Loading...
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 | /* * Copyright (c) 2015 Apple Inc. All rights reserved. * * @APPLE_OSREFERENCE_LICENSE_HEADER_START@ * * This file contains Original Code and/or Modifications of Original Code * as defined in and that are subject to the Apple Public Source License * Version 2.0 (the 'License'). You may not use this file except in * compliance with the License. The rights granted to you under the License * may not be used to create, or enable the creation or redistribution of, * unlawful or unlicensed copies of an Apple operating system, or to * circumvent, violate, or enable the circumvention or violation of, any * terms of an Apple operating system software license agreement. * * Please obtain a copy of the License at * http://www.opensource.apple.com/apsl/ and read it before using this file. * * The Original Code and all software distributed under the License are * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. * Please see the License for the specific language governing rights and * limitations under the License. * * @APPLE_OSREFERENCE_LICENSE_HEADER_END@ */ #include <corecrypto/ccdigest.h> #include <corecrypto/cchmac.h> #include <corecrypto/ccsha1.h> #include <corecrypto/ccdes.h> #include <corecrypto/ccaes.h> #include <corecrypto/ccpad.h> /* * GSS-API things from gssapi.h */ /* * Copyright 1993 by OpenVision Technologies, Inc. * * Permission to use, copy, modify, distribute, and sell this software * and its documentation for any purpose is hereby granted without fee, * provided that the above copyright notice appears in all copies and * that both that copyright notice and this permission notice appear in * supporting documentation, and that the name of OpenVision not be used * in advertising or publicity pertaining to distribution of the software * without specific, written prior permission. OpenVision makes no * representations about the suitability of this software for any * purpose. It is provided "as is" without express or implied warranty. * * OPENVISION DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE, * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO * EVENT SHALL OPENVISION BE LIABLE FOR ANY SPECIAL, INDIRECT OR * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF * USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR * OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR * PERFORMANCE OF THIS SOFTWARE. */ typedef uint32_t OM_uint32; #define GSS_S_COMPLETE 0 /* * Some "helper" definitions to make the status code macros obvious. * From gssapi.h: */ #define GSS_C_CALLING_ERROR_OFFSET 24 #define GSS_C_ROUTINE_ERROR_OFFSET 16 #define GSS_C_SUPPLEMENTARY_OFFSET 0 #define GSS_C_CALLING_ERROR_MASK ((OM_uint32) 0377ul) #define GSS_C_ROUTINE_ERROR_MASK ((OM_uint32) 0377ul) #define GSS_C_SUPPLEMENTARY_MASK ((OM_uint32) 0177777ul) /* * The macros that test status codes for error conditions. Note that the * GSS_ERROR() macro has changed slightly from the V1 GSSAPI so that it now * evaluates its argument only once. */ #define GSS_CALLING_ERROR(x) \ ((x) & (GSS_C_CALLING_ERROR_MASK << GSS_C_CALLING_ERROR_OFFSET)) #define GSS_ROUTINE_ERROR(x) \ ((x) & (GSS_C_ROUTINE_ERROR_MASK << GSS_C_ROUTINE_ERROR_OFFSET)) #define GSS_SUPPLEMENTARY_INFO(x) \ ((x) & (GSS_C_SUPPLEMENTARY_MASK << GSS_C_SUPPLEMENTARY_OFFSET)) #define GSS_ERROR(x) \ ((x) & ((GSS_C_CALLING_ERROR_MASK << GSS_C_CALLING_ERROR_OFFSET) | \ (GSS_C_ROUTINE_ERROR_MASK << GSS_C_ROUTINE_ERROR_OFFSET))) /* * Calling errors: */ #define GSS_S_CALL_INACCESSIBLE_READ \ (((OM_uint32) 1ul) << GSS_C_CALLING_ERROR_OFFSET) #define GSS_S_CALL_INACCESSIBLE_WRITE \ (((OM_uint32) 2ul) << GSS_C_CALLING_ERROR_OFFSET) #define GSS_S_CALL_BAD_STRUCTURE \ (((OM_uint32) 3ul) << GSS_C_CALLING_ERROR_OFFSET) /* * Routine errors: */ #define GSS_S_BAD_MECH (((OM_uint32) 1ul) << GSS_C_ROUTINE_ERROR_OFFSET) #define GSS_S_BAD_NAME (((OM_uint32) 2ul) << GSS_C_ROUTINE_ERROR_OFFSET) #define GSS_S_BAD_NAMETYPE (((OM_uint32) 3ul) << GSS_C_ROUTINE_ERROR_OFFSET) #define GSS_S_BAD_BINDINGS (((OM_uint32) 4ul) << GSS_C_ROUTINE_ERROR_OFFSET) #define GSS_S_BAD_STATUS (((OM_uint32) 5ul) << GSS_C_ROUTINE_ERROR_OFFSET) #define GSS_S_BAD_SIG (((OM_uint32) 6ul) << GSS_C_ROUTINE_ERROR_OFFSET) #define GSS_S_NO_CRED (((OM_uint32) 7ul) << GSS_C_ROUTINE_ERROR_OFFSET) #define GSS_S_NO_CONTEXT (((OM_uint32) 8ul) << GSS_C_ROUTINE_ERROR_OFFSET) #define GSS_S_DEFECTIVE_TOKEN (((OM_uint32) 9ul) << GSS_C_ROUTINE_ERROR_OFFSET) #define GSS_S_DEFECTIVE_CREDENTIAL \ (((OM_uint32) 10ul) << GSS_C_ROUTINE_ERROR_OFFSET) #define GSS_S_CREDENTIALS_EXPIRED \ (((OM_uint32) 11ul) << GSS_C_ROUTINE_ERROR_OFFSET) #define GSS_S_CONTEXT_EXPIRED \ (((OM_uint32) 12ul) << GSS_C_ROUTINE_ERROR_OFFSET) #define GSS_S_FAILURE (((OM_uint32) 13ul) << GSS_C_ROUTINE_ERROR_OFFSET) #define GSS_S_BAD_QOP (((OM_uint32) 14ul) << GSS_C_ROUTINE_ERROR_OFFSET) #define GSS_S_UNAUTHORIZED (((OM_uint32) 15ul) << GSS_C_ROUTINE_ERROR_OFFSET) #define GSS_S_UNAVAILABLE (((OM_uint32) 16ul) << GSS_C_ROUTINE_ERROR_OFFSET) #define GSS_S_DUPLICATE_ELEMENT \ (((OM_uint32) 17ul) << GSS_C_ROUTINE_ERROR_OFFSET) #define GSS_S_NAME_NOT_MN \ (((OM_uint32) 18ul) << GSS_C_ROUTINE_ERROR_OFFSET) /* * Supplementary info bits: */ #define GSS_S_CONTINUE_NEEDED (1 << (GSS_C_SUPPLEMENTARY_OFFSET + 0)) #define GSS_S_DUPLICATE_TOKEN (1 << (GSS_C_SUPPLEMENTARY_OFFSET + 1)) #define GSS_S_OLD_TOKEN (1 << (GSS_C_SUPPLEMENTARY_OFFSET + 2)) #define GSS_S_UNSEQ_TOKEN (1 << (GSS_C_SUPPLEMENTARY_OFFSET + 3)) #define GSS_S_GAP_TOKEN (1 << (GSS_C_SUPPLEMENTARY_OFFSET + 4)) #define GSS_C_QOP_DEFAULT 0 /* end of gssapi.h */ /* * The following data structures are genenrated from lucid.x in the gssd project * and must be kept in sync with that project. This is a more memory efficient * representation of the gss_kerb5_lucid_context_v1_t defined in gssapi_krb5.h */ struct lucid_key { uint32_t etype; struct { uint32_t key_len; uint8_t *key_val; } key; }; typedef struct lucid_key lucid_key; struct key_data_1964 { uint32_t sign_alg; uint32_t seal_alg; }; typedef struct key_data_1964 key_data_1964; struct key_data_4121 { uint32_t acceptor_subkey; }; typedef struct key_data_4121 key_data_4121; struct lucid_protocol { uint32_t proto; union { key_data_1964 data_1964; key_data_4121 data_4121; } lucid_protocol_u; }; typedef struct lucid_protocol lucid_protocol; struct lucid_context { uint32_t vers; uint32_t initiate; uint32_t endtime; uint64_t send_seq; uint64_t recv_seq; lucid_protocol key_data; lucid_key ctx_key; }; typedef struct lucid_context lucid_context; /* end of lucid.x generated data structures */ typedef struct lucid_context *lucid_context_t; /* * Mask for determining the returned structure version. * See example below for usage. */ typedef struct lucid_context_version { uint32_t version; /* Structure version number */ } *lucid_context_version_t; typedef enum etypes { DES3_CBC_SHA1_KD = 16, AES128_CTS_HMAC_SHA1_96 = 17, AES256_CTS_HMAC_SHA1_96 = 18, } etypes; #define KRB5_USAGE_ACCEPTOR_SEAL 22 #define KRB5_USAGE_ACCEPTOR_SIGN 23 #define KRB5_USAGE_INITIATOR_SEAL 24 #define KRB5_USAGE_INITIATOR_SIGN 25 #define KRB5_USAGE_LEN 5 #define GSS_SND 0 #define GSS_RCV 1 #define GSS_C_QOP_REVERSE 0x80000000 /* Pseudo QOP value to use as input to gss_krb5_unwrap to allow Sender to unwrap */ typedef struct krb5_key { void *key_val; size_t key_len; } krb5_key_t; /* * Key schedule is the cbc state for encryption and decryption. * For DES3 we always use the session key from the lucid context, * and in that case Ekey and Ikey will point to the session key. */ struct key_schedule { cccbc_ctx *enc; cccbc_ctx *dec; krb5_key_t ikeys[2]; /* Drived integrity key (same length context key); */ }; /* * Crypto context that supports AES and DES3 etypes * All supported encryption types use hmac with SHA1 * All are CBC encryption types * des3-cbc-sha1 -- 7 * des3-dbc-sha1-kd -- 16 ??? * aes128-cts-hmac-sha1-96 -- 17 * aes256-cts-hmac-sha1-96 -- 18 */ typedef struct crypto_ctx { uint32_t etype; uint32_t flags; size_t mpad; /* Message padding */ lck_mtx_t lock; lucid_context_t gss_ctx; /* Back pointer to lucid context */ void *key; /* Points to session key from lucid context */ const struct ccdigest_info *di; const struct ccmode_cbc *enc_mode; const struct ccmode_cbc *dec_mode; struct key_schedule ks; uint32_t digest_size; uint32_t keylen; krb5_key_t ckeys[2]; /* Derived checksum key. Same as key for DES3 */ } *crypto_ctx_t; #define CRYPTO_KS_ALLOCED 0x00001 #define CRYPTO_CTS_ENABLE 0x00002 #define CRYPTO_MAX_DIGSET_SIZE 20 // 160 bits for DES3_CBC_SHA1_KD typedef struct gss_ctx_id_desc { lucid_context gss_lucid_ctx; struct crypto_ctx gss_cryptor; } *gss_ctx_id_t; typedef struct gss_buffer_desc_struct { size_t length; void *value; } gss_buffer_desc, *gss_buffer_t; uint32_t gss_release_buffer(uint32_t *, /* minor_status */ gss_buffer_t); /* Per message interfaces for kerberos gss mech in the kernel */ typedef uint32_t gss_qop_t; uint32_t gss_krb5_get_mic_mbuf(uint32_t *, /* minor_status */ gss_ctx_id_t, /* context_handle */ gss_qop_t, /* qop_req */ mbuf_t, /* message mbuf */ size_t, /* offest */ size_t, /* length */ gss_buffer_t /* message_token */ ); uint32_t gss_krb5_get_mic(uint32_t *, /* minor_status */ gss_ctx_id_t, /* context_handle */ gss_qop_t, /* qop_req */ gss_buffer_t, /* message buffer */ gss_buffer_t /* message_token */ ); uint32_t gss_krb5_verify_mic_mbuf(uint32_t *, /* minor_status */ gss_ctx_id_t, /* context_handle */ mbuf_t, /* message_buffer */ size_t, /* offset */ size_t, /* length */ gss_buffer_t, /* message_token */ gss_qop_t * /* qop_state */ ); uint32_t gss_krb5_wrap_mbuf(uint32_t *, /* minor_status */ gss_ctx_id_t, /* context_handle */ int, /* conf_req_flag */ gss_qop_t, /* qop_req */ mbuf_t *, /* input/output message_buffer */ size_t, /* offset */ size_t, /* length */ int * /* conf_state */ ); uint32_t gss_krb5_unwrap_mbuf(uint32_t *, /* minor_status */ gss_ctx_id_t, /* context_handle */ mbuf_t *, /* input/output message_buffer */ size_t, /* offset */ size_t, /* length */ int *, /* conf_state */ gss_qop_t * /* qop state */ ); void gss_krb5_destroy_context(gss_ctx_id_t); gss_ctx_id_t gss_krb5_make_context(void *, uint32_t); void gss_krb5_mech_init(void); int corecrypto_available(void); errno_t gss_normalize_mbuf(mbuf_t, size_t, size_t *, mbuf_t *, mbuf_t *, int); mbuf_t gss_join_mbuf(mbuf_t, mbuf_t, mbuf_t); typedef struct hmac_ctx_struct { size_t keylen; uint8_t *key; ccdigest_ctx_t di_ctx; } hmac_ctx, hmac_ctx_t[1]; void hmac_init(const struct ccdigest_info *, hmac_ctx_t, size_t, void *); void hmac_update(const struct ccdigest_info *, hmac_ctx_t, size_t, void *); void hmac_final(const struct ccdigest_info *, hmac_ctx_t, uint8_t *); void printmbuf(const char *, mbuf_t, uint32_t, uint32_t); void printgbuf(const char *, gss_buffer_t); |