mirror of
https://github.com/vanhoefm/fragattacks.git
synced 2024-11-27 09:48:43 -05:00
61e181db86
Since the EAP-SIM/AKA identities are ASCII strings, there is no need to use more complex way for storing and passing them. In addition, be more strict about enforcing username (i.e., no realm part) to be used in the EAP-SIM DB API. Similarly, require specific username type instead of any of the types to be used as the key in the pseudonym and reauth operations. This allows simpler lookup operations to be used. Signed-hostap: Jouni Malinen <j@w1.fi>
87 lines
2.5 KiB
C
87 lines
2.5 KiB
C
/*
|
|
* hostapd / EAP-SIM database/authenticator gateway
|
|
* Copyright (c) 2005-2008, 2012, Jouni Malinen <j@w1.fi>
|
|
*
|
|
* This software may be distributed under the terms of the BSD license.
|
|
* See README for more details.
|
|
*/
|
|
|
|
#ifndef EAP_SIM_DB_H
|
|
#define EAP_SIM_DB_H
|
|
|
|
#include "eap_common/eap_sim_common.h"
|
|
|
|
/* Identity prefixes */
|
|
#define EAP_SIM_PERMANENT_PREFIX '1'
|
|
#define EAP_SIM_PSEUDONYM_PREFIX '3'
|
|
#define EAP_SIM_REAUTH_ID_PREFIX '5'
|
|
#define EAP_AKA_PERMANENT_PREFIX '0'
|
|
#define EAP_AKA_PSEUDONYM_PREFIX '2'
|
|
#define EAP_AKA_REAUTH_ID_PREFIX '4'
|
|
#define EAP_AKA_PRIME_PERMANENT_PREFIX '6'
|
|
#define EAP_AKA_PRIME_PSEUDONYM_PREFIX '7'
|
|
#define EAP_AKA_PRIME_REAUTH_ID_PREFIX '8'
|
|
|
|
enum eap_sim_db_method {
|
|
EAP_SIM_DB_SIM,
|
|
EAP_SIM_DB_AKA,
|
|
EAP_SIM_DB_AKA_PRIME
|
|
};
|
|
|
|
void * eap_sim_db_init(const char *config,
|
|
void (*get_complete_cb)(void *ctx, void *session_ctx),
|
|
void *ctx);
|
|
|
|
void eap_sim_db_deinit(void *priv);
|
|
|
|
int eap_sim_db_get_gsm_triplets(void *priv, const char *username, int max_chal,
|
|
u8 *_rand, u8 *kc, u8 *sres,
|
|
void *cb_session_ctx);
|
|
|
|
#define EAP_SIM_DB_FAILURE -1
|
|
#define EAP_SIM_DB_PENDING -2
|
|
|
|
char * eap_sim_db_get_next_pseudonym(void *priv,
|
|
enum eap_sim_db_method method);
|
|
|
|
char * eap_sim_db_get_next_reauth_id(void *priv,
|
|
enum eap_sim_db_method method);
|
|
|
|
int eap_sim_db_add_pseudonym(void *priv, const char *permanent,
|
|
char *pseudonym);
|
|
|
|
int eap_sim_db_add_reauth(void *priv, const char *permanent, char *reauth_id,
|
|
u16 counter, const u8 *mk);
|
|
int eap_sim_db_add_reauth_prime(void *priv, const char *permanent,
|
|
char *reauth_id, u16 counter, const u8 *k_encr,
|
|
const u8 *k_aut, const u8 *k_re);
|
|
|
|
const char * eap_sim_db_get_permanent(void *priv, const char *pseudonym);
|
|
|
|
struct eap_sim_reauth {
|
|
struct eap_sim_reauth *next;
|
|
char *permanent; /* Permanent username */
|
|
char *reauth_id; /* Fast re-authentication username */
|
|
u16 counter;
|
|
u8 mk[EAP_SIM_MK_LEN];
|
|
u8 k_encr[EAP_SIM_K_ENCR_LEN];
|
|
u8 k_aut[EAP_AKA_PRIME_K_AUT_LEN];
|
|
u8 k_re[EAP_AKA_PRIME_K_RE_LEN];
|
|
};
|
|
|
|
struct eap_sim_reauth *
|
|
eap_sim_db_get_reauth_entry(void *priv, const char *reauth_id);
|
|
|
|
void eap_sim_db_remove_reauth(void *priv, struct eap_sim_reauth *reauth);
|
|
|
|
int eap_sim_db_get_aka_auth(void *priv, const char *username, u8 *_rand,
|
|
u8 *autn, u8 *ik, u8 *ck, u8 *res, size_t *res_len,
|
|
void *cb_session_ctx);
|
|
|
|
int eap_sim_db_resynchronize(void *priv, const char *username, const u8 *auts,
|
|
const u8 *_rand);
|
|
|
|
char * sim_get_username(const u8 *identity, size_t identity_len);
|
|
|
|
#endif /* EAP_SIM_DB_H */
|