crypto/external/bsd/heimdal/dist/lib/krb5/salt-aes.c

   1 /*      $NetBSD: salt-aes.c,v 1.1.1.1 2011/04/13 18:15:37 elric Exp $   */
   2
   3 /*
   4  * Copyright (c) 1997 - 2008 Kungliga Tekniska Högskolan
   5  * (Royal Institute of Technology, Stockholm, Sweden).
   6  * All rights reserved.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted provided that the following conditions
  10  * are met:
  11  *
  12  * 1. Redistributions of source code must retain the above copyright
  13  *    notice, this list of conditions and the following disclaimer.
  14  *
  15  * 2. Redistributions in binary form must reproduce the above copyright
  16  *    notice, this list of conditions and the following disclaimer in the
  17  *    documentation and/or other materials provided with the distribution.
  18  *
  19  * 3. Neither the name of the Institute nor the names of its contributors
  20  *    may be used to endorse or promote products derived from this software
  21  *    without specific prior written permission.
  22  *
  23  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
  24  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  25  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  26  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
  27  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  28  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  29  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  30  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  31  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  32  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  33  * SUCH DAMAGE.
  34  */
  35
  36 #include "krb5_locl.h"
  37
  38 int _krb5_AES_string_to_default_iterator = 4096;
  39
  40 static krb5_error_code
  41 AES_string_to_key(krb5_context context,
  42                   krb5_enctype enctype,
  43                   krb5_data password,
  44                   krb5_salt salt,
  45                   krb5_data opaque,
  46                   krb5_keyblock *key)
  47 {
  48     krb5_error_code ret;
  49     uint32_t iter;
  50     struct _krb5_encryption_type *et;
  51     struct _krb5_key_data kd;
  52
  53     if (opaque.length == 0)
  54         iter = _krb5_AES_string_to_default_iterator;
  55     else if (opaque.length == 4) {
  56         unsigned long v;
  57         _krb5_get_int(opaque.data, &v, 4);
  58         iter = ((uint32_t)v);
  59     } else
  60         return KRB5_PROG_KEYTYPE_NOSUPP; /* XXX */
  61
  62     et = _krb5_find_enctype(enctype);
  63     if (et == NULL)
  64         return KRB5_PROG_KEYTYPE_NOSUPP;
  65
  66     kd.schedule = NULL;
  67     ALLOC(kd.key, 1);
  68     if(kd.key == NULL) {
  69         krb5_set_error_message (context, ENOMEM, N_("malloc: out of memory", ""));
  70         return ENOMEM;
  71     }
  72     kd.key->keytype = enctype;
  73     ret = krb5_data_alloc(&kd.key->keyvalue, et->keytype->size);
  74     if (ret) {
  75         krb5_set_error_message (context, ret, N_("malloc: out of memory", ""));
  76         return ret;
  77     }
  78
  79     ret = PKCS5_PBKDF2_HMAC_SHA1(password.data, password.length,
  80                                  salt.saltvalue.data, salt.saltvalue.length,
  81                                  iter,
  82                                  et->keytype->size, kd.key->keyvalue.data);
  83     if (ret != 1) {
  84         _krb5_free_key_data(context, &kd, et);
  85         krb5_set_error_message(context, KRB5_PROG_KEYTYPE_NOSUPP,
  86                                "Error calculating s2k");
  87         return KRB5_PROG_KEYTYPE_NOSUPP;
  88     }
  89
  90     ret = _krb5_derive_key(context, et, &kd, "kerberos", strlen("kerberos"));
  91     if (ret == 0)
  92         ret = krb5_copy_keyblock_contents(context, kd.key, key);
  93     _krb5_free_key_data(context, &kd, et);
  94
  95     return ret;
  96 }
  97
  98 struct salt_type _krb5_AES_salt[] = {
  99     {
 100         KRB5_PW_SALT,
 101         "pw-salt",
 102         AES_string_to_key
 103     },
 104     { 0 }
 105 };