Lines Matching full:data
59 static void eap_eke_state(struct eap_eke_data *data, int state)
62 eap_eke_state_txt(data->state),
64 data->state = state;
68 static void eap_eke_fail(struct eap_eke_data *data, u32 code)
71 data->failure_code = code;
72 eap_eke_state(data, FAILURE_REPORT);
78 struct eap_eke_data *data;
81 data = os_zalloc(sizeof(*data));
82 if (data == NULL)
84 eap_eke_state(data, IDENTITY);
86 data->serverid_type = EAP_EKE_ID_OPAQUE;
89 data->serverid_type == EAP_EKE_ID_OPAQUE)
90 data->serverid_type = EAP_EKE_ID_FQDN;
92 data->serverid_type = EAP_EKE_ID_NAI;
95 data->phase2 = sm->init_phase2;
97 return data;
103 struct eap_eke_data *data = priv;
104 eap_eke_session_clean(&data->sess);
105 os_free(data->peerid);
106 wpabuf_free(data->msgs);
107 bin_clear_free(data, sizeof(*data));
111 static struct wpabuf * eap_eke_build_msg(struct eap_eke_data *data,
162 static struct wpabuf * eap_eke_build_failure(struct eap_eke_data *data, u8 id)
167 data->failure_code);
169 msg = eap_eke_build_msg(data, id, 4, EAP_EKE_FAILURE);
171 eap_eke_state(data, FAILURE);
174 wpabuf_put_be32(msg, data->failure_code);
181 struct eap_eke_data *data,
190 msg = eap_eke_build_msg(data, id, plen, EAP_EKE_ID);
225 wpabuf_put_u8(msg, data->serverid_type);
228 wpabuf_free(data->msgs);
229 data->msgs = wpabuf_dup(msg);
230 if (data->msgs == NULL) {
240 struct eap_eke_data *data, u8 id)
249 eap_eke_fail(data, EAP_EKE_FAIL_PASSWD_NOT_FOUND);
250 return eap_eke_build_failure(data, id);
253 if (eap_eke_derive_key(&data->sess, sm->user->password,
256 data->peerid, data->peerid_len, data->key) < 0) {
258 eap_eke_fail(data, EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR);
259 return eap_eke_build_failure(data, id);
262 msg = eap_eke_build_msg(data, id, data->sess.dhcomp_len,
265 eap_eke_fail(data, EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR);
266 return eap_eke_build_failure(data, id);
277 if (eap_eke_dh_init(data->sess.dhgroup, data->dh_priv, pub) < 0) {
280 eap_eke_fail(data, EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR);
281 return eap_eke_build_failure(data, id);
284 if (eap_eke_dhcomp(&data->sess, data->key, pub,
285 wpabuf_put(msg, data->sess.dhcomp_len))
289 eap_eke_fail(data, EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR);
290 return eap_eke_build_failure(data, id);
293 if (wpabuf_resize(&data->msgs, wpabuf_len(msg)) < 0) {
295 eap_eke_fail(data, EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR);
296 return eap_eke_build_failure(data, id);
298 wpabuf_put_buf(data->msgs, msg);
305 struct eap_eke_data *data, u8 id)
314 plen = data->sess.pnonce_ps_len + data->sess.prf_len;
315 msg = eap_eke_build_msg(data, id, plen, EAP_EKE_CONFIRM);
317 eap_eke_fail(data, EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR);
318 return eap_eke_build_failure(data, id);
321 if (random_get_bytes(data->nonce_s, data->sess.nonce_len)) {
323 eap_eke_fail(data, EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR);
324 return eap_eke_build_failure(data, id);
327 data->nonce_s, data->sess.nonce_len);
329 os_memcpy(nonces, data->nonce_p, data->sess.nonce_len);
330 os_memcpy(nonces + data->sess.nonce_len, data->nonce_s,
331 data->sess.nonce_len);
333 if (eap_eke_prot(&data->sess, nonces, 2 * data->sess.nonce_len,
336 eap_eke_fail(data, EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR);
337 return eap_eke_build_failure(data, id);
341 if (eap_eke_derive_ka(&data->sess,
343 data->peerid, data->peerid_len,
344 data->nonce_p, data->nonce_s) < 0) {
346 eap_eke_fail(data, EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR);
347 return eap_eke_build_failure(data, id);
350 auth = wpabuf_put(msg, data->sess.prf_len);
351 if (eap_eke_auth(&data->sess, "EAP-EKE server", data->msgs, auth) < 0) {
353 eap_eke_fail(data, EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR);
354 return eap_eke_build_failure(data, id);
356 wpa_hexdump(MSG_DEBUG, "EAP-EKE: Auth_S", auth, data->sess.prf_len);
364 struct eap_eke_data *data = priv;
366 switch (data->state) {
368 return eap_eke_build_identity(sm, data, id);
370 return eap_eke_build_commit(sm, data, id);
372 return eap_eke_build_confirm(sm, data, id);
374 return eap_eke_build_failure(data, id);
377 data->state);
387 struct eap_eke_data *data = priv;
401 if (data->state == IDENTITY && eke_exch == EAP_EKE_ID)
404 if (data->state == COMMIT && eke_exch == EAP_EKE_COMMIT)
407 if (data->state == CONFIRM && eke_exch == EAP_EKE_CONFIRM)
414 eke_exch, data->state);
421 struct eap_eke_data *data,
430 if (data->state != IDENTITY) {
431 eap_eke_fail(data, EAP_EKE_FAIL_PROTO_ERROR);
440 eap_eke_fail(data, EAP_EKE_FAIL_PROTO_ERROR);
447 eap_eke_fail(data, EAP_EKE_FAIL_PROTO_ERROR);
456 eap_eke_fail(data, EAP_EKE_FAIL_PROTO_ERROR);
462 if (eap_eke_session_init(&data->sess, pos[0], pos[1], pos[2], pos[3]) <
464 eap_eke_fail(data, EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR);
469 data->peerid_type = *pos++;
470 os_free(data->peerid);
471 data->peerid = os_memdup(pos, end - pos);
472 if (data->peerid == NULL) {
474 eap_eke_fail(data, EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR);
477 data->peerid_len = end - pos;
478 wpa_printf(MSG_DEBUG, "EAP-EKE: Peer IDType %u", data->peerid_type);
480 data->peerid, data->peerid_len);
482 if (eap_user_get(sm, data->peerid, data->peerid_len, data->phase2)) {
484 eap_eke_fail(data, EAP_EKE_FAIL_PASSWD_NOT_FOUND);
495 eap_eke_fail(data, EAP_EKE_FAIL_PASSWD_NOT_FOUND);
501 eap_eke_fail(data, EAP_EKE_FAIL_PASSWD_NOT_FOUND);
505 if (wpabuf_resize(&data->msgs, wpabuf_len(respData)) < 0) {
506 eap_eke_fail(data, EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR);
509 wpabuf_put_buf(data->msgs, respData);
511 eap_eke_state(data, COMMIT);
516 struct eap_eke_data *data,
525 if (data->state != COMMIT) {
526 eap_eke_fail(data, EAP_EKE_FAIL_PROTO_ERROR);
533 if (pos + data->sess.dhcomp_len + data->sess.pnonce_len > end) {
535 eap_eke_fail(data, EAP_EKE_FAIL_PROTO_ERROR);
540 pos, data->sess.dhcomp_len);
542 pos += data->sess.dhcomp_len;
543 wpa_hexdump(MSG_DEBUG, "EAP-EKE: PNonce_P", pos, data->sess.pnonce_len);
545 pos += data->sess.pnonce_len;
548 if (eap_eke_shared_secret(&data->sess, data->key, data->dh_priv, dhcomp)
551 eap_eke_fail(data, EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR);
555 if (eap_eke_derive_ke_ki(&data->sess,
557 data->peerid, data->peerid_len) < 0) {
559 eap_eke_fail(data, EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR);
563 decrypt_len = sizeof(data->nonce_p);
564 if (eap_eke_decrypt_prot(&data->sess, pnonce, data->sess.pnonce_len,
565 data->nonce_p, &decrypt_len) < 0) {
567 eap_eke_fail(data, EAP_EKE_FAIL_AUTHENTICATION_FAIL);
570 if (decrypt_len < (size_t) data->sess.nonce_len) {
571 wpa_printf(MSG_INFO, "EAP-EKE: PNonce_P protected data too short to include Nonce_P");
572 eap_eke_fail(data, EAP_EKE_FAIL_AUTHENTICATION_FAIL);
576 data->nonce_p, data->sess.nonce_len);
578 if (wpabuf_resize(&data->msgs, wpabuf_len(respData)) < 0) {
579 eap_eke_fail(data, EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR);
582 wpabuf_put_buf(data->msgs, respData);
584 eap_eke_state(data, CONFIRM);
589 struct eap_eke_data *data,
599 if (data->state != CONFIRM) {
600 eap_eke_fail(data, EAP_EKE_FAIL_PROTO_ERROR);
606 if (payloadlen < (size_t) data->sess.pnonce_len + data->sess.prf_len) {
608 eap_eke_fail(data, EAP_EKE_FAIL_PROTO_ERROR);
613 if (eap_eke_decrypt_prot(&data->sess, payload, data->sess.pnonce_len,
616 eap_eke_fail(data, EAP_EKE_FAIL_AUTHENTICATION_FAIL);
619 if (decrypt_len < (size_t) data->sess.nonce_len) {
620 wpa_printf(MSG_INFO, "EAP-EKE: PNonce_S protected data too short to include Nonce_S");
621 eap_eke_fail(data, EAP_EKE_FAIL_AUTHENTICATION_FAIL);
625 nonce, data->sess.nonce_len);
626 if (os_memcmp(nonce, data->nonce_s, data->sess.nonce_len) != 0) {
628 eap_eke_fail(data, EAP_EKE_FAIL_AUTHENTICATION_FAIL);
632 if (eap_eke_auth(&data->sess, "EAP-EKE peer", data->msgs, auth_p) < 0) {
634 eap_eke_fail(data, EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR);
637 wpa_hexdump(MSG_DEBUG, "EAP-EKE: Auth_P", auth_p, data->sess.prf_len);
638 if (os_memcmp_const(auth_p, payload + data->sess.pnonce_len,
639 data->sess.prf_len) != 0) {
641 eap_eke_fail(data, EAP_EKE_FAIL_AUTHENTICATION_FAIL);
645 if (eap_eke_derive_msk(&data->sess, sm->cfg->server_id,
647 data->peerid, data->peerid_len,
648 data->nonce_s, data->nonce_p,
649 data->msk, data->emsk) < 0) {
651 eap_eke_fail(data, EAP_EKE_FAIL_PRIVATE_INTERNAL_ERROR);
655 os_memset(data->dh_priv, 0, sizeof(data->dh_priv));
656 os_memset(data->key, 0, sizeof(data->key));
657 eap_eke_session_clean(&data->sess);
659 eap_eke_state(data, SUCCESS);
664 struct eap_eke_data *data,
674 eap_eke_state(data, FAILURE);
681 eap_eke_state(data, FAILURE);
688 struct eap_eke_data *data = priv;
705 eap_eke_process_identity(sm, data, respData, pos, end - pos);
708 eap_eke_process_commit(sm, data, respData, pos, end - pos);
711 eap_eke_process_confirm(sm, data, respData, pos, end - pos);
714 eap_eke_process_failure(sm, data, respData, pos, end - pos);
722 struct eap_eke_data *data = priv;
723 return data->state == SUCCESS || data->state == FAILURE;
729 struct eap_eke_data *data = priv;
732 if (data->state != SUCCESS)
735 key = os_memdup(data->msk, EAP_MSK_LEN);
746 struct eap_eke_data *data = priv;
749 if (data->state != SUCCESS)
752 key = os_memdup(data->emsk, EAP_EMSK_LEN);
763 struct eap_eke_data *data = priv;
764 return data->state == SUCCESS;
770 struct eap_eke_data *data = priv;
774 if (data->state != SUCCESS)
777 sid_len = 1 + 2 * data->sess.nonce_len;
782 os_memcpy(sid + 1, data->nonce_p, data->sess.nonce_len);
783 os_memcpy(sid + 1 + data->sess.nonce_len, data->nonce_s,
784 data->sess.nonce_len);