src/eap_peer/eap_pwd.c

28 	EAP_PWD_group *grp;
152 	if (data->grp) {
153 		EC_GROUP_free(data->grp->group);
154 		EC_POINT_free(data->grp->pwe);
155 		BN_free(data->grp->order);
156 		BN_free(data->grp->prime);
157 		os_free(data->grp);
225 	if ((data->grp = (EAP_PWD_group *) os_malloc(sizeof(EAP_PWD_group))) ==
234 	if (compute_password_element(data->grp, data->group_num,
245 		   BN_num_bits(data->grp->prime));
276 	    ((data->my_element = EC_POINT_new(data->grp->group)) == NULL) ||
284 	if (!EC_GROUP_get_cofactor(data->grp->group, cofactor, NULL)) {
290 	BN_rand_range(data->private_value, data->grp->order);
291 	BN_rand_range(mask, data->grp->order);
293 	BN_mod(data->my_scalar, data->my_scalar, data->grp->order,
296 	if (!EC_POINT_mul(data->grp->group, data->my_element, NULL,
297 			  data->grp->pwe, mask, data->bnctx)) {
304 	if (!EC_POINT_invert(data->grp->group, data->my_element, data->bnctx))
320 	    ((K = EC_POINT_new(data->grp->group)) == NULL) ||
321 	    ((point = EC_POINT_new(data->grp->group)) == NULL) ||
322 	    ((data->server_element = EC_POINT_new(data->grp->group)) == NULL))
331 	BN_bin2bn(ptr, BN_num_bytes(data->grp->prime), x);
332 	ptr += BN_num_bytes(data->grp->prime);
333 	BN_bin2bn(ptr, BN_num_bytes(data->grp->prime), y);
334 	ptr += BN_num_bytes(data->grp->prime);
335 	BN_bin2bn(ptr, BN_num_bytes(data->grp->order), data->server_scalar);
336 	if (!EC_POINT_set_affine_coordinates_GFp(data->grp->group,
346 		if (!EC_POINT_mul(data->grp->group, point, NULL,
352 		if (EC_POINT_is_at_infinity(data->grp->group, point)) {
360 	if ((!EC_POINT_mul(data->grp->group, K, NULL, data->grp->pwe,
362 	    (!EC_POINT_add(data->grp->group, K, K, data->server_element,
364 	    (!EC_POINT_mul(data->grp->group, K, NULL, K, data->private_value,
373 		if (!EC_POINT_mul(data->grp->group, K, NULL, K, cofactor,
387 	if (EC_POINT_is_at_infinity(data->grp->group, K)) {
393 	if (!EC_POINT_get_affine_coordinates_GFp(data->grp->group, K, data->k,
401 	if (!EC_POINT_get_affine_coordinates_GFp(data->grp->group,
408 	if (((scalar = os_malloc(BN_num_bytes(data->grp->order))) == NULL) ||
409 	    ((element = os_malloc(BN_num_bytes(data->grp->prime) * 2)) ==
420 	os_memset(scalar, 0, BN_num_bytes(data->grp->order));
421 	os_memset(element, 0, BN_num_bytes(data->grp->prime) * 2);
422 	offset = BN_num_bytes(data->grp->order) -
426 	offset = BN_num_bytes(data->grp->prime) - BN_num_bytes(x);
428 	offset = BN_num_bytes(data->grp->prime) - BN_num_bytes(y);
429 	BN_bn2bin(y, element + BN_num_bytes(data->grp->prime) + offset);
431 	data->outbuf = wpabuf_alloc(BN_num_bytes(data->grp->order) +
432 				    2 * BN_num_bytes(data->grp->prime));
438 			2 * BN_num_bytes(data->grp->prime));
439 	wpabuf_put_data(data->outbuf, scalar, BN_num_bytes(data->grp->order));
465 	u16 grp;
473 	grp = htons(data->group_num);
475 	os_memcpy(ptr, &grp, sizeof(u16));
482 	if (((cruft = os_malloc(BN_num_bytes(data->grp->prime))) == NULL) ||
501 	os_memset(cruft, 0, BN_num_bytes(data->grp->prime));
502 	offset = BN_num_bytes(data->grp->prime) - BN_num_bytes(data->k);
504 	eap_pwd_h_update(hash, cruft, BN_num_bytes(data->grp->prime));
507 	if (!EC_POINT_get_affine_coordinates_GFp(data->grp->group,
514 	os_memset(cruft, 0, BN_num_bytes(data->grp->prime));
515 	offset = BN_num_bytes(data->grp->prime) - BN_num_bytes(x);
517 	eap_pwd_h_update(hash, cruft, BN_num_bytes(data->grp->prime));
518 	os_memset(cruft, 0, BN_num_bytes(data->grp->prime));
519 	offset = BN_num_bytes(data->grp->prime) - BN_num_bytes(y);
521 	eap_pwd_h_update(hash, cruft, BN_num_bytes(data->grp->prime));
524 	os_memset(cruft, 0, BN_num_bytes(data->grp->prime));
525 	offset = BN_num_bytes(data->grp->order) -
528 	eap_pwd_h_update(hash, cruft, BN_num_bytes(data->grp->order));
531 	if (!EC_POINT_get_affine_coordinates_GFp(data->grp->group,
539 	os_memset(cruft, 0, BN_num_bytes(data->grp->prime));
540 	offset = BN_num_bytes(data->grp->prime) - BN_num_bytes(x);
542 	eap_pwd_h_update(hash, cruft, BN_num_bytes(data->grp->prime));
543 	os_memset(cruft, 0, BN_num_bytes(data->grp->prime));
544 	offset = BN_num_bytes(data->grp->prime) - BN_num_bytes(y);
546 	eap_pwd_h_update(hash, cruft, BN_num_bytes(data->grp->prime));
549 	os_memset(cruft, 0, BN_num_bytes(data->grp->prime));
550 	offset = BN_num_bytes(data->grp->order) -
553 	eap_pwd_h_update(hash, cruft, BN_num_bytes(data->grp->order));
579 	os_memset(cruft, 0, BN_num_bytes(data->grp->prime));
580 	offset = BN_num_bytes(data->grp->prime) - BN_num_bytes(data->k);
582 	eap_pwd_h_update(hash, cruft, BN_num_bytes(data->grp->prime));
585 	if (!EC_POINT_get_affine_coordinates_GFp(data->grp->group,
592 	os_memset(cruft, 0, BN_num_bytes(data->grp->prime));
593 	offset = BN_num_bytes(data->grp->prime) - BN_num_bytes(x);
595 	eap_pwd_h_update(hash, cruft, BN_num_bytes(data->grp->prime));
596 	os_memset(cruft, 0, BN_num_bytes(data->grp->prime));
597 	offset = BN_num_bytes(data->grp->prime) - BN_num_bytes(y);
599 	eap_pwd_h_update(hash, cruft, BN_num_bytes(data->grp->prime));
602 	os_memset(cruft, 0, BN_num_bytes(data->grp->prime));
603 	offset = BN_num_bytes(data->grp->order) -
606 	eap_pwd_h_update(hash, cruft, BN_num_bytes(data->grp->order));
609 	if (!EC_POINT_get_affine_coordinates_GFp(data->grp->group,
616 	os_memset(cruft, 0, BN_num_bytes(data->grp->prime));
617 	offset = BN_num_bytes(data->grp->prime) - BN_num_bytes(x);
619 	eap_pwd_h_update(hash, cruft, BN_num_bytes(data->grp->prime));
620 	os_memset(cruft, 0, BN_num_bytes(data->grp->prime));
621 	offset = BN_num_bytes(data->grp->prime) - BN_num_bytes(y);
623 	eap_pwd_h_update(hash, cruft, BN_num_bytes(data->grp->prime));
626 	os_memset(cruft, 0, BN_num_bytes(data->grp->prime));
627 	offset = BN_num_bytes(data->grp->order) -
630 	eap_pwd_h_update(hash, cruft, BN_num_bytes(data->grp->order));
638 	if (compute_keys(data->grp, data->bnctx, data->k,