dist/wpa/src/eap_common/eap_fast_common.h

   1 /*
   2  * EAP-FAST definitions (RFC 4851)
   3  * Copyright (c) 2004-2008, Jouni Malinen <j@w1.fi>
   4  *
   5  * This program is free software; you can redistribute it and/or modify
   6  * it under the terms of the GNU General Public License version 2 as
   7  * published by the Free Software Foundation.
   8  *
   9  * Alternatively, this software may be distributed under the terms of BSD
  10  * license.
  11  *
  12  * See README and COPYING for more details.
  13  */
  14
  15 #ifndef EAP_FAST_H
  16 #define EAP_FAST_H
  17
  18 #define EAP_FAST_VERSION 1
  19 #define EAP_FAST_KEY_LEN 64
  20 #define EAP_FAST_SIMCK_LEN 40
  21 #define EAP_FAST_SKS_LEN 40
  22 #define EAP_FAST_CMK_LEN 20
  23
  24 #define TLS_EXT_PAC_OPAQUE 35
  25
  26 /*
  27  * draft-cam-winget-eap-fast-provisioning-04.txt:
  28  * Section 4.2.1 - Formats for PAC TLV Attributes / Type Field
  29  * Note: bit 0x8000 (Mandatory) and bit 0x4000 (Reserved) are also defined
  30  * in the general PAC TLV format (Section 4.2).
  31  */
  32 #define PAC_TYPE_PAC_KEY 1
  33 #define PAC_TYPE_PAC_OPAQUE 2
  34 #define PAC_TYPE_CRED_LIFETIME 3
  35 #define PAC_TYPE_A_ID 4
  36 #define PAC_TYPE_I_ID 5
  37 /*
  38  * 6 was previous assigned for SERVER_PROTECTED_DATA, but
  39  * draft-cam-winget-eap-fast-provisioning-02.txt changed this to Reserved.
  40  */
  41 #define PAC_TYPE_A_ID_INFO 7
  42 #define PAC_TYPE_PAC_ACKNOWLEDGEMENT 8
  43 #define PAC_TYPE_PAC_INFO 9
  44 #define PAC_TYPE_PAC_TYPE 10
  45
  46 #ifdef _MSC_VER
  47 #pragma pack(push, 1)
  48 #endif /* _MSC_VER */
  49
  50 struct pac_tlv_hdr {
  51         be16 type;
  52         be16 len;
  53 } STRUCT_PACKED;
  54
  55 #ifdef _MSC_VER
  56 #pragma pack(pop)
  57 #endif /* _MSC_VER */
  58
  59
  60 #define EAP_FAST_PAC_KEY_LEN 32
  61
  62 /* draft-cam-winget-eap-fast-provisioning-04.txt: 4.2.6 PAC-Type TLV
  63  * Note: Machine Authentication PAC and User Authorization PAC were removed in
  64  * draft-cam-winget-eap-fast-provisioning-03.txt
  65  */
  66 #define PAC_TYPE_TUNNEL_PAC 1
  67 /* Application Specific Short Lived PACs (only in volatile storage) */
  68 /* User Authorization PAC */
  69 #define PAC_TYPE_USER_AUTHORIZATION 3
  70 /* Application Specific Long Lived PACs */
  71 /* Machine Authentication PAC */
  72 #define PAC_TYPE_MACHINE_AUTHENTICATION 2
  73
  74
  75 /*
  76  * draft-cam-winget-eap-fast-provisioning-04.txt:
  77  * Section 3.4 - Key Derivations Used in the EAP-FAST Provisioning Exchange
  78  */
  79 struct eap_fast_key_block_provisioning {
  80         /* Extra key material after TLS key_block */
  81         u8 session_key_seed[EAP_FAST_SKS_LEN];
  82         u8 server_challenge[16]; /* MSCHAPv2 ServerChallenge */
  83         u8 client_challenge[16]; /* MSCHAPv2 ClientChallenge */
  84 };
  85
  86
  87 struct wpabuf;
  88 struct tls_connection;
  89
  90 struct eap_fast_tlv_parse {
  91         u8 *eap_payload_tlv;
  92         size_t eap_payload_tlv_len;
  93         struct eap_tlv_crypto_binding_tlv *crypto_binding;
  94         size_t crypto_binding_len;
  95         int iresult;
  96         int result;
  97         int request_action;
  98         u8 *pac;
  99         size_t pac_len;
 100 };
 101
 102 void eap_fast_put_tlv_hdr(struct wpabuf *buf, u16 type, u16 len);
 103 void eap_fast_put_tlv(struct wpabuf *buf, u16 type, const void *data,
 104                       u16 len);
 105 void eap_fast_put_tlv_buf(struct wpabuf *buf, u16 type,
 106                           const struct wpabuf *data);
 107 struct wpabuf * eap_fast_tlv_eap_payload(struct wpabuf *buf);
 108 void eap_fast_derive_master_secret(const u8 *pac_key, const u8 *server_random,
 109                                    const u8 *client_random, u8 *master_secret);
 110 u8 * eap_fast_derive_key(void *ssl_ctx, struct tls_connection *conn,
 111                          const char *label, size_t len);
 112 void eap_fast_derive_eap_msk(const u8 *simck, u8 *msk);
 113 void eap_fast_derive_eap_emsk(const u8 *simck, u8 *emsk);
 114 int eap_fast_parse_tlv(struct eap_fast_tlv_parse *tlv,
 115                        int tlv_type, u8 *pos, int len);
 116
 117 #endif /* EAP_FAST_H */