18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * EAP-FAST definitions (RFC 4851) 38d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Copyright (c) 2004-2008, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license. 6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details. 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef EAP_FAST_H 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define EAP_FAST_H 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define EAP_FAST_VERSION 1 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define EAP_FAST_KEY_LEN 64 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define EAP_FAST_SIMCK_LEN 40 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define EAP_FAST_SKS_LEN 40 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define EAP_FAST_CMK_LEN 20 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TLS_EXT_PAC_OPAQUE 35 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RFC 5422: Section 4.2.1 - Formats for PAC TLV Attributes / Type Field 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Note: bit 0x8000 (Mandatory) and bit 0x4000 (Reserved) are also defined 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * in the general PAC TLV format (Section 4.2). 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define PAC_TYPE_PAC_KEY 1 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define PAC_TYPE_PAC_OPAQUE 2 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define PAC_TYPE_CRED_LIFETIME 3 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define PAC_TYPE_A_ID 4 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define PAC_TYPE_I_ID 5 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 6 was previous assigned for SERVER_PROTECTED_DATA, but 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * draft-cam-winget-eap-fast-provisioning-02.txt changed this to Reserved. 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define PAC_TYPE_A_ID_INFO 7 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define PAC_TYPE_PAC_ACKNOWLEDGEMENT 8 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define PAC_TYPE_PAC_INFO 9 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define PAC_TYPE_PAC_TYPE 10 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef _MSC_VER 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#pragma pack(push, 1) 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* _MSC_VER */ 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct pac_tlv_hdr { 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt be16 type; 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt be16 len; 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} STRUCT_PACKED; 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef _MSC_VER 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#pragma pack(pop) 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* _MSC_VER */ 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define EAP_FAST_PAC_KEY_LEN 32 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* RFC 5422: 4.2.6 PAC-Type TLV */ 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define PAC_TYPE_TUNNEL_PAC 1 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* Application Specific Short Lived PACs (only in volatile storage) */ 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* User Authorization PAC */ 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define PAC_TYPE_USER_AUTHORIZATION 3 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* Application Specific Long Lived PACs */ 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* Machine Authentication PAC */ 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define PAC_TYPE_MACHINE_AUTHENTICATION 2 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RFC 5422: 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Section 3.3 - Key Derivations Used in the EAP-FAST Provisioning Exchange 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct eap_fast_key_block_provisioning { 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Extra key material after TLS key_block */ 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 session_key_seed[EAP_FAST_SKS_LEN]; 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 server_challenge[16]; /* MSCHAPv2 ServerChallenge */ 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 client_challenge[16]; /* MSCHAPv2 ClientChallenge */ 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct wpabuf; 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct tls_connection; 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct eap_fast_tlv_parse { 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *eap_payload_tlv; 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t eap_payload_tlv_len; 838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_tlv_crypto_binding_tlv *crypto_binding; 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t crypto_binding_len; 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int iresult; 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int result; 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int request_action; 888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pac; 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t pac_len; 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_fast_put_tlv_hdr(struct wpabuf *buf, u16 type, u16 len); 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_fast_put_tlv(struct wpabuf *buf, u16 type, const void *data, 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 len); 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_fast_put_tlv_buf(struct wpabuf *buf, u16 type, 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct wpabuf *data); 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct wpabuf * eap_fast_tlv_eap_payload(struct wpabuf *buf); 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_fast_derive_master_secret(const u8 *pac_key, const u8 *server_random, 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *client_random, u8 *master_secret); 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtu8 * eap_fast_derive_key(void *ssl_ctx, struct tls_connection *conn, 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *label, size_t len); 1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_fast_derive_eap_msk(const u8 *simck, u8 *msk); 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid eap_fast_derive_eap_emsk(const u8 *simck, u8 *emsk); 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint eap_fast_parse_tlv(struct eap_fast_tlv_parse *tlv, 1050c08fdcf5231617f2340cb18e45769a8ed3a1dc4Dmitry Shmidt int tlv_type, u8 *pos, size_t len); 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* EAP_FAST_H */ 108