nss_obfuscate.c revision 9faab6d48145d3a0d7b9a225ed35bdcaa32eca2c
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek/*
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek SSSD
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek Password obfuscation logic
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek Author: Jakub Hrozek <jhrozek@redhat.com>
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek Copyright (C) Red Hat, Inc 2010
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek This program is free software; you can redistribute it and/or modify
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek it under the terms of the GNU General Public License as published by
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek the Free Software Foundation; either version 3 of the License, or
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek (at your option) any later version.
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek This program is distributed in the hope that it will be useful,
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek but WITHOUT ANY WARRANTY; without even the implied warranty of
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek GNU General Public License for more details.
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek You should have received a copy of the GNU General Public License
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek along with this program. If not, see <http://www.gnu.org/licenses/>.
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek*/
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek/*
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek * READ ME:
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek *
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek * Please note that password obfuscation does not improve security in any
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek * way. It is just a mechanism to make the password human-unreadable. If you
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek * need to secure passwords in your application, you should probably take a
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek * look at storing passwords in NSS-backed database.
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek */
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek#include "config.h"
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek#include <prerror.h>
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek#include <nss.h>
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek#include <pk11func.h>
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek#include <base64.h>
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek#include <talloc.h>
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek#include "util/util.h"
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek#include "util/crypto/sss_crypto.h"
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek#include "util/crypto/nss/nss_util.h"
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek#define OBF_BUFFER_SENTINEL "\0\1\2\3"
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek#define OBF_BUFFER_SENTINEL_SIZE 4
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek#define MAKE_SECITEM(sdata, slen, sitem) do { \
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek (sitem)->type = (siBuffer); \
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek (sitem)->data = (sdata); \
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek (sitem)->len = (slen); \
4a6a5421113ab662a665c62ed6a24b61a5a36950Jakub Hrozek} while(0)
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozekstruct sss_nss_crypto_ctx {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek PK11SlotInfo *slot;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek PK11Context *ectx;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek PK11SymKey *keyobj;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek SECItem *sparam;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek SECItem *iv;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek SECItem *key;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek};
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozekstruct crypto_mech_data {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek CK_MECHANISM_TYPE cipher;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek uint16_t keylen;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek uint16_t bsize;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek};
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozekstatic struct crypto_mech_data cmdata[] = {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek /* AES with automatic padding, 256b key, 128b block */
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek { CKM_AES_CBC_PAD, 32, 16 },
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek /* sentinel */
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek { 0, 0, 0 }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek};
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozekstatic struct crypto_mech_data *get_crypto_mech_data(enum obfmethod meth)
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek{
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (meth >= NUM_OBFMETHODS) {
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "Unsupported cipher type\n");
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek return NULL;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek return &cmdata[meth];
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek}
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozekstatic int generate_random_key(TALLOC_CTX *mem_ctx,
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek PK11SlotInfo *slot,
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek struct crypto_mech_data *mech_props,
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek SECItem **_key)
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek{
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek SECStatus sret;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek SECItem *randkeydata;
911c75f1555742d78568635f1bc0549116eabd4aSumit Bose SECItem *key = NULL;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek PK11SymKey *randkey;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek int ret;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek randkey = PK11_KeyGen(slot, mech_props->cipher,
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek NULL, mech_props->keylen, NULL);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (randkey == NULL) {
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "Failure to generate key (err %d)\n",
a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov PR_GetError());
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek ret = EIO;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek sret = PK11_ExtractKeyValue(randkey);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (sret != SECSuccess) {
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "Failure to extract key value (err %d)\n",
a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov PR_GetError());
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = EIO;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek randkeydata = PK11_GetKeyData(randkey);
274fe6a4f8bcb23e31929430110c0b52e9ce233aJakub Hrozek if (randkeydata == NULL) {
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "Failure to get key data (err %d)\n",
a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov PR_GetError());
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek ret = EIO;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek goto done;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek }
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek /* randkeydata is valid until randkey is. Copy with talloc to
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek * get a nice memory hierarchy symmetrical in encrypt
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek * and decrypt case */
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek key = talloc_zero(mem_ctx, SECItem);
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek if (!key) {
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek ret = ENOMEM;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek goto done;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek }
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek key->data = talloc_memdup(key, randkeydata->data, randkeydata->len);
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek if (!key->data) {
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek ret = ENOMEM;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek goto done;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek }
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek key->len = randkeydata->len;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek *_key = key;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = EOK;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozekdone:
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek if (ret != EOK) talloc_zfree(key);
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek PK11_FreeSymKey(randkey);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek return ret;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek}
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozekstatic int sss_nss_crypto_ctx_destructor(struct sss_nss_crypto_ctx *cctx)
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek{
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (cctx->ectx) PK11_DestroyContext(cctx->ectx, PR_TRUE);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (cctx->sparam) SECITEM_FreeItem(cctx->sparam, PR_TRUE);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (cctx->slot) PK11_FreeSlot(cctx->slot);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (cctx->keyobj) PK11_FreeSymKey(cctx->keyobj);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek return EOK;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek}
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozekstatic int nss_ctx_init(TALLOC_CTX *mem_ctx,
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek struct crypto_mech_data *mech_props,
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek struct sss_nss_crypto_ctx **_cctx)
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek{
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek struct sss_nss_crypto_ctx *cctx;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek int ret;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek cctx = talloc_zero(mem_ctx, struct sss_nss_crypto_ctx);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (!cctx) {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek return ENOMEM;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek talloc_set_destructor(cctx, sss_nss_crypto_ctx_destructor);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek cctx->slot = PK11_GetBestSlot(mech_props->cipher, NULL);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (cctx->slot == NULL) {
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "Unable to find security device (err %d)\n",
a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov PR_GetError());
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = EIO;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek ret = EOK;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek *_cctx = cctx;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozekdone:
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek if (ret) talloc_zfree(cctx);
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek return ret;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek}
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek
ac3a1f3da772cf101101c31675c63dc3549b21b5Jakub Hrozekstatic int nss_encrypt_decrypt_init(struct crypto_mech_data *mech_props,
324fb26ba803a999bedc29e93c46c84f27abf5b7Sumit Bose bool do_encrypt,
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek struct sss_nss_crypto_ctx *cctx)
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek{
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek CK_ATTRIBUTE_TYPE op;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek int ret;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek
324fb26ba803a999bedc29e93c46c84f27abf5b7Sumit Bose op = do_encrypt ? CKA_ENCRYPT : CKA_DECRYPT;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek /* turn the raw key into a key object */
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek cctx->keyobj = PK11_ImportSymKey(cctx->slot, mech_props->cipher,
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek PK11_OriginUnwrap, op, cctx->key, NULL);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (cctx->keyobj == NULL) {
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "Failure to import key into NSS (err %d)\n",
a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov PR_GetError());
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = EIO;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek /* turn the raw IV into a initialization vector object */
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek cctx->sparam = PK11_ParamFromIV(mech_props->cipher, cctx->iv);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (cctx->sparam == NULL) {
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "Failure to set up PKCS11 param (err %d)\n",
a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov PR_GetError());
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = EIO;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek /* Create cipher context */
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek cctx->ectx = PK11_CreateContextBySymKey(mech_props->cipher, op,
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek cctx->keyobj, cctx->sparam);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (cctx->ectx == NULL) {
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "Cannot create cipher context (err %d)\n",
a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov PORT_GetError());
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = EIO;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = EOK;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozekdone:
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek return ret;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek}
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozekint sss_password_encrypt(TALLOC_CTX *mem_ctx, const char *password, int plen,
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek enum obfmethod meth, char **obfpwd)
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek{
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek SECStatus sret;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek int ret;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek TALLOC_CTX *tmp_ctx = NULL;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek struct crypto_mech_data *mech_props;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek struct sss_nss_crypto_ctx *cctx;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek unsigned char *plaintext;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek unsigned char *cryptotext;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek int ct_maxsize;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek int ctlen;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek unsigned int digestlen;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek int result_len;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek unsigned char *obfbuf;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek size_t obufsize = 0;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek size_t p = 0;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek tmp_ctx = talloc_new(mem_ctx);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (!tmp_ctx) {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek return ENOMEM;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek /* initialize NSS if needed */
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = nspr_nss_init();
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (ret != EOK) {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = EIO;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek mech_props = get_crypto_mech_data(meth);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (mech_props == NULL) {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = EINVAL;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek ret = nss_ctx_init(tmp_ctx, mech_props, &cctx);
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek if (ret) {
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "Cannot initialize NSS context\n");
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek goto done;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek }
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek /* generate random encryption and IV key */
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek ret = generate_random_key(cctx, cctx->slot, mech_props, &cctx->key);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (ret != EOK) {
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "Could not generate encryption key\n");
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek ret = generate_random_key(cctx, cctx->slot, mech_props, &cctx->iv);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (ret != EOK) {
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE,
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov "Could not generate initialization vector\n");
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
ac3a1f3da772cf101101c31675c63dc3549b21b5Jakub Hrozek ret = nss_encrypt_decrypt_init(mech_props, true, cctx);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (ret) {
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE,
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov "Cannot initialize NSS context properties\n");
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek plaintext = (unsigned char *) talloc_strndup(tmp_ctx, password, plen);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (!plaintext) {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = ENOMEM;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek /* cryptotext buffer must be at least len(plaintext)+blocksize */
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ct_maxsize = plen + (mech_props->bsize);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek cryptotext = talloc_array(tmp_ctx, unsigned char, ct_maxsize);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (!cryptotext) {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = ENOMEM;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek /* sample data we'll encrypt and decrypt */
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek sret = PK11_CipherOp(cctx->ectx, cryptotext, &ctlen, ct_maxsize,
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek plaintext, plen);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (sret != SECSuccess) {
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE,
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov "Cannot execute the encryption operation (err %d)\n",
a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov PR_GetError());
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = EIO;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek sret = PK11_DigestFinal(cctx->ectx, cryptotext+ctlen, &digestlen,
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ct_maxsize-ctlen);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (sret != SECSuccess) {
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE,
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov "Cannot execute the digest operation (err %d)\n",
a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov PR_GetError());
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = EIO;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek result_len = ctlen + digestlen;
9faab6d48145d3a0d7b9a225ed35bdcaa32eca2cLukas Slebodnik if (result_len < 0 || result_len > UINT16_MAX) {
9faab6d48145d3a0d7b9a225ed35bdcaa32eca2cLukas Slebodnik ret = ERANGE;
9faab6d48145d3a0d7b9a225ed35bdcaa32eca2cLukas Slebodnik goto done;
9faab6d48145d3a0d7b9a225ed35bdcaa32eca2cLukas Slebodnik }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek /* Pack the obfuscation buffer */
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek /* The buffer consists of:
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek * uint16_t the type of the cipher
9faab6d48145d3a0d7b9a225ed35bdcaa32eca2cLukas Slebodnik * uint16_t length of the cryptotext in bytes (clen)
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek * uint8_t[klen] key
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek * uint8_t[blen] IV
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek * uint8_t[clen] cryptotext
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek * 4 bytes of "sentinel" denoting end of the buffer
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek */
9faab6d48145d3a0d7b9a225ed35bdcaa32eca2cLukas Slebodnik obufsize = sizeof(uint16_t) + sizeof(uint16_t) +
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek mech_props->keylen + mech_props->bsize +
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek result_len + OBF_BUFFER_SENTINEL_SIZE;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek obfbuf = talloc_array(tmp_ctx, unsigned char, obufsize);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (!obfbuf) {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = ENOMEM;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_TRACE_INTERNAL, "Writing method: %d\n", meth);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek SAFEALIGN_SET_UINT16(&obfbuf[p], meth, &p);
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_TRACE_INTERNAL, "Writing bufsize: %d\n", result_len);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek SAFEALIGN_SET_UINT16(&obfbuf[p], result_len, &p);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek safealign_memcpy(&obfbuf[p], cctx->key->data, mech_props->keylen, &p);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek safealign_memcpy(&obfbuf[p], cctx->iv->data, mech_props->bsize, &p);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek safealign_memcpy(&obfbuf[p], cryptotext, result_len, &p);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek safealign_memcpy(&obfbuf[p], OBF_BUFFER_SENTINEL,
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek OBF_BUFFER_SENTINEL_SIZE, &p);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek /* Base64 encode the resulting buffer */
c7919a4fe41133cc466aa3d9431bfceee5784e7bJan Cholasta *obfpwd = sss_base64_encode(mem_ctx, obfbuf, obufsize);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (*obfpwd == NULL) {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = ENOMEM;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = EOK;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozekdone:
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek talloc_free(tmp_ctx);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek nspr_nss_cleanup();
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek return ret;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek}
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozekint sss_password_decrypt(TALLOC_CTX *mem_ctx, char *b64encoded,
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek char **password)
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek{
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek SECStatus sret;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek int ret;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek TALLOC_CTX *tmp_ctx = NULL;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek struct crypto_mech_data *mech_props;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek struct sss_nss_crypto_ctx *cctx;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek int plainlen;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek unsigned int digestlen;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek unsigned char *obfbuf = NULL;
c7919a4fe41133cc466aa3d9431bfceee5784e7bJan Cholasta size_t obflen;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek char *pwdbuf;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek /* for unmarshaling data */
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek uint16_t meth;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek uint16_t ctsize;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek size_t p = 0;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek unsigned char *cryptotext;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek unsigned char *keybuf;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek unsigned char *ivbuf;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek unsigned char sentinel_check[OBF_BUFFER_SENTINEL_SIZE];
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek tmp_ctx = talloc_new(mem_ctx);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (!tmp_ctx) {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek return ENOMEM;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek /* initialize NSS if needed */
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = nspr_nss_init();
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (ret != EOK) {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = EIO;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek /* Base64 decode the incoming buffer */
c7919a4fe41133cc466aa3d9431bfceee5784e7bJan Cholasta obfbuf = sss_base64_decode(tmp_ctx, b64encoded, &obflen);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (!obfbuf) {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = ENOMEM;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek /* unpack obfuscation buffer */
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek SAFEALIGN_COPY_UINT16_CHECK(&meth, obfbuf+p, obflen, &p);
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_TRACE_INTERNAL, "Read method: %d\n", meth);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek SAFEALIGN_COPY_UINT16_CHECK(&ctsize, obfbuf+p, obflen, &p);
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_TRACE_INTERNAL, "Read bufsize: %d\n", ctsize);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek mech_props = get_crypto_mech_data(meth);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (mech_props == NULL) {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = EINVAL;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek /* check that we got sane mechanism properties and cryptotext size */
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek memcpy(sentinel_check,
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek obfbuf + p + mech_props->keylen + mech_props->bsize + ctsize,
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek OBF_BUFFER_SENTINEL_SIZE);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (memcmp(sentinel_check, OBF_BUFFER_SENTINEL, OBF_BUFFER_SENTINEL_SIZE) != 0) {
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_FATAL_FAILURE,
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov "Obfuscation buffer seems corrupt, aborting\n");
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = EFAULT;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek /* copy out key, ivbuf and cryptotext */
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek keybuf = talloc_array(tmp_ctx, unsigned char, mech_props->keylen);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (keybuf == NULL) {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = ENOMEM;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek safealign_memcpy(keybuf, obfbuf+p, mech_props->keylen, &p);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ivbuf = talloc_array(tmp_ctx, unsigned char, mech_props->bsize);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (ivbuf == NULL) {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = ENOMEM;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek safealign_memcpy(ivbuf, obfbuf+p, mech_props->bsize, &p);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek cryptotext = talloc_array(tmp_ctx, unsigned char, ctsize);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (cryptotext == NULL) {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = ENOMEM;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek safealign_memcpy(cryptotext, obfbuf+p, ctsize, &p);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek ret = nss_ctx_init(tmp_ctx, mech_props, &cctx);
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek if (ret) {
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "Cannot initialize NSS context\n");
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek goto done;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek }
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek cctx->iv = talloc_zero(cctx, SECItem);
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek cctx->key = talloc_zero(cctx, SECItem);
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek if (!cctx->iv || !cctx->key) {
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek ret = ENOMEM;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek goto done;
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek }
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek MAKE_SECITEM(ivbuf, mech_props->bsize, cctx->iv);
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek MAKE_SECITEM(keybuf, mech_props->keylen, cctx->key);
fd72f761edb0b11265ce3293b56a4a4fa0d1a317Jakub Hrozek
ac3a1f3da772cf101101c31675c63dc3549b21b5Jakub Hrozek ret = nss_encrypt_decrypt_init(mech_props, false, cctx);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (ret) {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek pwdbuf = talloc_array(tmp_ctx, char, ctsize);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (!pwdbuf) {
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = ENOMEM;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek sret = PK11_CipherOp(cctx->ectx, (unsigned char *) pwdbuf, &plainlen, ctsize,
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek cryptotext, ctsize);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (sret != SECSuccess) {
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE,
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov "Cannot execute the encryption operation (err %d)\n",
a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov PR_GetError());
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = EIO;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek sret = PK11_DigestFinal(cctx->ectx, (unsigned char *) pwdbuf+plainlen, &digestlen,
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ctsize - plainlen);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek if (sret != SECSuccess) {
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE,
83bf46f4066e3d5e838a32357c201de9bd6ecdfdNikolai Kondrashov "Cannot execute the encryption operation (err %d)\n",
a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov PR_GetError());
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = EIO;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek goto done;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek }
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek *password = talloc_move(mem_ctx, &pwdbuf);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek ret = EOK;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozekdone:
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek talloc_free(tmp_ctx);
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek nspr_nss_cleanup();
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek return ret;
69aaef8719c5cf33ed1c4090fa313ba281bf8a02Jakub Hrozek}