1 /* $NetBSD: salt-aes-sha1.c,v 1.2 2017/01/28 21:31:49 christos Exp $ */
2
3 /*
4 * Copyright (c) 1997 - 2008 Kungliga Tekniska Högskolan
5 * (Royal Institute of Technology, Stockholm, Sweden).
6 * All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 *
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
14 *
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in the
17 * documentation and/or other materials provided with the distribution.
18 *
19 * 3. Neither the name of the Institute nor the names of its contributors
20 * may be used to endorse or promote products derived from this software
21 * without specific prior written permission.
22 *
23 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 * SUCH DAMAGE.
34 */
35
36 #include "krb5_locl.h"
37
38 int _krb5_AES_SHA1_string_to_default_iterator = 4096;
39
40 static krb5_error_code
AES_SHA1_string_to_key(krb5_context context,krb5_enctype enctype,krb5_data password,krb5_salt salt,krb5_data opaque,krb5_keyblock * key)41 AES_SHA1_string_to_key(krb5_context context,
42 krb5_enctype enctype,
43 krb5_data password,
44 krb5_salt salt,
45 krb5_data opaque,
46 krb5_keyblock *key)
47 {
48 krb5_error_code ret;
49 uint32_t iter;
50 struct _krb5_encryption_type *et;
51 struct _krb5_key_data kd;
52
53 if (opaque.length == 0)
54 iter = _krb5_AES_SHA1_string_to_default_iterator;
55 else if (opaque.length == 4) {
56 unsigned long v;
57 _krb5_get_int(opaque.data, &v, 4);
58 iter = ((uint32_t)v);
59 } else
60 return KRB5_PROG_KEYTYPE_NOSUPP; /* XXX */
61
62 et = _krb5_find_enctype(enctype);
63 if (et == NULL)
64 return KRB5_PROG_KEYTYPE_NOSUPP;
65
66 kd.schedule = NULL;
67 ALLOC(kd.key, 1);
68 if (kd.key == NULL)
69 return krb5_enomem(context);
70 kd.key->keytype = enctype;
71 ret = krb5_data_alloc(&kd.key->keyvalue, et->keytype->size);
72 if (ret) {
73 krb5_set_error_message (context, ret, N_("malloc: out of memory", ""));
74 return ret;
75 }
76
77 ret = PKCS5_PBKDF2_HMAC(password.data, password.length,
78 salt.saltvalue.data, salt.saltvalue.length,
79 iter,
80 EVP_sha1(),
81 et->keytype->size, kd.key->keyvalue.data);
82 if (ret != 1) {
83 _krb5_free_key_data(context, &kd, et);
84 krb5_set_error_message(context, KRB5_PROG_KEYTYPE_NOSUPP,
85 "Error calculating s2k");
86 return KRB5_PROG_KEYTYPE_NOSUPP;
87 }
88
89 ret = _krb5_derive_key(context, et, &kd, "kerberos", strlen("kerberos"));
90 if (ret == 0)
91 ret = krb5_copy_keyblock_contents(context, kd.key, key);
92 _krb5_free_key_data(context, &kd, et);
93
94 return ret;
95 }
96
97 struct salt_type _krb5_AES_SHA1_salt[] = {
98 {
99 KRB5_PW_SALT,
100 "pw-salt",
101 AES_SHA1_string_to_key
102 },
103 { 0, NULL, NULL }
104 };
105