xref: /freebsd/crypto/heimdal/lib/krb5/salt-arcfour.c (revision 6a068746777241722b2b32c5d0bc443a2a64d80b)
1*ae771770SStanislav Sedov /*
2*ae771770SStanislav Sedov  * Copyright (c) 1997 - 2008 Kungliga Tekniska Högskolan
3*ae771770SStanislav Sedov  * (Royal Institute of Technology, Stockholm, Sweden).
4*ae771770SStanislav Sedov  * All rights reserved.
5*ae771770SStanislav Sedov  *
6*ae771770SStanislav Sedov  * Redistribution and use in source and binary forms, with or without
7*ae771770SStanislav Sedov  * modification, are permitted provided that the following conditions
8*ae771770SStanislav Sedov  * are met:
9*ae771770SStanislav Sedov  *
10*ae771770SStanislav Sedov  * 1. Redistributions of source code must retain the above copyright
11*ae771770SStanislav Sedov  *    notice, this list of conditions and the following disclaimer.
12*ae771770SStanislav Sedov  *
13*ae771770SStanislav Sedov  * 2. Redistributions in binary form must reproduce the above copyright
14*ae771770SStanislav Sedov  *    notice, this list of conditions and the following disclaimer in the
15*ae771770SStanislav Sedov  *    documentation and/or other materials provided with the distribution.
16*ae771770SStanislav Sedov  *
17*ae771770SStanislav Sedov  * 3. Neither the name of the Institute nor the names of its contributors
18*ae771770SStanislav Sedov  *    may be used to endorse or promote products derived from this software
19*ae771770SStanislav Sedov  *    without specific prior written permission.
20*ae771770SStanislav Sedov  *
21*ae771770SStanislav Sedov  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22*ae771770SStanislav Sedov  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23*ae771770SStanislav Sedov  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24*ae771770SStanislav Sedov  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25*ae771770SStanislav Sedov  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26*ae771770SStanislav Sedov  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27*ae771770SStanislav Sedov  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28*ae771770SStanislav Sedov  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29*ae771770SStanislav Sedov  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30*ae771770SStanislav Sedov  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31*ae771770SStanislav Sedov  * SUCH DAMAGE.
32*ae771770SStanislav Sedov  */
33*ae771770SStanislav Sedov 
34*ae771770SStanislav Sedov #include "krb5_locl.h"
35*ae771770SStanislav Sedov 
36*ae771770SStanislav Sedov static krb5_error_code
ARCFOUR_string_to_key(krb5_context context,krb5_enctype enctype,krb5_data password,krb5_salt salt,krb5_data opaque,krb5_keyblock * key)37*ae771770SStanislav Sedov ARCFOUR_string_to_key(krb5_context context,
38*ae771770SStanislav Sedov 		      krb5_enctype enctype,
39*ae771770SStanislav Sedov 		      krb5_data password,
40*ae771770SStanislav Sedov 		      krb5_salt salt,
41*ae771770SStanislav Sedov 		      krb5_data opaque,
42*ae771770SStanislav Sedov 		      krb5_keyblock *key)
43*ae771770SStanislav Sedov {
44*ae771770SStanislav Sedov     krb5_error_code ret;
45*ae771770SStanislav Sedov     uint16_t *s = NULL;
46*ae771770SStanislav Sedov     size_t len = 0, i;
47*ae771770SStanislav Sedov     EVP_MD_CTX *m;
48*ae771770SStanislav Sedov 
49*ae771770SStanislav Sedov     m = EVP_MD_CTX_create();
50*ae771770SStanislav Sedov     if (m == NULL) {
51*ae771770SStanislav Sedov 	ret = ENOMEM;
52*ae771770SStanislav Sedov 	krb5_set_error_message(context, ret, N_("malloc: out of memory", ""));
53*ae771770SStanislav Sedov 	goto out;
54*ae771770SStanislav Sedov     }
55*ae771770SStanislav Sedov 
56*ae771770SStanislav Sedov     EVP_DigestInit_ex(m, EVP_md4(), NULL);
57*ae771770SStanislav Sedov 
58*ae771770SStanislav Sedov     ret = wind_utf8ucs2_length(password.data, &len);
59*ae771770SStanislav Sedov     if (ret) {
60*ae771770SStanislav Sedov 	krb5_set_error_message (context, ret,
61*ae771770SStanislav Sedov 				N_("Password not an UCS2 string", ""));
62*ae771770SStanislav Sedov 	goto out;
63*ae771770SStanislav Sedov     }
64*ae771770SStanislav Sedov 
65*ae771770SStanislav Sedov     s = malloc (len * sizeof(s[0]));
66*ae771770SStanislav Sedov     if (len != 0 && s == NULL) {
67*ae771770SStanislav Sedov 	krb5_set_error_message (context, ENOMEM,
68*ae771770SStanislav Sedov 				N_("malloc: out of memory", ""));
69*ae771770SStanislav Sedov 	ret = ENOMEM;
70*ae771770SStanislav Sedov 	goto out;
71*ae771770SStanislav Sedov     }
72*ae771770SStanislav Sedov 
73*ae771770SStanislav Sedov     ret = wind_utf8ucs2(password.data, s, &len);
74*ae771770SStanislav Sedov     if (ret) {
75*ae771770SStanislav Sedov 	krb5_set_error_message (context, ret,
76*ae771770SStanislav Sedov 				N_("Password not an UCS2 string", ""));
77*ae771770SStanislav Sedov 	goto out;
78*ae771770SStanislav Sedov     }
79*ae771770SStanislav Sedov 
80*ae771770SStanislav Sedov     /* LE encoding */
81*ae771770SStanislav Sedov     for (i = 0; i < len; i++) {
82*ae771770SStanislav Sedov 	unsigned char p;
83*ae771770SStanislav Sedov 	p = (s[i] & 0xff);
84*ae771770SStanislav Sedov 	EVP_DigestUpdate (m, &p, 1);
85*ae771770SStanislav Sedov 	p = (s[i] >> 8) & 0xff;
86*ae771770SStanislav Sedov 	EVP_DigestUpdate (m, &p, 1);
87*ae771770SStanislav Sedov     }
88*ae771770SStanislav Sedov 
89*ae771770SStanislav Sedov     key->keytype = enctype;
90*ae771770SStanislav Sedov     ret = krb5_data_alloc (&key->keyvalue, 16);
91*ae771770SStanislav Sedov     if (ret) {
92*ae771770SStanislav Sedov 	krb5_set_error_message (context, ENOMEM, N_("malloc: out of memory", ""));
93*ae771770SStanislav Sedov 	goto out;
94*ae771770SStanislav Sedov     }
95*ae771770SStanislav Sedov     EVP_DigestFinal_ex (m, key->keyvalue.data, NULL);
96*ae771770SStanislav Sedov 
97*ae771770SStanislav Sedov  out:
98*ae771770SStanislav Sedov     EVP_MD_CTX_destroy(m);
99*ae771770SStanislav Sedov     if (s)
100*ae771770SStanislav Sedov 	memset (s, 0, len);
101*ae771770SStanislav Sedov     free (s);
102*ae771770SStanislav Sedov     return ret;
103*ae771770SStanislav Sedov }
104*ae771770SStanislav Sedov 
105*ae771770SStanislav Sedov struct salt_type _krb5_arcfour_salt[] = {
106*ae771770SStanislav Sedov     {
107*ae771770SStanislav Sedov 	KRB5_PW_SALT,
108*ae771770SStanislav Sedov 	"pw-salt",
109*ae771770SStanislav Sedov 	ARCFOUR_string_to_key
110*ae771770SStanislav Sedov     },
111*ae771770SStanislav Sedov     { 0 }
112*ae771770SStanislav Sedov };
113