1*45ae9d61Sreyk /* $OpenBSD: dh.c,v 1.1 2010/06/03 16:41:12 reyk Exp $ */ 2*45ae9d61Sreyk /* $vantronix: dh.c,v 1.13 2010/05/28 15:34:35 reyk Exp $ */ 3*45ae9d61Sreyk 4*45ae9d61Sreyk /* 5*45ae9d61Sreyk * Copyright (c) 2010 Reyk Floeter <reyk@vantronix.net> 6*45ae9d61Sreyk * 7*45ae9d61Sreyk * Permission to use, copy, modify, and distribute this software for any 8*45ae9d61Sreyk * purpose with or without fee is hereby granted, provided that the above 9*45ae9d61Sreyk * copyright notice and this permission notice appear in all copies. 10*45ae9d61Sreyk * 11*45ae9d61Sreyk * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES 12*45ae9d61Sreyk * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF 13*45ae9d61Sreyk * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR 14*45ae9d61Sreyk * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 15*45ae9d61Sreyk * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 16*45ae9d61Sreyk * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 17*45ae9d61Sreyk * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 18*45ae9d61Sreyk */ 19*45ae9d61Sreyk 20*45ae9d61Sreyk #include <sys/param.h> 21*45ae9d61Sreyk #include <sys/queue.h> 22*45ae9d61Sreyk #include <sys/socket.h> 23*45ae9d61Sreyk #include <sys/uio.h> 24*45ae9d61Sreyk 25*45ae9d61Sreyk #include <netinet/in.h> 26*45ae9d61Sreyk #include <arpa/inet.h> 27*45ae9d61Sreyk 28*45ae9d61Sreyk #include <string.h> 29*45ae9d61Sreyk #include <event.h> 30*45ae9d61Sreyk 31*45ae9d61Sreyk #include <openssl/obj_mac.h> 32*45ae9d61Sreyk #include <openssl/dh.h> 33*45ae9d61Sreyk #include <openssl/ec.h> 34*45ae9d61Sreyk #include <openssl/ec.h> 35*45ae9d61Sreyk #include <openssl/ecdh.h> 36*45ae9d61Sreyk 37*45ae9d61Sreyk #include "iked.h" 38*45ae9d61Sreyk #include "dh.h" 39*45ae9d61Sreyk #include "ikev2.h" 40*45ae9d61Sreyk 41*45ae9d61Sreyk int modp_init(struct group *); 42*45ae9d61Sreyk int modp_getlen(struct group *); 43*45ae9d61Sreyk int modp_create_exchange(struct group *, u_int8_t *); 44*45ae9d61Sreyk int modp_create_shared(struct group *, u_int8_t *, u_int8_t *); 45*45ae9d61Sreyk 46*45ae9d61Sreyk int ec_init(struct group *); 47*45ae9d61Sreyk int ec_getlen(struct group *); 48*45ae9d61Sreyk int ec_create_exchange(struct group *, u_int8_t *); 49*45ae9d61Sreyk int ec_create_shared(struct group *, u_int8_t *, u_int8_t *); 50*45ae9d61Sreyk 51*45ae9d61Sreyk int ec_point2raw(struct group *, const EC_POINT *, u_int8_t *, size_t); 52*45ae9d61Sreyk EC_POINT * 53*45ae9d61Sreyk ec_raw2point(struct group *, u_int8_t *, size_t); 54*45ae9d61Sreyk 55*45ae9d61Sreyk struct group_id ike_groups[] = { 56*45ae9d61Sreyk { GROUP_MODP, 1, 768, 57*45ae9d61Sreyk "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" 58*45ae9d61Sreyk "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" 59*45ae9d61Sreyk "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" 60*45ae9d61Sreyk "E485B576625E7EC6F44C42E9A63A3620FFFFFFFFFFFFFFFF", 61*45ae9d61Sreyk "02" 62*45ae9d61Sreyk }, 63*45ae9d61Sreyk { GROUP_MODP, 2, 1024, 64*45ae9d61Sreyk "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" 65*45ae9d61Sreyk "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" 66*45ae9d61Sreyk "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" 67*45ae9d61Sreyk "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" 68*45ae9d61Sreyk "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE65381" 69*45ae9d61Sreyk "FFFFFFFFFFFFFFFF", 70*45ae9d61Sreyk "02" 71*45ae9d61Sreyk }, 72*45ae9d61Sreyk { GROUP_EC, 3, 155, NULL, NULL, NID_ipsec3 }, 73*45ae9d61Sreyk { GROUP_EC, 4, 185, NULL, NULL, NID_ipsec4 }, 74*45ae9d61Sreyk { GROUP_MODP, 5, 1536, 75*45ae9d61Sreyk "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" 76*45ae9d61Sreyk "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" 77*45ae9d61Sreyk "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" 78*45ae9d61Sreyk "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" 79*45ae9d61Sreyk "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" 80*45ae9d61Sreyk "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" 81*45ae9d61Sreyk "83655D23DCA3AD961C62F356208552BB9ED529077096966D" 82*45ae9d61Sreyk "670C354E4ABC9804F1746C08CA237327FFFFFFFFFFFFFFFF", 83*45ae9d61Sreyk "02" 84*45ae9d61Sreyk }, 85*45ae9d61Sreyk { GROUP_MODP, 14, 2048, 86*45ae9d61Sreyk "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" 87*45ae9d61Sreyk "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" 88*45ae9d61Sreyk "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" 89*45ae9d61Sreyk "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" 90*45ae9d61Sreyk "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" 91*45ae9d61Sreyk "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" 92*45ae9d61Sreyk "83655D23DCA3AD961C62F356208552BB9ED529077096966D" 93*45ae9d61Sreyk "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" 94*45ae9d61Sreyk "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" 95*45ae9d61Sreyk "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" 96*45ae9d61Sreyk "15728E5A8AACAA68FFFFFFFFFFFFFFFF", 97*45ae9d61Sreyk "02" 98*45ae9d61Sreyk }, 99*45ae9d61Sreyk { GROUP_MODP, 15, 3072, 100*45ae9d61Sreyk "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" 101*45ae9d61Sreyk "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" 102*45ae9d61Sreyk "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" 103*45ae9d61Sreyk "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" 104*45ae9d61Sreyk "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" 105*45ae9d61Sreyk "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" 106*45ae9d61Sreyk "83655D23DCA3AD961C62F356208552BB9ED529077096966D" 107*45ae9d61Sreyk "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" 108*45ae9d61Sreyk "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" 109*45ae9d61Sreyk "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" 110*45ae9d61Sreyk "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64" 111*45ae9d61Sreyk "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7" 112*45ae9d61Sreyk "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B" 113*45ae9d61Sreyk "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C" 114*45ae9d61Sreyk "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31" 115*45ae9d61Sreyk "43DB5BFCE0FD108E4B82D120A93AD2CAFFFFFFFFFFFFFFFF", 116*45ae9d61Sreyk "02" 117*45ae9d61Sreyk }, 118*45ae9d61Sreyk { GROUP_MODP, 16, 4096, 119*45ae9d61Sreyk "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" 120*45ae9d61Sreyk "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" 121*45ae9d61Sreyk "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" 122*45ae9d61Sreyk "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" 123*45ae9d61Sreyk "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" 124*45ae9d61Sreyk "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" 125*45ae9d61Sreyk "83655D23DCA3AD961C62F356208552BB9ED529077096966D" 126*45ae9d61Sreyk "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" 127*45ae9d61Sreyk "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" 128*45ae9d61Sreyk "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" 129*45ae9d61Sreyk "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64" 130*45ae9d61Sreyk "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7" 131*45ae9d61Sreyk "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B" 132*45ae9d61Sreyk "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C" 133*45ae9d61Sreyk "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31" 134*45ae9d61Sreyk "43DB5BFCE0FD108E4B82D120A92108011A723C12A787E6D7" 135*45ae9d61Sreyk "88719A10BDBA5B2699C327186AF4E23C1A946834B6150BDA" 136*45ae9d61Sreyk "2583E9CA2AD44CE8DBBBC2DB04DE8EF92E8EFC141FBECAA6" 137*45ae9d61Sreyk "287C59474E6BC05D99B2964FA090C3A2233BA186515BE7ED" 138*45ae9d61Sreyk "1F612970CEE2D7AFB81BDD762170481CD0069127D5B05AA9" 139*45ae9d61Sreyk "93B4EA988D8FDDC186FFB7DC90A6C08F4DF435C934063199" 140*45ae9d61Sreyk "FFFFFFFFFFFFFFFF", 141*45ae9d61Sreyk "02" 142*45ae9d61Sreyk }, 143*45ae9d61Sreyk { GROUP_MODP, 17, 6144, 144*45ae9d61Sreyk "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" 145*45ae9d61Sreyk "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" 146*45ae9d61Sreyk "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" 147*45ae9d61Sreyk "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" 148*45ae9d61Sreyk "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" 149*45ae9d61Sreyk "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" 150*45ae9d61Sreyk "83655D23DCA3AD961C62F356208552BB9ED529077096966D" 151*45ae9d61Sreyk "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" 152*45ae9d61Sreyk "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" 153*45ae9d61Sreyk "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" 154*45ae9d61Sreyk "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64" 155*45ae9d61Sreyk "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7" 156*45ae9d61Sreyk "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B" 157*45ae9d61Sreyk "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C" 158*45ae9d61Sreyk "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31" 159*45ae9d61Sreyk "43DB5BFCE0FD108E4B82D120A92108011A723C12A787E6D7" 160*45ae9d61Sreyk "88719A10BDBA5B2699C327186AF4E23C1A946834B6150BDA" 161*45ae9d61Sreyk "2583E9CA2AD44CE8DBBBC2DB04DE8EF92E8EFC141FBECAA6" 162*45ae9d61Sreyk "287C59474E6BC05D99B2964FA090C3A2233BA186515BE7ED" 163*45ae9d61Sreyk "1F612970CEE2D7AFB81BDD762170481CD0069127D5B05AA9" 164*45ae9d61Sreyk "93B4EA988D8FDDC186FFB7DC90A6C08F4DF435C934028492" 165*45ae9d61Sreyk "36C3FAB4D27C7026C1D4DCB2602646DEC9751E763DBA37BD" 166*45ae9d61Sreyk "F8FF9406AD9E530EE5DB382F413001AEB06A53ED9027D831" 167*45ae9d61Sreyk "179727B0865A8918DA3EDBEBCF9B14ED44CE6CBACED4BB1B" 168*45ae9d61Sreyk "DB7F1447E6CC254B332051512BD7AF426FB8F401378CD2BF" 169*45ae9d61Sreyk "5983CA01C64B92ECF032EA15D1721D03F482D7CE6E74FEF6" 170*45ae9d61Sreyk "D55E702F46980C82B5A84031900B1C9E59E7C97FBEC7E8F3" 171*45ae9d61Sreyk "23A97A7E36CC88BE0F1D45B7FF585AC54BD407B22B4154AA" 172*45ae9d61Sreyk "CC8F6D7EBF48E1D814CC5ED20F8037E0A79715EEF29BE328" 173*45ae9d61Sreyk "06A1D58BB7C5DA76F550AA3D8A1FBFF0EB19CCB1A313D55C" 174*45ae9d61Sreyk "DA56C9EC2EF29632387FE8D76E3C0468043E8F663F4860EE" 175*45ae9d61Sreyk "12BF2D5B0B7474D6E694F91E6DCC4024FFFFFFFFFFFFFFFF", 176*45ae9d61Sreyk "02" 177*45ae9d61Sreyk }, 178*45ae9d61Sreyk { GROUP_MODP, 18, 8192, 179*45ae9d61Sreyk "FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1" 180*45ae9d61Sreyk "29024E088A67CC74020BBEA63B139B22514A08798E3404DD" 181*45ae9d61Sreyk "EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245" 182*45ae9d61Sreyk "E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED" 183*45ae9d61Sreyk "EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D" 184*45ae9d61Sreyk "C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F" 185*45ae9d61Sreyk "83655D23DCA3AD961C62F356208552BB9ED529077096966D" 186*45ae9d61Sreyk "670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B" 187*45ae9d61Sreyk "E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9" 188*45ae9d61Sreyk "DE2BCBF6955817183995497CEA956AE515D2261898FA0510" 189*45ae9d61Sreyk "15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64" 190*45ae9d61Sreyk "ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7" 191*45ae9d61Sreyk "ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B" 192*45ae9d61Sreyk "F12FFA06D98A0864D87602733EC86A64521F2B18177B200C" 193*45ae9d61Sreyk "BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31" 194*45ae9d61Sreyk "43DB5BFCE0FD108E4B82D120A92108011A723C12A787E6D7" 195*45ae9d61Sreyk "88719A10BDBA5B2699C327186AF4E23C1A946834B6150BDA" 196*45ae9d61Sreyk "2583E9CA2AD44CE8DBBBC2DB04DE8EF92E8EFC141FBECAA6" 197*45ae9d61Sreyk "287C59474E6BC05D99B2964FA090C3A2233BA186515BE7ED" 198*45ae9d61Sreyk "1F612970CEE2D7AFB81BDD762170481CD0069127D5B05AA9" 199*45ae9d61Sreyk "93B4EA988D8FDDC186FFB7DC90A6C08F4DF435C934028492" 200*45ae9d61Sreyk "36C3FAB4D27C7026C1D4DCB2602646DEC9751E763DBA37BD" 201*45ae9d61Sreyk "F8FF9406AD9E530EE5DB382F413001AEB06A53ED9027D831" 202*45ae9d61Sreyk "179727B0865A8918DA3EDBEBCF9B14ED44CE6CBACED4BB1B" 203*45ae9d61Sreyk "DB7F1447E6CC254B332051512BD7AF426FB8F401378CD2BF" 204*45ae9d61Sreyk "5983CA01C64B92ECF032EA15D1721D03F482D7CE6E74FEF6" 205*45ae9d61Sreyk "D55E702F46980C82B5A84031900B1C9E59E7C97FBEC7E8F3" 206*45ae9d61Sreyk "23A97A7E36CC88BE0F1D45B7FF585AC54BD407B22B4154AA" 207*45ae9d61Sreyk "CC8F6D7EBF48E1D814CC5ED20F8037E0A79715EEF29BE328" 208*45ae9d61Sreyk "06A1D58BB7C5DA76F550AA3D8A1FBFF0EB19CCB1A313D55C" 209*45ae9d61Sreyk "DA56C9EC2EF29632387FE8D76E3C0468043E8F663F4860EE" 210*45ae9d61Sreyk "12BF2D5B0B7474D6E694F91E6DBE115974A3926F12FEE5E4" 211*45ae9d61Sreyk "38777CB6A932DF8CD8BEC4D073B931BA3BC832B68D9DD300" 212*45ae9d61Sreyk "741FA7BF8AFC47ED2576F6936BA424663AAB639C5AE4F568" 213*45ae9d61Sreyk "3423B4742BF1C978238F16CBE39D652DE3FDB8BEFC848AD9" 214*45ae9d61Sreyk "22222E04A4037C0713EB57A81A23F0C73473FC646CEA306B" 215*45ae9d61Sreyk "4BCBC8862F8385DDFA9D4B7FA2C087E879683303ED5BDD3A" 216*45ae9d61Sreyk "062B3CF5B3A278A66D2A13F83F44F82DDF310EE074AB6A36" 217*45ae9d61Sreyk "4597E899A0255DC164F31CC50846851DF9AB48195DED7EA1" 218*45ae9d61Sreyk "B1D510BD7EE74D73FAF36BC31ECFA268359046F4EB879F92" 219*45ae9d61Sreyk "4009438B481C6CD7889A002ED5EE382BC9190DA6FC026E47" 220*45ae9d61Sreyk "9558E4475677E9AA9E3050E2765694DFC81F56E880B96E71" 221*45ae9d61Sreyk "60C980DD98EDD3DFFFFFFFFFFFFFFFFF", 222*45ae9d61Sreyk "02" 223*45ae9d61Sreyk }, 224*45ae9d61Sreyk { GROUP_EC, 19, 256, NULL, NULL, NID_X9_62_prime256v1 }, 225*45ae9d61Sreyk { GROUP_EC, 20, 384, NULL, NULL, NID_secp384r1 }, 226*45ae9d61Sreyk { GROUP_EC, 21, 521, NULL, NULL, NID_secp521r1 }, 227*45ae9d61Sreyk { GROUP_MODP, 22, 1024, 228*45ae9d61Sreyk "B10B8F96A080E01DDE92DE5EAE5D54EC52C99FBCFB06A3C6" 229*45ae9d61Sreyk "9A6A9DCA52D23B616073E28675A23D189838EF1E2EE652C0" 230*45ae9d61Sreyk "13ECB4AEA906112324975C3CD49B83BFACCBDD7D90C4BD70" 231*45ae9d61Sreyk "98488E9C219A73724EFFD6FAE5644738FAA31A4FF55BCCC0" 232*45ae9d61Sreyk "A151AF5F0DC8B4BD45BF37DF365C1A65E68CFDA76D4DA708" 233*45ae9d61Sreyk "DF1FB2BC2E4A4371", 234*45ae9d61Sreyk "A4D1CBD5C3FD34126765A442EFB99905F8104DD258AC507F" 235*45ae9d61Sreyk "D6406CFF14266D31266FEA1E5C41564B777E690F5504F213" 236*45ae9d61Sreyk "160217B4B01B886A5E91547F9E2749F4D7FBD7D3B9A92EE1" 237*45ae9d61Sreyk "909D0D2263F80A76A6A24C087A091F531DBF0A0169B6A28A" 238*45ae9d61Sreyk "D662A4D18E73AFA32D779D5918D08BC8858F4DCEF97C2A24" 239*45ae9d61Sreyk "855E6EEB22B3B2E5" 240*45ae9d61Sreyk }, 241*45ae9d61Sreyk { GROUP_MODP, 23, 2048, 242*45ae9d61Sreyk "AD107E1E9123A9D0D660FAA79559C51FA20D64E5683B9FD1" 243*45ae9d61Sreyk "B54B1597B61D0A75E6FA141DF95A56DBAF9A3C407BA1DF15" 244*45ae9d61Sreyk "EB3D688A309C180E1DE6B85A1274A0A66D3F8152AD6AC212" 245*45ae9d61Sreyk "9037C9EDEFDA4DF8D91E8FEF55B7394B7AD5B7D0B6C12207" 246*45ae9d61Sreyk "C9F98D11ED34DBF6C6BA0B2C8BBC27BE6A00E0A0B9C49708" 247*45ae9d61Sreyk "B3BF8A317091883681286130BC8985DB1602E714415D9330" 248*45ae9d61Sreyk "278273C7DE31EFDC7310F7121FD5A07415987D9ADC0A486D" 249*45ae9d61Sreyk "CDF93ACC44328387315D75E198C641A480CD86A1B9E587E8" 250*45ae9d61Sreyk "BE60E69CC928B2B9C52172E413042E9B23F10B0E16E79763" 251*45ae9d61Sreyk "C9B53DCF4BA80A29E3FB73C16B8E75B97EF363E2FFA31F71" 252*45ae9d61Sreyk "CF9DE5384E71B81C0AC4DFFE0C10E64F", 253*45ae9d61Sreyk "AC4032EF4F2D9AE39DF30B5C8FFDAC506CDEBE7B89998CAF" 254*45ae9d61Sreyk "74866A08CFE4FFE3A6824A4E10B9A6F0DD921F01A70C4AFA" 255*45ae9d61Sreyk "AB739D7700C29F52C57DB17C620A8652BE5E9001A8D66AD7" 256*45ae9d61Sreyk "C17669101999024AF4D027275AC1348BB8A762D0521BC98A" 257*45ae9d61Sreyk "E247150422EA1ED409939D54DA7460CDB5F6C6B250717CBE" 258*45ae9d61Sreyk "F180EB34118E98D119529A45D6F834566E3025E316A330EF" 259*45ae9d61Sreyk "BB77A86F0C1AB15B051AE3D428C8F8ACB70A8137150B8EEB" 260*45ae9d61Sreyk "10E183EDD19963DDD9E263E4770589EF6AA21E7F5F2FF381" 261*45ae9d61Sreyk "B539CCE3409D13CD566AFBB48D6C019181E1BCFE94B30269" 262*45ae9d61Sreyk "EDFE72FE9B6AA4BD7B5A0F1C71CFFF4C19C418E1F6EC0179" 263*45ae9d61Sreyk "81BC087F2A7065B384B890D3191F2BFA" 264*45ae9d61Sreyk }, 265*45ae9d61Sreyk { GROUP_MODP, 24, 2048, 266*45ae9d61Sreyk "87A8E61DB4B6663CFFBBD19C651959998CEEF608660DD0F2" 267*45ae9d61Sreyk "5D2CEED4435E3B00E00DF8F1D61957D4FAF7DF4561B2AA30" 268*45ae9d61Sreyk "16C3D91134096FAA3BF4296D830E9A7C209E0C6497517ABD" 269*45ae9d61Sreyk "5A8A9D306BCF67ED91F9E6725B4758C022E0B1EF4275BF7B" 270*45ae9d61Sreyk "6C5BFC11D45F9088B941F54EB1E59BB8BC39A0BF12307F5C" 271*45ae9d61Sreyk "4FDB70C581B23F76B63ACAE1CAA6B7902D52526735488A0E" 272*45ae9d61Sreyk "F13C6D9A51BFA4AB3AD8347796524D8EF6A167B5A41825D9" 273*45ae9d61Sreyk "67E144E5140564251CCACB83E6B486F6B3CA3F7971506026" 274*45ae9d61Sreyk "C0B857F689962856DED4010ABD0BE621C3A3960A54E710C3" 275*45ae9d61Sreyk "75F26375D7014103A4B54330C198AF126116D2276E11715F" 276*45ae9d61Sreyk "693877FAD7EF09CADB094AE91E1A1597", 277*45ae9d61Sreyk "3FB32C9B73134D0B2E77506660EDBD484CA7B18F21EF2054" 278*45ae9d61Sreyk "07F4793A1A0BA12510DBC15077BE463FFF4FED4AAC0BB555" 279*45ae9d61Sreyk "BE3A6C1B0C6B47B1BC3773BF7E8C6F62901228F8C28CBB18" 280*45ae9d61Sreyk "A55AE31341000A650196F931C77A57F2DDF463E5E9EC144B" 281*45ae9d61Sreyk "777DE62AAAB8A8628AC376D282D6ED3864E67982428EBC83" 282*45ae9d61Sreyk "1D14348F6F2F9193B5045AF2767164E1DFC967C1FB3F2E55" 283*45ae9d61Sreyk "A4BD1BFFE83B9C80D052B985D182EA0ADB2A3B7313D3FE14" 284*45ae9d61Sreyk "C8484B1E052588B9B7D2BBD2DF016199ECD06E1557CD0915" 285*45ae9d61Sreyk "B3353BBB64E0EC377FD028370DF92B52C7891428CDC67EB6" 286*45ae9d61Sreyk "184B523D1DB246C32F63078490F00EF8D647D148D4795451" 287*45ae9d61Sreyk "5E2327CFEF98C582664B4C0F6CC41659" 288*45ae9d61Sreyk }, 289*45ae9d61Sreyk { GROUP_EC, 25, 192, NULL, NULL, NID_X9_62_prime192v1 }, 290*45ae9d61Sreyk { GROUP_EC, 26, 224, NULL, NULL, NID_secp224r1 } 291*45ae9d61Sreyk }; 292*45ae9d61Sreyk 293*45ae9d61Sreyk void 294*45ae9d61Sreyk group_init(void) 295*45ae9d61Sreyk { 296*45ae9d61Sreyk extern int debug; 297*45ae9d61Sreyk 298*45ae9d61Sreyk if (debug > 2) 299*45ae9d61Sreyk dh_selftest(); 300*45ae9d61Sreyk 301*45ae9d61Sreyk /* not used */ 302*45ae9d61Sreyk return; 303*45ae9d61Sreyk } 304*45ae9d61Sreyk 305*45ae9d61Sreyk void 306*45ae9d61Sreyk group_free(struct group *group) 307*45ae9d61Sreyk { 308*45ae9d61Sreyk if (group == NULL) 309*45ae9d61Sreyk return; 310*45ae9d61Sreyk if (group->dh != NULL) 311*45ae9d61Sreyk DH_free(group->dh); 312*45ae9d61Sreyk if (group->ec != NULL) 313*45ae9d61Sreyk EC_KEY_free(group->ec); 314*45ae9d61Sreyk group->spec = NULL; 315*45ae9d61Sreyk } 316*45ae9d61Sreyk 317*45ae9d61Sreyk struct group * 318*45ae9d61Sreyk group_get(u_int32_t id) 319*45ae9d61Sreyk { 320*45ae9d61Sreyk struct group_id *p = NULL; 321*45ae9d61Sreyk struct group *group; 322*45ae9d61Sreyk u_int i, items; 323*45ae9d61Sreyk 324*45ae9d61Sreyk items = sizeof(ike_groups) / sizeof(ike_groups[0]); 325*45ae9d61Sreyk for (i = 0; i < items; i++) { 326*45ae9d61Sreyk if (id == ike_groups[i].id) { 327*45ae9d61Sreyk p = &ike_groups[i]; 328*45ae9d61Sreyk break; 329*45ae9d61Sreyk } 330*45ae9d61Sreyk } 331*45ae9d61Sreyk if (p == NULL) 332*45ae9d61Sreyk return (NULL); 333*45ae9d61Sreyk 334*45ae9d61Sreyk if ((group = calloc(1, sizeof(*group))) == NULL) 335*45ae9d61Sreyk return (NULL); 336*45ae9d61Sreyk 337*45ae9d61Sreyk group->id = id; 338*45ae9d61Sreyk group->spec = p; 339*45ae9d61Sreyk 340*45ae9d61Sreyk switch (p->type) { 341*45ae9d61Sreyk case GROUP_MODP: 342*45ae9d61Sreyk group->init = modp_init; 343*45ae9d61Sreyk group->getlen = modp_getlen; 344*45ae9d61Sreyk group->exchange = modp_create_exchange; 345*45ae9d61Sreyk group->shared = modp_create_shared; 346*45ae9d61Sreyk break; 347*45ae9d61Sreyk case GROUP_EC: 348*45ae9d61Sreyk group->init = ec_init; 349*45ae9d61Sreyk group->getlen = ec_getlen; 350*45ae9d61Sreyk group->exchange = ec_create_exchange; 351*45ae9d61Sreyk group->shared = ec_create_shared; 352*45ae9d61Sreyk break; 353*45ae9d61Sreyk default: 354*45ae9d61Sreyk log_debug("%s: unsupported dh type %d", __func__, p->type); 355*45ae9d61Sreyk group_free(group); 356*45ae9d61Sreyk return (NULL); 357*45ae9d61Sreyk } 358*45ae9d61Sreyk 359*45ae9d61Sreyk if (dh_init(group) != 0) { 360*45ae9d61Sreyk group_free(group); 361*45ae9d61Sreyk return (NULL); 362*45ae9d61Sreyk } 363*45ae9d61Sreyk 364*45ae9d61Sreyk return (group); 365*45ae9d61Sreyk } 366*45ae9d61Sreyk 367*45ae9d61Sreyk int 368*45ae9d61Sreyk dh_init(struct group *group) 369*45ae9d61Sreyk { 370*45ae9d61Sreyk return (group->init(group)); 371*45ae9d61Sreyk } 372*45ae9d61Sreyk 373*45ae9d61Sreyk int 374*45ae9d61Sreyk dh_getlen(struct group *group) 375*45ae9d61Sreyk { 376*45ae9d61Sreyk return (group->getlen(group)); 377*45ae9d61Sreyk } 378*45ae9d61Sreyk 379*45ae9d61Sreyk int 380*45ae9d61Sreyk dh_create_exchange(struct group *group, u_int8_t *buf) 381*45ae9d61Sreyk { 382*45ae9d61Sreyk return (group->exchange(group, buf)); 383*45ae9d61Sreyk } 384*45ae9d61Sreyk 385*45ae9d61Sreyk int 386*45ae9d61Sreyk dh_create_shared(struct group *group, u_int8_t *secret, u_int8_t *exchange) 387*45ae9d61Sreyk { 388*45ae9d61Sreyk return (group->shared(group, secret, exchange)); 389*45ae9d61Sreyk } 390*45ae9d61Sreyk 391*45ae9d61Sreyk int 392*45ae9d61Sreyk modp_init(struct group *group) 393*45ae9d61Sreyk { 394*45ae9d61Sreyk DH *dh; 395*45ae9d61Sreyk 396*45ae9d61Sreyk if ((dh = DH_new()) == NULL) 397*45ae9d61Sreyk return (-1); 398*45ae9d61Sreyk 399*45ae9d61Sreyk if (!BN_hex2bn(&dh->p, group->spec->prime) || 400*45ae9d61Sreyk !BN_hex2bn(&dh->g, group->spec->generator)) 401*45ae9d61Sreyk return (-1); 402*45ae9d61Sreyk 403*45ae9d61Sreyk group->dh = dh; 404*45ae9d61Sreyk 405*45ae9d61Sreyk return (0); 406*45ae9d61Sreyk } 407*45ae9d61Sreyk 408*45ae9d61Sreyk int 409*45ae9d61Sreyk modp_getlen(struct group *group) 410*45ae9d61Sreyk { 411*45ae9d61Sreyk if (group->spec == NULL) 412*45ae9d61Sreyk return (0); 413*45ae9d61Sreyk return (roundup(group->spec->bits, 8) / 8); 414*45ae9d61Sreyk } 415*45ae9d61Sreyk 416*45ae9d61Sreyk int 417*45ae9d61Sreyk modp_create_exchange(struct group *group, u_int8_t *buf) 418*45ae9d61Sreyk { 419*45ae9d61Sreyk int codes; 420*45ae9d61Sreyk DH *dh = group->dh; 421*45ae9d61Sreyk 422*45ae9d61Sreyk if (!DH_generate_key(dh)) 423*45ae9d61Sreyk return (-1); 424*45ae9d61Sreyk if (!DH_check(dh, &codes)) 425*45ae9d61Sreyk return (-1); 426*45ae9d61Sreyk if (!BN_bn2bin(dh->pub_key, buf)) 427*45ae9d61Sreyk return (-1); 428*45ae9d61Sreyk 429*45ae9d61Sreyk return 0; 430*45ae9d61Sreyk } 431*45ae9d61Sreyk 432*45ae9d61Sreyk int 433*45ae9d61Sreyk modp_create_shared(struct group *group, u_int8_t *secret, u_int8_t *exchange) 434*45ae9d61Sreyk { 435*45ae9d61Sreyk BIGNUM *ex; 436*45ae9d61Sreyk 437*45ae9d61Sreyk if ((ex = BN_bin2bn(exchange, dh_getlen(group), NULL)) == NULL) 438*45ae9d61Sreyk return (-1); 439*45ae9d61Sreyk if (!DH_compute_key(secret, ex, group->dh)) 440*45ae9d61Sreyk return (-1); 441*45ae9d61Sreyk 442*45ae9d61Sreyk return 0; 443*45ae9d61Sreyk } 444*45ae9d61Sreyk 445*45ae9d61Sreyk int 446*45ae9d61Sreyk ec_init(struct group *group) 447*45ae9d61Sreyk { 448*45ae9d61Sreyk if ((group->ec = EC_KEY_new_by_curve_name(group->spec->nid)) == NULL) 449*45ae9d61Sreyk return (-1); 450*45ae9d61Sreyk if (!EC_KEY_generate_key(group->ec)) 451*45ae9d61Sreyk return (-1); 452*45ae9d61Sreyk return (0); 453*45ae9d61Sreyk } 454*45ae9d61Sreyk 455*45ae9d61Sreyk int 456*45ae9d61Sreyk ec_getlen(struct group *group) 457*45ae9d61Sreyk { 458*45ae9d61Sreyk if (group->spec == NULL) 459*45ae9d61Sreyk return (0); 460*45ae9d61Sreyk return ((roundup(group->spec->bits, 8) * 2) / 8); 461*45ae9d61Sreyk } 462*45ae9d61Sreyk 463*45ae9d61Sreyk int 464*45ae9d61Sreyk ec_create_exchange(struct group *group, u_int8_t *buf) 465*45ae9d61Sreyk { 466*45ae9d61Sreyk return (ec_point2raw(group, EC_KEY_get0_public_key(group->ec), 467*45ae9d61Sreyk buf, ec_getlen(group))); 468*45ae9d61Sreyk } 469*45ae9d61Sreyk 470*45ae9d61Sreyk int 471*45ae9d61Sreyk ec_create_shared(struct group *group, u_int8_t *secret, u_int8_t *exchange) 472*45ae9d61Sreyk { 473*45ae9d61Sreyk const EC_GROUP *ecgroup = NULL; 474*45ae9d61Sreyk const BIGNUM *privkey; 475*45ae9d61Sreyk EC_POINT *exchangep = NULL, *secretp = NULL; 476*45ae9d61Sreyk int ret = -1; 477*45ae9d61Sreyk 478*45ae9d61Sreyk if ((ecgroup = EC_KEY_get0_group(group->ec)) == NULL || 479*45ae9d61Sreyk (privkey = EC_KEY_get0_private_key(group->ec)) == NULL) 480*45ae9d61Sreyk goto done; 481*45ae9d61Sreyk 482*45ae9d61Sreyk if ((exchangep = 483*45ae9d61Sreyk ec_raw2point(group, exchange, ec_getlen(group))) == NULL) 484*45ae9d61Sreyk goto done; 485*45ae9d61Sreyk 486*45ae9d61Sreyk if ((secretp = EC_POINT_new(ecgroup)) == NULL) 487*45ae9d61Sreyk goto done; 488*45ae9d61Sreyk 489*45ae9d61Sreyk if (!EC_POINT_mul(ecgroup, secretp, NULL, exchangep, privkey, NULL)) 490*45ae9d61Sreyk goto done; 491*45ae9d61Sreyk 492*45ae9d61Sreyk ret = ec_point2raw(group, secretp, secret, ec_getlen(group)); 493*45ae9d61Sreyk 494*45ae9d61Sreyk done: 495*45ae9d61Sreyk if (exchangep != NULL) 496*45ae9d61Sreyk EC_POINT_clear_free(exchangep); 497*45ae9d61Sreyk if (secretp != NULL) 498*45ae9d61Sreyk EC_POINT_clear_free(secretp); 499*45ae9d61Sreyk 500*45ae9d61Sreyk return (ret); 501*45ae9d61Sreyk } 502*45ae9d61Sreyk 503*45ae9d61Sreyk int 504*45ae9d61Sreyk ec_point2raw(struct group *group, const EC_POINT *point, 505*45ae9d61Sreyk u_int8_t *buf, size_t len) 506*45ae9d61Sreyk { 507*45ae9d61Sreyk const EC_GROUP *ecgroup = NULL; 508*45ae9d61Sreyk BN_CTX *bnctx = NULL; 509*45ae9d61Sreyk BIGNUM *x = NULL, *y = NULL; 510*45ae9d61Sreyk int ret = -1; 511*45ae9d61Sreyk size_t xlen, ylen; 512*45ae9d61Sreyk off_t xoff, yoff; 513*45ae9d61Sreyk 514*45ae9d61Sreyk if ((bnctx = BN_CTX_new()) == NULL) 515*45ae9d61Sreyk goto done; 516*45ae9d61Sreyk BN_CTX_start(bnctx); 517*45ae9d61Sreyk if ((x = BN_CTX_get(bnctx)) == NULL || 518*45ae9d61Sreyk (y = BN_CTX_get(bnctx)) == NULL) 519*45ae9d61Sreyk goto done; 520*45ae9d61Sreyk 521*45ae9d61Sreyk if ((ecgroup = EC_KEY_get0_group(group->ec)) == NULL) 522*45ae9d61Sreyk goto done; 523*45ae9d61Sreyk 524*45ae9d61Sreyk if (EC_METHOD_get_field_type(EC_GROUP_method_of(ecgroup)) == 525*45ae9d61Sreyk NID_X9_62_prime_field) { 526*45ae9d61Sreyk if (!EC_POINT_get_affine_coordinates_GFp(ecgroup, 527*45ae9d61Sreyk point, x, y, bnctx)) 528*45ae9d61Sreyk goto done; 529*45ae9d61Sreyk } else { 530*45ae9d61Sreyk if (!EC_POINT_get_affine_coordinates_GF2m(ecgroup, 531*45ae9d61Sreyk point, x, y, bnctx)) 532*45ae9d61Sreyk goto done; 533*45ae9d61Sreyk } 534*45ae9d61Sreyk 535*45ae9d61Sreyk xlen = roundup(BN_num_bytes(x), 2); 536*45ae9d61Sreyk xoff = xlen - BN_num_bytes(x); 537*45ae9d61Sreyk if (!BN_bn2bin(x, buf + xoff)) 538*45ae9d61Sreyk goto done; 539*45ae9d61Sreyk 540*45ae9d61Sreyk ylen = roundup(BN_num_bytes(y), 2); 541*45ae9d61Sreyk yoff = (ylen - BN_num_bytes(y)) + xlen; 542*45ae9d61Sreyk if (!BN_bn2bin(y, buf + yoff)) 543*45ae9d61Sreyk goto done; 544*45ae9d61Sreyk 545*45ae9d61Sreyk ret = 0; 546*45ae9d61Sreyk done: 547*45ae9d61Sreyk BN_CTX_end(bnctx); 548*45ae9d61Sreyk BN_CTX_free(bnctx); 549*45ae9d61Sreyk 550*45ae9d61Sreyk return (ret); 551*45ae9d61Sreyk } 552*45ae9d61Sreyk 553*45ae9d61Sreyk EC_POINT * 554*45ae9d61Sreyk ec_raw2point(struct group *group, u_int8_t *buf, size_t len) 555*45ae9d61Sreyk { 556*45ae9d61Sreyk const EC_GROUP *ecgroup = NULL; 557*45ae9d61Sreyk EC_POINT *point = NULL; 558*45ae9d61Sreyk BN_CTX *bnctx = NULL; 559*45ae9d61Sreyk BIGNUM *x = NULL, *y = NULL; 560*45ae9d61Sreyk int ret = -1; 561*45ae9d61Sreyk size_t eclen; 562*45ae9d61Sreyk size_t xlen, ylen; 563*45ae9d61Sreyk 564*45ae9d61Sreyk if ((bnctx = BN_CTX_new()) == NULL) 565*45ae9d61Sreyk goto done; 566*45ae9d61Sreyk BN_CTX_start(bnctx); 567*45ae9d61Sreyk if ((x = BN_CTX_get(bnctx)) == NULL || 568*45ae9d61Sreyk (y = BN_CTX_get(bnctx)) == NULL) 569*45ae9d61Sreyk goto done; 570*45ae9d61Sreyk 571*45ae9d61Sreyk eclen = ec_getlen(group); 572*45ae9d61Sreyk if (len < eclen) 573*45ae9d61Sreyk goto done; 574*45ae9d61Sreyk xlen = ylen = eclen / 2; 575*45ae9d61Sreyk if ((x = BN_bin2bn(buf, xlen, x)) == NULL || 576*45ae9d61Sreyk (y = BN_bin2bn(buf + xlen, ylen, y)) == NULL) 577*45ae9d61Sreyk goto done; 578*45ae9d61Sreyk 579*45ae9d61Sreyk if ((ecgroup = EC_KEY_get0_group(group->ec)) == NULL) 580*45ae9d61Sreyk goto done; 581*45ae9d61Sreyk 582*45ae9d61Sreyk if ((point = EC_POINT_new(ecgroup)) == NULL) 583*45ae9d61Sreyk goto done; 584*45ae9d61Sreyk 585*45ae9d61Sreyk if (EC_METHOD_get_field_type(EC_GROUP_method_of(ecgroup)) == 586*45ae9d61Sreyk NID_X9_62_prime_field) { 587*45ae9d61Sreyk if (!EC_POINT_set_affine_coordinates_GFp(ecgroup, 588*45ae9d61Sreyk point, x, y, bnctx)) 589*45ae9d61Sreyk goto done; 590*45ae9d61Sreyk } else { 591*45ae9d61Sreyk if (!EC_POINT_set_affine_coordinates_GF2m(ecgroup, 592*45ae9d61Sreyk point, x, y, bnctx)) 593*45ae9d61Sreyk goto done; 594*45ae9d61Sreyk } 595*45ae9d61Sreyk 596*45ae9d61Sreyk ret = 0; 597*45ae9d61Sreyk done: 598*45ae9d61Sreyk if (ret != 0 && point != NULL) 599*45ae9d61Sreyk EC_POINT_clear_free(point); 600*45ae9d61Sreyk BN_CTX_end(bnctx); 601*45ae9d61Sreyk BN_CTX_free(bnctx); 602*45ae9d61Sreyk 603*45ae9d61Sreyk return (point); 604*45ae9d61Sreyk } 605*45ae9d61Sreyk 606*45ae9d61Sreyk void 607*45ae9d61Sreyk dh_selftest(void) 608*45ae9d61Sreyk { 609*45ae9d61Sreyk struct group *adh = NULL, *bdh = NULL; 610*45ae9d61Sreyk struct ibuf *asec = NULL, *aexc = NULL; 611*45ae9d61Sreyk struct ibuf *bsec = NULL, *bexc = NULL; 612*45ae9d61Sreyk size_t len; 613*45ae9d61Sreyk int id; 614*45ae9d61Sreyk struct timeval start, stop, tv; 615*45ae9d61Sreyk 616*45ae9d61Sreyk /* Test DH */ 617*45ae9d61Sreyk for (id = 0; id < IKEV2_XFORMDH_MAX; id++) { 618*45ae9d61Sreyk if ((adh = group_get(id)) == NULL || 619*45ae9d61Sreyk (bdh = group_get(id)) == NULL) 620*45ae9d61Sreyk continue; 621*45ae9d61Sreyk 622*45ae9d61Sreyk gettimeofday(&start, NULL); 623*45ae9d61Sreyk 624*45ae9d61Sreyk print_debug("%s: DH group %d (%s)", __func__, 625*45ae9d61Sreyk id, print_map(id, ikev2_xformdh_map)); 626*45ae9d61Sreyk 627*45ae9d61Sreyk if ((len = dh_getlen(adh)) != 0 && 628*45ae9d61Sreyk (aexc = ibuf_new(NULL, len)) != NULL && 629*45ae9d61Sreyk (dh_create_exchange(adh, aexc->buf)) != -1 && 630*45ae9d61Sreyk (bexc = ibuf_new(NULL, len)) != NULL && 631*45ae9d61Sreyk (dh_create_exchange(bdh, bexc->buf)) != -1 && 632*45ae9d61Sreyk (asec = ibuf_new(NULL, len)) != NULL && 633*45ae9d61Sreyk (dh_create_shared(adh, asec->buf, bexc->buf)) != -1 && 634*45ae9d61Sreyk (bsec = ibuf_new(NULL, len)) != NULL && 635*45ae9d61Sreyk (dh_create_shared(bdh, bsec->buf, aexc->buf)) != -1 && 636*45ae9d61Sreyk (ibuf_length(asec) == ibuf_length(bsec)) && 637*45ae9d61Sreyk (ibuf_length(asec) == len) && 638*45ae9d61Sreyk (memcmp(asec->buf, bsec->buf, len)) == 0) 639*45ae9d61Sreyk print_debug(": success"); 640*45ae9d61Sreyk else 641*45ae9d61Sreyk print_debug(": fail"); 642*45ae9d61Sreyk 643*45ae9d61Sreyk gettimeofday(&stop, NULL); 644*45ae9d61Sreyk timersub(&stop, &start, &tv); 645*45ae9d61Sreyk 646*45ae9d61Sreyk print_debug(" (%lu.%lu seconds)\n", tv.tv_sec, tv.tv_usec); 647*45ae9d61Sreyk 648*45ae9d61Sreyk ibuf_release(aexc); 649*45ae9d61Sreyk ibuf_release(bexc); 650*45ae9d61Sreyk ibuf_release(asec); 651*45ae9d61Sreyk ibuf_release(bsec); 652*45ae9d61Sreyk aexc = bexc = asec = bsec = NULL; 653*45ae9d61Sreyk 654*45ae9d61Sreyk group_free(adh); 655*45ae9d61Sreyk group_free(bdh); 656*45ae9d61Sreyk } 657*45ae9d61Sreyk } 658