diff options
author | Linus Torvalds <torvalds@ppc970.osdl.org> | 2005-04-16 18:20:36 -0400 |
---|---|---|
committer | Linus Torvalds <torvalds@ppc970.osdl.org> | 2005-04-16 18:20:36 -0400 |
commit | 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (patch) | |
tree | 0bba044c4ce775e45a88a51686b5d9f90697ea9d /fs/cifs/smbencrypt.c |
Linux-2.6.12-rc2v2.6.12-rc2
Initial git repository build. I'm not bothering with the full history,
even though we have it. We can create a separate "historical" git
archive of that later if we want to, and in the meantime it's about
3.2GB when imported into git - space that would just make the early
git days unnecessarily complicated, when we don't have a lot of good
infrastructure for it.
Let it rip!
Diffstat (limited to 'fs/cifs/smbencrypt.c')
-rw-r--r-- | fs/cifs/smbencrypt.c | 285 |
1 files changed, 285 insertions, 0 deletions
diff --git a/fs/cifs/smbencrypt.c b/fs/cifs/smbencrypt.c new file mode 100644 index 000000000000..6103bcdfb16d --- /dev/null +++ b/fs/cifs/smbencrypt.c | |||
@@ -0,0 +1,285 @@ | |||
1 | /* | ||
2 | Unix SMB/Netbios implementation. | ||
3 | Version 1.9. | ||
4 | SMB parameters and setup | ||
5 | Copyright (C) Andrew Tridgell 1992-2000 | ||
6 | Copyright (C) Luke Kenneth Casson Leighton 1996-2000 | ||
7 | Modified by Jeremy Allison 1995. | ||
8 | Copyright (C) Andrew Bartlett <abartlet@samba.org> 2002-2003 | ||
9 | Modified by Steve French (sfrench@us.ibm.com) 2002-2003 | ||
10 | |||
11 | This program is free software; you can redistribute it and/or modify | ||
12 | it under the terms of the GNU General Public License as published by | ||
13 | the Free Software Foundation; either version 2 of the License, or | ||
14 | (at your option) any later version. | ||
15 | |||
16 | This program is distributed in the hope that it will be useful, | ||
17 | but WITHOUT ANY WARRANTY; without even the implied warranty of | ||
18 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | ||
19 | GNU General Public License for more details. | ||
20 | |||
21 | You should have received a copy of the GNU General Public License | ||
22 | along with this program; if not, write to the Free Software | ||
23 | Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. | ||
24 | */ | ||
25 | |||
26 | #include <linux/module.h> | ||
27 | #include <linux/fs.h> | ||
28 | #include <linux/string.h> | ||
29 | #include <linux/kernel.h> | ||
30 | #include <linux/random.h> | ||
31 | #include "cifs_unicode.h" | ||
32 | #include "cifspdu.h" | ||
33 | #include "md5.h" | ||
34 | #include "cifs_debug.h" | ||
35 | #include "cifsencrypt.h" | ||
36 | |||
37 | #ifndef FALSE | ||
38 | #define FALSE 0 | ||
39 | #endif | ||
40 | #ifndef TRUE | ||
41 | #define TRUE 1 | ||
42 | #endif | ||
43 | |||
44 | /* following came from the other byteorder.h to avoid include conflicts */ | ||
45 | #define CVAL(buf,pos) (((unsigned char *)(buf))[pos]) | ||
46 | #define SSVALX(buf,pos,val) (CVAL(buf,pos)=(val)&0xFF,CVAL(buf,pos+1)=(val)>>8) | ||
47 | #define SSVAL(buf,pos,val) SSVALX((buf),(pos),((__u16)(val))) | ||
48 | |||
49 | /*The following definitions come from libsmb/smbencrypt.c */ | ||
50 | |||
51 | void SMBencrypt(unsigned char *passwd, unsigned char *c8, unsigned char *p24); | ||
52 | void E_md4hash(const unsigned char *passwd, unsigned char *p16); | ||
53 | void nt_lm_owf_gen(char *pwd, unsigned char nt_p16[16], unsigned char p16[16]); | ||
54 | static void SMBOWFencrypt(unsigned char passwd[16], unsigned char *c8, | ||
55 | unsigned char p24[24]); | ||
56 | void NTLMSSPOWFencrypt(unsigned char passwd[8], | ||
57 | unsigned char *ntlmchalresp, unsigned char p24[24]); | ||
58 | void SMBNTencrypt(unsigned char *passwd, unsigned char *c8, unsigned char *p24); | ||
59 | |||
60 | /* | ||
61 | This implements the X/Open SMB password encryption | ||
62 | It takes a password, a 8 byte "crypt key" and puts 24 bytes of | ||
63 | encrypted password into p24 */ | ||
64 | /* Note that password must be uppercased and null terminated */ | ||
65 | void | ||
66 | SMBencrypt(unsigned char *passwd, unsigned char *c8, unsigned char *p24) | ||
67 | { | ||
68 | unsigned char p14[15], p21[21]; | ||
69 | |||
70 | memset(p21, '\0', 21); | ||
71 | memset(p14, '\0', 14); | ||
72 | strncpy((char *) p14, (char *) passwd, 14); | ||
73 | |||
74 | /* strupper((char *)p14); *//* BB at least uppercase the easy range */ | ||
75 | E_P16(p14, p21); | ||
76 | |||
77 | SMBOWFencrypt(p21, c8, p24); | ||
78 | |||
79 | memset(p14,0,15); | ||
80 | memset(p21,0,21); | ||
81 | } | ||
82 | |||
83 | /* Routines for Windows NT MD4 Hash functions. */ | ||
84 | static int | ||
85 | _my_wcslen(__u16 * str) | ||
86 | { | ||
87 | int len = 0; | ||
88 | while (*str++ != 0) | ||
89 | len++; | ||
90 | return len; | ||
91 | } | ||
92 | |||
93 | /* | ||
94 | * Convert a string into an NT UNICODE string. | ||
95 | * Note that regardless of processor type | ||
96 | * this must be in intel (little-endian) | ||
97 | * format. | ||
98 | */ | ||
99 | |||
100 | static int | ||
101 | _my_mbstowcs(__u16 * dst, const unsigned char *src, int len) | ||
102 | { /* not a very good conversion routine - change/fix */ | ||
103 | int i; | ||
104 | __u16 val; | ||
105 | |||
106 | for (i = 0; i < len; i++) { | ||
107 | val = *src; | ||
108 | SSVAL(dst, 0, val); | ||
109 | dst++; | ||
110 | src++; | ||
111 | if (val == 0) | ||
112 | break; | ||
113 | } | ||
114 | return i; | ||
115 | } | ||
116 | |||
117 | /* | ||
118 | * Creates the MD4 Hash of the users password in NT UNICODE. | ||
119 | */ | ||
120 | |||
121 | void | ||
122 | E_md4hash(const unsigned char *passwd, unsigned char *p16) | ||
123 | { | ||
124 | int len; | ||
125 | __u16 wpwd[129]; | ||
126 | |||
127 | /* Password cannot be longer than 128 characters */ | ||
128 | if(passwd) { | ||
129 | len = strlen((char *) passwd); | ||
130 | if (len > 128) { | ||
131 | len = 128; | ||
132 | } | ||
133 | /* Password must be converted to NT unicode */ | ||
134 | _my_mbstowcs(wpwd, passwd, len); | ||
135 | } else | ||
136 | len = 0; | ||
137 | |||
138 | wpwd[len] = 0; /* Ensure string is null terminated */ | ||
139 | /* Calculate length in bytes */ | ||
140 | len = _my_wcslen(wpwd) * sizeof (__u16); | ||
141 | |||
142 | mdfour(p16, (unsigned char *) wpwd, len); | ||
143 | memset(wpwd,0,129 * 2); | ||
144 | } | ||
145 | |||
146 | /* Does both the NT and LM owfs of a user's password */ | ||
147 | void | ||
148 | nt_lm_owf_gen(char *pwd, unsigned char nt_p16[16], unsigned char p16[16]) | ||
149 | { | ||
150 | char passwd[514]; | ||
151 | |||
152 | memset(passwd, '\0', 514); | ||
153 | if (strlen(pwd) < 513) | ||
154 | strcpy(passwd, pwd); | ||
155 | else | ||
156 | memcpy(passwd, pwd, 512); | ||
157 | /* Calculate the MD4 hash (NT compatible) of the password */ | ||
158 | memset(nt_p16, '\0', 16); | ||
159 | E_md4hash(passwd, nt_p16); | ||
160 | |||
161 | /* Mangle the passwords into Lanman format */ | ||
162 | passwd[14] = '\0'; | ||
163 | /* strupper(passwd); */ | ||
164 | |||
165 | /* Calculate the SMB (lanman) hash functions of the password */ | ||
166 | |||
167 | memset(p16, '\0', 16); | ||
168 | E_P16((unsigned char *) passwd, (unsigned char *) p16); | ||
169 | |||
170 | /* clear out local copy of user's password (just being paranoid). */ | ||
171 | memset(passwd, '\0', sizeof (passwd)); | ||
172 | } | ||
173 | |||
174 | /* Does the NTLMv2 owfs of a user's password */ | ||
175 | #if 0 /* function not needed yet - but will be soon */ | ||
176 | static void | ||
177 | ntv2_owf_gen(const unsigned char owf[16], const char *user_n, | ||
178 | const char *domain_n, unsigned char kr_buf[16], | ||
179 | const struct nls_table *nls_codepage) | ||
180 | { | ||
181 | wchar_t * user_u; | ||
182 | wchar_t * dom_u; | ||
183 | int user_l, domain_l; | ||
184 | struct HMACMD5Context ctx; | ||
185 | |||
186 | /* might as well do one alloc to hold both (user_u and dom_u) */ | ||
187 | user_u = kmalloc(2048 * sizeof(wchar_t),GFP_KERNEL); | ||
188 | if(user_u == NULL) | ||
189 | return; | ||
190 | dom_u = user_u + 1024; | ||
191 | |||
192 | /* push_ucs2(NULL, user_u, user_n, (user_l+1)*2, STR_UNICODE|STR_NOALIGN|STR_TERMINATE|STR_UPPER); | ||
193 | push_ucs2(NULL, dom_u, domain_n, (domain_l+1)*2, STR_UNICODE|STR_NOALIGN|STR_TERMINATE|STR_UPPER); */ | ||
194 | |||
195 | /* BB user and domain may need to be uppercased */ | ||
196 | user_l = cifs_strtoUCS(user_u, user_n, 511, nls_codepage); | ||
197 | domain_l = cifs_strtoUCS(dom_u, domain_n, 511, nls_codepage); | ||
198 | |||
199 | user_l++; /* trailing null */ | ||
200 | domain_l++; | ||
201 | |||
202 | hmac_md5_init_limK_to_64(owf, 16, &ctx); | ||
203 | hmac_md5_update((const unsigned char *) user_u, user_l * 2, &ctx); | ||
204 | hmac_md5_update((const unsigned char *) dom_u, domain_l * 2, &ctx); | ||
205 | hmac_md5_final(kr_buf, &ctx); | ||
206 | |||
207 | kfree(user_u); | ||
208 | } | ||
209 | #endif | ||
210 | |||
211 | /* Does the des encryption from the NT or LM MD4 hash. */ | ||
212 | static void | ||
213 | SMBOWFencrypt(unsigned char passwd[16], unsigned char *c8, | ||
214 | unsigned char p24[24]) | ||
215 | { | ||
216 | unsigned char p21[21]; | ||
217 | |||
218 | memset(p21, '\0', 21); | ||
219 | |||
220 | memcpy(p21, passwd, 16); | ||
221 | E_P24(p21, c8, p24); | ||
222 | } | ||
223 | |||
224 | /* Does the des encryption from the FIRST 8 BYTES of the NT or LM MD4 hash. */ | ||
225 | void | ||
226 | NTLMSSPOWFencrypt(unsigned char passwd[8], | ||
227 | unsigned char *ntlmchalresp, unsigned char p24[24]) | ||
228 | { | ||
229 | unsigned char p21[21]; | ||
230 | |||
231 | memset(p21, '\0', 21); | ||
232 | memcpy(p21, passwd, 8); | ||
233 | memset(p21 + 8, 0xbd, 8); | ||
234 | |||
235 | E_P24(p21, ntlmchalresp, p24); | ||
236 | } | ||
237 | |||
238 | /* Does the NT MD4 hash then des encryption. */ | ||
239 | |||
240 | void | ||
241 | SMBNTencrypt(unsigned char *passwd, unsigned char *c8, unsigned char *p24) | ||
242 | { | ||
243 | unsigned char p21[21]; | ||
244 | |||
245 | memset(p21, '\0', 21); | ||
246 | |||
247 | E_md4hash(passwd, p21); | ||
248 | SMBOWFencrypt(p21, c8, p24); | ||
249 | } | ||
250 | |||
251 | |||
252 | /* Does the md5 encryption from the NT hash for NTLMv2. */ | ||
253 | /* These routines will be needed later */ | ||
254 | #if 0 | ||
255 | static void | ||
256 | SMBOWFencrypt_ntv2(const unsigned char kr[16], | ||
257 | const struct data_blob * srv_chal, | ||
258 | const struct data_blob * cli_chal, unsigned char resp_buf[16]) | ||
259 | { | ||
260 | struct HMACMD5Context ctx; | ||
261 | |||
262 | hmac_md5_init_limK_to_64(kr, 16, &ctx); | ||
263 | hmac_md5_update(srv_chal->data, srv_chal->length, &ctx); | ||
264 | hmac_md5_update(cli_chal->data, cli_chal->length, &ctx); | ||
265 | hmac_md5_final(resp_buf, &ctx); | ||
266 | } | ||
267 | |||
268 | static void | ||
269 | SMBsesskeygen_ntv2(const unsigned char kr[16], | ||
270 | const unsigned char *nt_resp, __u8 sess_key[16]) | ||
271 | { | ||
272 | struct HMACMD5Context ctx; | ||
273 | |||
274 | hmac_md5_init_limK_to_64(kr, 16, &ctx); | ||
275 | hmac_md5_update(nt_resp, 16, &ctx); | ||
276 | hmac_md5_final((unsigned char *) sess_key, &ctx); | ||
277 | } | ||
278 | |||
279 | static void | ||
280 | SMBsesskeygen_ntv1(const unsigned char kr[16], | ||
281 | const unsigned char *nt_resp, __u8 sess_key[16]) | ||
282 | { | ||
283 | mdfour((unsigned char *) sess_key, (unsigned char *) kr, 16); | ||
284 | } | ||
285 | #endif | ||