fcrypt.c revision 109998
155714Skris/* NOCW */
255714Skris#include <stdio.h>
355714Skris#ifdef _OSD_POSIX
455714Skris#ifndef CHARSET_EBCDIC
555714Skris#define CHARSET_EBCDIC 1
655714Skris#endif
755714Skris#endif
855714Skris#ifdef CHARSET_EBCDIC
955714Skris#include <openssl/ebcdic.h>
1055714Skris#endif
1155714Skris
1259191Skris/* This version of crypt has been developed from my MIT compatible
1355714Skris * DES library.
1455714Skris * Eric Young (eay@cryptsoft.com)
1555714Skris */
1655714Skris
1755714Skris/* Modification by Jens Kupferschmidt (Cu)
1855714Skris * I have included directive PARA for shared memory computers.
1955714Skris * I have included a directive LONGCRYPT to using this routine to cipher
2055714Skris * passwords with more then 8 bytes like HP-UX 10.x it used. The MAXPLEN
2159191Skris * definition is the maximum of length of password and can changed. I have
2255714Skris * defined 24.
2355714Skris */
2455714Skris
2555714Skris#include "des_locl.h"
2655714Skris
2755714Skris/* Added more values to handle illegal salt values the way normal
2855714Skris * crypt() implementations do.  The patch was sent by
2955714Skris * Bjorn Gronvall <bg@sics.se>
3055714Skris */
3155714Skrisstatic unsigned const char con_salt[128]={
3255714Skris0xD2,0xD3,0xD4,0xD5,0xD6,0xD7,0xD8,0xD9,
3355714Skris0xDA,0xDB,0xDC,0xDD,0xDE,0xDF,0xE0,0xE1,
3455714Skris0xE2,0xE3,0xE4,0xE5,0xE6,0xE7,0xE8,0xE9,
3555714Skris0xEA,0xEB,0xEC,0xED,0xEE,0xEF,0xF0,0xF1,
3655714Skris0xF2,0xF3,0xF4,0xF5,0xF6,0xF7,0xF8,0xF9,
3755714Skris0xFA,0xFB,0xFC,0xFD,0xFE,0xFF,0x00,0x01,
3855714Skris0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x09,
3955714Skris0x0A,0x0B,0x05,0x06,0x07,0x08,0x09,0x0A,
4055714Skris0x0B,0x0C,0x0D,0x0E,0x0F,0x10,0x11,0x12,
4155714Skris0x13,0x14,0x15,0x16,0x17,0x18,0x19,0x1A,
4255714Skris0x1B,0x1C,0x1D,0x1E,0x1F,0x20,0x21,0x22,
4355714Skris0x23,0x24,0x25,0x20,0x21,0x22,0x23,0x24,
4455714Skris0x25,0x26,0x27,0x28,0x29,0x2A,0x2B,0x2C,
4555714Skris0x2D,0x2E,0x2F,0x30,0x31,0x32,0x33,0x34,
4655714Skris0x35,0x36,0x37,0x38,0x39,0x3A,0x3B,0x3C,
4755714Skris0x3D,0x3E,0x3F,0x40,0x41,0x42,0x43,0x44,
4855714Skris};
4955714Skris
5055714Skrisstatic unsigned const char cov_2char[64]={
5155714Skris0x2E,0x2F,0x30,0x31,0x32,0x33,0x34,0x35,
5255714Skris0x36,0x37,0x38,0x39,0x41,0x42,0x43,0x44,
5355714Skris0x45,0x46,0x47,0x48,0x49,0x4A,0x4B,0x4C,
5455714Skris0x4D,0x4E,0x4F,0x50,0x51,0x52,0x53,0x54,
5555714Skris0x55,0x56,0x57,0x58,0x59,0x5A,0x61,0x62,
5655714Skris0x63,0x64,0x65,0x66,0x67,0x68,0x69,0x6A,
5755714Skris0x6B,0x6C,0x6D,0x6E,0x6F,0x70,0x71,0x72,
5855714Skris0x73,0x74,0x75,0x76,0x77,0x78,0x79,0x7A
5955714Skris};
6055714Skris
61109998Smarkmvoid fcrypt_body(DES_LONG *out,DES_key_schedule *ks,
62109998Smarkm		 DES_LONG Eswap0, DES_LONG Eswap1);
6355714Skris
64109998Smarkmchar *DES_crypt(const char *buf, const char *salt)
6555714Skris	{
6655714Skris	static char buff[14];
6755714Skris
6855714Skris#ifndef CHARSET_EBCDIC
69109998Smarkm	return(DES_fcrypt(buf,salt,buff));
7055714Skris#else
7155714Skris	char e_salt[2+1];
7255714Skris	char e_buf[32+1];	/* replace 32 by 8 ? */
7355714Skris	char *ret;
7455714Skris
7555714Skris	/* Copy at most 2 chars of salt */
7655714Skris	if ((e_salt[0] = salt[0]) != '\0')
7755714Skris	    e_salt[1] = salt[1];
7855714Skris
7955714Skris	/* Copy at most 32 chars of password */
8055714Skris	strncpy (e_buf, buf, sizeof(e_buf));
8155714Skris
8255714Skris	/* Make sure we have a delimiter */
8355714Skris	e_salt[sizeof(e_salt)-1] = e_buf[sizeof(e_buf)-1] = '\0';
8455714Skris
85109998Smarkm	/* Convert the e_salt to ASCII, as that's what DES_fcrypt works on */
8655714Skris	ebcdic2ascii(e_salt, e_salt, sizeof e_salt);
8755714Skris
8855714Skris	/* Convert the cleartext password to ASCII */
8955714Skris	ebcdic2ascii(e_buf, e_buf, sizeof e_buf);
9055714Skris
9155714Skris	/* Encrypt it (from/to ASCII) */
92109998Smarkm	ret = DES_fcrypt(e_buf,e_salt,buff);
9355714Skris
9455714Skris	/* Convert the result back to EBCDIC */
9555714Skris	ascii2ebcdic(ret, ret, strlen(ret));
9655714Skris
9755714Skris	return ret;
9855714Skris#endif
9955714Skris	}
10055714Skris
10155714Skris
102109998Smarkmchar *DES_fcrypt(const char *buf, const char *salt, char *ret)
10355714Skris	{
10455714Skris	unsigned int i,j,x,y;
10555714Skris	DES_LONG Eswap0,Eswap1;
10655714Skris	DES_LONG out[2],ll;
107109998Smarkm	DES_cblock key;
108109998Smarkm	DES_key_schedule ks;
10955714Skris	unsigned char bb[9];
11055714Skris	unsigned char *b=bb;
11155714Skris	unsigned char c,u;
11255714Skris
11355714Skris	/* eay 25/08/92
11455714Skris	 * If you call crypt("pwd","*") as often happens when you
11555714Skris	 * have * as the pwd field in /etc/passwd, the function
11655714Skris	 * returns *\0XXXXXXXXX
11755714Skris	 * The \0 makes the string look like * so the pwd "*" would
11855714Skris	 * crypt to "*".  This was found when replacing the crypt in
11959191Skris	 * our shared libraries.  People found that the disabled
12059191Skris	 * accounts effectively had no passwd :-(. */
12155714Skris#ifndef CHARSET_EBCDIC
12255714Skris	x=ret[0]=((salt[0] == '\0')?'A':salt[0]);
12355714Skris	Eswap0=con_salt[x]<<2;
12455714Skris	x=ret[1]=((salt[1] == '\0')?'A':salt[1]);
12555714Skris	Eswap1=con_salt[x]<<6;
12655714Skris#else
12755714Skris	x=ret[0]=((salt[0] == '\0')?os_toascii['A']:salt[0]);
12855714Skris	Eswap0=con_salt[x]<<2;
12955714Skris	x=ret[1]=((salt[1] == '\0')?os_toascii['A']:salt[1]);
13055714Skris	Eswap1=con_salt[x]<<6;
13155714Skris#endif
13255714Skris
13355714Skris/* EAY
13455714Skrisr=strlen(buf);
13555714Skrisr=(r+7)/8;
13655714Skris*/
13755714Skris	for (i=0; i<8; i++)
13855714Skris		{
13955714Skris		c= *(buf++);
14055714Skris		if (!c) break;
14155714Skris		key[i]=(c<<1);
14255714Skris		}
14355714Skris	for (; i<8; i++)
14455714Skris		key[i]=0;
14555714Skris
146109998Smarkm	DES_set_key_unchecked(&key,&ks);
147109998Smarkm	fcrypt_body(&(out[0]),&ks,Eswap0,Eswap1);
14855714Skris
14955714Skris	ll=out[0]; l2c(ll,b);
15055714Skris	ll=out[1]; l2c(ll,b);
15155714Skris	y=0;
15255714Skris	u=0x80;
15355714Skris	bb[8]=0;
15455714Skris	for (i=2; i<13; i++)
15555714Skris		{
15655714Skris		c=0;
15755714Skris		for (j=0; j<6; j++)
15855714Skris			{
15955714Skris			c<<=1;
16055714Skris			if (bb[y] & u) c|=1;
16155714Skris			u>>=1;
16255714Skris			if (!u)
16355714Skris				{
16455714Skris				y++;
16555714Skris				u=0x80;
16655714Skris				}
16755714Skris			}
16855714Skris		ret[i]=cov_2char[c];
16955714Skris		}
17055714Skris	ret[13]='\0';
17155714Skris	return(ret);
17255714Skris	}
17355714Skris
174