16d49e1aeSJan Lentfer /*
26d49e1aeSJan Lentfer * EAP peer method: EAP-PAX (RFC 4746)
36d49e1aeSJan Lentfer * Copyright (c) 2005-2008, Jouni Malinen <j@w1.fi>
46d49e1aeSJan Lentfer *
53ff40c12SJohn Marino * This software may be distributed under the terms of the BSD license.
63ff40c12SJohn Marino * See README for more details.
76d49e1aeSJan Lentfer */
86d49e1aeSJan Lentfer
96d49e1aeSJan Lentfer #include "includes.h"
106d49e1aeSJan Lentfer
116d49e1aeSJan Lentfer #include "common.h"
123ff40c12SJohn Marino #include "crypto/random.h"
136d49e1aeSJan Lentfer #include "eap_common/eap_pax_common.h"
143ff40c12SJohn Marino #include "eap_i.h"
156d49e1aeSJan Lentfer
166d49e1aeSJan Lentfer /*
176d49e1aeSJan Lentfer * Note: only PAX_STD subprotocol is currently supported
186d49e1aeSJan Lentfer *
196d49e1aeSJan Lentfer * TODO: Add support with PAX_SEC with the mandatory to implement ciphersuite
206d49e1aeSJan Lentfer * (HMAC_SHA1_128, IANA DH Group 14 (2048 bits), RSA-PKCS1-V1_5) and
216d49e1aeSJan Lentfer * recommended ciphersuite (HMAC_SHA256_128, IANA DH Group 15 (3072 bits),
226d49e1aeSJan Lentfer * RSAES-OAEP).
236d49e1aeSJan Lentfer */
246d49e1aeSJan Lentfer
256d49e1aeSJan Lentfer struct eap_pax_data {
266d49e1aeSJan Lentfer enum { PAX_INIT, PAX_STD_2_SENT, PAX_DONE } state;
276d49e1aeSJan Lentfer u8 mac_id, dh_group_id, public_key_id;
286d49e1aeSJan Lentfer union {
296d49e1aeSJan Lentfer u8 e[2 * EAP_PAX_RAND_LEN];
306d49e1aeSJan Lentfer struct {
316d49e1aeSJan Lentfer u8 x[EAP_PAX_RAND_LEN]; /* server rand */
326d49e1aeSJan Lentfer u8 y[EAP_PAX_RAND_LEN]; /* client rand */
336d49e1aeSJan Lentfer } r;
346d49e1aeSJan Lentfer } rand;
356d49e1aeSJan Lentfer char *cid;
366d49e1aeSJan Lentfer size_t cid_len;
376d49e1aeSJan Lentfer u8 ak[EAP_PAX_AK_LEN];
386d49e1aeSJan Lentfer u8 mk[EAP_PAX_MK_LEN];
396d49e1aeSJan Lentfer u8 ck[EAP_PAX_CK_LEN];
406d49e1aeSJan Lentfer u8 ick[EAP_PAX_ICK_LEN];
41*a1157835SDaniel Fojt u8 mid[EAP_PAX_MID_LEN];
426d49e1aeSJan Lentfer };
436d49e1aeSJan Lentfer
446d49e1aeSJan Lentfer
456d49e1aeSJan Lentfer static void eap_pax_deinit(struct eap_sm *sm, void *priv);
466d49e1aeSJan Lentfer
476d49e1aeSJan Lentfer
eap_pax_init(struct eap_sm * sm)486d49e1aeSJan Lentfer static void * eap_pax_init(struct eap_sm *sm)
496d49e1aeSJan Lentfer {
506d49e1aeSJan Lentfer struct eap_pax_data *data;
516d49e1aeSJan Lentfer const u8 *identity, *password;
526d49e1aeSJan Lentfer size_t identity_len, password_len;
536d49e1aeSJan Lentfer
546d49e1aeSJan Lentfer identity = eap_get_config_identity(sm, &identity_len);
556d49e1aeSJan Lentfer password = eap_get_config_password(sm, &password_len);
566d49e1aeSJan Lentfer if (!identity || !password) {
576d49e1aeSJan Lentfer wpa_printf(MSG_INFO, "EAP-PAX: CID (nai) or key (password) "
586d49e1aeSJan Lentfer "not configured");
596d49e1aeSJan Lentfer return NULL;
606d49e1aeSJan Lentfer }
616d49e1aeSJan Lentfer
626d49e1aeSJan Lentfer if (password_len != EAP_PAX_AK_LEN) {
636d49e1aeSJan Lentfer wpa_printf(MSG_INFO, "EAP-PAX: Invalid PSK length");
646d49e1aeSJan Lentfer return NULL;
656d49e1aeSJan Lentfer }
666d49e1aeSJan Lentfer
676d49e1aeSJan Lentfer data = os_zalloc(sizeof(*data));
686d49e1aeSJan Lentfer if (data == NULL)
696d49e1aeSJan Lentfer return NULL;
706d49e1aeSJan Lentfer data->state = PAX_INIT;
716d49e1aeSJan Lentfer
72*a1157835SDaniel Fojt data->cid = os_memdup(identity, identity_len);
736d49e1aeSJan Lentfer if (data->cid == NULL) {
746d49e1aeSJan Lentfer eap_pax_deinit(sm, data);
756d49e1aeSJan Lentfer return NULL;
766d49e1aeSJan Lentfer }
776d49e1aeSJan Lentfer data->cid_len = identity_len;
786d49e1aeSJan Lentfer
796d49e1aeSJan Lentfer os_memcpy(data->ak, password, EAP_PAX_AK_LEN);
806d49e1aeSJan Lentfer
816d49e1aeSJan Lentfer return data;
826d49e1aeSJan Lentfer }
836d49e1aeSJan Lentfer
846d49e1aeSJan Lentfer
eap_pax_deinit(struct eap_sm * sm,void * priv)856d49e1aeSJan Lentfer static void eap_pax_deinit(struct eap_sm *sm, void *priv)
866d49e1aeSJan Lentfer {
876d49e1aeSJan Lentfer struct eap_pax_data *data = priv;
886d49e1aeSJan Lentfer os_free(data->cid);
89*a1157835SDaniel Fojt bin_clear_free(data, sizeof(*data));
906d49e1aeSJan Lentfer }
916d49e1aeSJan Lentfer
926d49e1aeSJan Lentfer
eap_pax_alloc_resp(const struct eap_pax_hdr * req,u8 id,u8 op_code,size_t plen)936d49e1aeSJan Lentfer static struct wpabuf * eap_pax_alloc_resp(const struct eap_pax_hdr *req,
946d49e1aeSJan Lentfer u8 id, u8 op_code, size_t plen)
956d49e1aeSJan Lentfer {
966d49e1aeSJan Lentfer struct wpabuf *resp;
976d49e1aeSJan Lentfer struct eap_pax_hdr *pax;
986d49e1aeSJan Lentfer
996d49e1aeSJan Lentfer resp = eap_msg_alloc(EAP_VENDOR_IETF, EAP_TYPE_PAX,
1006d49e1aeSJan Lentfer sizeof(*pax) + plen, EAP_CODE_RESPONSE, id);
1016d49e1aeSJan Lentfer if (resp == NULL)
1026d49e1aeSJan Lentfer return NULL;
1036d49e1aeSJan Lentfer
1046d49e1aeSJan Lentfer pax = wpabuf_put(resp, sizeof(*pax));
1056d49e1aeSJan Lentfer pax->op_code = op_code;
1066d49e1aeSJan Lentfer pax->flags = 0;
1076d49e1aeSJan Lentfer pax->mac_id = req->mac_id;
1086d49e1aeSJan Lentfer pax->dh_group_id = req->dh_group_id;
1096d49e1aeSJan Lentfer pax->public_key_id = req->public_key_id;
1106d49e1aeSJan Lentfer
1116d49e1aeSJan Lentfer return resp;
1126d49e1aeSJan Lentfer }
1136d49e1aeSJan Lentfer
1146d49e1aeSJan Lentfer
eap_pax_process_std_1(struct eap_pax_data * data,struct eap_method_ret * ret,u8 id,const struct eap_pax_hdr * req,size_t req_plen)1156d49e1aeSJan Lentfer static struct wpabuf * eap_pax_process_std_1(struct eap_pax_data *data,
1166d49e1aeSJan Lentfer struct eap_method_ret *ret, u8 id,
1176d49e1aeSJan Lentfer const struct eap_pax_hdr *req,
1186d49e1aeSJan Lentfer size_t req_plen)
1196d49e1aeSJan Lentfer {
1206d49e1aeSJan Lentfer struct wpabuf *resp;
1216d49e1aeSJan Lentfer const u8 *pos;
1226d49e1aeSJan Lentfer u8 *rpos;
1236d49e1aeSJan Lentfer size_t left, plen;
1246d49e1aeSJan Lentfer
1256d49e1aeSJan Lentfer wpa_printf(MSG_DEBUG, "EAP-PAX: PAX_STD-1 (received)");
1266d49e1aeSJan Lentfer
1276d49e1aeSJan Lentfer if (data->state != PAX_INIT) {
1286d49e1aeSJan Lentfer wpa_printf(MSG_INFO, "EAP-PAX: PAX_STD-1 received in "
1296d49e1aeSJan Lentfer "unexpected state (%d) - ignored", data->state);
1306d49e1aeSJan Lentfer ret->ignore = TRUE;
1316d49e1aeSJan Lentfer return NULL;
1326d49e1aeSJan Lentfer }
1336d49e1aeSJan Lentfer
1346d49e1aeSJan Lentfer if (req->flags & EAP_PAX_FLAGS_CE) {
1356d49e1aeSJan Lentfer wpa_printf(MSG_INFO, "EAP-PAX: PAX_STD-1 with CE flag set - "
1366d49e1aeSJan Lentfer "ignored");
1376d49e1aeSJan Lentfer ret->ignore = TRUE;
1386d49e1aeSJan Lentfer return NULL;
1396d49e1aeSJan Lentfer }
1406d49e1aeSJan Lentfer
1416d49e1aeSJan Lentfer left = req_plen - sizeof(*req);
1426d49e1aeSJan Lentfer
1436d49e1aeSJan Lentfer if (left < 2 + EAP_PAX_RAND_LEN) {
1446d49e1aeSJan Lentfer wpa_printf(MSG_INFO, "EAP-PAX: PAX_STD-1 with too short "
1456d49e1aeSJan Lentfer "payload");
1466d49e1aeSJan Lentfer ret->ignore = TRUE;
1476d49e1aeSJan Lentfer return NULL;
1486d49e1aeSJan Lentfer }
1496d49e1aeSJan Lentfer
1506d49e1aeSJan Lentfer pos = (const u8 *) (req + 1);
1516d49e1aeSJan Lentfer if (WPA_GET_BE16(pos) != EAP_PAX_RAND_LEN) {
1526d49e1aeSJan Lentfer wpa_printf(MSG_INFO, "EAP-PAX: PAX_STD-1 with incorrect A "
1536d49e1aeSJan Lentfer "length %d (expected %d)",
1546d49e1aeSJan Lentfer WPA_GET_BE16(pos), EAP_PAX_RAND_LEN);
1556d49e1aeSJan Lentfer ret->ignore = TRUE;
1566d49e1aeSJan Lentfer return NULL;
1576d49e1aeSJan Lentfer }
1586d49e1aeSJan Lentfer
1596d49e1aeSJan Lentfer pos += 2;
1606d49e1aeSJan Lentfer left -= 2;
1616d49e1aeSJan Lentfer os_memcpy(data->rand.r.x, pos, EAP_PAX_RAND_LEN);
1626d49e1aeSJan Lentfer wpa_hexdump(MSG_MSGDUMP, "EAP-PAX: X (server rand)",
1636d49e1aeSJan Lentfer data->rand.r.x, EAP_PAX_RAND_LEN);
1646d49e1aeSJan Lentfer pos += EAP_PAX_RAND_LEN;
1656d49e1aeSJan Lentfer left -= EAP_PAX_RAND_LEN;
1666d49e1aeSJan Lentfer
1676d49e1aeSJan Lentfer if (left > 0) {
1686d49e1aeSJan Lentfer wpa_hexdump(MSG_MSGDUMP, "EAP-PAX: ignored extra payload",
1696d49e1aeSJan Lentfer pos, left);
1706d49e1aeSJan Lentfer }
1716d49e1aeSJan Lentfer
1723ff40c12SJohn Marino if (random_get_bytes(data->rand.r.y, EAP_PAX_RAND_LEN)) {
1736d49e1aeSJan Lentfer wpa_printf(MSG_ERROR, "EAP-PAX: Failed to get random data");
1746d49e1aeSJan Lentfer ret->ignore = TRUE;
1756d49e1aeSJan Lentfer return NULL;
1766d49e1aeSJan Lentfer }
1776d49e1aeSJan Lentfer wpa_hexdump(MSG_MSGDUMP, "EAP-PAX: Y (client rand)",
1786d49e1aeSJan Lentfer data->rand.r.y, EAP_PAX_RAND_LEN);
1796d49e1aeSJan Lentfer
1806d49e1aeSJan Lentfer if (eap_pax_initial_key_derivation(req->mac_id, data->ak, data->rand.e,
181*a1157835SDaniel Fojt data->mk, data->ck, data->ick,
182*a1157835SDaniel Fojt data->mid) < 0) {
1836d49e1aeSJan Lentfer ret->ignore = TRUE;
1846d49e1aeSJan Lentfer return NULL;
1856d49e1aeSJan Lentfer }
1866d49e1aeSJan Lentfer
1876d49e1aeSJan Lentfer wpa_printf(MSG_DEBUG, "EAP-PAX: PAX_STD-2 (sending)");
1886d49e1aeSJan Lentfer
1896d49e1aeSJan Lentfer plen = 2 + EAP_PAX_RAND_LEN + 2 + data->cid_len + 2 + EAP_PAX_MAC_LEN +
1906d49e1aeSJan Lentfer EAP_PAX_ICV_LEN;
1916d49e1aeSJan Lentfer resp = eap_pax_alloc_resp(req, id, EAP_PAX_OP_STD_2, plen);
1926d49e1aeSJan Lentfer if (resp == NULL)
1936d49e1aeSJan Lentfer return NULL;
1946d49e1aeSJan Lentfer
1956d49e1aeSJan Lentfer wpabuf_put_be16(resp, EAP_PAX_RAND_LEN);
1966d49e1aeSJan Lentfer wpabuf_put_data(resp, data->rand.r.y, EAP_PAX_RAND_LEN);
1976d49e1aeSJan Lentfer wpa_hexdump(MSG_MSGDUMP, "EAP-PAX: B = Y (client rand)",
1986d49e1aeSJan Lentfer data->rand.r.y, EAP_PAX_RAND_LEN);
1996d49e1aeSJan Lentfer
2006d49e1aeSJan Lentfer wpabuf_put_be16(resp, data->cid_len);
2016d49e1aeSJan Lentfer wpabuf_put_data(resp, data->cid, data->cid_len);
2026d49e1aeSJan Lentfer wpa_hexdump_ascii(MSG_MSGDUMP, "EAP-PAX: CID",
2036d49e1aeSJan Lentfer (u8 *) data->cid, data->cid_len);
2046d49e1aeSJan Lentfer
2056d49e1aeSJan Lentfer wpabuf_put_be16(resp, EAP_PAX_MAC_LEN);
2066d49e1aeSJan Lentfer rpos = wpabuf_put(resp, EAP_PAX_MAC_LEN);
2076d49e1aeSJan Lentfer eap_pax_mac(req->mac_id, data->ck, EAP_PAX_CK_LEN,
2086d49e1aeSJan Lentfer data->rand.r.x, EAP_PAX_RAND_LEN,
2096d49e1aeSJan Lentfer data->rand.r.y, EAP_PAX_RAND_LEN,
2106d49e1aeSJan Lentfer (u8 *) data->cid, data->cid_len, rpos);
2116d49e1aeSJan Lentfer wpa_hexdump(MSG_MSGDUMP, "EAP-PAX: MAC_CK(A, B, CID)",
2126d49e1aeSJan Lentfer rpos, EAP_PAX_MAC_LEN);
2136d49e1aeSJan Lentfer
2146d49e1aeSJan Lentfer /* Optional ADE could be added here, if needed */
2156d49e1aeSJan Lentfer
2166d49e1aeSJan Lentfer rpos = wpabuf_put(resp, EAP_PAX_ICV_LEN);
2176d49e1aeSJan Lentfer eap_pax_mac(req->mac_id, data->ick, EAP_PAX_ICK_LEN,
2186d49e1aeSJan Lentfer wpabuf_head(resp), wpabuf_len(resp) - EAP_PAX_ICV_LEN,
2196d49e1aeSJan Lentfer NULL, 0, NULL, 0, rpos);
2206d49e1aeSJan Lentfer wpa_hexdump(MSG_MSGDUMP, "EAP-PAX: ICV", rpos, EAP_PAX_ICV_LEN);
2216d49e1aeSJan Lentfer
2226d49e1aeSJan Lentfer data->state = PAX_STD_2_SENT;
2236d49e1aeSJan Lentfer data->mac_id = req->mac_id;
2246d49e1aeSJan Lentfer data->dh_group_id = req->dh_group_id;
2256d49e1aeSJan Lentfer data->public_key_id = req->public_key_id;
2266d49e1aeSJan Lentfer
2276d49e1aeSJan Lentfer return resp;
2286d49e1aeSJan Lentfer }
2296d49e1aeSJan Lentfer
2306d49e1aeSJan Lentfer
eap_pax_process_std_3(struct eap_pax_data * data,struct eap_method_ret * ret,u8 id,const struct eap_pax_hdr * req,size_t req_plen)2316d49e1aeSJan Lentfer static struct wpabuf * eap_pax_process_std_3(struct eap_pax_data *data,
2326d49e1aeSJan Lentfer struct eap_method_ret *ret, u8 id,
2336d49e1aeSJan Lentfer const struct eap_pax_hdr *req,
2346d49e1aeSJan Lentfer size_t req_plen)
2356d49e1aeSJan Lentfer {
2366d49e1aeSJan Lentfer struct wpabuf *resp;
2376d49e1aeSJan Lentfer u8 *rpos, mac[EAP_PAX_MAC_LEN];
2386d49e1aeSJan Lentfer const u8 *pos;
2396d49e1aeSJan Lentfer size_t left;
2406d49e1aeSJan Lentfer
2416d49e1aeSJan Lentfer wpa_printf(MSG_DEBUG, "EAP-PAX: PAX_STD-3 (received)");
2426d49e1aeSJan Lentfer
2436d49e1aeSJan Lentfer if (data->state != PAX_STD_2_SENT) {
2446d49e1aeSJan Lentfer wpa_printf(MSG_INFO, "EAP-PAX: PAX_STD-3 received in "
2456d49e1aeSJan Lentfer "unexpected state (%d) - ignored", data->state);
2466d49e1aeSJan Lentfer ret->ignore = TRUE;
2476d49e1aeSJan Lentfer return NULL;
2486d49e1aeSJan Lentfer }
2496d49e1aeSJan Lentfer
2506d49e1aeSJan Lentfer if (req->flags & EAP_PAX_FLAGS_CE) {
2516d49e1aeSJan Lentfer wpa_printf(MSG_INFO, "EAP-PAX: PAX_STD-3 with CE flag set - "
2526d49e1aeSJan Lentfer "ignored");
2536d49e1aeSJan Lentfer ret->ignore = TRUE;
2546d49e1aeSJan Lentfer return NULL;
2556d49e1aeSJan Lentfer }
2566d49e1aeSJan Lentfer
2576d49e1aeSJan Lentfer left = req_plen - sizeof(*req);
2586d49e1aeSJan Lentfer
2596d49e1aeSJan Lentfer if (left < 2 + EAP_PAX_MAC_LEN) {
2606d49e1aeSJan Lentfer wpa_printf(MSG_INFO, "EAP-PAX: PAX_STD-3 with too short "
2616d49e1aeSJan Lentfer "payload");
2626d49e1aeSJan Lentfer ret->ignore = TRUE;
2636d49e1aeSJan Lentfer return NULL;
2646d49e1aeSJan Lentfer }
2656d49e1aeSJan Lentfer
2666d49e1aeSJan Lentfer pos = (const u8 *) (req + 1);
2676d49e1aeSJan Lentfer if (WPA_GET_BE16(pos) != EAP_PAX_MAC_LEN) {
2686d49e1aeSJan Lentfer wpa_printf(MSG_INFO, "EAP-PAX: PAX_STD-3 with incorrect "
2696d49e1aeSJan Lentfer "MAC_CK length %d (expected %d)",
2706d49e1aeSJan Lentfer WPA_GET_BE16(pos), EAP_PAX_MAC_LEN);
2716d49e1aeSJan Lentfer ret->ignore = TRUE;
2726d49e1aeSJan Lentfer return NULL;
2736d49e1aeSJan Lentfer }
2746d49e1aeSJan Lentfer pos += 2;
2756d49e1aeSJan Lentfer left -= 2;
2766d49e1aeSJan Lentfer wpa_hexdump(MSG_MSGDUMP, "EAP-PAX: MAC_CK(B, CID)",
2776d49e1aeSJan Lentfer pos, EAP_PAX_MAC_LEN);
278*a1157835SDaniel Fojt if (eap_pax_mac(data->mac_id, data->ck, EAP_PAX_CK_LEN,
2796d49e1aeSJan Lentfer data->rand.r.y, EAP_PAX_RAND_LEN,
280*a1157835SDaniel Fojt (u8 *) data->cid, data->cid_len, NULL, 0, mac) < 0) {
281*a1157835SDaniel Fojt wpa_printf(MSG_INFO,
282*a1157835SDaniel Fojt "EAP-PAX: Could not derive MAC_CK(B, CID)");
283*a1157835SDaniel Fojt ret->methodState = METHOD_DONE;
284*a1157835SDaniel Fojt ret->decision = DECISION_FAIL;
285*a1157835SDaniel Fojt return NULL;
286*a1157835SDaniel Fojt }
287*a1157835SDaniel Fojt
288*a1157835SDaniel Fojt if (os_memcmp_const(pos, mac, EAP_PAX_MAC_LEN) != 0) {
2896d49e1aeSJan Lentfer wpa_printf(MSG_INFO, "EAP-PAX: Invalid MAC_CK(B, CID) "
2906d49e1aeSJan Lentfer "received");
2916d49e1aeSJan Lentfer wpa_hexdump(MSG_MSGDUMP, "EAP-PAX: expected MAC_CK(B, CID)",
2926d49e1aeSJan Lentfer mac, EAP_PAX_MAC_LEN);
2936d49e1aeSJan Lentfer ret->methodState = METHOD_DONE;
2946d49e1aeSJan Lentfer ret->decision = DECISION_FAIL;
2956d49e1aeSJan Lentfer return NULL;
2966d49e1aeSJan Lentfer }
2976d49e1aeSJan Lentfer
2986d49e1aeSJan Lentfer pos += EAP_PAX_MAC_LEN;
2996d49e1aeSJan Lentfer left -= EAP_PAX_MAC_LEN;
3006d49e1aeSJan Lentfer
3016d49e1aeSJan Lentfer if (left > 0) {
3026d49e1aeSJan Lentfer wpa_hexdump(MSG_MSGDUMP, "EAP-PAX: ignored extra payload",
3036d49e1aeSJan Lentfer pos, left);
3046d49e1aeSJan Lentfer }
3056d49e1aeSJan Lentfer
3066d49e1aeSJan Lentfer wpa_printf(MSG_DEBUG, "EAP-PAX: PAX-ACK (sending)");
3076d49e1aeSJan Lentfer
3086d49e1aeSJan Lentfer resp = eap_pax_alloc_resp(req, id, EAP_PAX_OP_ACK, EAP_PAX_ICV_LEN);
3096d49e1aeSJan Lentfer if (resp == NULL)
3106d49e1aeSJan Lentfer return NULL;
3116d49e1aeSJan Lentfer
3126d49e1aeSJan Lentfer /* Optional ADE could be added here, if needed */
3136d49e1aeSJan Lentfer
3146d49e1aeSJan Lentfer rpos = wpabuf_put(resp, EAP_PAX_ICV_LEN);
315*a1157835SDaniel Fojt if (eap_pax_mac(data->mac_id, data->ick, EAP_PAX_ICK_LEN,
3166d49e1aeSJan Lentfer wpabuf_head(resp), wpabuf_len(resp) - EAP_PAX_ICV_LEN,
317*a1157835SDaniel Fojt NULL, 0, NULL, 0, rpos) < 0) {
318*a1157835SDaniel Fojt wpabuf_free(resp);
319*a1157835SDaniel Fojt return NULL;
320*a1157835SDaniel Fojt }
3216d49e1aeSJan Lentfer wpa_hexdump(MSG_MSGDUMP, "EAP-PAX: ICV", rpos, EAP_PAX_ICV_LEN);
3226d49e1aeSJan Lentfer
3236d49e1aeSJan Lentfer data->state = PAX_DONE;
3246d49e1aeSJan Lentfer ret->methodState = METHOD_DONE;
3256d49e1aeSJan Lentfer ret->decision = DECISION_UNCOND_SUCC;
3266d49e1aeSJan Lentfer ret->allowNotifications = FALSE;
3276d49e1aeSJan Lentfer
3286d49e1aeSJan Lentfer return resp;
3296d49e1aeSJan Lentfer }
3306d49e1aeSJan Lentfer
3316d49e1aeSJan Lentfer
eap_pax_process(struct eap_sm * sm,void * priv,struct eap_method_ret * ret,const struct wpabuf * reqData)3326d49e1aeSJan Lentfer static struct wpabuf * eap_pax_process(struct eap_sm *sm, void *priv,
3336d49e1aeSJan Lentfer struct eap_method_ret *ret,
3346d49e1aeSJan Lentfer const struct wpabuf *reqData)
3356d49e1aeSJan Lentfer {
3366d49e1aeSJan Lentfer struct eap_pax_data *data = priv;
3376d49e1aeSJan Lentfer const struct eap_pax_hdr *req;
3386d49e1aeSJan Lentfer struct wpabuf *resp;
3396d49e1aeSJan Lentfer u8 icvbuf[EAP_PAX_ICV_LEN], id;
3406d49e1aeSJan Lentfer const u8 *icv, *pos;
3416d49e1aeSJan Lentfer size_t len;
3426d49e1aeSJan Lentfer u16 flen, mlen;
3436d49e1aeSJan Lentfer
3446d49e1aeSJan Lentfer pos = eap_hdr_validate(EAP_VENDOR_IETF, EAP_TYPE_PAX, reqData, &len);
345*a1157835SDaniel Fojt if (pos == NULL || len < sizeof(*req) + EAP_PAX_ICV_LEN) {
3466d49e1aeSJan Lentfer ret->ignore = TRUE;
3476d49e1aeSJan Lentfer return NULL;
3486d49e1aeSJan Lentfer }
3496d49e1aeSJan Lentfer id = eap_get_id(reqData);
3506d49e1aeSJan Lentfer req = (const struct eap_pax_hdr *) pos;
3516d49e1aeSJan Lentfer flen = len - EAP_PAX_ICV_LEN;
3526d49e1aeSJan Lentfer mlen = wpabuf_len(reqData) - EAP_PAX_ICV_LEN;
3536d49e1aeSJan Lentfer
3546d49e1aeSJan Lentfer wpa_printf(MSG_DEBUG, "EAP-PAX: received frame: op_code 0x%x "
3556d49e1aeSJan Lentfer "flags 0x%x mac_id 0x%x dh_group_id 0x%x "
3566d49e1aeSJan Lentfer "public_key_id 0x%x",
3576d49e1aeSJan Lentfer req->op_code, req->flags, req->mac_id, req->dh_group_id,
3586d49e1aeSJan Lentfer req->public_key_id);
3596d49e1aeSJan Lentfer wpa_hexdump(MSG_MSGDUMP, "EAP-PAX: received payload",
3606d49e1aeSJan Lentfer pos, len - EAP_PAX_ICV_LEN);
3616d49e1aeSJan Lentfer
3626d49e1aeSJan Lentfer if (data->state != PAX_INIT && data->mac_id != req->mac_id) {
3636d49e1aeSJan Lentfer wpa_printf(MSG_INFO, "EAP-PAX: MAC ID changed during "
3646d49e1aeSJan Lentfer "authentication (was 0x%d, is 0x%d)",
3656d49e1aeSJan Lentfer data->mac_id, req->mac_id);
3666d49e1aeSJan Lentfer ret->ignore = TRUE;
3676d49e1aeSJan Lentfer return NULL;
3686d49e1aeSJan Lentfer }
3696d49e1aeSJan Lentfer
3706d49e1aeSJan Lentfer if (data->state != PAX_INIT && data->dh_group_id != req->dh_group_id) {
3716d49e1aeSJan Lentfer wpa_printf(MSG_INFO, "EAP-PAX: DH Group ID changed during "
3726d49e1aeSJan Lentfer "authentication (was 0x%d, is 0x%d)",
3736d49e1aeSJan Lentfer data->dh_group_id, req->dh_group_id);
3746d49e1aeSJan Lentfer ret->ignore = TRUE;
3756d49e1aeSJan Lentfer return NULL;
3766d49e1aeSJan Lentfer }
3776d49e1aeSJan Lentfer
3786d49e1aeSJan Lentfer if (data->state != PAX_INIT &&
3796d49e1aeSJan Lentfer data->public_key_id != req->public_key_id) {
3806d49e1aeSJan Lentfer wpa_printf(MSG_INFO, "EAP-PAX: Public Key ID changed during "
3816d49e1aeSJan Lentfer "authentication (was 0x%d, is 0x%d)",
3826d49e1aeSJan Lentfer data->public_key_id, req->public_key_id);
3836d49e1aeSJan Lentfer ret->ignore = TRUE;
3846d49e1aeSJan Lentfer return NULL;
3856d49e1aeSJan Lentfer }
3866d49e1aeSJan Lentfer
3876d49e1aeSJan Lentfer /* TODO: add support EAP_PAX_HMAC_SHA256_128 */
3886d49e1aeSJan Lentfer if (req->mac_id != EAP_PAX_MAC_HMAC_SHA1_128) {
3896d49e1aeSJan Lentfer wpa_printf(MSG_INFO, "EAP-PAX: Unsupported MAC ID 0x%x",
3906d49e1aeSJan Lentfer req->mac_id);
3916d49e1aeSJan Lentfer ret->ignore = TRUE;
3926d49e1aeSJan Lentfer return NULL;
3936d49e1aeSJan Lentfer }
3946d49e1aeSJan Lentfer
3956d49e1aeSJan Lentfer if (req->dh_group_id != EAP_PAX_DH_GROUP_NONE) {
3966d49e1aeSJan Lentfer wpa_printf(MSG_INFO, "EAP-PAX: Unsupported DH Group ID 0x%x",
3976d49e1aeSJan Lentfer req->dh_group_id);
3986d49e1aeSJan Lentfer ret->ignore = TRUE;
3996d49e1aeSJan Lentfer return NULL;
4006d49e1aeSJan Lentfer }
4016d49e1aeSJan Lentfer
4026d49e1aeSJan Lentfer if (req->public_key_id != EAP_PAX_PUBLIC_KEY_NONE) {
4036d49e1aeSJan Lentfer wpa_printf(MSG_INFO, "EAP-PAX: Unsupported Public Key ID 0x%x",
4046d49e1aeSJan Lentfer req->public_key_id);
4056d49e1aeSJan Lentfer ret->ignore = TRUE;
4066d49e1aeSJan Lentfer return NULL;
4076d49e1aeSJan Lentfer }
4086d49e1aeSJan Lentfer
4096d49e1aeSJan Lentfer if (req->flags & EAP_PAX_FLAGS_MF) {
4106d49e1aeSJan Lentfer /* TODO: add support for reassembling fragments */
4116d49e1aeSJan Lentfer wpa_printf(MSG_INFO, "EAP-PAX: fragmentation not supported - "
4126d49e1aeSJan Lentfer "ignored packet");
4136d49e1aeSJan Lentfer ret->ignore = TRUE;
4146d49e1aeSJan Lentfer return NULL;
4156d49e1aeSJan Lentfer }
4166d49e1aeSJan Lentfer
4176d49e1aeSJan Lentfer icv = pos + len - EAP_PAX_ICV_LEN;
4186d49e1aeSJan Lentfer wpa_hexdump(MSG_MSGDUMP, "EAP-PAX: ICV", icv, EAP_PAX_ICV_LEN);
4196d49e1aeSJan Lentfer if (req->op_code == EAP_PAX_OP_STD_1) {
4206d49e1aeSJan Lentfer eap_pax_mac(req->mac_id, (u8 *) "", 0,
4216d49e1aeSJan Lentfer wpabuf_head(reqData), mlen, NULL, 0, NULL, 0,
4226d49e1aeSJan Lentfer icvbuf);
4236d49e1aeSJan Lentfer } else {
4246d49e1aeSJan Lentfer eap_pax_mac(req->mac_id, data->ick, EAP_PAX_ICK_LEN,
4256d49e1aeSJan Lentfer wpabuf_head(reqData), mlen, NULL, 0, NULL, 0,
4266d49e1aeSJan Lentfer icvbuf);
4276d49e1aeSJan Lentfer }
428*a1157835SDaniel Fojt if (os_memcmp_const(icv, icvbuf, EAP_PAX_ICV_LEN) != 0) {
4296d49e1aeSJan Lentfer wpa_printf(MSG_DEBUG, "EAP-PAX: invalid ICV - ignoring the "
4306d49e1aeSJan Lentfer "message");
4316d49e1aeSJan Lentfer wpa_hexdump(MSG_MSGDUMP, "EAP-PAX: expected ICV",
4326d49e1aeSJan Lentfer icvbuf, EAP_PAX_ICV_LEN);
4336d49e1aeSJan Lentfer ret->ignore = TRUE;
4346d49e1aeSJan Lentfer return NULL;
4356d49e1aeSJan Lentfer }
4366d49e1aeSJan Lentfer
4376d49e1aeSJan Lentfer ret->ignore = FALSE;
4386d49e1aeSJan Lentfer ret->methodState = METHOD_MAY_CONT;
4396d49e1aeSJan Lentfer ret->decision = DECISION_FAIL;
4406d49e1aeSJan Lentfer ret->allowNotifications = TRUE;
4416d49e1aeSJan Lentfer
4426d49e1aeSJan Lentfer switch (req->op_code) {
4436d49e1aeSJan Lentfer case EAP_PAX_OP_STD_1:
4446d49e1aeSJan Lentfer resp = eap_pax_process_std_1(data, ret, id, req, flen);
4456d49e1aeSJan Lentfer break;
4466d49e1aeSJan Lentfer case EAP_PAX_OP_STD_3:
4476d49e1aeSJan Lentfer resp = eap_pax_process_std_3(data, ret, id, req, flen);
4486d49e1aeSJan Lentfer break;
4496d49e1aeSJan Lentfer default:
4506d49e1aeSJan Lentfer wpa_printf(MSG_DEBUG, "EAP-PAX: ignoring message with unknown "
4516d49e1aeSJan Lentfer "op_code %d", req->op_code);
4526d49e1aeSJan Lentfer ret->ignore = TRUE;
4536d49e1aeSJan Lentfer return NULL;
4546d49e1aeSJan Lentfer }
4556d49e1aeSJan Lentfer
4566d49e1aeSJan Lentfer if (ret->methodState == METHOD_DONE) {
4576d49e1aeSJan Lentfer ret->allowNotifications = FALSE;
4586d49e1aeSJan Lentfer }
4596d49e1aeSJan Lentfer
4606d49e1aeSJan Lentfer return resp;
4616d49e1aeSJan Lentfer }
4626d49e1aeSJan Lentfer
4636d49e1aeSJan Lentfer
eap_pax_isKeyAvailable(struct eap_sm * sm,void * priv)4646d49e1aeSJan Lentfer static Boolean eap_pax_isKeyAvailable(struct eap_sm *sm, void *priv)
4656d49e1aeSJan Lentfer {
4666d49e1aeSJan Lentfer struct eap_pax_data *data = priv;
4676d49e1aeSJan Lentfer return data->state == PAX_DONE;
4686d49e1aeSJan Lentfer }
4696d49e1aeSJan Lentfer
4706d49e1aeSJan Lentfer
eap_pax_getKey(struct eap_sm * sm,void * priv,size_t * len)4716d49e1aeSJan Lentfer static u8 * eap_pax_getKey(struct eap_sm *sm, void *priv, size_t *len)
4726d49e1aeSJan Lentfer {
4736d49e1aeSJan Lentfer struct eap_pax_data *data = priv;
4746d49e1aeSJan Lentfer u8 *key;
4756d49e1aeSJan Lentfer
4766d49e1aeSJan Lentfer if (data->state != PAX_DONE)
4776d49e1aeSJan Lentfer return NULL;
4786d49e1aeSJan Lentfer
4796d49e1aeSJan Lentfer key = os_malloc(EAP_MSK_LEN);
4806d49e1aeSJan Lentfer if (key == NULL)
4816d49e1aeSJan Lentfer return NULL;
4826d49e1aeSJan Lentfer
4836d49e1aeSJan Lentfer *len = EAP_MSK_LEN;
484*a1157835SDaniel Fojt if (eap_pax_kdf(data->mac_id, data->mk, EAP_PAX_MK_LEN,
485*a1157835SDaniel Fojt "Master Session Key",
486*a1157835SDaniel Fojt data->rand.e, 2 * EAP_PAX_RAND_LEN,
487*a1157835SDaniel Fojt EAP_MSK_LEN, key) < 0) {
488*a1157835SDaniel Fojt os_free(key);
489*a1157835SDaniel Fojt return NULL;
490*a1157835SDaniel Fojt }
4916d49e1aeSJan Lentfer
4926d49e1aeSJan Lentfer return key;
4936d49e1aeSJan Lentfer }
4946d49e1aeSJan Lentfer
4956d49e1aeSJan Lentfer
eap_pax_get_emsk(struct eap_sm * sm,void * priv,size_t * len)4966d49e1aeSJan Lentfer static u8 * eap_pax_get_emsk(struct eap_sm *sm, void *priv, size_t *len)
4976d49e1aeSJan Lentfer {
4986d49e1aeSJan Lentfer struct eap_pax_data *data = priv;
4996d49e1aeSJan Lentfer u8 *key;
5006d49e1aeSJan Lentfer
5016d49e1aeSJan Lentfer if (data->state != PAX_DONE)
5026d49e1aeSJan Lentfer return NULL;
5036d49e1aeSJan Lentfer
5046d49e1aeSJan Lentfer key = os_malloc(EAP_EMSK_LEN);
5056d49e1aeSJan Lentfer if (key == NULL)
5066d49e1aeSJan Lentfer return NULL;
5076d49e1aeSJan Lentfer
5086d49e1aeSJan Lentfer *len = EAP_EMSK_LEN;
509*a1157835SDaniel Fojt if (eap_pax_kdf(data->mac_id, data->mk, EAP_PAX_MK_LEN,
5106d49e1aeSJan Lentfer "Extended Master Session Key",
5116d49e1aeSJan Lentfer data->rand.e, 2 * EAP_PAX_RAND_LEN,
512*a1157835SDaniel Fojt EAP_EMSK_LEN, key) < 0) {
513*a1157835SDaniel Fojt os_free(key);
514*a1157835SDaniel Fojt return NULL;
515*a1157835SDaniel Fojt }
5166d49e1aeSJan Lentfer
5176d49e1aeSJan Lentfer return key;
5186d49e1aeSJan Lentfer }
5196d49e1aeSJan Lentfer
5206d49e1aeSJan Lentfer
eap_pax_get_session_id(struct eap_sm * sm,void * priv,size_t * len)521*a1157835SDaniel Fojt static u8 * eap_pax_get_session_id(struct eap_sm *sm, void *priv, size_t *len)
522*a1157835SDaniel Fojt {
523*a1157835SDaniel Fojt struct eap_pax_data *data = priv;
524*a1157835SDaniel Fojt u8 *sid;
525*a1157835SDaniel Fojt
526*a1157835SDaniel Fojt if (data->state != PAX_DONE)
527*a1157835SDaniel Fojt return NULL;
528*a1157835SDaniel Fojt
529*a1157835SDaniel Fojt sid = os_malloc(1 + EAP_PAX_MID_LEN);
530*a1157835SDaniel Fojt if (sid == NULL)
531*a1157835SDaniel Fojt return NULL;
532*a1157835SDaniel Fojt
533*a1157835SDaniel Fojt *len = 1 + EAP_PAX_MID_LEN;
534*a1157835SDaniel Fojt sid[0] = EAP_TYPE_PAX;
535*a1157835SDaniel Fojt os_memcpy(sid + 1, data->mid, EAP_PAX_MID_LEN);
536*a1157835SDaniel Fojt
537*a1157835SDaniel Fojt return sid;
538*a1157835SDaniel Fojt }
539*a1157835SDaniel Fojt
540*a1157835SDaniel Fojt
eap_peer_pax_register(void)5416d49e1aeSJan Lentfer int eap_peer_pax_register(void)
5426d49e1aeSJan Lentfer {
5436d49e1aeSJan Lentfer struct eap_method *eap;
5446d49e1aeSJan Lentfer
5456d49e1aeSJan Lentfer eap = eap_peer_method_alloc(EAP_PEER_METHOD_INTERFACE_VERSION,
5466d49e1aeSJan Lentfer EAP_VENDOR_IETF, EAP_TYPE_PAX, "PAX");
5476d49e1aeSJan Lentfer if (eap == NULL)
5486d49e1aeSJan Lentfer return -1;
5496d49e1aeSJan Lentfer
5506d49e1aeSJan Lentfer eap->init = eap_pax_init;
5516d49e1aeSJan Lentfer eap->deinit = eap_pax_deinit;
5526d49e1aeSJan Lentfer eap->process = eap_pax_process;
5536d49e1aeSJan Lentfer eap->isKeyAvailable = eap_pax_isKeyAvailable;
5546d49e1aeSJan Lentfer eap->getKey = eap_pax_getKey;
5556d49e1aeSJan Lentfer eap->get_emsk = eap_pax_get_emsk;
556*a1157835SDaniel Fojt eap->getSessionId = eap_pax_get_session_id;
5576d49e1aeSJan Lentfer
558*a1157835SDaniel Fojt return eap_peer_method_register(eap);
5596d49e1aeSJan Lentfer }
560