1/*
2 * Copyright (c) 1997 - 2008 Kungliga Tekniska H��gskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
4 * All rights reserved.
5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 *
10 * 1. Redistributions of source code must retain the above copyright
11 *    notice, this list of conditions and the following disclaimer.
12 *
13 * 2. Redistributions in binary form must reproduce the above copyright
14 *    notice, this list of conditions and the following disclaimer in the
15 *    documentation and/or other materials provided with the distribution.
16 *
17 * 3. Neither the name of the Institute nor the names of its contributors
18 *    may be used to endorse or promote products derived from this software
19 *    without specific prior written permission.
20 *
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31 * SUCH DAMAGE.
32 */
33
34#include "krb5_locl.h"
35
36/*
37 *
38 */
39
40static void
41DES3_random_key(krb5_context context,
42		krb5_keyblock *key)
43{
44    DES_cblock *k = key->keyvalue.data;
45    do {
46	krb5_generate_random_block(k, 3 * sizeof(DES_cblock));
47	DES_set_odd_parity(&k[0]);
48	DES_set_odd_parity(&k[1]);
49	DES_set_odd_parity(&k[2]);
50    } while(DES_is_weak_key(&k[0]) ||
51	    DES_is_weak_key(&k[1]) ||
52	    DES_is_weak_key(&k[2]));
53}
54
55
56#ifdef DES3_OLD_ENCTYPE
57static struct _krb5_key_type keytype_des3 = {
58    ETYPE_OLD_DES3_CBC_SHA1,
59    "des3",
60    168,
61    24,
62    sizeof(struct _krb5_evp_schedule),
63    DES3_random_key,
64    _krb5_evp_schedule,
65    _krb5_des3_salt,
66    _krb5_DES3_random_to_key,
67    _krb5_evp_cleanup,
68    EVP_des_ede3_cbc
69};
70#endif
71
72static struct _krb5_key_type keytype_des3_derived = {
73    ETYPE_OLD_DES3_CBC_SHA1,
74    "des3",
75    168,
76    24,
77    sizeof(struct _krb5_evp_schedule),
78    DES3_random_key,
79    _krb5_evp_schedule,
80    _krb5_des3_salt_derived,
81    _krb5_DES3_random_to_key,
82    _krb5_evp_cleanup,
83    EVP_des_ede3_cbc
84};
85
86#ifdef DES3_OLD_ENCTYPE
87static krb5_error_code
88RSA_MD5_DES3_checksum(krb5_context context,
89		      struct _krb5_key_data *key,
90		      const void *data,
91		      size_t len,
92		      unsigned usage,
93		      Checksum *C)
94{
95    return _krb5_des_checksum(context, EVP_md5(), key, data, len, C);
96}
97
98static krb5_error_code
99RSA_MD5_DES3_verify(krb5_context context,
100		    struct _krb5_key_data *key,
101		    const void *data,
102		    size_t len,
103		    unsigned usage,
104		    Checksum *C)
105{
106    return _krb5_des_verify(context, EVP_md5(), key, data, len, C);
107}
108
109struct _krb5_checksum_type _krb5_checksum_rsa_md5_des3 = {
110    CKSUMTYPE_RSA_MD5_DES3,
111    "rsa-md5-des3",
112    64,
113    24,
114    F_KEYED | F_CPROOF | F_VARIANT,
115    RSA_MD5_DES3_checksum,
116    RSA_MD5_DES3_verify
117};
118#endif
119
120struct _krb5_checksum_type _krb5_checksum_hmac_sha1_des3 = {
121    CKSUMTYPE_HMAC_SHA1_DES3,
122    "hmac-sha1-des3",
123    64,
124    20,
125    F_KEYED | F_CPROOF | F_DERIVED,
126    _krb5_SP_HMAC_SHA1_checksum,
127    NULL
128};
129
130#ifdef DES3_OLD_ENCTYPE
131struct _krb5_encryption_type _krb5_enctype_des3_cbc_md5 = {
132    ETYPE_DES3_CBC_MD5,
133    "des3-cbc-md5",
134    8,
135    8,
136    8,
137    &keytype_des3,
138    &_krb5_checksum_rsa_md5,
139    &_krb5_checksum_rsa_md5_des3,
140    0,
141    _krb5_evp_encrypt,
142    0,
143    NULL
144};
145#endif
146
147struct _krb5_encryption_type _krb5_enctype_des3_cbc_sha1 = {
148    ETYPE_DES3_CBC_SHA1,
149    "des3-cbc-sha1",
150    8,
151    8,
152    8,
153    &keytype_des3_derived,
154    &_krb5_checksum_sha1,
155    &_krb5_checksum_hmac_sha1_des3,
156    F_DERIVED,
157    _krb5_evp_encrypt,
158    0,
159    NULL
160};
161
162#ifdef DES3_OLD_ENCTYPE
163struct _krb5_encryption_type _krb5_enctype_old_des3_cbc_sha1 = {
164    ETYPE_OLD_DES3_CBC_SHA1,
165    "old-des3-cbc-sha1",
166    8,
167    8,
168    8,
169    &keytype_des3,
170    &_krb5_checksum_sha1,
171    &_krb5_checksum_hmac_sha1_des3,
172    0,
173    _krb5_evp_encrypt,
174    0,
175    NULL
176};
177#endif
178
179struct _krb5_encryption_type _krb5_enctype_des3_cbc_none = {
180    ETYPE_DES3_CBC_NONE,
181    "des3-cbc-none",
182    8,
183    8,
184    0,
185    &keytype_des3_derived,
186    &_krb5_checksum_none,
187    NULL,
188    F_PSEUDO,
189    _krb5_evp_encrypt,
190    0,
191    NULL
192};
193
194void
195_krb5_DES3_random_to_key(krb5_context context,
196			 krb5_keyblock *key,
197			 const void *data,
198			 size_t size)
199{
200    unsigned char *x = key->keyvalue.data;
201    const u_char *q = data;
202    DES_cblock *k;
203    int i, j;
204
205    memset(key->keyvalue.data, 0, key->keyvalue.length);
206    for (i = 0; i < 3; ++i) {
207	unsigned char foo;
208	for (j = 0; j < 7; ++j) {
209	    unsigned char b = q[7 * i + j];
210
211	    x[8 * i + j] = b;
212	}
213	foo = 0;
214	for (j = 6; j >= 0; --j) {
215	    foo |= q[7 * i + j] & 1;
216	    foo <<= 1;
217	}
218	x[8 * i + 7] = foo;
219    }
220    k = key->keyvalue.data;
221    for (i = 0; i < 3; i++) {
222	DES_set_odd_parity(&k[i]);
223	if(DES_is_weak_key(&k[i]))
224	    _krb5_xor(&k[i], (const unsigned char*)"\0\0\0\0\0\0\0\xf0");
225    }
226}
227