139beb93cSSam Leffler /* 239beb93cSSam Leffler * EAP peer method: EAP-SIM (RFC 4186) 3*f05cddf9SRui Paulo * Copyright (c) 2004-2012, Jouni Malinen <j@w1.fi> 439beb93cSSam Leffler * 5*f05cddf9SRui Paulo * This software may be distributed under the terms of the BSD license. 6*f05cddf9SRui Paulo * See README for more details. 739beb93cSSam Leffler */ 839beb93cSSam Leffler 939beb93cSSam Leffler #include "includes.h" 1039beb93cSSam Leffler 1139beb93cSSam Leffler #include "common.h" 12e28a4053SRui Paulo #include "pcsc_funcs.h" 13e28a4053SRui Paulo #include "crypto/milenage.h" 14*f05cddf9SRui Paulo #include "crypto/random.h" 1539beb93cSSam Leffler #include "eap_peer/eap_i.h" 1639beb93cSSam Leffler #include "eap_config.h" 1739beb93cSSam Leffler #include "eap_common/eap_sim_common.h" 1839beb93cSSam Leffler 1939beb93cSSam Leffler 2039beb93cSSam Leffler struct eap_sim_data { 2139beb93cSSam Leffler u8 *ver_list; 2239beb93cSSam Leffler size_t ver_list_len; 2339beb93cSSam Leffler int selected_version; 2439beb93cSSam Leffler size_t min_num_chal, num_chal; 2539beb93cSSam Leffler 2639beb93cSSam Leffler u8 kc[3][EAP_SIM_KC_LEN]; 2739beb93cSSam Leffler u8 sres[3][EAP_SIM_SRES_LEN]; 2839beb93cSSam Leffler u8 nonce_mt[EAP_SIM_NONCE_MT_LEN], nonce_s[EAP_SIM_NONCE_S_LEN]; 2939beb93cSSam Leffler u8 mk[EAP_SIM_MK_LEN]; 3039beb93cSSam Leffler u8 k_aut[EAP_SIM_K_AUT_LEN]; 3139beb93cSSam Leffler u8 k_encr[EAP_SIM_K_ENCR_LEN]; 3239beb93cSSam Leffler u8 msk[EAP_SIM_KEYING_DATA_LEN]; 3339beb93cSSam Leffler u8 emsk[EAP_EMSK_LEN]; 3439beb93cSSam Leffler u8 rand[3][GSM_RAND_LEN]; 3539beb93cSSam Leffler 3639beb93cSSam Leffler int num_id_req, num_notification; 3739beb93cSSam Leffler u8 *pseudonym; 3839beb93cSSam Leffler size_t pseudonym_len; 3939beb93cSSam Leffler u8 *reauth_id; 4039beb93cSSam Leffler size_t reauth_id_len; 4139beb93cSSam Leffler int reauth; 4239beb93cSSam Leffler unsigned int counter, counter_too_small; 4339beb93cSSam Leffler u8 *last_eap_identity; 4439beb93cSSam Leffler size_t last_eap_identity_len; 4539beb93cSSam Leffler enum { 4639beb93cSSam Leffler CONTINUE, RESULT_SUCCESS, RESULT_FAILURE, SUCCESS, FAILURE 4739beb93cSSam Leffler } state; 4839beb93cSSam Leffler int result_ind, use_result_ind; 4939beb93cSSam Leffler }; 5039beb93cSSam Leffler 5139beb93cSSam Leffler 5239beb93cSSam Leffler #ifndef CONFIG_NO_STDOUT_DEBUG 5339beb93cSSam Leffler static const char * eap_sim_state_txt(int state) 5439beb93cSSam Leffler { 5539beb93cSSam Leffler switch (state) { 5639beb93cSSam Leffler case CONTINUE: 5739beb93cSSam Leffler return "CONTINUE"; 5839beb93cSSam Leffler case RESULT_SUCCESS: 5939beb93cSSam Leffler return "RESULT_SUCCESS"; 6039beb93cSSam Leffler case RESULT_FAILURE: 6139beb93cSSam Leffler return "RESULT_FAILURE"; 6239beb93cSSam Leffler case SUCCESS: 6339beb93cSSam Leffler return "SUCCESS"; 6439beb93cSSam Leffler case FAILURE: 6539beb93cSSam Leffler return "FAILURE"; 6639beb93cSSam Leffler default: 6739beb93cSSam Leffler return "?"; 6839beb93cSSam Leffler } 6939beb93cSSam Leffler } 7039beb93cSSam Leffler #endif /* CONFIG_NO_STDOUT_DEBUG */ 7139beb93cSSam Leffler 7239beb93cSSam Leffler 7339beb93cSSam Leffler static void eap_sim_state(struct eap_sim_data *data, int state) 7439beb93cSSam Leffler { 7539beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: %s -> %s", 7639beb93cSSam Leffler eap_sim_state_txt(data->state), 7739beb93cSSam Leffler eap_sim_state_txt(state)); 7839beb93cSSam Leffler data->state = state; 7939beb93cSSam Leffler } 8039beb93cSSam Leffler 8139beb93cSSam Leffler 8239beb93cSSam Leffler static void * eap_sim_init(struct eap_sm *sm) 8339beb93cSSam Leffler { 8439beb93cSSam Leffler struct eap_sim_data *data; 8539beb93cSSam Leffler struct eap_peer_config *config = eap_get_config(sm); 8639beb93cSSam Leffler 8739beb93cSSam Leffler data = os_zalloc(sizeof(*data)); 8839beb93cSSam Leffler if (data == NULL) 8939beb93cSSam Leffler return NULL; 9039beb93cSSam Leffler 91*f05cddf9SRui Paulo if (random_get_bytes(data->nonce_mt, EAP_SIM_NONCE_MT_LEN)) { 9239beb93cSSam Leffler wpa_printf(MSG_WARNING, "EAP-SIM: Failed to get random data " 9339beb93cSSam Leffler "for NONCE_MT"); 9439beb93cSSam Leffler os_free(data); 9539beb93cSSam Leffler return NULL; 9639beb93cSSam Leffler } 9739beb93cSSam Leffler 9839beb93cSSam Leffler data->min_num_chal = 2; 9939beb93cSSam Leffler if (config && config->phase1) { 10039beb93cSSam Leffler char *pos = os_strstr(config->phase1, "sim_min_num_chal="); 10139beb93cSSam Leffler if (pos) { 10239beb93cSSam Leffler data->min_num_chal = atoi(pos + 17); 10339beb93cSSam Leffler if (data->min_num_chal < 2 || data->min_num_chal > 3) { 10439beb93cSSam Leffler wpa_printf(MSG_WARNING, "EAP-SIM: Invalid " 10539beb93cSSam Leffler "sim_min_num_chal configuration " 10639beb93cSSam Leffler "(%lu, expected 2 or 3)", 10739beb93cSSam Leffler (unsigned long) data->min_num_chal); 10839beb93cSSam Leffler os_free(data); 10939beb93cSSam Leffler return NULL; 11039beb93cSSam Leffler } 11139beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: Set minimum number of " 11239beb93cSSam Leffler "challenges to %lu", 11339beb93cSSam Leffler (unsigned long) data->min_num_chal); 11439beb93cSSam Leffler } 11539beb93cSSam Leffler 11639beb93cSSam Leffler data->result_ind = os_strstr(config->phase1, "result_ind=1") != 11739beb93cSSam Leffler NULL; 11839beb93cSSam Leffler } 11939beb93cSSam Leffler 120*f05cddf9SRui Paulo if (config && config->anonymous_identity) { 121*f05cddf9SRui Paulo data->pseudonym = os_malloc(config->anonymous_identity_len); 122*f05cddf9SRui Paulo if (data->pseudonym) { 123*f05cddf9SRui Paulo os_memcpy(data->pseudonym, config->anonymous_identity, 124*f05cddf9SRui Paulo config->anonymous_identity_len); 125*f05cddf9SRui Paulo data->pseudonym_len = config->anonymous_identity_len; 126*f05cddf9SRui Paulo } 127*f05cddf9SRui Paulo } 128*f05cddf9SRui Paulo 12939beb93cSSam Leffler eap_sim_state(data, CONTINUE); 13039beb93cSSam Leffler 13139beb93cSSam Leffler return data; 13239beb93cSSam Leffler } 13339beb93cSSam Leffler 13439beb93cSSam Leffler 13539beb93cSSam Leffler static void eap_sim_deinit(struct eap_sm *sm, void *priv) 13639beb93cSSam Leffler { 13739beb93cSSam Leffler struct eap_sim_data *data = priv; 13839beb93cSSam Leffler if (data) { 13939beb93cSSam Leffler os_free(data->ver_list); 14039beb93cSSam Leffler os_free(data->pseudonym); 14139beb93cSSam Leffler os_free(data->reauth_id); 14239beb93cSSam Leffler os_free(data->last_eap_identity); 14339beb93cSSam Leffler os_free(data); 14439beb93cSSam Leffler } 14539beb93cSSam Leffler } 14639beb93cSSam Leffler 14739beb93cSSam Leffler 14839beb93cSSam Leffler static int eap_sim_gsm_auth(struct eap_sm *sm, struct eap_sim_data *data) 14939beb93cSSam Leffler { 15039beb93cSSam Leffler struct eap_peer_config *conf; 15139beb93cSSam Leffler 15239beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: GSM authentication algorithm"); 15339beb93cSSam Leffler 15439beb93cSSam Leffler conf = eap_get_config(sm); 15539beb93cSSam Leffler if (conf == NULL) 15639beb93cSSam Leffler return -1; 15739beb93cSSam Leffler if (conf->pcsc) { 15839beb93cSSam Leffler if (scard_gsm_auth(sm->scard_ctx, data->rand[0], 15939beb93cSSam Leffler data->sres[0], data->kc[0]) || 16039beb93cSSam Leffler scard_gsm_auth(sm->scard_ctx, data->rand[1], 16139beb93cSSam Leffler data->sres[1], data->kc[1]) || 16239beb93cSSam Leffler (data->num_chal > 2 && 16339beb93cSSam Leffler scard_gsm_auth(sm->scard_ctx, data->rand[2], 16439beb93cSSam Leffler data->sres[2], data->kc[2]))) { 16539beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: GSM SIM " 16639beb93cSSam Leffler "authentication could not be completed"); 16739beb93cSSam Leffler return -1; 16839beb93cSSam Leffler } 16939beb93cSSam Leffler return 0; 17039beb93cSSam Leffler } 17139beb93cSSam Leffler 17239beb93cSSam Leffler #ifdef CONFIG_SIM_SIMULATOR 17339beb93cSSam Leffler if (conf->password) { 17439beb93cSSam Leffler u8 opc[16], k[16]; 17539beb93cSSam Leffler const char *pos; 17639beb93cSSam Leffler size_t i; 17739beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: Use internal GSM-Milenage " 17839beb93cSSam Leffler "implementation for authentication"); 17939beb93cSSam Leffler if (conf->password_len < 65) { 18039beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: invalid GSM-Milenage " 18139beb93cSSam Leffler "password"); 18239beb93cSSam Leffler return -1; 18339beb93cSSam Leffler } 18439beb93cSSam Leffler pos = (const char *) conf->password; 18539beb93cSSam Leffler if (hexstr2bin(pos, k, 16)) 18639beb93cSSam Leffler return -1; 18739beb93cSSam Leffler pos += 32; 18839beb93cSSam Leffler if (*pos != ':') 18939beb93cSSam Leffler return -1; 19039beb93cSSam Leffler pos++; 19139beb93cSSam Leffler 19239beb93cSSam Leffler if (hexstr2bin(pos, opc, 16)) 19339beb93cSSam Leffler return -1; 19439beb93cSSam Leffler 19539beb93cSSam Leffler for (i = 0; i < data->num_chal; i++) { 19639beb93cSSam Leffler if (gsm_milenage(opc, k, data->rand[i], 19739beb93cSSam Leffler data->sres[i], data->kc[i])) { 19839beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: " 19939beb93cSSam Leffler "GSM-Milenage authentication " 20039beb93cSSam Leffler "could not be completed"); 20139beb93cSSam Leffler return -1; 20239beb93cSSam Leffler } 20339beb93cSSam Leffler wpa_hexdump(MSG_DEBUG, "EAP-SIM: RAND", 20439beb93cSSam Leffler data->rand[i], GSM_RAND_LEN); 20539beb93cSSam Leffler wpa_hexdump_key(MSG_DEBUG, "EAP-SIM: SRES", 20639beb93cSSam Leffler data->sres[i], EAP_SIM_SRES_LEN); 20739beb93cSSam Leffler wpa_hexdump_key(MSG_DEBUG, "EAP-SIM: Kc", 20839beb93cSSam Leffler data->kc[i], EAP_SIM_KC_LEN); 20939beb93cSSam Leffler } 21039beb93cSSam Leffler return 0; 21139beb93cSSam Leffler } 21239beb93cSSam Leffler #endif /* CONFIG_SIM_SIMULATOR */ 21339beb93cSSam Leffler 21439beb93cSSam Leffler #ifdef CONFIG_SIM_HARDCODED 21539beb93cSSam Leffler /* These hardcoded Kc and SRES values are used for testing. RAND to 21639beb93cSSam Leffler * KC/SREC mapping is very bogus as far as real authentication is 21739beb93cSSam Leffler * concerned, but it is quite useful for cases where the AS is rotating 21839beb93cSSam Leffler * the order of pre-configured values. */ 21939beb93cSSam Leffler { 22039beb93cSSam Leffler size_t i; 22139beb93cSSam Leffler 22239beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: Use hardcoded Kc and SRES " 22339beb93cSSam Leffler "values for testing"); 22439beb93cSSam Leffler 22539beb93cSSam Leffler for (i = 0; i < data->num_chal; i++) { 22639beb93cSSam Leffler if (data->rand[i][0] == 0xaa) { 22739beb93cSSam Leffler os_memcpy(data->kc[i], 22839beb93cSSam Leffler "\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7", 22939beb93cSSam Leffler EAP_SIM_KC_LEN); 23039beb93cSSam Leffler os_memcpy(data->sres[i], "\xd1\xd2\xd3\xd4", 23139beb93cSSam Leffler EAP_SIM_SRES_LEN); 23239beb93cSSam Leffler } else if (data->rand[i][0] == 0xbb) { 23339beb93cSSam Leffler os_memcpy(data->kc[i], 23439beb93cSSam Leffler "\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7", 23539beb93cSSam Leffler EAP_SIM_KC_LEN); 23639beb93cSSam Leffler os_memcpy(data->sres[i], "\xe1\xe2\xe3\xe4", 23739beb93cSSam Leffler EAP_SIM_SRES_LEN); 23839beb93cSSam Leffler } else { 23939beb93cSSam Leffler os_memcpy(data->kc[i], 24039beb93cSSam Leffler "\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7", 24139beb93cSSam Leffler EAP_SIM_KC_LEN); 24239beb93cSSam Leffler os_memcpy(data->sres[i], "\xf1\xf2\xf3\xf4", 24339beb93cSSam Leffler EAP_SIM_SRES_LEN); 24439beb93cSSam Leffler } 24539beb93cSSam Leffler } 24639beb93cSSam Leffler } 24739beb93cSSam Leffler 24839beb93cSSam Leffler return 0; 24939beb93cSSam Leffler 25039beb93cSSam Leffler #else /* CONFIG_SIM_HARDCODED */ 25139beb93cSSam Leffler 25239beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: No GSM authentication algorithm " 25339beb93cSSam Leffler "enabled"); 25439beb93cSSam Leffler return -1; 25539beb93cSSam Leffler 25639beb93cSSam Leffler #endif /* CONFIG_SIM_HARDCODED */ 25739beb93cSSam Leffler } 25839beb93cSSam Leffler 25939beb93cSSam Leffler 26039beb93cSSam Leffler static int eap_sim_supported_ver(int version) 26139beb93cSSam Leffler { 26239beb93cSSam Leffler return version == EAP_SIM_VERSION; 26339beb93cSSam Leffler } 26439beb93cSSam Leffler 26539beb93cSSam Leffler 26639beb93cSSam Leffler #define CLEAR_PSEUDONYM 0x01 26739beb93cSSam Leffler #define CLEAR_REAUTH_ID 0x02 26839beb93cSSam Leffler #define CLEAR_EAP_ID 0x04 26939beb93cSSam Leffler 270*f05cddf9SRui Paulo static void eap_sim_clear_identities(struct eap_sm *sm, 271*f05cddf9SRui Paulo struct eap_sim_data *data, int id) 27239beb93cSSam Leffler { 273*f05cddf9SRui Paulo if ((id & CLEAR_PSEUDONYM) && data->pseudonym) { 274*f05cddf9SRui Paulo wpa_printf(MSG_DEBUG, "EAP-SIM: forgetting old pseudonym"); 27539beb93cSSam Leffler os_free(data->pseudonym); 27639beb93cSSam Leffler data->pseudonym = NULL; 27739beb93cSSam Leffler data->pseudonym_len = 0; 278*f05cddf9SRui Paulo eap_set_anon_id(sm, NULL, 0); 27939beb93cSSam Leffler } 280*f05cddf9SRui Paulo if ((id & CLEAR_REAUTH_ID) && data->reauth_id) { 281*f05cddf9SRui Paulo wpa_printf(MSG_DEBUG, "EAP-SIM: forgetting old reauth_id"); 28239beb93cSSam Leffler os_free(data->reauth_id); 28339beb93cSSam Leffler data->reauth_id = NULL; 28439beb93cSSam Leffler data->reauth_id_len = 0; 28539beb93cSSam Leffler } 286*f05cddf9SRui Paulo if ((id & CLEAR_EAP_ID) && data->last_eap_identity) { 287*f05cddf9SRui Paulo wpa_printf(MSG_DEBUG, "EAP-SIM: forgetting old eap_id"); 28839beb93cSSam Leffler os_free(data->last_eap_identity); 28939beb93cSSam Leffler data->last_eap_identity = NULL; 29039beb93cSSam Leffler data->last_eap_identity_len = 0; 29139beb93cSSam Leffler } 29239beb93cSSam Leffler } 29339beb93cSSam Leffler 29439beb93cSSam Leffler 295*f05cddf9SRui Paulo static int eap_sim_learn_ids(struct eap_sm *sm, struct eap_sim_data *data, 29639beb93cSSam Leffler struct eap_sim_attrs *attr) 29739beb93cSSam Leffler { 29839beb93cSSam Leffler if (attr->next_pseudonym) { 299*f05cddf9SRui Paulo const u8 *identity = NULL; 300*f05cddf9SRui Paulo size_t identity_len = 0; 301*f05cddf9SRui Paulo const u8 *realm = NULL; 302*f05cddf9SRui Paulo size_t realm_len = 0; 303*f05cddf9SRui Paulo 304*f05cddf9SRui Paulo wpa_hexdump_ascii(MSG_DEBUG, 305*f05cddf9SRui Paulo "EAP-SIM: (encr) AT_NEXT_PSEUDONYM", 306*f05cddf9SRui Paulo attr->next_pseudonym, 307*f05cddf9SRui Paulo attr->next_pseudonym_len); 30839beb93cSSam Leffler os_free(data->pseudonym); 309*f05cddf9SRui Paulo /* Look for the realm of the permanent identity */ 310*f05cddf9SRui Paulo identity = eap_get_config_identity(sm, &identity_len); 311*f05cddf9SRui Paulo if (identity) { 312*f05cddf9SRui Paulo for (realm = identity, realm_len = identity_len; 313*f05cddf9SRui Paulo realm_len > 0; realm_len--, realm++) { 314*f05cddf9SRui Paulo if (*realm == '@') 315*f05cddf9SRui Paulo break; 316*f05cddf9SRui Paulo } 317*f05cddf9SRui Paulo } 318*f05cddf9SRui Paulo data->pseudonym = os_malloc(attr->next_pseudonym_len + 319*f05cddf9SRui Paulo realm_len); 32039beb93cSSam Leffler if (data->pseudonym == NULL) { 32139beb93cSSam Leffler wpa_printf(MSG_INFO, "EAP-SIM: (encr) No memory for " 32239beb93cSSam Leffler "next pseudonym"); 323*f05cddf9SRui Paulo data->pseudonym_len = 0; 32439beb93cSSam Leffler return -1; 32539beb93cSSam Leffler } 32639beb93cSSam Leffler os_memcpy(data->pseudonym, attr->next_pseudonym, 32739beb93cSSam Leffler attr->next_pseudonym_len); 328*f05cddf9SRui Paulo if (realm_len) { 329*f05cddf9SRui Paulo os_memcpy(data->pseudonym + attr->next_pseudonym_len, 330*f05cddf9SRui Paulo realm, realm_len); 331*f05cddf9SRui Paulo } 332*f05cddf9SRui Paulo data->pseudonym_len = attr->next_pseudonym_len + realm_len; 333*f05cddf9SRui Paulo eap_set_anon_id(sm, data->pseudonym, data->pseudonym_len); 33439beb93cSSam Leffler } 33539beb93cSSam Leffler 33639beb93cSSam Leffler if (attr->next_reauth_id) { 33739beb93cSSam Leffler os_free(data->reauth_id); 33839beb93cSSam Leffler data->reauth_id = os_malloc(attr->next_reauth_id_len); 33939beb93cSSam Leffler if (data->reauth_id == NULL) { 34039beb93cSSam Leffler wpa_printf(MSG_INFO, "EAP-SIM: (encr) No memory for " 34139beb93cSSam Leffler "next reauth_id"); 342*f05cddf9SRui Paulo data->reauth_id_len = 0; 34339beb93cSSam Leffler return -1; 34439beb93cSSam Leffler } 34539beb93cSSam Leffler os_memcpy(data->reauth_id, attr->next_reauth_id, 34639beb93cSSam Leffler attr->next_reauth_id_len); 34739beb93cSSam Leffler data->reauth_id_len = attr->next_reauth_id_len; 34839beb93cSSam Leffler wpa_hexdump_ascii(MSG_DEBUG, 34939beb93cSSam Leffler "EAP-SIM: (encr) AT_NEXT_REAUTH_ID", 35039beb93cSSam Leffler data->reauth_id, 35139beb93cSSam Leffler data->reauth_id_len); 35239beb93cSSam Leffler } 35339beb93cSSam Leffler 35439beb93cSSam Leffler return 0; 35539beb93cSSam Leffler } 35639beb93cSSam Leffler 35739beb93cSSam Leffler 35839beb93cSSam Leffler static struct wpabuf * eap_sim_client_error(struct eap_sim_data *data, u8 id, 35939beb93cSSam Leffler int err) 36039beb93cSSam Leffler { 36139beb93cSSam Leffler struct eap_sim_msg *msg; 36239beb93cSSam Leffler 36339beb93cSSam Leffler eap_sim_state(data, FAILURE); 36439beb93cSSam Leffler data->num_id_req = 0; 36539beb93cSSam Leffler data->num_notification = 0; 36639beb93cSSam Leffler 367*f05cddf9SRui Paulo wpa_printf(MSG_DEBUG, "EAP-SIM: Send Client-Error (error code %d)", 368*f05cddf9SRui Paulo err); 36939beb93cSSam Leffler msg = eap_sim_msg_init(EAP_CODE_RESPONSE, id, EAP_TYPE_SIM, 37039beb93cSSam Leffler EAP_SIM_SUBTYPE_CLIENT_ERROR); 37139beb93cSSam Leffler eap_sim_msg_add(msg, EAP_SIM_AT_CLIENT_ERROR_CODE, err, NULL, 0); 37239beb93cSSam Leffler return eap_sim_msg_finish(msg, NULL, NULL, 0); 37339beb93cSSam Leffler } 37439beb93cSSam Leffler 37539beb93cSSam Leffler 37639beb93cSSam Leffler static struct wpabuf * eap_sim_response_start(struct eap_sm *sm, 37739beb93cSSam Leffler struct eap_sim_data *data, u8 id, 37839beb93cSSam Leffler enum eap_sim_id_req id_req) 37939beb93cSSam Leffler { 38039beb93cSSam Leffler const u8 *identity = NULL; 38139beb93cSSam Leffler size_t identity_len = 0; 38239beb93cSSam Leffler struct eap_sim_msg *msg; 38339beb93cSSam Leffler 38439beb93cSSam Leffler data->reauth = 0; 38539beb93cSSam Leffler if (id_req == ANY_ID && data->reauth_id) { 38639beb93cSSam Leffler identity = data->reauth_id; 38739beb93cSSam Leffler identity_len = data->reauth_id_len; 38839beb93cSSam Leffler data->reauth = 1; 38939beb93cSSam Leffler } else if ((id_req == ANY_ID || id_req == FULLAUTH_ID) && 39039beb93cSSam Leffler data->pseudonym) { 39139beb93cSSam Leffler identity = data->pseudonym; 39239beb93cSSam Leffler identity_len = data->pseudonym_len; 393*f05cddf9SRui Paulo eap_sim_clear_identities(sm, data, CLEAR_REAUTH_ID); 39439beb93cSSam Leffler } else if (id_req != NO_ID_REQ) { 39539beb93cSSam Leffler identity = eap_get_config_identity(sm, &identity_len); 39639beb93cSSam Leffler if (identity) { 397*f05cddf9SRui Paulo eap_sim_clear_identities(sm, data, CLEAR_PSEUDONYM | 39839beb93cSSam Leffler CLEAR_REAUTH_ID); 39939beb93cSSam Leffler } 40039beb93cSSam Leffler } 40139beb93cSSam Leffler if (id_req != NO_ID_REQ) 402*f05cddf9SRui Paulo eap_sim_clear_identities(sm, data, CLEAR_EAP_ID); 40339beb93cSSam Leffler 40439beb93cSSam Leffler wpa_printf(MSG_DEBUG, "Generating EAP-SIM Start (id=%d)", id); 40539beb93cSSam Leffler msg = eap_sim_msg_init(EAP_CODE_RESPONSE, id, 40639beb93cSSam Leffler EAP_TYPE_SIM, EAP_SIM_SUBTYPE_START); 40739beb93cSSam Leffler if (!data->reauth) { 40839beb93cSSam Leffler wpa_hexdump(MSG_DEBUG, " AT_NONCE_MT", 40939beb93cSSam Leffler data->nonce_mt, EAP_SIM_NONCE_MT_LEN); 41039beb93cSSam Leffler eap_sim_msg_add(msg, EAP_SIM_AT_NONCE_MT, 0, 41139beb93cSSam Leffler data->nonce_mt, EAP_SIM_NONCE_MT_LEN); 41239beb93cSSam Leffler wpa_printf(MSG_DEBUG, " AT_SELECTED_VERSION %d", 41339beb93cSSam Leffler data->selected_version); 41439beb93cSSam Leffler eap_sim_msg_add(msg, EAP_SIM_AT_SELECTED_VERSION, 41539beb93cSSam Leffler data->selected_version, NULL, 0); 41639beb93cSSam Leffler } 41739beb93cSSam Leffler 41839beb93cSSam Leffler if (identity) { 41939beb93cSSam Leffler wpa_hexdump_ascii(MSG_DEBUG, " AT_IDENTITY", 42039beb93cSSam Leffler identity, identity_len); 42139beb93cSSam Leffler eap_sim_msg_add(msg, EAP_SIM_AT_IDENTITY, identity_len, 42239beb93cSSam Leffler identity, identity_len); 42339beb93cSSam Leffler } 42439beb93cSSam Leffler 42539beb93cSSam Leffler return eap_sim_msg_finish(msg, NULL, NULL, 0); 42639beb93cSSam Leffler } 42739beb93cSSam Leffler 42839beb93cSSam Leffler 42939beb93cSSam Leffler static struct wpabuf * eap_sim_response_challenge(struct eap_sim_data *data, 43039beb93cSSam Leffler u8 id) 43139beb93cSSam Leffler { 43239beb93cSSam Leffler struct eap_sim_msg *msg; 43339beb93cSSam Leffler 43439beb93cSSam Leffler wpa_printf(MSG_DEBUG, "Generating EAP-SIM Challenge (id=%d)", id); 43539beb93cSSam Leffler msg = eap_sim_msg_init(EAP_CODE_RESPONSE, id, EAP_TYPE_SIM, 43639beb93cSSam Leffler EAP_SIM_SUBTYPE_CHALLENGE); 43739beb93cSSam Leffler if (data->use_result_ind) { 43839beb93cSSam Leffler wpa_printf(MSG_DEBUG, " AT_RESULT_IND"); 43939beb93cSSam Leffler eap_sim_msg_add(msg, EAP_SIM_AT_RESULT_IND, 0, NULL, 0); 44039beb93cSSam Leffler } 44139beb93cSSam Leffler wpa_printf(MSG_DEBUG, " AT_MAC"); 44239beb93cSSam Leffler eap_sim_msg_add_mac(msg, EAP_SIM_AT_MAC); 44339beb93cSSam Leffler return eap_sim_msg_finish(msg, data->k_aut, (u8 *) data->sres, 44439beb93cSSam Leffler data->num_chal * EAP_SIM_SRES_LEN); 44539beb93cSSam Leffler } 44639beb93cSSam Leffler 44739beb93cSSam Leffler 44839beb93cSSam Leffler static struct wpabuf * eap_sim_response_reauth(struct eap_sim_data *data, 449*f05cddf9SRui Paulo u8 id, int counter_too_small, 450*f05cddf9SRui Paulo const u8 *nonce_s) 45139beb93cSSam Leffler { 45239beb93cSSam Leffler struct eap_sim_msg *msg; 45339beb93cSSam Leffler unsigned int counter; 45439beb93cSSam Leffler 45539beb93cSSam Leffler wpa_printf(MSG_DEBUG, "Generating EAP-SIM Reauthentication (id=%d)", 45639beb93cSSam Leffler id); 45739beb93cSSam Leffler msg = eap_sim_msg_init(EAP_CODE_RESPONSE, id, EAP_TYPE_SIM, 45839beb93cSSam Leffler EAP_SIM_SUBTYPE_REAUTHENTICATION); 45939beb93cSSam Leffler wpa_printf(MSG_DEBUG, " AT_IV"); 46039beb93cSSam Leffler wpa_printf(MSG_DEBUG, " AT_ENCR_DATA"); 46139beb93cSSam Leffler eap_sim_msg_add_encr_start(msg, EAP_SIM_AT_IV, EAP_SIM_AT_ENCR_DATA); 46239beb93cSSam Leffler 46339beb93cSSam Leffler if (counter_too_small) { 46439beb93cSSam Leffler wpa_printf(MSG_DEBUG, " *AT_COUNTER_TOO_SMALL"); 46539beb93cSSam Leffler eap_sim_msg_add(msg, EAP_SIM_AT_COUNTER_TOO_SMALL, 0, NULL, 0); 46639beb93cSSam Leffler counter = data->counter_too_small; 46739beb93cSSam Leffler } else 46839beb93cSSam Leffler counter = data->counter; 46939beb93cSSam Leffler 47039beb93cSSam Leffler wpa_printf(MSG_DEBUG, " *AT_COUNTER %d", counter); 47139beb93cSSam Leffler eap_sim_msg_add(msg, EAP_SIM_AT_COUNTER, counter, NULL, 0); 47239beb93cSSam Leffler 47339beb93cSSam Leffler if (eap_sim_msg_add_encr_end(msg, data->k_encr, EAP_SIM_AT_PADDING)) { 47439beb93cSSam Leffler wpa_printf(MSG_WARNING, "EAP-SIM: Failed to encrypt " 47539beb93cSSam Leffler "AT_ENCR_DATA"); 47639beb93cSSam Leffler eap_sim_msg_free(msg); 47739beb93cSSam Leffler return NULL; 47839beb93cSSam Leffler } 47939beb93cSSam Leffler if (data->use_result_ind) { 48039beb93cSSam Leffler wpa_printf(MSG_DEBUG, " AT_RESULT_IND"); 48139beb93cSSam Leffler eap_sim_msg_add(msg, EAP_SIM_AT_RESULT_IND, 0, NULL, 0); 48239beb93cSSam Leffler } 48339beb93cSSam Leffler wpa_printf(MSG_DEBUG, " AT_MAC"); 48439beb93cSSam Leffler eap_sim_msg_add_mac(msg, EAP_SIM_AT_MAC); 485*f05cddf9SRui Paulo return eap_sim_msg_finish(msg, data->k_aut, nonce_s, 48639beb93cSSam Leffler EAP_SIM_NONCE_S_LEN); 48739beb93cSSam Leffler } 48839beb93cSSam Leffler 48939beb93cSSam Leffler 49039beb93cSSam Leffler static struct wpabuf * eap_sim_response_notification(struct eap_sim_data *data, 49139beb93cSSam Leffler u8 id, u16 notification) 49239beb93cSSam Leffler { 49339beb93cSSam Leffler struct eap_sim_msg *msg; 49439beb93cSSam Leffler u8 *k_aut = (notification & 0x4000) == 0 ? data->k_aut : NULL; 49539beb93cSSam Leffler 49639beb93cSSam Leffler wpa_printf(MSG_DEBUG, "Generating EAP-SIM Notification (id=%d)", id); 49739beb93cSSam Leffler msg = eap_sim_msg_init(EAP_CODE_RESPONSE, id, 49839beb93cSSam Leffler EAP_TYPE_SIM, EAP_SIM_SUBTYPE_NOTIFICATION); 49939beb93cSSam Leffler if (k_aut && data->reauth) { 50039beb93cSSam Leffler wpa_printf(MSG_DEBUG, " AT_IV"); 50139beb93cSSam Leffler wpa_printf(MSG_DEBUG, " AT_ENCR_DATA"); 50239beb93cSSam Leffler eap_sim_msg_add_encr_start(msg, EAP_SIM_AT_IV, 50339beb93cSSam Leffler EAP_SIM_AT_ENCR_DATA); 50439beb93cSSam Leffler wpa_printf(MSG_DEBUG, " *AT_COUNTER %d", data->counter); 50539beb93cSSam Leffler eap_sim_msg_add(msg, EAP_SIM_AT_COUNTER, data->counter, 50639beb93cSSam Leffler NULL, 0); 50739beb93cSSam Leffler if (eap_sim_msg_add_encr_end(msg, data->k_encr, 50839beb93cSSam Leffler EAP_SIM_AT_PADDING)) { 50939beb93cSSam Leffler wpa_printf(MSG_WARNING, "EAP-SIM: Failed to encrypt " 51039beb93cSSam Leffler "AT_ENCR_DATA"); 51139beb93cSSam Leffler eap_sim_msg_free(msg); 51239beb93cSSam Leffler return NULL; 51339beb93cSSam Leffler } 51439beb93cSSam Leffler } 51539beb93cSSam Leffler if (k_aut) { 51639beb93cSSam Leffler wpa_printf(MSG_DEBUG, " AT_MAC"); 51739beb93cSSam Leffler eap_sim_msg_add_mac(msg, EAP_SIM_AT_MAC); 51839beb93cSSam Leffler } 51939beb93cSSam Leffler return eap_sim_msg_finish(msg, k_aut, (u8 *) "", 0); 52039beb93cSSam Leffler } 52139beb93cSSam Leffler 52239beb93cSSam Leffler 52339beb93cSSam Leffler static struct wpabuf * eap_sim_process_start(struct eap_sm *sm, 52439beb93cSSam Leffler struct eap_sim_data *data, u8 id, 52539beb93cSSam Leffler struct eap_sim_attrs *attr) 52639beb93cSSam Leffler { 52739beb93cSSam Leffler int selected_version = -1, id_error; 52839beb93cSSam Leffler size_t i; 52939beb93cSSam Leffler u8 *pos; 53039beb93cSSam Leffler 53139beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: subtype Start"); 53239beb93cSSam Leffler if (attr->version_list == NULL) { 53339beb93cSSam Leffler wpa_printf(MSG_INFO, "EAP-SIM: No AT_VERSION_LIST in " 53439beb93cSSam Leffler "SIM/Start"); 53539beb93cSSam Leffler return eap_sim_client_error(data, id, 53639beb93cSSam Leffler EAP_SIM_UNSUPPORTED_VERSION); 53739beb93cSSam Leffler } 53839beb93cSSam Leffler 53939beb93cSSam Leffler os_free(data->ver_list); 54039beb93cSSam Leffler data->ver_list = os_malloc(attr->version_list_len); 54139beb93cSSam Leffler if (data->ver_list == NULL) { 54239beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: Failed to allocate " 54339beb93cSSam Leffler "memory for version list"); 54439beb93cSSam Leffler return eap_sim_client_error(data, id, 54539beb93cSSam Leffler EAP_SIM_UNABLE_TO_PROCESS_PACKET); 54639beb93cSSam Leffler } 54739beb93cSSam Leffler os_memcpy(data->ver_list, attr->version_list, attr->version_list_len); 54839beb93cSSam Leffler data->ver_list_len = attr->version_list_len; 54939beb93cSSam Leffler pos = data->ver_list; 55039beb93cSSam Leffler for (i = 0; i < data->ver_list_len / 2; i++) { 55139beb93cSSam Leffler int ver = pos[0] * 256 + pos[1]; 55239beb93cSSam Leffler pos += 2; 55339beb93cSSam Leffler if (eap_sim_supported_ver(ver)) { 55439beb93cSSam Leffler selected_version = ver; 55539beb93cSSam Leffler break; 55639beb93cSSam Leffler } 55739beb93cSSam Leffler } 55839beb93cSSam Leffler if (selected_version < 0) { 55939beb93cSSam Leffler wpa_printf(MSG_INFO, "EAP-SIM: Could not find a supported " 56039beb93cSSam Leffler "version"); 56139beb93cSSam Leffler return eap_sim_client_error(data, id, 56239beb93cSSam Leffler EAP_SIM_UNSUPPORTED_VERSION); 56339beb93cSSam Leffler } 56439beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: Selected Version %d", 56539beb93cSSam Leffler selected_version); 56639beb93cSSam Leffler data->selected_version = selected_version; 56739beb93cSSam Leffler 56839beb93cSSam Leffler id_error = 0; 56939beb93cSSam Leffler switch (attr->id_req) { 57039beb93cSSam Leffler case NO_ID_REQ: 57139beb93cSSam Leffler break; 57239beb93cSSam Leffler case ANY_ID: 57339beb93cSSam Leffler if (data->num_id_req > 0) 57439beb93cSSam Leffler id_error++; 57539beb93cSSam Leffler data->num_id_req++; 57639beb93cSSam Leffler break; 57739beb93cSSam Leffler case FULLAUTH_ID: 57839beb93cSSam Leffler if (data->num_id_req > 1) 57939beb93cSSam Leffler id_error++; 58039beb93cSSam Leffler data->num_id_req++; 58139beb93cSSam Leffler break; 58239beb93cSSam Leffler case PERMANENT_ID: 58339beb93cSSam Leffler if (data->num_id_req > 2) 58439beb93cSSam Leffler id_error++; 58539beb93cSSam Leffler data->num_id_req++; 58639beb93cSSam Leffler break; 58739beb93cSSam Leffler } 58839beb93cSSam Leffler if (id_error) { 58939beb93cSSam Leffler wpa_printf(MSG_INFO, "EAP-SIM: Too many ID requests " 59039beb93cSSam Leffler "used within one authentication"); 59139beb93cSSam Leffler return eap_sim_client_error(data, id, 59239beb93cSSam Leffler EAP_SIM_UNABLE_TO_PROCESS_PACKET); 59339beb93cSSam Leffler } 59439beb93cSSam Leffler 59539beb93cSSam Leffler return eap_sim_response_start(sm, data, id, attr->id_req); 59639beb93cSSam Leffler } 59739beb93cSSam Leffler 59839beb93cSSam Leffler 59939beb93cSSam Leffler static struct wpabuf * eap_sim_process_challenge(struct eap_sm *sm, 60039beb93cSSam Leffler struct eap_sim_data *data, 60139beb93cSSam Leffler u8 id, 60239beb93cSSam Leffler const struct wpabuf *reqData, 60339beb93cSSam Leffler struct eap_sim_attrs *attr) 60439beb93cSSam Leffler { 60539beb93cSSam Leffler const u8 *identity; 60639beb93cSSam Leffler size_t identity_len; 60739beb93cSSam Leffler struct eap_sim_attrs eattr; 60839beb93cSSam Leffler 60939beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: subtype Challenge"); 61039beb93cSSam Leffler data->reauth = 0; 61139beb93cSSam Leffler if (!attr->mac || !attr->rand) { 61239beb93cSSam Leffler wpa_printf(MSG_WARNING, "EAP-SIM: Challenge message " 61339beb93cSSam Leffler "did not include%s%s", 61439beb93cSSam Leffler !attr->mac ? " AT_MAC" : "", 61539beb93cSSam Leffler !attr->rand ? " AT_RAND" : ""); 61639beb93cSSam Leffler return eap_sim_client_error(data, id, 61739beb93cSSam Leffler EAP_SIM_UNABLE_TO_PROCESS_PACKET); 61839beb93cSSam Leffler } 61939beb93cSSam Leffler 62039beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: %lu challenges", 62139beb93cSSam Leffler (unsigned long) attr->num_chal); 62239beb93cSSam Leffler if (attr->num_chal < data->min_num_chal) { 62339beb93cSSam Leffler wpa_printf(MSG_INFO, "EAP-SIM: Insufficient number of " 62439beb93cSSam Leffler "challenges (%lu)", (unsigned long) attr->num_chal); 62539beb93cSSam Leffler return eap_sim_client_error(data, id, 62639beb93cSSam Leffler EAP_SIM_INSUFFICIENT_NUM_OF_CHAL); 62739beb93cSSam Leffler } 62839beb93cSSam Leffler if (attr->num_chal > 3) { 62939beb93cSSam Leffler wpa_printf(MSG_INFO, "EAP-SIM: Too many challenges " 63039beb93cSSam Leffler "(%lu)", (unsigned long) attr->num_chal); 63139beb93cSSam Leffler return eap_sim_client_error(data, id, 63239beb93cSSam Leffler EAP_SIM_UNABLE_TO_PROCESS_PACKET); 63339beb93cSSam Leffler } 63439beb93cSSam Leffler 63539beb93cSSam Leffler /* Verify that RANDs are different */ 63639beb93cSSam Leffler if (os_memcmp(attr->rand, attr->rand + GSM_RAND_LEN, 63739beb93cSSam Leffler GSM_RAND_LEN) == 0 || 63839beb93cSSam Leffler (attr->num_chal > 2 && 63939beb93cSSam Leffler (os_memcmp(attr->rand, attr->rand + 2 * GSM_RAND_LEN, 64039beb93cSSam Leffler GSM_RAND_LEN) == 0 || 64139beb93cSSam Leffler os_memcmp(attr->rand + GSM_RAND_LEN, 64239beb93cSSam Leffler attr->rand + 2 * GSM_RAND_LEN, 64339beb93cSSam Leffler GSM_RAND_LEN) == 0))) { 64439beb93cSSam Leffler wpa_printf(MSG_INFO, "EAP-SIM: Same RAND used multiple times"); 64539beb93cSSam Leffler return eap_sim_client_error(data, id, 64639beb93cSSam Leffler EAP_SIM_RAND_NOT_FRESH); 64739beb93cSSam Leffler } 64839beb93cSSam Leffler 64939beb93cSSam Leffler os_memcpy(data->rand, attr->rand, attr->num_chal * GSM_RAND_LEN); 65039beb93cSSam Leffler data->num_chal = attr->num_chal; 65139beb93cSSam Leffler 65239beb93cSSam Leffler if (eap_sim_gsm_auth(sm, data)) { 65339beb93cSSam Leffler wpa_printf(MSG_WARNING, "EAP-SIM: GSM authentication failed"); 65439beb93cSSam Leffler return eap_sim_client_error(data, id, 65539beb93cSSam Leffler EAP_SIM_UNABLE_TO_PROCESS_PACKET); 65639beb93cSSam Leffler } 65739beb93cSSam Leffler if (data->last_eap_identity) { 65839beb93cSSam Leffler identity = data->last_eap_identity; 65939beb93cSSam Leffler identity_len = data->last_eap_identity_len; 66039beb93cSSam Leffler } else if (data->pseudonym) { 66139beb93cSSam Leffler identity = data->pseudonym; 66239beb93cSSam Leffler identity_len = data->pseudonym_len; 66339beb93cSSam Leffler } else 66439beb93cSSam Leffler identity = eap_get_config_identity(sm, &identity_len); 66539beb93cSSam Leffler wpa_hexdump_ascii(MSG_DEBUG, "EAP-SIM: Selected identity for MK " 66639beb93cSSam Leffler "derivation", identity, identity_len); 66739beb93cSSam Leffler eap_sim_derive_mk(identity, identity_len, data->nonce_mt, 66839beb93cSSam Leffler data->selected_version, data->ver_list, 66939beb93cSSam Leffler data->ver_list_len, data->num_chal, 67039beb93cSSam Leffler (const u8 *) data->kc, data->mk); 67139beb93cSSam Leffler eap_sim_derive_keys(data->mk, data->k_encr, data->k_aut, data->msk, 67239beb93cSSam Leffler data->emsk); 67339beb93cSSam Leffler if (eap_sim_verify_mac(data->k_aut, reqData, attr->mac, data->nonce_mt, 67439beb93cSSam Leffler EAP_SIM_NONCE_MT_LEN)) { 67539beb93cSSam Leffler wpa_printf(MSG_WARNING, "EAP-SIM: Challenge message " 67639beb93cSSam Leffler "used invalid AT_MAC"); 67739beb93cSSam Leffler return eap_sim_client_error(data, id, 67839beb93cSSam Leffler EAP_SIM_UNABLE_TO_PROCESS_PACKET); 67939beb93cSSam Leffler } 68039beb93cSSam Leffler 681*f05cddf9SRui Paulo /* Old reauthentication identity must not be used anymore. In 682*f05cddf9SRui Paulo * other words, if no new reauth identity is received, full 683*f05cddf9SRui Paulo * authentication will be used on next reauthentication (using 684*f05cddf9SRui Paulo * pseudonym identity or permanent identity). */ 685*f05cddf9SRui Paulo eap_sim_clear_identities(sm, data, CLEAR_REAUTH_ID | CLEAR_EAP_ID); 68639beb93cSSam Leffler 68739beb93cSSam Leffler if (attr->encr_data) { 68839beb93cSSam Leffler u8 *decrypted; 68939beb93cSSam Leffler decrypted = eap_sim_parse_encr(data->k_encr, attr->encr_data, 69039beb93cSSam Leffler attr->encr_data_len, attr->iv, 69139beb93cSSam Leffler &eattr, 0); 69239beb93cSSam Leffler if (decrypted == NULL) { 69339beb93cSSam Leffler return eap_sim_client_error( 69439beb93cSSam Leffler data, id, EAP_SIM_UNABLE_TO_PROCESS_PACKET); 69539beb93cSSam Leffler } 696*f05cddf9SRui Paulo eap_sim_learn_ids(sm, data, &eattr); 69739beb93cSSam Leffler os_free(decrypted); 69839beb93cSSam Leffler } 69939beb93cSSam Leffler 70039beb93cSSam Leffler if (data->result_ind && attr->result_ind) 70139beb93cSSam Leffler data->use_result_ind = 1; 70239beb93cSSam Leffler 70339beb93cSSam Leffler if (data->state != FAILURE && data->state != RESULT_FAILURE) { 70439beb93cSSam Leffler eap_sim_state(data, data->use_result_ind ? 70539beb93cSSam Leffler RESULT_SUCCESS : SUCCESS); 70639beb93cSSam Leffler } 70739beb93cSSam Leffler 70839beb93cSSam Leffler data->num_id_req = 0; 70939beb93cSSam Leffler data->num_notification = 0; 71039beb93cSSam Leffler /* RFC 4186 specifies that counter is initialized to one after 71139beb93cSSam Leffler * fullauth, but initializing it to zero makes it easier to implement 71239beb93cSSam Leffler * reauth verification. */ 71339beb93cSSam Leffler data->counter = 0; 71439beb93cSSam Leffler return eap_sim_response_challenge(data, id); 71539beb93cSSam Leffler } 71639beb93cSSam Leffler 71739beb93cSSam Leffler 71839beb93cSSam Leffler static int eap_sim_process_notification_reauth(struct eap_sim_data *data, 71939beb93cSSam Leffler struct eap_sim_attrs *attr) 72039beb93cSSam Leffler { 72139beb93cSSam Leffler struct eap_sim_attrs eattr; 72239beb93cSSam Leffler u8 *decrypted; 72339beb93cSSam Leffler 72439beb93cSSam Leffler if (attr->encr_data == NULL || attr->iv == NULL) { 72539beb93cSSam Leffler wpa_printf(MSG_WARNING, "EAP-SIM: Notification message after " 72639beb93cSSam Leffler "reauth did not include encrypted data"); 72739beb93cSSam Leffler return -1; 72839beb93cSSam Leffler } 72939beb93cSSam Leffler 73039beb93cSSam Leffler decrypted = eap_sim_parse_encr(data->k_encr, attr->encr_data, 73139beb93cSSam Leffler attr->encr_data_len, attr->iv, &eattr, 73239beb93cSSam Leffler 0); 73339beb93cSSam Leffler if (decrypted == NULL) { 73439beb93cSSam Leffler wpa_printf(MSG_WARNING, "EAP-SIM: Failed to parse encrypted " 73539beb93cSSam Leffler "data from notification message"); 73639beb93cSSam Leffler return -1; 73739beb93cSSam Leffler } 73839beb93cSSam Leffler 73939beb93cSSam Leffler if (eattr.counter < 0 || (size_t) eattr.counter != data->counter) { 74039beb93cSSam Leffler wpa_printf(MSG_WARNING, "EAP-SIM: Counter in notification " 74139beb93cSSam Leffler "message does not match with counter in reauth " 74239beb93cSSam Leffler "message"); 74339beb93cSSam Leffler os_free(decrypted); 74439beb93cSSam Leffler return -1; 74539beb93cSSam Leffler } 74639beb93cSSam Leffler 74739beb93cSSam Leffler os_free(decrypted); 74839beb93cSSam Leffler return 0; 74939beb93cSSam Leffler } 75039beb93cSSam Leffler 75139beb93cSSam Leffler 75239beb93cSSam Leffler static int eap_sim_process_notification_auth(struct eap_sim_data *data, 75339beb93cSSam Leffler const struct wpabuf *reqData, 75439beb93cSSam Leffler struct eap_sim_attrs *attr) 75539beb93cSSam Leffler { 75639beb93cSSam Leffler if (attr->mac == NULL) { 75739beb93cSSam Leffler wpa_printf(MSG_INFO, "EAP-SIM: no AT_MAC in after_auth " 75839beb93cSSam Leffler "Notification message"); 75939beb93cSSam Leffler return -1; 76039beb93cSSam Leffler } 76139beb93cSSam Leffler 76239beb93cSSam Leffler if (eap_sim_verify_mac(data->k_aut, reqData, attr->mac, (u8 *) "", 0)) 76339beb93cSSam Leffler { 76439beb93cSSam Leffler wpa_printf(MSG_WARNING, "EAP-SIM: Notification message " 76539beb93cSSam Leffler "used invalid AT_MAC"); 76639beb93cSSam Leffler return -1; 76739beb93cSSam Leffler } 76839beb93cSSam Leffler 76939beb93cSSam Leffler if (data->reauth && 77039beb93cSSam Leffler eap_sim_process_notification_reauth(data, attr)) { 77139beb93cSSam Leffler wpa_printf(MSG_WARNING, "EAP-SIM: Invalid notification " 77239beb93cSSam Leffler "message after reauth"); 77339beb93cSSam Leffler return -1; 77439beb93cSSam Leffler } 77539beb93cSSam Leffler 77639beb93cSSam Leffler return 0; 77739beb93cSSam Leffler } 77839beb93cSSam Leffler 77939beb93cSSam Leffler 78039beb93cSSam Leffler static struct wpabuf * eap_sim_process_notification( 78139beb93cSSam Leffler struct eap_sm *sm, struct eap_sim_data *data, u8 id, 78239beb93cSSam Leffler const struct wpabuf *reqData, struct eap_sim_attrs *attr) 78339beb93cSSam Leffler { 78439beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: subtype Notification"); 78539beb93cSSam Leffler if (data->num_notification > 0) { 78639beb93cSSam Leffler wpa_printf(MSG_INFO, "EAP-SIM: too many notification " 78739beb93cSSam Leffler "rounds (only one allowed)"); 78839beb93cSSam Leffler return eap_sim_client_error(data, id, 78939beb93cSSam Leffler EAP_SIM_UNABLE_TO_PROCESS_PACKET); 79039beb93cSSam Leffler } 79139beb93cSSam Leffler data->num_notification++; 79239beb93cSSam Leffler if (attr->notification == -1) { 79339beb93cSSam Leffler wpa_printf(MSG_INFO, "EAP-SIM: no AT_NOTIFICATION in " 79439beb93cSSam Leffler "Notification message"); 79539beb93cSSam Leffler return eap_sim_client_error(data, id, 79639beb93cSSam Leffler EAP_SIM_UNABLE_TO_PROCESS_PACKET); 79739beb93cSSam Leffler } 79839beb93cSSam Leffler 79939beb93cSSam Leffler if ((attr->notification & 0x4000) == 0 && 80039beb93cSSam Leffler eap_sim_process_notification_auth(data, reqData, attr)) { 80139beb93cSSam Leffler return eap_sim_client_error(data, id, 80239beb93cSSam Leffler EAP_SIM_UNABLE_TO_PROCESS_PACKET); 80339beb93cSSam Leffler } 80439beb93cSSam Leffler 80539beb93cSSam Leffler eap_sim_report_notification(sm->msg_ctx, attr->notification, 0); 80639beb93cSSam Leffler if (attr->notification >= 0 && attr->notification < 32768) { 80739beb93cSSam Leffler eap_sim_state(data, FAILURE); 80839beb93cSSam Leffler } else if (attr->notification == EAP_SIM_SUCCESS && 80939beb93cSSam Leffler data->state == RESULT_SUCCESS) 81039beb93cSSam Leffler eap_sim_state(data, SUCCESS); 81139beb93cSSam Leffler return eap_sim_response_notification(data, id, attr->notification); 81239beb93cSSam Leffler } 81339beb93cSSam Leffler 81439beb93cSSam Leffler 81539beb93cSSam Leffler static struct wpabuf * eap_sim_process_reauthentication( 81639beb93cSSam Leffler struct eap_sm *sm, struct eap_sim_data *data, u8 id, 81739beb93cSSam Leffler const struct wpabuf *reqData, struct eap_sim_attrs *attr) 81839beb93cSSam Leffler { 81939beb93cSSam Leffler struct eap_sim_attrs eattr; 82039beb93cSSam Leffler u8 *decrypted; 82139beb93cSSam Leffler 82239beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: subtype Reauthentication"); 82339beb93cSSam Leffler 82439beb93cSSam Leffler if (data->reauth_id == NULL) { 82539beb93cSSam Leffler wpa_printf(MSG_WARNING, "EAP-SIM: Server is trying " 82639beb93cSSam Leffler "reauthentication, but no reauth_id available"); 82739beb93cSSam Leffler return eap_sim_client_error(data, id, 82839beb93cSSam Leffler EAP_SIM_UNABLE_TO_PROCESS_PACKET); 82939beb93cSSam Leffler } 83039beb93cSSam Leffler 83139beb93cSSam Leffler data->reauth = 1; 83239beb93cSSam Leffler if (eap_sim_verify_mac(data->k_aut, reqData, attr->mac, (u8 *) "", 0)) 83339beb93cSSam Leffler { 83439beb93cSSam Leffler wpa_printf(MSG_WARNING, "EAP-SIM: Reauthentication " 83539beb93cSSam Leffler "did not have valid AT_MAC"); 83639beb93cSSam Leffler return eap_sim_client_error(data, id, 83739beb93cSSam Leffler EAP_SIM_UNABLE_TO_PROCESS_PACKET); 83839beb93cSSam Leffler } 83939beb93cSSam Leffler 84039beb93cSSam Leffler if (attr->encr_data == NULL || attr->iv == NULL) { 84139beb93cSSam Leffler wpa_printf(MSG_WARNING, "EAP-SIM: Reauthentication " 84239beb93cSSam Leffler "message did not include encrypted data"); 84339beb93cSSam Leffler return eap_sim_client_error(data, id, 84439beb93cSSam Leffler EAP_SIM_UNABLE_TO_PROCESS_PACKET); 84539beb93cSSam Leffler } 84639beb93cSSam Leffler 84739beb93cSSam Leffler decrypted = eap_sim_parse_encr(data->k_encr, attr->encr_data, 84839beb93cSSam Leffler attr->encr_data_len, attr->iv, &eattr, 84939beb93cSSam Leffler 0); 85039beb93cSSam Leffler if (decrypted == NULL) { 85139beb93cSSam Leffler wpa_printf(MSG_WARNING, "EAP-SIM: Failed to parse encrypted " 85239beb93cSSam Leffler "data from reauthentication message"); 85339beb93cSSam Leffler return eap_sim_client_error(data, id, 85439beb93cSSam Leffler EAP_SIM_UNABLE_TO_PROCESS_PACKET); 85539beb93cSSam Leffler } 85639beb93cSSam Leffler 85739beb93cSSam Leffler if (eattr.nonce_s == NULL || eattr.counter < 0) { 85839beb93cSSam Leffler wpa_printf(MSG_INFO, "EAP-SIM: (encr) No%s%s in reauth packet", 85939beb93cSSam Leffler !eattr.nonce_s ? " AT_NONCE_S" : "", 86039beb93cSSam Leffler eattr.counter < 0 ? " AT_COUNTER" : ""); 86139beb93cSSam Leffler os_free(decrypted); 86239beb93cSSam Leffler return eap_sim_client_error(data, id, 86339beb93cSSam Leffler EAP_SIM_UNABLE_TO_PROCESS_PACKET); 86439beb93cSSam Leffler } 86539beb93cSSam Leffler 86639beb93cSSam Leffler if (eattr.counter < 0 || (size_t) eattr.counter <= data->counter) { 86739beb93cSSam Leffler wpa_printf(MSG_INFO, "EAP-SIM: (encr) Invalid counter " 86839beb93cSSam Leffler "(%d <= %d)", eattr.counter, data->counter); 86939beb93cSSam Leffler data->counter_too_small = eattr.counter; 87039beb93cSSam Leffler /* Reply using Re-auth w/ AT_COUNTER_TOO_SMALL. The current 87139beb93cSSam Leffler * reauth_id must not be used to start a new reauthentication. 87239beb93cSSam Leffler * However, since it was used in the last EAP-Response-Identity 87339beb93cSSam Leffler * packet, it has to saved for the following fullauth to be 87439beb93cSSam Leffler * used in MK derivation. */ 87539beb93cSSam Leffler os_free(data->last_eap_identity); 87639beb93cSSam Leffler data->last_eap_identity = data->reauth_id; 87739beb93cSSam Leffler data->last_eap_identity_len = data->reauth_id_len; 87839beb93cSSam Leffler data->reauth_id = NULL; 87939beb93cSSam Leffler data->reauth_id_len = 0; 88039beb93cSSam Leffler os_free(decrypted); 881*f05cddf9SRui Paulo return eap_sim_response_reauth(data, id, 1, eattr.nonce_s); 88239beb93cSSam Leffler } 88339beb93cSSam Leffler data->counter = eattr.counter; 88439beb93cSSam Leffler 88539beb93cSSam Leffler os_memcpy(data->nonce_s, eattr.nonce_s, EAP_SIM_NONCE_S_LEN); 88639beb93cSSam Leffler wpa_hexdump(MSG_DEBUG, "EAP-SIM: (encr) AT_NONCE_S", 88739beb93cSSam Leffler data->nonce_s, EAP_SIM_NONCE_S_LEN); 88839beb93cSSam Leffler 88939beb93cSSam Leffler eap_sim_derive_keys_reauth(data->counter, 89039beb93cSSam Leffler data->reauth_id, data->reauth_id_len, 89139beb93cSSam Leffler data->nonce_s, data->mk, data->msk, 89239beb93cSSam Leffler data->emsk); 893*f05cddf9SRui Paulo eap_sim_clear_identities(sm, data, CLEAR_REAUTH_ID | CLEAR_EAP_ID); 894*f05cddf9SRui Paulo eap_sim_learn_ids(sm, data, &eattr); 89539beb93cSSam Leffler 89639beb93cSSam Leffler if (data->result_ind && attr->result_ind) 89739beb93cSSam Leffler data->use_result_ind = 1; 89839beb93cSSam Leffler 89939beb93cSSam Leffler if (data->state != FAILURE && data->state != RESULT_FAILURE) { 90039beb93cSSam Leffler eap_sim_state(data, data->use_result_ind ? 90139beb93cSSam Leffler RESULT_SUCCESS : SUCCESS); 90239beb93cSSam Leffler } 90339beb93cSSam Leffler 90439beb93cSSam Leffler data->num_id_req = 0; 90539beb93cSSam Leffler data->num_notification = 0; 90639beb93cSSam Leffler if (data->counter > EAP_SIM_MAX_FAST_REAUTHS) { 90739beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: Maximum number of " 90839beb93cSSam Leffler "fast reauths performed - force fullauth"); 909*f05cddf9SRui Paulo eap_sim_clear_identities(sm, data, 910*f05cddf9SRui Paulo CLEAR_REAUTH_ID | CLEAR_EAP_ID); 91139beb93cSSam Leffler } 91239beb93cSSam Leffler os_free(decrypted); 913*f05cddf9SRui Paulo return eap_sim_response_reauth(data, id, 0, data->nonce_s); 91439beb93cSSam Leffler } 91539beb93cSSam Leffler 91639beb93cSSam Leffler 91739beb93cSSam Leffler static struct wpabuf * eap_sim_process(struct eap_sm *sm, void *priv, 91839beb93cSSam Leffler struct eap_method_ret *ret, 91939beb93cSSam Leffler const struct wpabuf *reqData) 92039beb93cSSam Leffler { 92139beb93cSSam Leffler struct eap_sim_data *data = priv; 92239beb93cSSam Leffler const struct eap_hdr *req; 92339beb93cSSam Leffler u8 subtype, id; 92439beb93cSSam Leffler struct wpabuf *res; 92539beb93cSSam Leffler const u8 *pos; 92639beb93cSSam Leffler struct eap_sim_attrs attr; 92739beb93cSSam Leffler size_t len; 92839beb93cSSam Leffler 92939beb93cSSam Leffler wpa_hexdump_buf(MSG_DEBUG, "EAP-SIM: EAP data", reqData); 93039beb93cSSam Leffler if (eap_get_config_identity(sm, &len) == NULL) { 93139beb93cSSam Leffler wpa_printf(MSG_INFO, "EAP-SIM: Identity not configured"); 93239beb93cSSam Leffler eap_sm_request_identity(sm); 93339beb93cSSam Leffler ret->ignore = TRUE; 93439beb93cSSam Leffler return NULL; 93539beb93cSSam Leffler } 93639beb93cSSam Leffler 93739beb93cSSam Leffler pos = eap_hdr_validate(EAP_VENDOR_IETF, EAP_TYPE_SIM, reqData, &len); 93839beb93cSSam Leffler if (pos == NULL || len < 1) { 93939beb93cSSam Leffler ret->ignore = TRUE; 94039beb93cSSam Leffler return NULL; 94139beb93cSSam Leffler } 94239beb93cSSam Leffler req = wpabuf_head(reqData); 94339beb93cSSam Leffler id = req->identifier; 94439beb93cSSam Leffler len = be_to_host16(req->length); 94539beb93cSSam Leffler 94639beb93cSSam Leffler ret->ignore = FALSE; 94739beb93cSSam Leffler ret->methodState = METHOD_MAY_CONT; 94839beb93cSSam Leffler ret->decision = DECISION_FAIL; 94939beb93cSSam Leffler ret->allowNotifications = TRUE; 95039beb93cSSam Leffler 95139beb93cSSam Leffler subtype = *pos++; 95239beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: Subtype=%d", subtype); 95339beb93cSSam Leffler pos += 2; /* Reserved */ 95439beb93cSSam Leffler 95539beb93cSSam Leffler if (eap_sim_parse_attr(pos, wpabuf_head_u8(reqData) + len, &attr, 0, 95639beb93cSSam Leffler 0)) { 95739beb93cSSam Leffler res = eap_sim_client_error(data, id, 95839beb93cSSam Leffler EAP_SIM_UNABLE_TO_PROCESS_PACKET); 95939beb93cSSam Leffler goto done; 96039beb93cSSam Leffler } 96139beb93cSSam Leffler 96239beb93cSSam Leffler switch (subtype) { 96339beb93cSSam Leffler case EAP_SIM_SUBTYPE_START: 96439beb93cSSam Leffler res = eap_sim_process_start(sm, data, id, &attr); 96539beb93cSSam Leffler break; 96639beb93cSSam Leffler case EAP_SIM_SUBTYPE_CHALLENGE: 96739beb93cSSam Leffler res = eap_sim_process_challenge(sm, data, id, reqData, &attr); 96839beb93cSSam Leffler break; 96939beb93cSSam Leffler case EAP_SIM_SUBTYPE_NOTIFICATION: 97039beb93cSSam Leffler res = eap_sim_process_notification(sm, data, id, reqData, 97139beb93cSSam Leffler &attr); 97239beb93cSSam Leffler break; 97339beb93cSSam Leffler case EAP_SIM_SUBTYPE_REAUTHENTICATION: 97439beb93cSSam Leffler res = eap_sim_process_reauthentication(sm, data, id, reqData, 97539beb93cSSam Leffler &attr); 97639beb93cSSam Leffler break; 97739beb93cSSam Leffler case EAP_SIM_SUBTYPE_CLIENT_ERROR: 97839beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: subtype Client-Error"); 97939beb93cSSam Leffler res = eap_sim_client_error(data, id, 98039beb93cSSam Leffler EAP_SIM_UNABLE_TO_PROCESS_PACKET); 98139beb93cSSam Leffler break; 98239beb93cSSam Leffler default: 98339beb93cSSam Leffler wpa_printf(MSG_DEBUG, "EAP-SIM: Unknown subtype=%d", subtype); 98439beb93cSSam Leffler res = eap_sim_client_error(data, id, 98539beb93cSSam Leffler EAP_SIM_UNABLE_TO_PROCESS_PACKET); 98639beb93cSSam Leffler break; 98739beb93cSSam Leffler } 98839beb93cSSam Leffler 98939beb93cSSam Leffler done: 99039beb93cSSam Leffler if (data->state == FAILURE) { 99139beb93cSSam Leffler ret->decision = DECISION_FAIL; 99239beb93cSSam Leffler ret->methodState = METHOD_DONE; 99339beb93cSSam Leffler } else if (data->state == SUCCESS) { 99439beb93cSSam Leffler ret->decision = data->use_result_ind ? 99539beb93cSSam Leffler DECISION_UNCOND_SUCC : DECISION_COND_SUCC; 99639beb93cSSam Leffler ret->methodState = data->use_result_ind ? 99739beb93cSSam Leffler METHOD_DONE : METHOD_MAY_CONT; 99839beb93cSSam Leffler } else if (data->state == RESULT_FAILURE) 99939beb93cSSam Leffler ret->methodState = METHOD_CONT; 100039beb93cSSam Leffler else if (data->state == RESULT_SUCCESS) 100139beb93cSSam Leffler ret->methodState = METHOD_CONT; 100239beb93cSSam Leffler 100339beb93cSSam Leffler if (ret->methodState == METHOD_DONE) { 100439beb93cSSam Leffler ret->allowNotifications = FALSE; 100539beb93cSSam Leffler } 100639beb93cSSam Leffler 100739beb93cSSam Leffler return res; 100839beb93cSSam Leffler } 100939beb93cSSam Leffler 101039beb93cSSam Leffler 101139beb93cSSam Leffler static Boolean eap_sim_has_reauth_data(struct eap_sm *sm, void *priv) 101239beb93cSSam Leffler { 101339beb93cSSam Leffler struct eap_sim_data *data = priv; 101439beb93cSSam Leffler return data->pseudonym || data->reauth_id; 101539beb93cSSam Leffler } 101639beb93cSSam Leffler 101739beb93cSSam Leffler 101839beb93cSSam Leffler static void eap_sim_deinit_for_reauth(struct eap_sm *sm, void *priv) 101939beb93cSSam Leffler { 102039beb93cSSam Leffler struct eap_sim_data *data = priv; 1021*f05cddf9SRui Paulo eap_sim_clear_identities(sm, data, CLEAR_EAP_ID); 102239beb93cSSam Leffler data->use_result_ind = 0; 102339beb93cSSam Leffler } 102439beb93cSSam Leffler 102539beb93cSSam Leffler 102639beb93cSSam Leffler static void * eap_sim_init_for_reauth(struct eap_sm *sm, void *priv) 102739beb93cSSam Leffler { 102839beb93cSSam Leffler struct eap_sim_data *data = priv; 1029*f05cddf9SRui Paulo if (random_get_bytes(data->nonce_mt, EAP_SIM_NONCE_MT_LEN)) { 103039beb93cSSam Leffler wpa_printf(MSG_WARNING, "EAP-SIM: Failed to get random data " 103139beb93cSSam Leffler "for NONCE_MT"); 103239beb93cSSam Leffler os_free(data); 103339beb93cSSam Leffler return NULL; 103439beb93cSSam Leffler } 103539beb93cSSam Leffler data->num_id_req = 0; 103639beb93cSSam Leffler data->num_notification = 0; 103739beb93cSSam Leffler eap_sim_state(data, CONTINUE); 103839beb93cSSam Leffler return priv; 103939beb93cSSam Leffler } 104039beb93cSSam Leffler 104139beb93cSSam Leffler 104239beb93cSSam Leffler static const u8 * eap_sim_get_identity(struct eap_sm *sm, void *priv, 104339beb93cSSam Leffler size_t *len) 104439beb93cSSam Leffler { 104539beb93cSSam Leffler struct eap_sim_data *data = priv; 104639beb93cSSam Leffler 104739beb93cSSam Leffler if (data->reauth_id) { 104839beb93cSSam Leffler *len = data->reauth_id_len; 104939beb93cSSam Leffler return data->reauth_id; 105039beb93cSSam Leffler } 105139beb93cSSam Leffler 105239beb93cSSam Leffler if (data->pseudonym) { 105339beb93cSSam Leffler *len = data->pseudonym_len; 105439beb93cSSam Leffler return data->pseudonym; 105539beb93cSSam Leffler } 105639beb93cSSam Leffler 105739beb93cSSam Leffler return NULL; 105839beb93cSSam Leffler } 105939beb93cSSam Leffler 106039beb93cSSam Leffler 106139beb93cSSam Leffler static Boolean eap_sim_isKeyAvailable(struct eap_sm *sm, void *priv) 106239beb93cSSam Leffler { 106339beb93cSSam Leffler struct eap_sim_data *data = priv; 106439beb93cSSam Leffler return data->state == SUCCESS; 106539beb93cSSam Leffler } 106639beb93cSSam Leffler 106739beb93cSSam Leffler 106839beb93cSSam Leffler static u8 * eap_sim_getKey(struct eap_sm *sm, void *priv, size_t *len) 106939beb93cSSam Leffler { 107039beb93cSSam Leffler struct eap_sim_data *data = priv; 107139beb93cSSam Leffler u8 *key; 107239beb93cSSam Leffler 107339beb93cSSam Leffler if (data->state != SUCCESS) 107439beb93cSSam Leffler return NULL; 107539beb93cSSam Leffler 107639beb93cSSam Leffler key = os_malloc(EAP_SIM_KEYING_DATA_LEN); 107739beb93cSSam Leffler if (key == NULL) 107839beb93cSSam Leffler return NULL; 107939beb93cSSam Leffler 108039beb93cSSam Leffler *len = EAP_SIM_KEYING_DATA_LEN; 108139beb93cSSam Leffler os_memcpy(key, data->msk, EAP_SIM_KEYING_DATA_LEN); 108239beb93cSSam Leffler 108339beb93cSSam Leffler return key; 108439beb93cSSam Leffler } 108539beb93cSSam Leffler 108639beb93cSSam Leffler 108739beb93cSSam Leffler static u8 * eap_sim_get_emsk(struct eap_sm *sm, void *priv, size_t *len) 108839beb93cSSam Leffler { 108939beb93cSSam Leffler struct eap_sim_data *data = priv; 109039beb93cSSam Leffler u8 *key; 109139beb93cSSam Leffler 109239beb93cSSam Leffler if (data->state != SUCCESS) 109339beb93cSSam Leffler return NULL; 109439beb93cSSam Leffler 109539beb93cSSam Leffler key = os_malloc(EAP_EMSK_LEN); 109639beb93cSSam Leffler if (key == NULL) 109739beb93cSSam Leffler return NULL; 109839beb93cSSam Leffler 109939beb93cSSam Leffler *len = EAP_EMSK_LEN; 110039beb93cSSam Leffler os_memcpy(key, data->emsk, EAP_EMSK_LEN); 110139beb93cSSam Leffler 110239beb93cSSam Leffler return key; 110339beb93cSSam Leffler } 110439beb93cSSam Leffler 110539beb93cSSam Leffler 110639beb93cSSam Leffler int eap_peer_sim_register(void) 110739beb93cSSam Leffler { 110839beb93cSSam Leffler struct eap_method *eap; 110939beb93cSSam Leffler int ret; 111039beb93cSSam Leffler 111139beb93cSSam Leffler eap = eap_peer_method_alloc(EAP_PEER_METHOD_INTERFACE_VERSION, 111239beb93cSSam Leffler EAP_VENDOR_IETF, EAP_TYPE_SIM, "SIM"); 111339beb93cSSam Leffler if (eap == NULL) 111439beb93cSSam Leffler return -1; 111539beb93cSSam Leffler 111639beb93cSSam Leffler eap->init = eap_sim_init; 111739beb93cSSam Leffler eap->deinit = eap_sim_deinit; 111839beb93cSSam Leffler eap->process = eap_sim_process; 111939beb93cSSam Leffler eap->isKeyAvailable = eap_sim_isKeyAvailable; 112039beb93cSSam Leffler eap->getKey = eap_sim_getKey; 112139beb93cSSam Leffler eap->has_reauth_data = eap_sim_has_reauth_data; 112239beb93cSSam Leffler eap->deinit_for_reauth = eap_sim_deinit_for_reauth; 112339beb93cSSam Leffler eap->init_for_reauth = eap_sim_init_for_reauth; 112439beb93cSSam Leffler eap->get_identity = eap_sim_get_identity; 112539beb93cSSam Leffler eap->get_emsk = eap_sim_get_emsk; 112639beb93cSSam Leffler 112739beb93cSSam Leffler ret = eap_peer_method_register(eap); 112839beb93cSSam Leffler if (ret) 112939beb93cSSam Leffler eap_peer_method_free(eap); 113039beb93cSSam Leffler return ret; 113139beb93cSSam Leffler } 1132