2 * chap_ms.c - Microsoft MS-CHAP compatible implementation.
4 * Copyright (c) 1995 Eric Rosenquist, Strata Software Limited.
5 * http://www.strataware.com/
9 * Redistribution and use in source and binary forms are permitted
10 * provided that the above copyright notice and this paragraph are
11 * duplicated in all such forms and that any documentation,
12 * advertising materials, and other materials related to such
13 * distribution and use acknowledge that the software was developed
14 * by Eric Rosenquist. The name of the author may not be used to
15 * endorse or promote products derived from this software without
16 * specific prior written permission.
18 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
19 * IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
20 * WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
22 * $FreeBSD: src/usr.sbin/pppd/chap_ms.c,v 1.8 2000/02/24 21:10:28 markm Exp $
23 * $DragonFly: src/usr.sbin/pppd/chap_ms.c,v 1.4 2004/05/20 19:24:42 cpressey Exp $
27 * Modifications by Lauri Pesonen / lpesonen@clinet.fi, april 1997
29 * Implemented LANManager type password response to MS-CHAP challenges.
30 * Now pppd provides both NT style and LANMan style blocks, and the
31 * prefered is set by option "ms-lanman". Default is to use NT.
32 * The hash text (StdText) was taken from Win95 RASAPI32.DLL.
34 * You should also use DOMAIN\\USERNAME as described in README.MSCHAP80
42 #include <sys/types.h>
56 #include <openssl/des.h>
60 u_char LANManResp
[24];
62 u_char UseNT
; /* If 1, ignore the LANMan response field */
64 /* We use MS_CHAP_RESPONSE_LEN, rather than sizeof(MS_ChapResponse),
65 in case this struct gets padded. */
68 static void ChallengeResponse(u_char
*, u_char
*, u_char
*);
69 static void DesEncrypt(u_char
*, u_char
*, u_char
*);
70 static void MakeKey(u_char
*, u_char
*);
71 static u_char
Get7Bits(u_char
*, int);
72 static void ChapMS_NT(char *, int, char *, int, MS_ChapResponse
*);
74 static void ChapMS_LANMan(char *, int, char *, int, MS_ChapResponse
*);
78 static void Expand(u_char
*, u_char
*);
79 static void Collapse(u_char
*, u_char
*);
83 ChallengeResponse(challenge
, pwHash
, response
)
84 u_char
*challenge
; /* IN 8 octets */
85 u_char
*pwHash
; /* IN 16 octets */
86 u_char
*response
; /* OUT 24 octets */
88 char ZPasswordHash
[21];
90 BZERO(ZPasswordHash
, sizeof(ZPasswordHash
));
91 BCOPY(pwHash
, ZPasswordHash
, MD4_SIGNATURE_SIZE
);
94 log_packet(ZPasswordHash
, sizeof(ZPasswordHash
), "ChallengeResponse - ZPasswordHash", LOG_DEBUG
);
97 DesEncrypt(challenge
, ZPasswordHash
+ 0, response
+ 0);
98 DesEncrypt(challenge
, ZPasswordHash
+ 7, response
+ 8);
99 DesEncrypt(challenge
, ZPasswordHash
+ 14, response
+ 16);
102 log_packet(response
, 24, "ChallengeResponse - response", LOG_DEBUG
);
109 DesEncrypt(clear
, key
, cipher
)
110 u_char
*clear
; /* IN 8 octets */
111 u_char
*key
; /* IN 7 octets */
112 u_char
*cipher
; /* OUT 8 octets */
115 u_char crypt_key
[66];
116 u_char des_input
[66];
118 MakeKey(key
, des_key
);
120 Expand(des_key
, crypt_key
);
124 CHAPDEBUG((LOG_INFO
, "DesEncrypt: 8 octet input : %02X%02X%02X%02X%02X%02X%02X%02X",
125 clear
[0], clear
[1], clear
[2], clear
[3], clear
[4], clear
[5], clear
[6], clear
[7]));
128 Expand(clear
, des_input
);
129 encrypt(des_input
, 0);
130 Collapse(des_input
, cipher
);
133 CHAPDEBUG((LOG_INFO
, "DesEncrypt: 8 octet output: %02X%02X%02X%02X%02X%02X%02X%02X",
134 cipher
[0], cipher
[1], cipher
[2], cipher
[3], cipher
[4], cipher
[5], cipher
[6], cipher
[7]));
138 #else /* USE_CRYPT */
141 DesEncrypt(clear
, key
, cipher
)
142 u_char
*clear
; /* IN 8 octets */
143 u_char
*key
; /* IN 7 octets */
144 u_char
*cipher
; /* OUT 8 octets */
147 des_key_schedule key_schedule
;
149 MakeKey(key
, des_key
);
151 des_set_key(&des_key
, key_schedule
);
154 CHAPDEBUG((LOG_INFO
, "DesEncrypt: 8 octet input : %02X%02X%02X%02X%02X%02X%02X%02X",
155 clear
[0], clear
[1], clear
[2], clear
[3], clear
[4], clear
[5], clear
[6], clear
[7]));
158 des_ecb_encrypt((des_cblock
*)clear
, (des_cblock
*)cipher
, key_schedule
, 1);
161 CHAPDEBUG((LOG_INFO
, "DesEncrypt: 8 octet output: %02X%02X%02X%02X%02X%02X%02X%02X",
162 cipher
[0], cipher
[1], cipher
[2], cipher
[3], cipher
[4], cipher
[5], cipher
[6], cipher
[7]));
166 #endif /* USE_CRYPT */
169 static u_char
Get7Bits(input
, startBit
)
175 word
= (unsigned)input
[startBit
/ 8] << 8;
176 word
|= (unsigned)input
[startBit
/ 8 + 1];
178 word
>>= 15 - (startBit
% 8 + 7);
185 /* in == 8-byte string (expanded version of the 56-bit key)
186 * out == 64-byte string where each byte is either 1 or 0
187 * Note that the low-order "bit" is always ignored by by setkey()
189 static void Expand(in
, out
)
196 for(i
= 0; i
< 64; in
++){
198 for(j
= 7; j
>= 0; j
--)
199 *out
++ = (c
>> j
) & 01;
204 /* The inverse of Expand
206 static void Collapse(in
, out
)
214 for (i
= 0; i
< 64; i
+= 8, out
++) {
216 for (j
= 7; j
>= 0; j
--, in
++)
223 static void MakeKey(key
, des_key
)
224 u_char
*key
; /* IN 56 bit DES key missing parity bits */
225 u_char
*des_key
; /* OUT 64 bit DES key with parity bits added */
227 des_key
[0] = Get7Bits(key
, 0);
228 des_key
[1] = Get7Bits(key
, 7);
229 des_key
[2] = Get7Bits(key
, 14);
230 des_key
[3] = Get7Bits(key
, 21);
231 des_key
[4] = Get7Bits(key
, 28);
232 des_key
[5] = Get7Bits(key
, 35);
233 des_key
[6] = Get7Bits(key
, 42);
234 des_key
[7] = Get7Bits(key
, 49);
237 des_set_odd_parity((des_cblock
*)des_key
);
241 CHAPDEBUG((LOG_INFO
, "MakeKey: 56-bit input : %02X%02X%02X%02X%02X%02X%02X",
242 key
[0], key
[1], key
[2], key
[3], key
[4], key
[5], key
[6]));
243 CHAPDEBUG((LOG_INFO
, "MakeKey: 64-bit output: %02X%02X%02X%02X%02X%02X%02X%02X",
244 des_key
[0], des_key
[1], des_key
[2], des_key
[3], des_key
[4], des_key
[5], des_key
[6], des_key
[7]));
249 ChapMS_NT(rchallenge
, rchallenge_len
, secret
, secret_len
, response
)
254 MS_ChapResponse
*response
;
258 u_char hash
[MD4_SIGNATURE_SIZE
];
259 u_char unicodePassword
[MAX_NT_PASSWORD
* 2];
261 /* Initialize the Unicode version of the secret (== password). */
262 /* This implicitly supports 8-bit ISO8859/1 characters. */
263 BZERO(unicodePassword
, sizeof(unicodePassword
));
264 for (i
= 0; i
< secret_len
; i
++)
265 unicodePassword
[i
* 2] = (u_char
)secret
[i
];
267 MD4Init(&md4Context
);
268 MD4Update(&md4Context
, unicodePassword
, secret_len
* 2); /* Unicode is 2 bytes/char */
270 MD4Final(hash
, &md4Context
); /* Tell MD4 we're done */
272 ChallengeResponse(rchallenge
, hash
, response
->NTResp
);
276 static u_char
*StdText
= (u_char
*)"KGS!@#$%"; /* key from rasapi32.dll */
279 ChapMS_LANMan(rchallenge
, rchallenge_len
, secret
, secret_len
, response
)
284 MS_ChapResponse
*response
;
287 u_char UcasePassword
[MAX_NT_PASSWORD
]; /* max is actually 14 */
288 u_char PasswordHash
[MD4_SIGNATURE_SIZE
];
290 /* LANMan password is case insensitive */
291 BZERO(UcasePassword
, sizeof(UcasePassword
));
292 for (i
= 0; i
< secret_len
; i
++)
293 UcasePassword
[i
] = (u_char
)toupper(secret
[i
]);
294 DesEncrypt( StdText
, UcasePassword
+ 0, PasswordHash
+ 0 );
295 DesEncrypt( StdText
, UcasePassword
+ 7, PasswordHash
+ 8 );
296 ChallengeResponse(rchallenge
, PasswordHash
, response
->LANManResp
);
301 ChapMS(cstate
, rchallenge
, rchallenge_len
, secret
, secret_len
)
308 MS_ChapResponse response
;
310 extern int ms_lanman
;
314 CHAPDEBUG((LOG_INFO
, "ChapMS: secret is '%.*s'", secret_len
, secret
));
316 BZERO(&response
, sizeof(response
));
318 /* Calculate both always */
319 ChapMS_NT(rchallenge
, rchallenge_len
, secret
, secret_len
, &response
);
322 ChapMS_LANMan(rchallenge
, rchallenge_len
, secret
, secret_len
, &response
);
324 /* prefered method is set by option */
325 response
.UseNT
= !ms_lanman
;
330 BCOPY(&response
, cstate
->response
, MS_CHAP_RESPONSE_LEN
);
331 cstate
->resp_length
= MS_CHAP_RESPONSE_LEN
;