2 * Copyright (c) 2010, JANET(UK)
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
9 * 1. Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
16 * 3. Neither the name of JANET(UK) nor the names of its contributors
17 * may be used to endorse or promote products derived from this software
18 * without specific prior written permission.
20 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
21 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 #include "gssapiP_eap.h"
35 static GSSEAP_THREAD_ONCE krbContextKeyOnce = GSSEAP_ONCE_INITIALIZER;
36 static GSSEAP_THREAD_KEY krbContextKey;
39 destroyKrbContext(void *arg)
41 krb5_context context = (krb5_context)arg;
44 krb5_free_context(context);
48 createKrbContextKey(void)
50 GSSEAP_KEY_CREATE(&krbContextKey, destroyKrbContext);
54 gssEapKerberosInit(OM_uint32 *minor, krb5_context *context)
58 GSSEAP_ONCE(&krbContextKeyOnce, createKrbContextKey);
60 *context = GSSEAP_GETSPECIFIC(krbContextKey);
61 if (*context == NULL) {
62 *minor = krb5_init_context(context);
64 if (GSSEAP_SETSPECIFIC(krbContextKey, *context) != 0) {
66 krb5_free_context(*context);
72 return *minor == 0 ? GSS_S_COMPLETE : GSS_S_FAILURE;
76 * Derive a key for RFC 4121 use by using the following
77 * derivation function:
79 * random-to-key(prf(random-to-key([e]msk), "rfc4121-gss-eap"))
81 * where random-to-key and prf are defined in RFC 3961.
84 gssEapDeriveRFC3961Key(OM_uint32 *minor,
85 const unsigned char *key,
94 size_t keybytes, keylength, prflength;
96 memset(pKey, 0, sizeof(*pKey));
98 GSSEAP_KRB_INIT(&context);
102 KRB_KEYTYPE(&kd) = enctype;
107 code = krb5_c_keylengths(context, enctype, &keybytes, &keylength);
111 data.length = keyLength;
112 data.data = (char *)key;
114 kd.contents = GSSEAP_MALLOC(keylength);
115 if (kd.contents == NULL) {
119 kd.length = keylength;
121 /* Convert MSK into a Kerberos key */
122 code = krb5_c_random_to_key(context, enctype, &data, &kd);
126 data.length = sizeof("rfc4121-gss-eap") - 1;
127 data.data = "rfc4121-gss-eap";
129 /* Plug derivation constant and key into PRF */
130 code = krb5_c_prf_length(context, enctype, &prflength);
134 prf.length = prflength;
135 prf.data = GSSEAP_MALLOC(prflength);
136 if (data.data == NULL) {
141 code = krb5_c_prf(context, &kd, &data, &prf);
145 /* Finally, convert PRF output into a new key which we will return */
146 code = krb5_c_random_to_key(context, enctype, &prf, &kd);
154 if (kd.contents != NULL) {
155 memset(kd.contents, 0, kd.length);
156 GSSEAP_FREE(kd.contents);
158 if (prf.data != NULL) {
159 memset(prf.data, 0, prf.length);
160 GSSEAP_FREE(prf.data);
164 return (code == 0) ? GSS_S_COMPLETE : GSS_S_FAILURE;