StrippedDownNetServices - This library is stripped down version of NetServi…

Users » idinor » Code » StrippedDownNetServices

idinor Launcher / StrippedDownNetServices

This library is stripped down version of NetServices library. HTTP server and client function is NOT supported.

lwip/netif/ppp/chpms.c@0:dcf3c92487ca, 2011-07-20 (annotated)

Committer:: idinor
Date:: Wed Jul 20 11:45:39 2011 +0000
Revision:: 0:dcf3c92487ca

Who changed what in which revision?

User	Revision	Line number	New contents of line
idinor	0:dcf3c92487ca	1	/* WARNING - THIS CODE HAS NOT BEEN FINISHED! */
idinor	0:dcf3c92487ca	2	/*** The original PPPD code is written in a way to require either the UNIX DES
idinor	0:dcf3c92487ca	3	encryption functions encrypt(3) and setkey(3) or the DES library libdes.
idinor	0:dcf3c92487ca	4	Since both is not included in lwIP, MSCHAP currently does not work! */
idinor	0:dcf3c92487ca	5	/*****************************************************************************
idinor	0:dcf3c92487ca	6	* chpms.c - Network MicroSoft Challenge Handshake Authentication Protocol program file.
idinor	0:dcf3c92487ca	7	*
idinor	0:dcf3c92487ca	8	* Copyright (c) 2003 by Marc Boucher, Services Informatiques (MBSI) inc.
idinor	0:dcf3c92487ca	9	* Copyright (c) 1997 by Global Election Systems Inc. All rights reserved.
idinor	0:dcf3c92487ca	10	*
idinor	0:dcf3c92487ca	11	* The authors hereby grant permission to use, copy, modify, distribute,
idinor	0:dcf3c92487ca	12	* and license this software and its documentation for any purpose, provided
idinor	0:dcf3c92487ca	13	* that existing copyright notices are retained in all copies and that this
idinor	0:dcf3c92487ca	14	* notice and the following disclaimer are included verbatim in any
idinor	0:dcf3c92487ca	15	* distributions. No written agreement, license, or royalty fee is required
idinor	0:dcf3c92487ca	16	* for any of the authorized uses.
idinor	0:dcf3c92487ca	17	*
idinor	0:dcf3c92487ca	18	* THIS SOFTWARE IS PROVIDED BY THE CONTRIBUTORS AS IS AND ANY EXPRESS OR
idinor	0:dcf3c92487ca	19	* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
idinor	0:dcf3c92487ca	20	* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
idinor	0:dcf3c92487ca	21	* IN NO EVENT SHALL THE CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
idinor	0:dcf3c92487ca	22	* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
idinor	0:dcf3c92487ca	23	* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
idinor	0:dcf3c92487ca	24	* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
idinor	0:dcf3c92487ca	25	* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
idinor	0:dcf3c92487ca	26	* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
idinor	0:dcf3c92487ca	27	* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
idinor	0:dcf3c92487ca	28	*
idinor	0:dcf3c92487ca	29	******************************************************************************
idinor	0:dcf3c92487ca	30	* REVISION HISTORY
idinor	0:dcf3c92487ca	31	*
idinor	0:dcf3c92487ca	32	* 03-01-01 Marc Boucher <marc@mbsi.ca>
idinor	0:dcf3c92487ca	33	* Ported to lwIP.
idinor	0:dcf3c92487ca	34	* 97-12-08 Guy Lancaster <lancasterg@acm.org>, Global Election Systems Inc.
idinor	0:dcf3c92487ca	35	* Original based on BSD chap_ms.c.
idinor	0:dcf3c92487ca	36	*****************************************************************************/
idinor	0:dcf3c92487ca	37	/*
idinor	0:dcf3c92487ca	38	* chap_ms.c - Microsoft MS-CHAP compatible implementation.
idinor	0:dcf3c92487ca	39	*
idinor	0:dcf3c92487ca	40	* Copyright (c) 1995 Eric Rosenquist, Strata Software Limited.
idinor	0:dcf3c92487ca	41	* http://www.strataware.com/
idinor	0:dcf3c92487ca	42	*
idinor	0:dcf3c92487ca	43	* All rights reserved.
idinor	0:dcf3c92487ca	44	*
idinor	0:dcf3c92487ca	45	* Redistribution and use in source and binary forms are permitted
idinor	0:dcf3c92487ca	46	* provided that the above copyright notice and this paragraph are
idinor	0:dcf3c92487ca	47	* duplicated in all such forms and that any documentation,
idinor	0:dcf3c92487ca	48	* advertising materials, and other materials related to such
idinor	0:dcf3c92487ca	49	* distribution and use acknowledge that the software was developed
idinor	0:dcf3c92487ca	50	* by Eric Rosenquist. The name of the author may not be used to
idinor	0:dcf3c92487ca	51	* endorse or promote products derived from this software without
idinor	0:dcf3c92487ca	52	* specific prior written permission.
idinor	0:dcf3c92487ca	53	*
idinor	0:dcf3c92487ca	54	* THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
idinor	0:dcf3c92487ca	55	* IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
idinor	0:dcf3c92487ca	56	* WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
idinor	0:dcf3c92487ca	57	*/
idinor	0:dcf3c92487ca	58
idinor	0:dcf3c92487ca	59	/*
idinor	0:dcf3c92487ca	60	* Modifications by Lauri Pesonen / lpesonen@clinet.fi, april 1997
idinor	0:dcf3c92487ca	61	*
idinor	0:dcf3c92487ca	62	* Implemented LANManager type password response to MS-CHAP challenges.
idinor	0:dcf3c92487ca	63	* Now pppd provides both NT style and LANMan style blocks, and the
idinor	0:dcf3c92487ca	64	* prefered is set by option "ms-lanman". Default is to use NT.
idinor	0:dcf3c92487ca	65	* The hash text (StdText) was taken from Win95 RASAPI32.DLL.
idinor	0:dcf3c92487ca	66	*
idinor	0:dcf3c92487ca	67	* You should also use DOMAIN\\USERNAME as described in README.MSCHAP80
idinor	0:dcf3c92487ca	68	*/
idinor	0:dcf3c92487ca	69
idinor	0:dcf3c92487ca	70	#define USE_CRYPT
idinor	0:dcf3c92487ca	71
idinor	0:dcf3c92487ca	72	#include "lwip/opt.h"
idinor	0:dcf3c92487ca	73
idinor	0:dcf3c92487ca	74	#if PPP_SUPPORT /* don't build if not configured for use in lwipopts.h */
idinor	0:dcf3c92487ca	75
idinor	0:dcf3c92487ca	76	#if MSCHAP_SUPPORT /* don't build if not configured for use in lwipopts.h */
idinor	0:dcf3c92487ca	77
idinor	0:dcf3c92487ca	78	#include "ppp.h"
idinor	0:dcf3c92487ca	79	#include "pppdebug.h"
idinor	0:dcf3c92487ca	80
idinor	0:dcf3c92487ca	81	#include "md4.h"
idinor	0:dcf3c92487ca	82	#ifndef USE_CRYPT
idinor	0:dcf3c92487ca	83	#include "des.h"
idinor	0:dcf3c92487ca	84	#endif
idinor	0:dcf3c92487ca	85	#include "chap.h"
idinor	0:dcf3c92487ca	86	#include "chpms.h"
idinor	0:dcf3c92487ca	87
idinor	0:dcf3c92487ca	88	#include <string.h>
idinor	0:dcf3c92487ca	89
idinor	0:dcf3c92487ca	90
idinor	0:dcf3c92487ca	91	/*************************/
idinor	0:dcf3c92487ca	92	/* LOCAL DEFINITIONS */
idinor	0:dcf3c92487ca	93	/*************************/
idinor	0:dcf3c92487ca	94
idinor	0:dcf3c92487ca	95
idinor	0:dcf3c92487ca	96	/************************/
idinor	0:dcf3c92487ca	97	/* LOCAL DATA TYPES */
idinor	0:dcf3c92487ca	98	/************************/
idinor	0:dcf3c92487ca	99	typedef struct {
idinor	0:dcf3c92487ca	100	u_char LANManResp[24];
idinor	0:dcf3c92487ca	101	u_char NTResp[24];
idinor	0:dcf3c92487ca	102	u_char UseNT; /* If 1, ignore the LANMan response field */
idinor	0:dcf3c92487ca	103	} MS_ChapResponse;
idinor	0:dcf3c92487ca	104	/* We use MS_CHAP_RESPONSE_LEN, rather than sizeof(MS_ChapResponse),
idinor	0:dcf3c92487ca	105	in case this struct gets padded. */
idinor	0:dcf3c92487ca	106
idinor	0:dcf3c92487ca	107
idinor	0:dcf3c92487ca	108
idinor	0:dcf3c92487ca	109	/***********************************/
idinor	0:dcf3c92487ca	110	/* LOCAL FUNCTION DECLARATIONS */
idinor	0:dcf3c92487ca	111	/***********************************/
idinor	0:dcf3c92487ca	112
idinor	0:dcf3c92487ca	113	/* XXX Don't know what to do with these. */
idinor	0:dcf3c92487ca	114	extern void setkey(const char *);
idinor	0:dcf3c92487ca	115	extern void encrypt(char *, int);
idinor	0:dcf3c92487ca	116
idinor	0:dcf3c92487ca	117	static void DesEncrypt (u_char , u_char , u_char *);
idinor	0:dcf3c92487ca	118	static void MakeKey (u_char , u_char );
idinor	0:dcf3c92487ca	119
idinor	0:dcf3c92487ca	120	#ifdef USE_CRYPT
idinor	0:dcf3c92487ca	121	static void Expand (u_char , u_char );
idinor	0:dcf3c92487ca	122	static void Collapse (u_char , u_char );
idinor	0:dcf3c92487ca	123	#endif
idinor	0:dcf3c92487ca	124
idinor	0:dcf3c92487ca	125	static void ChallengeResponse(
idinor	0:dcf3c92487ca	126	u_char challenge, / IN 8 octets */
idinor	0:dcf3c92487ca	127	u_char pwHash, / IN 16 octets */
idinor	0:dcf3c92487ca	128	u_char response / OUT 24 octets */
idinor	0:dcf3c92487ca	129	);
idinor	0:dcf3c92487ca	130	static void ChapMS_NT(
idinor	0:dcf3c92487ca	131	char *rchallenge,
idinor	0:dcf3c92487ca	132	int rchallenge_len,
idinor	0:dcf3c92487ca	133	char *secret,
idinor	0:dcf3c92487ca	134	int secret_len,
idinor	0:dcf3c92487ca	135	MS_ChapResponse *response
idinor	0:dcf3c92487ca	136	);
idinor	0:dcf3c92487ca	137	static u_char Get7Bits(
idinor	0:dcf3c92487ca	138	u_char *input,
idinor	0:dcf3c92487ca	139	int startBit
idinor	0:dcf3c92487ca	140	);
idinor	0:dcf3c92487ca	141
idinor	0:dcf3c92487ca	142	static void
idinor	0:dcf3c92487ca	143	ChallengeResponse( u_char challenge, / IN 8 octets */
idinor	0:dcf3c92487ca	144	u_char pwHash, / IN 16 octets */
idinor	0:dcf3c92487ca	145	u_char response / OUT 24 octets */)
idinor	0:dcf3c92487ca	146	{
idinor	0:dcf3c92487ca	147	u_char ZPasswordHash[21];
idinor	0:dcf3c92487ca	148
idinor	0:dcf3c92487ca	149	BZERO(ZPasswordHash, sizeof(ZPasswordHash));
idinor	0:dcf3c92487ca	150	BCOPY(pwHash, ZPasswordHash, 16);
idinor	0:dcf3c92487ca	151
idinor	0:dcf3c92487ca	152	#if 0
idinor	0:dcf3c92487ca	153	log_packet(ZPasswordHash, sizeof(ZPasswordHash), "ChallengeResponse - ZPasswordHash", LOG_DEBUG);
idinor	0:dcf3c92487ca	154	#endif
idinor	0:dcf3c92487ca	155
idinor	0:dcf3c92487ca	156	DesEncrypt(challenge, ZPasswordHash + 0, response + 0);
idinor	0:dcf3c92487ca	157	DesEncrypt(challenge, ZPasswordHash + 7, response + 8);
idinor	0:dcf3c92487ca	158	DesEncrypt(challenge, ZPasswordHash + 14, response + 16);
idinor	0:dcf3c92487ca	159
idinor	0:dcf3c92487ca	160	#if 0
idinor	0:dcf3c92487ca	161	log_packet(response, 24, "ChallengeResponse - response", LOG_DEBUG);
idinor	0:dcf3c92487ca	162	#endif
idinor	0:dcf3c92487ca	163	}
idinor	0:dcf3c92487ca	164
idinor	0:dcf3c92487ca	165
idinor	0:dcf3c92487ca	166	#ifdef USE_CRYPT
idinor	0:dcf3c92487ca	167	static void
idinor	0:dcf3c92487ca	168	DesEncrypt( u_char clear, / IN 8 octets */
idinor	0:dcf3c92487ca	169	u_char key, / IN 7 octets */
idinor	0:dcf3c92487ca	170	u_char cipher / OUT 8 octets */)
idinor	0:dcf3c92487ca	171	{
idinor	0:dcf3c92487ca	172	u_char des_key[8];
idinor	0:dcf3c92487ca	173	u_char crypt_key[66];
idinor	0:dcf3c92487ca	174	u_char des_input[66];
idinor	0:dcf3c92487ca	175
idinor	0:dcf3c92487ca	176	MakeKey(key, des_key);
idinor	0:dcf3c92487ca	177
idinor	0:dcf3c92487ca	178	Expand(des_key, crypt_key);
idinor	0:dcf3c92487ca	179	setkey((char*)crypt_key);
idinor	0:dcf3c92487ca	180
idinor	0:dcf3c92487ca	181	#if 0
idinor	0:dcf3c92487ca	182	CHAPDEBUG(LOG_INFO, ("DesEncrypt: 8 octet input : %02X%02X%02X%02X%02X%02X%02X%02X\n",
idinor	0:dcf3c92487ca	183	clear[0], clear[1], clear[2], clear[3], clear[4], clear[5], clear[6], clear[7]));
idinor	0:dcf3c92487ca	184	#endif
idinor	0:dcf3c92487ca	185
idinor	0:dcf3c92487ca	186	Expand(clear, des_input);
idinor	0:dcf3c92487ca	187	encrypt((char*)des_input, 0);
idinor	0:dcf3c92487ca	188	Collapse(des_input, cipher);
idinor	0:dcf3c92487ca	189
idinor	0:dcf3c92487ca	190	#if 0
idinor	0:dcf3c92487ca	191	CHAPDEBUG(LOG_INFO, ("DesEncrypt: 8 octet output: %02X%02X%02X%02X%02X%02X%02X%02X\n",
idinor	0:dcf3c92487ca	192	cipher[0], cipher[1], cipher[2], cipher[3], cipher[4], cipher[5], cipher[6], cipher[7]));
idinor	0:dcf3c92487ca	193	#endif
idinor	0:dcf3c92487ca	194	}
idinor	0:dcf3c92487ca	195
idinor	0:dcf3c92487ca	196	#else /* USE_CRYPT */
idinor	0:dcf3c92487ca	197
idinor	0:dcf3c92487ca	198	static void
idinor	0:dcf3c92487ca	199	DesEncrypt( u_char clear, / IN 8 octets */
idinor	0:dcf3c92487ca	200	u_char key, / IN 7 octets */
idinor	0:dcf3c92487ca	201	u_char cipher / OUT 8 octets */)
idinor	0:dcf3c92487ca	202	{
idinor	0:dcf3c92487ca	203	des_cblock des_key;
idinor	0:dcf3c92487ca	204	des_key_schedule key_schedule;
idinor	0:dcf3c92487ca	205
idinor	0:dcf3c92487ca	206	MakeKey(key, des_key);
idinor	0:dcf3c92487ca	207
idinor	0:dcf3c92487ca	208	des_set_key(&des_key, key_schedule);
idinor	0:dcf3c92487ca	209
idinor	0:dcf3c92487ca	210	#if 0
idinor	0:dcf3c92487ca	211	CHAPDEBUG(LOG_INFO, ("DesEncrypt: 8 octet input : %02X%02X%02X%02X%02X%02X%02X%02X\n",
idinor	0:dcf3c92487ca	212	clear[0], clear[1], clear[2], clear[3], clear[4], clear[5], clear[6], clear[7]));
idinor	0:dcf3c92487ca	213	#endif
idinor	0:dcf3c92487ca	214
idinor	0:dcf3c92487ca	215	des_ecb_encrypt((des_cblock )clear, (des_cblock )cipher, key_schedule, 1);
idinor	0:dcf3c92487ca	216
idinor	0:dcf3c92487ca	217	#if 0
idinor	0:dcf3c92487ca	218	CHAPDEBUG(LOG_INFO, ("DesEncrypt: 8 octet output: %02X%02X%02X%02X%02X%02X%02X%02X\n",
idinor	0:dcf3c92487ca	219	cipher[0], cipher[1], cipher[2], cipher[3], cipher[4], cipher[5], cipher[6], cipher[7]));
idinor	0:dcf3c92487ca	220	#endif
idinor	0:dcf3c92487ca	221	}
idinor	0:dcf3c92487ca	222
idinor	0:dcf3c92487ca	223	#endif /* USE_CRYPT */
idinor	0:dcf3c92487ca	224
idinor	0:dcf3c92487ca	225
idinor	0:dcf3c92487ca	226	static u_char
idinor	0:dcf3c92487ca	227	Get7Bits( u_char *input, int startBit)
idinor	0:dcf3c92487ca	228	{
idinor	0:dcf3c92487ca	229	register unsigned int word;
idinor	0:dcf3c92487ca	230
idinor	0:dcf3c92487ca	231	word = (unsigned)input[startBit / 8] << 8;
idinor	0:dcf3c92487ca	232	word \|= (unsigned)input[startBit / 8 + 1];
idinor	0:dcf3c92487ca	233
idinor	0:dcf3c92487ca	234	word >>= 15 - (startBit % 8 + 7);
idinor	0:dcf3c92487ca	235
idinor	0:dcf3c92487ca	236	return word & 0xFE;
idinor	0:dcf3c92487ca	237	}
idinor	0:dcf3c92487ca	238
idinor	0:dcf3c92487ca	239	#ifdef USE_CRYPT
idinor	0:dcf3c92487ca	240
idinor	0:dcf3c92487ca	241	/* in == 8-byte string (expanded version of the 56-bit key)
idinor	0:dcf3c92487ca	242	* out == 64-byte string where each byte is either 1 or 0
idinor	0:dcf3c92487ca	243	* Note that the low-order "bit" is always ignored by by setkey()
idinor	0:dcf3c92487ca	244	*/
idinor	0:dcf3c92487ca	245	static void
idinor	0:dcf3c92487ca	246	Expand(u_char in, u_char out)
idinor	0:dcf3c92487ca	247	{
idinor	0:dcf3c92487ca	248	int j, c;
idinor	0:dcf3c92487ca	249	int i;
idinor	0:dcf3c92487ca	250
idinor	0:dcf3c92487ca	251	for(i = 0; i < 64; in++){
idinor	0:dcf3c92487ca	252	c = *in;
idinor	0:dcf3c92487ca	253	for(j = 7; j >= 0; j--) {
idinor	0:dcf3c92487ca	254	*out++ = (c >> j) & 01;
idinor	0:dcf3c92487ca	255	}
idinor	0:dcf3c92487ca	256	i += 8;
idinor	0:dcf3c92487ca	257	}
idinor	0:dcf3c92487ca	258	}
idinor	0:dcf3c92487ca	259
idinor	0:dcf3c92487ca	260	/* The inverse of Expand
idinor	0:dcf3c92487ca	261	*/
idinor	0:dcf3c92487ca	262	static void
idinor	0:dcf3c92487ca	263	Collapse(u_char in, u_char out)
idinor	0:dcf3c92487ca	264	{
idinor	0:dcf3c92487ca	265	int j;
idinor	0:dcf3c92487ca	266	int i;
idinor	0:dcf3c92487ca	267	unsigned int c;
idinor	0:dcf3c92487ca	268
idinor	0:dcf3c92487ca	269	for (i = 0; i < 64; i += 8, out++) {
idinor	0:dcf3c92487ca	270	c = 0;
idinor	0:dcf3c92487ca	271	for (j = 7; j >= 0; j--, in++) {
idinor	0:dcf3c92487ca	272	c \|= *in << j;
idinor	0:dcf3c92487ca	273	}
idinor	0:dcf3c92487ca	274	*out = c & 0xff;
idinor	0:dcf3c92487ca	275	}
idinor	0:dcf3c92487ca	276	}
idinor	0:dcf3c92487ca	277	#endif
idinor	0:dcf3c92487ca	278
idinor	0:dcf3c92487ca	279	static void
idinor	0:dcf3c92487ca	280	MakeKey( u_char key, / IN 56 bit DES key missing parity bits */
idinor	0:dcf3c92487ca	281	u_char des_key / OUT 64 bit DES key with parity bits added */)
idinor	0:dcf3c92487ca	282	{
idinor	0:dcf3c92487ca	283	des_key[0] = Get7Bits(key, 0);
idinor	0:dcf3c92487ca	284	des_key[1] = Get7Bits(key, 7);
idinor	0:dcf3c92487ca	285	des_key[2] = Get7Bits(key, 14);
idinor	0:dcf3c92487ca	286	des_key[3] = Get7Bits(key, 21);
idinor	0:dcf3c92487ca	287	des_key[4] = Get7Bits(key, 28);
idinor	0:dcf3c92487ca	288	des_key[5] = Get7Bits(key, 35);
idinor	0:dcf3c92487ca	289	des_key[6] = Get7Bits(key, 42);
idinor	0:dcf3c92487ca	290	des_key[7] = Get7Bits(key, 49);
idinor	0:dcf3c92487ca	291
idinor	0:dcf3c92487ca	292	#ifndef USE_CRYPT
idinor	0:dcf3c92487ca	293	des_set_odd_parity((des_cblock *)des_key);
idinor	0:dcf3c92487ca	294	#endif
idinor	0:dcf3c92487ca	295
idinor	0:dcf3c92487ca	296	#if 0
idinor	0:dcf3c92487ca	297	CHAPDEBUG(LOG_INFO, ("MakeKey: 56-bit input : %02X%02X%02X%02X%02X%02X%02X\n",
idinor	0:dcf3c92487ca	298	key[0], key[1], key[2], key[3], key[4], key[5], key[6]));
idinor	0:dcf3c92487ca	299	CHAPDEBUG(LOG_INFO, ("MakeKey: 64-bit output: %02X%02X%02X%02X%02X%02X%02X%02X\n",
idinor	0:dcf3c92487ca	300	des_key[0], des_key[1], des_key[2], des_key[3], des_key[4], des_key[5], des_key[6], des_key[7]));
idinor	0:dcf3c92487ca	301	#endif
idinor	0:dcf3c92487ca	302	}
idinor	0:dcf3c92487ca	303
idinor	0:dcf3c92487ca	304	static void
idinor	0:dcf3c92487ca	305	ChapMS_NT( char *rchallenge,
idinor	0:dcf3c92487ca	306	int rchallenge_len,
idinor	0:dcf3c92487ca	307	char *secret,
idinor	0:dcf3c92487ca	308	int secret_len,
idinor	0:dcf3c92487ca	309	MS_ChapResponse *response)
idinor	0:dcf3c92487ca	310	{
idinor	0:dcf3c92487ca	311	int i;
idinor	0:dcf3c92487ca	312	MDstruct md4Context;
idinor	0:dcf3c92487ca	313	u_char unicodePassword[MAX_NT_PASSWORD * 2];
idinor	0:dcf3c92487ca	314	static int low_byte_first = -1;
idinor	0:dcf3c92487ca	315
idinor	0:dcf3c92487ca	316	LWIP_UNUSED_ARG(rchallenge_len);
idinor	0:dcf3c92487ca	317
idinor	0:dcf3c92487ca	318	/* Initialize the Unicode version of the secret (== password). */
idinor	0:dcf3c92487ca	319	/* This implicitly supports 8-bit ISO8859/1 characters. */
idinor	0:dcf3c92487ca	320	BZERO(unicodePassword, sizeof(unicodePassword));
idinor	0:dcf3c92487ca	321	for (i = 0; i < secret_len; i++) {
idinor	0:dcf3c92487ca	322	unicodePassword[i * 2] = (u_char)secret[i];
idinor	0:dcf3c92487ca	323	}
idinor	0:dcf3c92487ca	324	MDbegin(&md4Context);
idinor	0:dcf3c92487ca	325	MDupdate(&md4Context, unicodePassword, secret_len * 2 * 8); /* Unicode is 2 bytes/char, 8 for bit count /
idinor	0:dcf3c92487ca	326
idinor	0:dcf3c92487ca	327	if (low_byte_first == -1) {
idinor	0:dcf3c92487ca	328	low_byte_first = (PP_HTONS((unsigned short int)1) != 1);
idinor	0:dcf3c92487ca	329	}
idinor	0:dcf3c92487ca	330	if (low_byte_first == 0) {
idinor	0:dcf3c92487ca	331	/* @todo: arg type - u_long* or u_int* ? */
idinor	0:dcf3c92487ca	332	MDreverse((unsigned int)&md4Context); / sfb 961105 */
idinor	0:dcf3c92487ca	333	}
idinor	0:dcf3c92487ca	334
idinor	0:dcf3c92487ca	335	MDupdate(&md4Context, NULL, 0); /* Tell MD4 we're done */
idinor	0:dcf3c92487ca	336
idinor	0:dcf3c92487ca	337	ChallengeResponse((u_char)rchallenge, (u_char)md4Context.buffer, response->NTResp);
idinor	0:dcf3c92487ca	338	}
idinor	0:dcf3c92487ca	339
idinor	0:dcf3c92487ca	340	#ifdef MSLANMAN
idinor	0:dcf3c92487ca	341	static u_char StdText = (u_char )"KGS!@#$%"; /* key from rasapi32.dll */
idinor	0:dcf3c92487ca	342
idinor	0:dcf3c92487ca	343	static void
idinor	0:dcf3c92487ca	344	ChapMS_LANMan( char *rchallenge,
idinor	0:dcf3c92487ca	345	int rchallenge_len,
idinor	0:dcf3c92487ca	346	char *secret,
idinor	0:dcf3c92487ca	347	int secret_len,
idinor	0:dcf3c92487ca	348	MS_ChapResponse *response)
idinor	0:dcf3c92487ca	349	{
idinor	0:dcf3c92487ca	350	int i;
idinor	0:dcf3c92487ca	351	u_char UcasePassword[MAX_NT_PASSWORD]; /* max is actually 14 */
idinor	0:dcf3c92487ca	352	u_char PasswordHash[16];
idinor	0:dcf3c92487ca	353
idinor	0:dcf3c92487ca	354	/* LANMan password is case insensitive */
idinor	0:dcf3c92487ca	355	BZERO(UcasePassword, sizeof(UcasePassword));
idinor	0:dcf3c92487ca	356	for (i = 0; i < secret_len; i++) {
idinor	0:dcf3c92487ca	357	UcasePassword[i] = (u_char)toupper(secret[i]);
idinor	0:dcf3c92487ca	358	}
idinor	0:dcf3c92487ca	359	DesEncrypt( StdText, UcasePassword + 0, PasswordHash + 0 );
idinor	0:dcf3c92487ca	360	DesEncrypt( StdText, UcasePassword + 7, PasswordHash + 8 );
idinor	0:dcf3c92487ca	361	ChallengeResponse(rchallenge, PasswordHash, response->LANManResp);
idinor	0:dcf3c92487ca	362	}
idinor	0:dcf3c92487ca	363	#endif
idinor	0:dcf3c92487ca	364
idinor	0:dcf3c92487ca	365	void
idinor	0:dcf3c92487ca	366	ChapMS( chap_state cstate, char rchallenge, int rchallenge_len, char *secret, int secret_len)
idinor	0:dcf3c92487ca	367	{
idinor	0:dcf3c92487ca	368	MS_ChapResponse response;
idinor	0:dcf3c92487ca	369	#ifdef MSLANMAN
idinor	0:dcf3c92487ca	370	extern int ms_lanman;
idinor	0:dcf3c92487ca	371	#endif
idinor	0:dcf3c92487ca	372
idinor	0:dcf3c92487ca	373	#if 0
idinor	0:dcf3c92487ca	374	CHAPDEBUG(LOG_INFO, ("ChapMS: secret is '%.*s'\n", secret_len, secret));
idinor	0:dcf3c92487ca	375	#endif
idinor	0:dcf3c92487ca	376	BZERO(&response, sizeof(response));
idinor	0:dcf3c92487ca	377
idinor	0:dcf3c92487ca	378	/* Calculate both always */
idinor	0:dcf3c92487ca	379	ChapMS_NT(rchallenge, rchallenge_len, secret, secret_len, &response);
idinor	0:dcf3c92487ca	380
idinor	0:dcf3c92487ca	381	#ifdef MSLANMAN
idinor	0:dcf3c92487ca	382	ChapMS_LANMan(rchallenge, rchallenge_len, secret, secret_len, &response);
idinor	0:dcf3c92487ca	383
idinor	0:dcf3c92487ca	384	/* prefered method is set by option */
idinor	0:dcf3c92487ca	385	response.UseNT = !ms_lanman;
idinor	0:dcf3c92487ca	386	#else
idinor	0:dcf3c92487ca	387	response.UseNT = 1;
idinor	0:dcf3c92487ca	388	#endif
idinor	0:dcf3c92487ca	389
idinor	0:dcf3c92487ca	390	BCOPY(&response, cstate->response, MS_CHAP_RESPONSE_LEN);
idinor	0:dcf3c92487ca	391	cstate->resp_length = MS_CHAP_RESPONSE_LEN;
idinor	0:dcf3c92487ca	392	}
idinor	0:dcf3c92487ca	393
idinor	0:dcf3c92487ca	394	#endif /* MSCHAP_SUPPORT */
idinor	0:dcf3c92487ca	395
idinor	0:dcf3c92487ca	396	#endif /* PPP_SUPPORT */

Repository toolbox

Export to desktop IDE

Repository details

Type:	Library
Created:	20 Jul 2011
Imports:	35
Forks:	0
Commits:	1
Dependents:	1
Dependencies:	0
Followers:	1

lwip/netif/ppp/chpms.c@0:dcf3c92487ca, 2011-07-20 (annotated)

Who changed what in which revision?

Repository toolbox

Repository details

Important Information for this Arm website

Access Warning