PUT_BE16(l1, 6); 4888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr[4] = l1; 4898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len[4] = 2; 4908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hmac_sha256_vector(key, sizeof(key), 5, addr, len, hash); 4928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': KDF output (CK' || IK')", 4938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hash, sizeof(hash)); 4948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(ck, hash, EAP_AKA_CK_LEN); 4968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(ik, hash + EAP_AKA_CK_LEN, EAP_AKA_IK_LEN); 4978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': CK'", ck, EAP_AKA_CK_LEN); 4988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "EAP-AKA': IK'", ik, EAP_AKA_IK_LEN); 4998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* EAP_AKA_PRIME || EAP_SERVER_AKA_PRIME */ 5018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint eap_sim_parse_attr(const u8 *start, const u8 *end, 5048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_sim_attrs *attr, int aka, int encr) 5058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *pos = start, *apos; 5078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t alen, plen, i, list_len; 5088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(attr, 0, sizeof(*attr)); 5108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->id_req = NO_ID_REQ; 5118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->notification = -1; 5128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->counter = -1; 5138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->selected_version = -1; 5148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->client_error_code = -1; 5158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pos < end) { 5178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos + 2 > end) { 5188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Attribute overflow(1)"); 5198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_MSGDUMP, "EAP-SIM: Attribute: Type=%d Len=%d", 5228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos[0], pos[1] * 4); 5238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos + pos[1] * 4 > end) { 5248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Attribute overflow " 5258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(pos=%p len=%d end=%p)", 5268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos, pos[1] * 4, end); 5278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos[1] == 0) { 5308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Attribute underflow"); 5318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt apos = pos + 2; 5348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alen = pos[1] * 4 - 2; 5358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-SIM: Attribute data", 5368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt apos, alen); 5378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (pos[0]) { 5398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_RAND: 5408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_RAND"); 5418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt apos += 2; 5428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alen -= 2; 5438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((!aka && (alen % GSM_RAND_LEN)) || 5448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (aka && alen != EAP_AKA_RAND_LEN)) { 5458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid AT_RAND" 5468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " (len %lu)", 5478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 5488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->rand = apos; 5518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->num_chal = alen / GSM_RAND_LEN; 5528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_AUTN: 5548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA: AT_AUTN"); 5558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!aka) { 5568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: " 5578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Unexpected AT_AUTN"); 5588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt apos += 2; 5618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alen -= 2; 5628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != EAP_AKA_AUTN_LEN) { 5638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-AKA: Invalid AT_AUTN" 5648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " (len %lu)", 5658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 5668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->autn = apos; 5698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_PADDING: 5718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!encr) { 5728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-SIM: Unencrypted " 5738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_PADDING"); 5748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: (encr) AT_PADDING"); 5778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 2; i < alen; i++) { 5788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (apos[i] != 0) { 5798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: (encr) " 5808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_PADDING used a non-zero" 5818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " padding byte"); 5828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "EAP-SIM: " 5838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(encr) padding bytes", 5848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt apos + 2, alen - 2); 5858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_NONCE_MT: 5908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_NONCE_MT"); 5918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2 + EAP_SIM_NONCE_MT_LEN) { 5928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid " 5938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_NONCE_MT length"); 5948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->nonce_mt = apos + 2; 5978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 5988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_PERMANENT_ID_REQ: 5998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_PERMANENT_ID_REQ"); 6008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->id_req = PERMANENT_ID; 6018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_MAC: 6038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_MAC"); 6048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2 + EAP_SIM_MAC_LEN) { 6058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid AT_MAC " 6068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length"); 6078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->mac = apos + 2; 6108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_NOTIFICATION: 6128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2) { 6138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid " 6148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_NOTIFICATION length %lu", 6158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 6168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->notification = apos[0] * 256 + apos[1]; 6198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_NOTIFICATION %d", 6208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->notification); 6218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_ANY_ID_REQ: 6238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_ANY_ID_REQ"); 6248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->id_req = ANY_ID; 6258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_IDENTITY: 6278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_IDENTITY"); 6288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt plen = WPA_GET_BE16(apos); 6298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt apos += 2; 6308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alen -= 2; 6318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (plen > alen) { 6328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid " 6338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_IDENTITY (Actual Length %lu, " 6348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "remaining length %lu)", 6358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) plen, 6368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 6378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->identity = apos; 6418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->identity_len = plen; 6428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_VERSION_LIST: 6448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (aka) { 6458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA: " 6468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Unexpected AT_VERSION_LIST"); 6478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt list_len = apos[0] * 256 + apos[1]; 6508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_VERSION_LIST"); 6518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (list_len < 2 || list_len > alen - 2) { 6528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "EAP-SIM: Invalid " 6538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_VERSION_LIST (list_len=%lu " 6548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "attr_len=%lu)", 6558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) list_len, 6568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 6578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->version_list = apos + 2; 6608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->version_list_len = list_len; 6618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_SELECTED_VERSION: 6638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_SELECTED_VERSION"); 6648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2) { 6658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid " 6668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_SELECTED_VERSION length %lu", 6678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 6688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->selected_version = apos[0] * 256 + apos[1]; 6718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_SELECTED_VERSION " 6728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%d", attr->selected_version); 6738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_FULLAUTH_ID_REQ: 6758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_FULLAUTH_ID_REQ"); 6768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->id_req = FULLAUTH_ID; 6778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_COUNTER: 6798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!encr) { 6808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-SIM: Unencrypted " 6818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_COUNTER"); 6828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2) { 6858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: (encr) Invalid " 6868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_COUNTER (alen=%lu)", 6878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 6888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->counter = apos[0] * 256 + apos[1]; 6918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: (encr) AT_COUNTER %d", 6928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->counter); 6938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 6948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_COUNTER_TOO_SMALL: 6958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!encr) { 6968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-SIM: Unencrypted " 6978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_COUNTER_TOO_SMALL"); 6988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2) { 7018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: (encr) Invalid " 7028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_COUNTER_TOO_SMALL (alen=%lu)", 7038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 7048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: (encr) " 7078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_COUNTER_TOO_SMALL"); 7088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->counter_too_small = 1; 7098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_NONCE_S: 7118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!encr) { 7128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-SIM: Unencrypted " 7138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_NONCE_S"); 7148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: (encr) " 7178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_NONCE_S"); 7188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2 + EAP_SIM_NONCE_S_LEN) { 7198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: (encr) Invalid " 7208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_NONCE_S (alen=%lu)", 7218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 7228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->nonce_s = apos + 2; 7258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_CLIENT_ERROR_CODE: 7278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2) { 7288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid " 7298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_CLIENT_ERROR_CODE length %lu", 7308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 7318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->client_error_code = apos[0] * 256 + apos[1]; 7348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_CLIENT_ERROR_CODE " 7358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%d", attr->client_error_code); 7368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_IV: 7388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_IV"); 7398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2 + EAP_SIM_MAC_LEN) { 7408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid AT_IV " 7418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "length %lu", (unsigned long) alen); 7428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->iv = apos + 2; 7458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_ENCR_DATA: 7478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_ENCR_DATA"); 7488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->encr_data = apos + 2; 7498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->encr_data_len = alen - 2; 7508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (attr->encr_data_len % 16) { 7518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid " 7528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_ENCR_DATA length %lu", 7538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) 7548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->encr_data_len); 7558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_NEXT_PSEUDONYM: 7598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!encr) { 7608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-SIM: Unencrypted " 7618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_NEXT_PSEUDONYM"); 7628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: (encr) " 7658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_NEXT_PSEUDONYM"); 7668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt plen = apos[0] * 256 + apos[1]; 7678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (plen > alen - 2) { 7688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: (encr) Invalid" 7698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " AT_NEXT_PSEUDONYM (actual" 7708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " len %lu, attr len %lu)", 7718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) plen, 7728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 7738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->next_pseudonym = pos + 4; 7768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->next_pseudonym_len = plen; 7778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_NEXT_REAUTH_ID: 7798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!encr) { 7808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-SIM: Unencrypted " 7818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_NEXT_REAUTH_ID"); 7828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: (encr) " 7858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_NEXT_REAUTH_ID"); 7868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt plen = apos[0] * 256 + apos[1]; 7878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (plen > alen - 2) { 7888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: (encr) Invalid" 7898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " AT_NEXT_REAUTH_ID (actual" 7908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " len %lu, attr len %lu)", 7918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) plen, 7928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 7938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->next_reauth_id = pos + 4; 7968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->next_reauth_id_len = plen; 7978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_RES: 7998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_RES"); 8008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->res_len_bits = WPA_GET_BE16(apos); 8018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt apos += 2; 8028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alen -= 2; 8038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!aka || alen < EAP_AKA_MIN_RES_LEN || 8048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alen > EAP_AKA_MAX_RES_LEN) { 8058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid AT_RES " 8068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(len %lu)", 8078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 8088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->res = apos; 8118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->res_len = alen; 8128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 8138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_AUTS: 8148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA: AT_AUTS"); 8158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!aka) { 8168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: " 8178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Unexpected AT_AUTS"); 8188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != EAP_AKA_AUTS_LEN) { 8218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-AKA: Invalid AT_AUTS" 8228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " (len %lu)", 8238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 8248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->auts = apos; 8278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 8288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_CHECKCODE: 8298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA: AT_CHECKCODE"); 8308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!aka) { 8318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: " 8328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Unexpected AT_CHECKCODE"); 8338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt apos += 2; 8368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alen -= 2; 8378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 0 && alen != EAP_AKA_CHECKCODE_LEN && 8388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alen != EAP_AKA_PRIME_CHECKCODE_LEN) { 8398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-AKA: Invalid " 8408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_CHECKCODE (len %lu)", 8418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 8428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->checkcode = apos; 8458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->checkcode_len = alen; 8468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 8478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_RESULT_IND: 8488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (encr) { 8498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-SIM: Encrypted " 8508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_RESULT_IND"); 8518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2) { 8548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Invalid " 8558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_RESULT_IND (alen=%lu)", 8568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 8578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: AT_RESULT_IND"); 8608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->result_ind = 1; 8618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 8628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#if defined(EAP_AKA_PRIME) || defined(EAP_SERVER_AKA_PRIME) 8638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_KDF_INPUT: 8648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (aka != 2) { 8658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-AKA: Unexpected " 8668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_KDF_INPUT"); 8678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA: AT_KDF_INPUT"); 8718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt plen = WPA_GET_BE16(apos); 8728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt apos += 2; 8738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt alen -= 2; 8748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (plen > alen) { 8758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-AKA': Invalid " 8768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_KDF_INPUT (Actual Length %lu, " 8778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "remaining length %lu)", 8788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) plen, 8798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 8808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->kdf_input = apos; 8838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->kdf_input_len = plen; 8848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 8858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_KDF: 8868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (aka != 2) { 8878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-AKA: Unexpected " 8888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_KDF"); 8898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA: AT_KDF"); 8938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2) { 8948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-AKA': Invalid " 8958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_KDF (len %lu)", 8968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 8978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 8988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (attr->kdf_count == EAP_AKA_PRIME_KDF_MAX) { 9008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA': Too many " 9018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_KDF attributes - ignore this"); 9028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 9038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->kdf[attr->kdf_count] = WPA_GET_BE16(apos); 9058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->kdf_count++; 9068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 9078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_AT_BIDDING: 9088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-AKA: AT_BIDDING"); 9098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (alen != 2) { 9108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-AKA: Invalid " 9118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "AT_BIDDING (len %lu)", 9128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) alen); 9138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 9148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr->bidding = apos; 9168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 9178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* EAP_AKA_PRIME || EAP_SERVER_AKA_PRIME */ 9188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 9198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos[0] < 128) { 9208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Unrecognized " 9218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "non-skippable attribute %d", 9228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos[0]); 9238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 9248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: Unrecognized skippable" 9278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " attribute %d ignored", pos[0]); 9288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 9298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos += pos[1] * 4; 9328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-SIM: Attributes parsed successfully " 9358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(aka=%d encr=%d)", aka, encr); 9368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 9388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 9398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtu8 * eap_sim_parse_encr(const u8 *k_encr, const u8 *encr_data, 9428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t encr_data_len, const u8 *iv, 9438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_sim_attrs *attr, int aka) 9448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 9458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *decrypted; 9468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!iv) { 9488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: Encrypted data, but no IV"); 9498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 9508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt decrypted = os_malloc(encr_data_len); 9538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (decrypted == NULL) 9548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 9558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(decrypted, encr_data, encr_data_len); 9568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (aes_128_cbc_decrypt(k_encr, iv, decrypted, encr_data_len)) { 9588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(decrypted); 9598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 9608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_MSGDUMP, "EAP-SIM: Decrypted AT_ENCR_DATA", 9628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt decrypted, encr_data_len); 9638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eap_sim_parse_attr(decrypted, decrypted + encr_data_len, attr, 9658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt aka, 1)) { 9668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-SIM: (encr) Failed to parse " 9678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "decrypted AT_ENCR_DATA"); 9688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(decrypted); 9698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 9708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return decrypted; 9738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 9748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define EAP_SIM_INIT_LEN 128 9778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct eap_sim_msg { 9798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *buf; 9808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t mac, iv, encr; /* index from buf */ 9818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int type; 9828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 9838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct eap_sim_msg * eap_sim_msg_init(int code, int id, int type, int subtype) 9868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 9878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_sim_msg *msg; 9888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_hdr *eap; 9898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pos; 9908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg = os_zalloc(sizeof(*msg)); 9928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg == NULL) 9938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 9948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->type = type; 9968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->buf = wpabuf_alloc(EAP_SIM_INIT_LEN); 9978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg->buf == NULL) { 9988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(msg); 9998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 10008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap = wpabuf_put(msg->buf, sizeof(*eap)); 10028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap->code = code; 10038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap->identifier = id; 10048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = wpabuf_put(msg->buf, 4); 10068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = type; 10078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = subtype; 10088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = 0; /* Reserved */ 10098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *pos++ = 0; /* Reserved */ 10108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return msg; 10128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 10138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct wpabuf * eap_sim_msg_finish(struct eap_sim_msg *msg, const u8 *k_aut, 10168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *extra, size_t extra_len) 10178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 10188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_hdr *eap; 10198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *buf; 10208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg == NULL) 10228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 10238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap = wpabuf_mhead(msg->buf); 10258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap->length = host_to_be16(wpabuf_len(msg->buf)); 10268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#if defined(EAP_AKA_PRIME) || defined(EAP_SERVER_AKA_PRIME) 10288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (k_aut && msg->mac && msg->type == EAP_TYPE_AKA_PRIME) { 10298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap_sim_add_mac_sha256(k_aut, (u8 *) wpabuf_head(msg->buf), 10308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_len(msg->buf), 10318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) wpabuf_mhead(msg->buf) + 10328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->mac, extra, extra_len); 10338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else 10348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* EAP_AKA_PRIME || EAP_SERVER_AKA_PRIME */ 10358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (k_aut && msg->mac) { 10368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap_sim_add_mac(k_aut, (u8 *) wpabuf_head(msg->buf), 10378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_len(msg->buf), 10388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) wpabuf_mhead(msg->buf) + msg->mac, 10398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt extra, extra_len); 10408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf = msg->buf; 10438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(msg); 10448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return buf; 10458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 10468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_sim_msg_free(struct eap_sim_msg *msg) 10498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 10508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg) { 10518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_free(msg->buf); 10528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(msg); 10538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 10558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtu8 * eap_sim_msg_add_full(struct eap_sim_msg *msg, u8 attr, 10588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *data, size_t len) 10598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 10608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int attr_len = 2 + len; 10618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pad_len; 10628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *start; 10638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg == NULL) 10658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 10668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pad_len = (4 - attr_len % 4) % 4; 10688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr_len += pad_len; 10698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpabuf_resize(&msg->buf, attr_len)) 10708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 10718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt start = wpabuf_put(msg->buf, 0); 10728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put_u8(msg->buf, attr); 10738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put_u8(msg->buf, attr_len / 4); 10748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put_data(msg->buf, data, len); 10758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pad_len) 10768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(wpabuf_put(msg->buf, pad_len), 0, pad_len); 10778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return start; 10788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 10798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtu8 * eap_sim_msg_add(struct eap_sim_msg *msg, u8 attr, u16 value, 10828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *data, size_t len) 10838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 10848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int attr_len = 4 + len; 10858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pad_len; 10868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *start; 10878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg == NULL) 10898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 10908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pad_len = (4 - attr_len % 4) % 4; 10928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt attr_len += pad_len; 10938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpabuf_resize(&msg->buf, attr_len)) 10948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 10958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt start = wpabuf_put(msg->buf, 0); 10968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put_u8(msg->buf, attr); 10978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put_u8(msg->buf, attr_len / 4); 10988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put_be16(msg->buf, value); 10998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (data) 11008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put_data(msg->buf, data, len); 11018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 11028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put(msg->buf, len); 11038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pad_len) 11048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(wpabuf_put(msg->buf, pad_len), 0, pad_len); 11058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return start; 11068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtu8 * eap_sim_msg_add_mac(struct eap_sim_msg *msg, u8 attr) 11108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pos = eap_sim_msg_add(msg, attr, 0, NULL, EAP_SIM_MAC_LEN); 11128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos) 11138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->mac = (pos - wpabuf_head_u8(msg->buf)) + 4; 11148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return pos; 11158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint eap_sim_msg_add_encr_start(struct eap_sim_msg *msg, u8 attr_iv, 11198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 attr_encr) 11208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pos = eap_sim_msg_add(msg, attr_iv, 0, NULL, EAP_SIM_IV_LEN); 11228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos == NULL) 11238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->iv = (pos - wpabuf_head_u8(msg->buf)) + 4; 11258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (random_get_bytes(wpabuf_mhead_u8(msg->buf) + msg->iv, 11268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt EAP_SIM_IV_LEN)) { 11278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->iv = 0; 11288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = eap_sim_msg_add(msg, attr_encr, 0, NULL, 0); 11328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos == NULL) { 11338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->iv = 0; 11348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->encr = pos - wpabuf_head_u8(msg->buf); 11378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 11398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint eap_sim_msg_add_encr_end(struct eap_sim_msg *msg, u8 *k_encr, int attr_pad) 11438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t encr_len; 11458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg == NULL || k_encr == NULL || msg->iv == 0 || msg->encr == 0) 11478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt encr_len = wpabuf_len(msg->buf) - msg->encr - 4; 11508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (encr_len % 16) { 11518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pos; 11528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pad_len = 16 - (encr_len % 16); 11538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pad_len < 4) { 11548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "EAP-SIM: " 11558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "eap_sim_msg_add_encr_end - invalid pad_len" 11568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " %d", pad_len); 11578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, " *AT_PADDING"); 11608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = eap_sim_msg_add(msg, attr_pad, 0, NULL, pad_len - 4); 11618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos == NULL) 11628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(pos + 4, 0, pad_len - 4); 11648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt encr_len += pad_len; 11658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, " (AT_ENCR_DATA data len %lu)", 11678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) encr_len); 11688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_mhead_u8(msg->buf)[msg->encr + 1] = encr_len / 4 + 1; 11698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return aes_128_cbc_encrypt(k_encr, wpabuf_head_u8(msg->buf) + msg->iv, 11708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_mhead_u8(msg->buf) + msg->encr + 4, 11718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt encr_len); 11728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_sim_report_notification(void *msg_ctx, int notification, int aka) 11768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NO_STDOUT_DEBUG 11788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *type = aka ? "AKA" : "SIM"; 11798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NO_STDOUT_DEBUG */ 11808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (notification) { 11828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_GENERAL_FAILURE_AFTER_AUTH: 11838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "EAP-%s: General failure " 11848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "notification (after authentication)", type); 11858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 11868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_TEMPORARILY_DENIED: 11878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "EAP-%s: Failure notification: " 11888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "User has been temporarily denied access to the " 11898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "requested service", type); 11908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 11918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_NOT_SUBSCRIBED: 11928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "EAP-%s: Failure notification: " 11938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "User has not subscribed to the requested service", 11948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt type); 11958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 11968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_GENERAL_FAILURE_BEFORE_AUTH: 11978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "EAP-%s: General failure " 11988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "notification (before authentication)", type); 11998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 12008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case EAP_SIM_SUCCESS: 12018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-%s: Successful authentication " 12028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "notification", type); 12038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 12048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 12058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (notification >= 32768) { 12068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-%s: Unrecognized " 12078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "non-failure notification %d", 12088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt type, notification); 12098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 12108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_WARNING, "EAP-%s: Unrecognized " 12118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "failure notification %d", 12128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt type, notification); 12138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1216