1 /* SPDX-License-Identifier: GPL-2.0-or-later */ 2 /* 3 * Copyright (C) 2018 Samsung Electronics Co., Ltd. 4 */ 5 6 #ifndef __AUTH_H__ 7 #define __AUTH_H__ 8 9 #include "ntlmssp.h" 10 11 #ifdef CONFIG_SMB_SERVER_KERBEROS5 12 #define AUTH_GSS_LENGTH 96 13 #define AUTH_GSS_PADDING 0 14 #else 15 #define AUTH_GSS_LENGTH 74 16 #define AUTH_GSS_PADDING 6 17 #endif 18 19 #define CIFS_HMAC_MD5_HASH_SIZE (16) 20 #define CIFS_NTHASH_SIZE (16) 21 22 /* 23 * Size of the ntlm client response 24 */ 25 #define CIFS_AUTH_RESP_SIZE 24 26 #define CIFS_SMB1_SIGNATURE_SIZE 8 27 #define CIFS_SMB1_SESSKEY_SIZE 16 28 29 #define KSMBD_AUTH_NTLMSSP 0x0001 30 #define KSMBD_AUTH_KRB5 0x0002 31 #define KSMBD_AUTH_MSKRB5 0x0004 32 #define KSMBD_AUTH_KRB5U2U 0x0008 33 34 struct ksmbd_session; 35 struct ksmbd_conn; 36 struct ksmbd_work; 37 struct kvec; 38 39 int ksmbd_crypt_message(struct ksmbd_work *work, struct kvec *iov, 40 unsigned int nvec, int enc); 41 int ksmbd_crypt_rdma(struct ksmbd_conn *conn, const u8 *key, 42 void *buf, unsigned int buflen, const u8 *nonce, 43 unsigned int nonce_len, u8 *tag, unsigned int tag_len, 44 bool enc); 45 void ksmbd_copy_gss_neg_header(void *buf); 46 int ksmbd_auth_ntlmv2(struct ksmbd_conn *conn, struct ksmbd_session *sess, 47 struct ntlmv2_resp *ntlmv2, int blen, char *domain_name, 48 char *cryptkey, char *sess_key); 49 int ksmbd_decode_ntlmssp_auth_blob(struct authenticate_message *authblob, 50 int blob_len, struct ksmbd_conn *conn, 51 struct ksmbd_session *sess, char *sess_key); 52 int ksmbd_decode_ntlmssp_neg_blob(struct negotiate_message *negblob, 53 int blob_len, struct ksmbd_conn *conn); 54 unsigned int 55 ksmbd_build_ntlmssp_challenge_blob(struct challenge_message *chgblob, 56 struct ksmbd_conn *conn); 57 int ksmbd_krb5_authenticate(struct ksmbd_session *sess, char *in_blob, 58 int in_len, char *out_blob, int *out_len, 59 char *sess_key); 60 void ksmbd_sign_smb2_pdu(struct ksmbd_conn *conn, char *key, struct kvec *iov, 61 int n_vec, char *sig); 62 void ksmbd_sign_smb3_pdu(struct ksmbd_conn *conn, char *key, struct kvec *iov, 63 int n_vec, char *sig); 64 int ksmbd_gen_smb30_signingkey(struct ksmbd_session *sess, 65 struct ksmbd_conn *conn); 66 int ksmbd_gen_smb311_signingkey(struct ksmbd_session *sess, 67 struct ksmbd_conn *conn); 68 void ksmbd_gen_smb30_encryptionkey(struct ksmbd_conn *conn, 69 struct ksmbd_session *sess); 70 void ksmbd_gen_smb311_encryptionkey(struct ksmbd_conn *conn, 71 struct ksmbd_session *sess); 72 int ksmbd_gen_preauth_integrity_hash(struct ksmbd_conn *conn, char *buf, 73 __u8 *pi_hash); 74 #endif 75