134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt/* 234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt * EAP server/peer: EAP-EKE shared routines 334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt * Copyright (c) 2011-2013, Jouni Malinen <j@w1.fi> 434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt * 534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt * This software may be distributed under the terms of the BSD license. 634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt * See README for more details. 734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt */ 834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#ifndef EAP_EKE_COMMON_H 1034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_COMMON_H 1134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 1234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt/* EKE Exchange */ 1334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_ID 1 1434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_COMMIT 2 1534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_CONFIRM 3 1634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_FAILURE 4 1734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 1834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt/* Diffie-Hellman Group Registry */ 1934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_DHGROUP_EKE_2 1 2034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_DHGROUP_EKE_5 2 2134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_DHGROUP_EKE_14 3 /* mandatory to implement */ 2234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_DHGROUP_EKE_15 4 2334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_DHGROUP_EKE_16 5 2434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 2534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt/* Encryption Algorithm Registry */ 2634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_ENCR_AES128_CBC 1 /* mandatory to implement */ 2734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 2834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt/* Pseudo Random Function Registry */ 2934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_PRF_HMAC_SHA1 1 /* mandatory to implement */ 3034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_PRF_HMAC_SHA2_256 2 3134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 3234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt/* Keyed Message Digest (MAC) Registry */ 3334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_MAC_HMAC_SHA1 1 /* mandatory to implement */ 3434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_MAC_HMAC_SHA2_256 2 3534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 3634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt/* Identity Type Registry */ 3734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_ID_OPAQUE 1 3834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_ID_NAI 2 3934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_ID_IPv4 3 4034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_ID_IPv6 4 4134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_ID_FQDN 5 4234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_ID_DN 6 4334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 4434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt/* Failure-Code */ 4534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_FAIL_NO_ERROR 1 4634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_FAIL_PROTO_ERROR 2 4734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_FAIL_PASSWD_NOT_FOUND 3 4834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_FAIL_AUTHENTICATION_FAIL 4 4934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_FAIL_AUTHORIZATION_FAIL 5 5034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_FAIL_NO_PROPOSAL_CHOSEN 6 5134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR 0xffffffff 5234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 5334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_MAX_DH_LEN 512 5434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_MAX_HASH_LEN 32 5534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_MAX_KEY_LEN 16 5634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_MAX_KE_LEN 16 5734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_MAX_KI_LEN 32 5834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_MAX_KA_LEN 32 5934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#define EAP_EKE_MAX_NONCE_LEN 16 6034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 6134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidtstruct eap_eke_session { 6234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt /* Selected proposal */ 6334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt u8 dhgroup; 6434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt u8 encr; 6534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt u8 prf; 6634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt u8 mac; 6734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 6834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt u8 shared_secret[EAP_EKE_MAX_HASH_LEN]; 6934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt u8 ke[EAP_EKE_MAX_KE_LEN]; 7034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt u8 ki[EAP_EKE_MAX_KI_LEN]; 7134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt u8 ka[EAP_EKE_MAX_KA_LEN]; 7234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 7334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt int prf_len; 7434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt int nonce_len; 7534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt int auth_len; 7634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt int dhcomp_len; 7734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt int pnonce_len; 7834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt int pnonce_ps_len; 7934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt}; 8034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 8134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidtint eap_eke_session_init(struct eap_eke_session *sess, u8 dhgroup, u8 encr, 8234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt u8 prf, u8 mac); 8334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidtvoid eap_eke_session_clean(struct eap_eke_session *sess); 8434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidtint eap_eke_dh_init(u8 group, u8 *ret_priv, u8 *ret_pub); 8534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidtint eap_eke_derive_key(struct eap_eke_session *sess, 8634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt const u8 *password, size_t password_len, 8734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt const u8 *id_s, size_t id_s_len, const u8 *id_p, 8834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt size_t id_p_len, u8 *key); 8934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidtint eap_eke_dhcomp(struct eap_eke_session *sess, const u8 *key, const u8 *dhpub, 9034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt u8 *ret_dhcomp); 9134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidtint eap_eke_shared_secret(struct eap_eke_session *sess, const u8 *key, 9234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt const u8 *dhpriv, const u8 *peer_dhcomp); 9334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidtint eap_eke_derive_ke_ki(struct eap_eke_session *sess, 9434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt const u8 *id_s, size_t id_s_len, 9534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt const u8 *id_p, size_t id_p_len); 9634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidtint eap_eke_derive_ka(struct eap_eke_session *sess, 9734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt const u8 *id_s, size_t id_s_len, 9834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt const u8 *id_p, size_t id_p_len, 9934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt const u8 *nonce_p, const u8 *nonce_s); 10034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidtint eap_eke_derive_msk(struct eap_eke_session *sess, 10134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt const u8 *id_s, size_t id_s_len, 10234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt const u8 *id_p, size_t id_p_len, 10334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt const u8 *nonce_p, const u8 *nonce_s, 10434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt u8 *msk, u8 *emsk); 10534af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidtint eap_eke_prot(struct eap_eke_session *sess, 10634af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt const u8 *data, size_t data_len, 10734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt u8 *prot, size_t *prot_len); 10834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidtint eap_eke_decrypt_prot(struct eap_eke_session *sess, 10934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt const u8 *prot, size_t prot_len, 11034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt u8 *data, size_t *data_len); 11134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidtint eap_eke_auth(struct eap_eke_session *sess, const char *label, 11234af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt const struct wpabuf *msgs, u8 *auth); 11334af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 11434af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt#endif /* EAP_EKE_COMMON_H */ 115