1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
|
/*
* eap_fast.h
*
* Version: $Id$
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
*
* Copyright 2003 Alan DeKok <aland@freeradius.org>
* Copyright 2006 The FreeRADIUS server project
*/
#ifndef _EAP_FAST_H
#define _EAP_FAST_H
RCSIDH(eap_fast_h, "$Id$")
#include "eap_tls.h"
#define EAP_FAST_VERSION 1
#define EAP_FAST_KEY_LEN 64
#define EAP_EMSK_LEN 64
#define EAP_FAST_SKS_LEN 40
#define EAP_FAST_SIMCK_LEN 40
#define EAP_FAST_CMK_LEN 20
#define EAP_FAST_TLV_MANDATORY 0x8000
#define EAP_FAST_TLV_TYPE 0x3fff
#define EAP_FAST_FATAL_ERROR 2000
#define EAP_FAST_ERR_TUNNEL_COMPROMISED 2001
#define EAP_FAST_ERR_UNEXPECTED_TLV 2002
#define EAP_FAST_TLV_RESULT_SUCCESS 1
#define EAP_FAST_TLV_RESULT_FAILURE 2
typedef enum eap_fast_stage_t {
TLS_SESSION_HANDSHAKE = 0,
AUTHENTICATION,
CRYPTOBIND_CHECK,
PROVISIONING,
COMPLETE
} eap_fast_stage_t;
typedef enum eap_fast_auth_type {
EAP_FAST_UNKNOWN = 0,
EAP_FAST_PROVISIONING_ANON,
EAP_FAST_PROVISIONING_AUTH,
EAP_FAST_NORMAL_AUTH
} eap_fast_auth_type_t;
typedef enum eap_fast_pac_info_attr_type_t {
PAC_INFO_PAC_KEY = 1, // 1
PAC_INFO_PAC_OPAQUE, // 2
PAC_INFO_PAC_LIFETIME, // 3
PAC_INFO_A_ID, // 4
PAC_INFO_I_ID, // 5
PAC_INFO_PAC_RESERVED6, // 6
PAC_INFO_A_ID_INFO, // 7
PAC_INFO_PAC_ACK, // 8
PAC_INFO_PAC_INFO, // 9
PAC_INFO_PAC_TYPE, // 10
PAC_INFO_MAX
} eap_fast_pac_info_attr_type_t;
typedef enum eap_fast_pac_type_t {
PAC_TYPE_TUNNEL = 1, // 1
PAC_TYPE_MACHINE_AUTH, // 2
PAC_TYPE_USER_AUTHZ, // 3
PAC_TYPE_MAX
} eap_fast_pac_type_t;
#define PAC_KEY_LENGTH 32
#define PAC_A_ID_LENGTH 16
#define PAC_I_ID_LENGTH 16
#define PAC_A_ID_INFO_LENGTH 32
typedef struct eap_fast_pac_attr_hdr_t {
uint16_t type;
uint16_t length;
} CC_HINT(__packed__) eap_fast_pac_attr_hdr_t;
typedef struct eap_fast_pac_attr_lifetime_t {
eap_fast_pac_attr_hdr_t hdr;
uint32_t data; // secs since epoch
} CC_HINT(__packed__) eap_fast_pac_attr_lifetime_t;
typedef struct eap_fast_pac_attr_a_id_t {
eap_fast_pac_attr_hdr_t hdr;
uint8_t data[PAC_A_ID_LENGTH];
} CC_HINT(__packed__) eap_fast_pac_attr_a_id_t;
typedef struct eap_fast_pac_attr_i_id_t {
eap_fast_pac_attr_hdr_t hdr;
uint8_t data[PAC_I_ID_LENGTH];
} CC_HINT(__packed__) eap_fast_pac_attr_i_id_t;
typedef struct eap_fast_pac_attr_a_id_info_t {
eap_fast_pac_attr_hdr_t hdr;
uint8_t data[PAC_A_ID_INFO_LENGTH];
} CC_HINT(__packed__) eap_fast_pac_attr_a_id_info_t;
typedef struct eap_fast_pac_attr_pac_type_t {
eap_fast_pac_attr_hdr_t hdr;
uint16_t data;
} CC_HINT(__packed__) eap_fast_pac_attr_pac_type_t;
typedef struct eap_fast_pac_attr_pac_key_t {
eap_fast_pac_attr_hdr_t hdr;
uint8_t data[PAC_KEY_LENGTH];
} CC_HINT(__packed__) eap_fast_pac_attr_pac_key_t;
typedef struct eap_fast_attr_pac_opaque_plaintext_t {
eap_fast_pac_attr_pac_type_t type;
eap_fast_pac_attr_lifetime_t lifetime;
eap_fast_pac_attr_pac_key_t key;
} CC_HINT(__packed__) eap_fast_attr_pac_opaque_plaintext_t;
typedef struct eap_fast_attr_pac_opaque_t {
eap_fast_pac_attr_hdr_t hdr;
unsigned char aad[PAC_A_ID_LENGTH];
unsigned char iv[EVP_MAX_IV_LENGTH];
unsigned char tag[EVP_GCM_TLS_TAG_LEN];
uint8_t data[sizeof(eap_fast_attr_pac_opaque_plaintext_t) * 2]; // space for EVP
} CC_HINT(__packed__) eap_fast_attr_pac_opaque_t;
typedef struct eap_fast_attr_pac_info_t {
eap_fast_pac_attr_hdr_t hdr;
eap_fast_pac_attr_lifetime_t lifetime;
eap_fast_pac_attr_a_id_t a_id;
eap_fast_pac_attr_a_id_info_t a_id_info;
eap_fast_pac_attr_pac_type_t type;
} CC_HINT(__packed__) eap_fast_attr_pac_info_t;
typedef struct eap_fast_pac_t {
eap_fast_pac_attr_pac_key_t key;
eap_fast_attr_pac_info_t info;
eap_fast_attr_pac_opaque_t opaque; // has to be last!
} CC_HINT(__packed__) eap_fast_pac_t;
/* RFC 4851, Section 4.2.8 - Crypto-Binding TLV */
typedef struct eap_tlv_crypto_binding_tlv_t {
uint16_t tlv_type;
uint16_t length;
uint8_t reserved;
uint8_t version;
uint8_t received_version;
uint8_t subtype;
uint8_t nonce[32];
uint8_t compound_mac[20];
} CC_HINT(__packed__) eap_tlv_crypto_binding_tlv_t;
typedef enum eap_fast_tlv_type_t {
EAP_FAST_TLV_RESERVED_0 = 0, // 0
EAP_FAST_TLV_RESERVED_1, // 1
EAP_FAST_TLV_RESERVED_2, // 2
EAP_FAST_TLV_RESULT, // 3
EAP_FAST_TLV_NAK, // 4
EAP_FAST_TLV_ERROR, // 5
EAP_FAST_TLV_RESERVED6, // 6
EAP_FAST_TLV_VENDOR_SPECIFIC, // 7
EAP_FAST_TLV_RESERVED8, // 8
EAP_FAST_TLV_EAP_PAYLOAD, // 9
EAP_FAST_TLV_INTERMED_RESULT, // 10
EAP_FAST_TLV_PAC, // 11
EAP_FAST_TLV_CRYPTO_BINDING, // 12
EAP_FAST_TLV_RESERVED_13, // 13
EAP_FAST_TLV_RESERVED_14, // 14
EAP_FAST_TLV_RESERVED_15, // 15
EAP_FAST_TLV_RESERVED_16, // 16
EAP_FAST_TLV_RESERVED_17, // 17
EAP_FAST_TLV_TRUSTED_ROOT, // 18
EAP_FAST_TLV_REQ_ACTION, // 19
EAP_FAST_TLV_PKCS, // 20
EAP_FAST_TLV_MAX
} eap_fast_tlv_type_t;
typedef enum eap_fast_tlv_crypto_binding_tlv_subtype_t {
EAP_FAST_TLV_CRYPTO_BINDING_SUBTYPE_REQUEST = 0, // 0
EAP_FAST_TLV_CRYPTO_BINDING_SUBTYPE_RESPONSE // 1
} eap_fast_tlv_crypto_binding_tlv_subtype_t;
/* RFC 5422: Section 3.3 - Key Derivations Used in the EAP-FAST Provisioning Exchange */
typedef struct eap_fast_keyblock_t {
uint8_t session_key_seed[EAP_FAST_SKS_LEN];
uint8_t server_challenge[CHAP_VALUE_LENGTH];
uint8_t client_challenge[CHAP_VALUE_LENGTH];
} CC_HINT(__packed__) eap_fast_keyblock_t;
typedef struct eap_fast_tunnel_t {
VALUE_PAIR *username;
VALUE_PAIR *state;
VALUE_PAIR *accept_vps;
bool copy_request_to_tunnel;
bool use_tunneled_reply;
bool authenticated;
int mode;
eap_fast_stage_t stage;
eap_fast_keyblock_t *keyblock;
uint8_t *simck;
uint8_t *cmk;
int imckc;
struct {
uint8_t mppe_send[CHAP_VALUE_LENGTH];
uint8_t mppe_recv[CHAP_VALUE_LENGTH];
} CC_HINT(__packed__) isk;
uint8_t *msk;
uint8_t *emsk;
int default_method;
uint32_t pac_lifetime;
char const *authority_identity;
uint8_t const *a_id;
uint8_t const *pac_opaque_key;
struct {
uint8_t *key;
eap_fast_pac_type_t type;
uint32_t expires;
bool expired;
bool send;
} pac;
bool result_final;
#ifdef WITH_PROXY
bool proxy_tunneled_request_as_eap; //!< Proxy tunneled session as EAP, or as de-capsulated
//!< protocol.
#endif
char const *virtual_server;
} eap_fast_tunnel_t;
/*
* Process the FAST portion of an EAP-FAST request.
*/
void eap_fast_tlv_append(tls_session_t *tls_session, int tlv, bool mandatory,
int length, const void *data) CC_HINT(nonnull);
PW_CODE eap_fast_process(eap_handler_t *eap_session, tls_session_t *tls_session) CC_HINT(nonnull);
/*
* A bunch of EAP-FAST helper functions.
*/
VALUE_PAIR *eap_fast_fast2vp(REQUEST *request, UNUSED SSL *ssl, uint8_t const *data,
size_t data_len, DICT_ATTR const *fast_da, vp_cursor_t *out);
#endif /* _EAP_FAST_H */
|
