1*10465441SEvalZero /***************************************************************************** 2*10465441SEvalZero * chap.h - Network Challenge Handshake Authentication Protocol header file. 3*10465441SEvalZero * 4*10465441SEvalZero * Copyright (c) 2003 by Marc Boucher, Services Informatiques (MBSI) inc. 5*10465441SEvalZero * portions Copyright (c) 1998 Global Election Systems Inc. 6*10465441SEvalZero * 7*10465441SEvalZero * The authors hereby grant permission to use, copy, modify, distribute, 8*10465441SEvalZero * and license this software and its documentation for any purpose, provided 9*10465441SEvalZero * that existing copyright notices are retained in all copies and that this 10*10465441SEvalZero * notice and the following disclaimer are included verbatim in any 11*10465441SEvalZero * distributions. No written agreement, license, or royalty fee is required 12*10465441SEvalZero * for any of the authorized uses. 13*10465441SEvalZero * 14*10465441SEvalZero * THIS SOFTWARE IS PROVIDED BY THE CONTRIBUTORS *AS IS* AND ANY EXPRESS OR 15*10465441SEvalZero * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 16*10465441SEvalZero * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 17*10465441SEvalZero * IN NO EVENT SHALL THE CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, 18*10465441SEvalZero * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 19*10465441SEvalZero * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 20*10465441SEvalZero * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 21*10465441SEvalZero * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 22*10465441SEvalZero * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 23*10465441SEvalZero * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 24*10465441SEvalZero * 25*10465441SEvalZero ****************************************************************************** 26*10465441SEvalZero * REVISION HISTORY 27*10465441SEvalZero * 28*10465441SEvalZero * 03-01-01 Marc Boucher <[email protected]> 29*10465441SEvalZero * Ported to lwIP. 30*10465441SEvalZero * 97-12-03 Guy Lancaster <[email protected]>, Global Election Systems Inc. 31*10465441SEvalZero * Original built from BSD network code. 32*10465441SEvalZero ******************************************************************************/ 33*10465441SEvalZero /* 34*10465441SEvalZero * chap.h - Challenge Handshake Authentication Protocol definitions. 35*10465441SEvalZero * 36*10465441SEvalZero * Copyright (c) 1993 The Australian National University. 37*10465441SEvalZero * All rights reserved. 38*10465441SEvalZero * 39*10465441SEvalZero * Redistribution and use in source and binary forms are permitted 40*10465441SEvalZero * provided that the above copyright notice and this paragraph are 41*10465441SEvalZero * duplicated in all such forms and that any documentation, 42*10465441SEvalZero * advertising materials, and other materials related to such 43*10465441SEvalZero * distribution and use acknowledge that the software was developed 44*10465441SEvalZero * by the Australian National University. The name of the University 45*10465441SEvalZero * may not be used to endorse or promote products derived from this 46*10465441SEvalZero * software without specific prior written permission. 47*10465441SEvalZero * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR 48*10465441SEvalZero * IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED 49*10465441SEvalZero * WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE. 50*10465441SEvalZero * 51*10465441SEvalZero * Copyright (c) 1991 Gregory M. Christy 52*10465441SEvalZero * All rights reserved. 53*10465441SEvalZero * 54*10465441SEvalZero * Redistribution and use in source and binary forms are permitted 55*10465441SEvalZero * provided that the above copyright notice and this paragraph are 56*10465441SEvalZero * duplicated in all such forms and that any documentation, 57*10465441SEvalZero * advertising materials, and other materials related to such 58*10465441SEvalZero * distribution and use acknowledge that the software was developed 59*10465441SEvalZero * by the author. 60*10465441SEvalZero * 61*10465441SEvalZero * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR 62*10465441SEvalZero * IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED 63*10465441SEvalZero * WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE. 64*10465441SEvalZero * 65*10465441SEvalZero * $Id: chap.h,v 1.6 2010/01/24 13:19:34 goldsimon Exp $ 66*10465441SEvalZero */ 67*10465441SEvalZero 68*10465441SEvalZero #ifndef CHAP_H 69*10465441SEvalZero #define CHAP_H 70*10465441SEvalZero 71*10465441SEvalZero /* Code + ID + length */ 72*10465441SEvalZero #define CHAP_HEADERLEN 4 73*10465441SEvalZero 74*10465441SEvalZero /* 75*10465441SEvalZero * CHAP codes. 76*10465441SEvalZero */ 77*10465441SEvalZero 78*10465441SEvalZero #define CHAP_DIGEST_MD5 5 /* use MD5 algorithm */ 79*10465441SEvalZero #define MD5_SIGNATURE_SIZE 16 /* 16 bytes in a MD5 message digest */ 80*10465441SEvalZero #define CHAP_MICROSOFT 0x80 /* use Microsoft-compatible alg. */ 81*10465441SEvalZero #define MS_CHAP_RESPONSE_LEN 49 /* Response length for MS-CHAP */ 82*10465441SEvalZero 83*10465441SEvalZero #define CHAP_CHALLENGE 1 84*10465441SEvalZero #define CHAP_RESPONSE 2 85*10465441SEvalZero #define CHAP_SUCCESS 3 86*10465441SEvalZero #define CHAP_FAILURE 4 87*10465441SEvalZero 88*10465441SEvalZero /* 89*10465441SEvalZero * Challenge lengths (for challenges we send) and other limits. 90*10465441SEvalZero */ 91*10465441SEvalZero #define MIN_CHALLENGE_LENGTH 32 92*10465441SEvalZero #define MAX_CHALLENGE_LENGTH 64 93*10465441SEvalZero #define MAX_RESPONSE_LENGTH 64 /* sufficient for MD5 or MS-CHAP */ 94*10465441SEvalZero 95*10465441SEvalZero /* 96*10465441SEvalZero * Each interface is described by a chap structure. 97*10465441SEvalZero */ 98*10465441SEvalZero 99*10465441SEvalZero typedef struct chap_state { 100*10465441SEvalZero int unit; /* Interface unit number */ 101*10465441SEvalZero int clientstate; /* Client state */ 102*10465441SEvalZero int serverstate; /* Server state */ 103*10465441SEvalZero u_char challenge[MAX_CHALLENGE_LENGTH]; /* last challenge string sent */ 104*10465441SEvalZero u_char chal_len; /* challenge length */ 105*10465441SEvalZero u_char chal_id; /* ID of last challenge */ 106*10465441SEvalZero u_char chal_type; /* hash algorithm for challenges */ 107*10465441SEvalZero u_char id; /* Current id */ 108*10465441SEvalZero char *chal_name; /* Our name to use with challenge */ 109*10465441SEvalZero int chal_interval; /* Time until we challenge peer again */ 110*10465441SEvalZero int timeouttime; /* Timeout time in seconds */ 111*10465441SEvalZero int max_transmits; /* Maximum # of challenge transmissions */ 112*10465441SEvalZero int chal_transmits; /* Number of transmissions of challenge */ 113*10465441SEvalZero int resp_transmits; /* Number of transmissions of response */ 114*10465441SEvalZero u_char response[MAX_RESPONSE_LENGTH]; /* Response to send */ 115*10465441SEvalZero u_char resp_length; /* length of response */ 116*10465441SEvalZero u_char resp_id; /* ID for response messages */ 117*10465441SEvalZero u_char resp_type; /* hash algorithm for responses */ 118*10465441SEvalZero char *resp_name; /* Our name to send with response */ 119*10465441SEvalZero } chap_state; 120*10465441SEvalZero 121*10465441SEvalZero 122*10465441SEvalZero /* 123*10465441SEvalZero * Client (peer) states. 124*10465441SEvalZero */ 125*10465441SEvalZero #define CHAPCS_INITIAL 0 /* Lower layer down, not opened */ 126*10465441SEvalZero #define CHAPCS_CLOSED 1 /* Lower layer up, not opened */ 127*10465441SEvalZero #define CHAPCS_PENDING 2 /* Auth us to peer when lower up */ 128*10465441SEvalZero #define CHAPCS_LISTEN 3 /* Listening for a challenge */ 129*10465441SEvalZero #define CHAPCS_RESPONSE 4 /* Sent response, waiting for status */ 130*10465441SEvalZero #define CHAPCS_OPEN 5 /* We've received Success */ 131*10465441SEvalZero 132*10465441SEvalZero /* 133*10465441SEvalZero * Server (authenticator) states. 134*10465441SEvalZero */ 135*10465441SEvalZero #define CHAPSS_INITIAL 0 /* Lower layer down, not opened */ 136*10465441SEvalZero #define CHAPSS_CLOSED 1 /* Lower layer up, not opened */ 137*10465441SEvalZero #define CHAPSS_PENDING 2 /* Auth peer when lower up */ 138*10465441SEvalZero #define CHAPSS_INITIAL_CHAL 3 /* We've sent the first challenge */ 139*10465441SEvalZero #define CHAPSS_OPEN 4 /* We've sent a Success msg */ 140*10465441SEvalZero #define CHAPSS_RECHALLENGE 5 /* We've sent another challenge */ 141*10465441SEvalZero #define CHAPSS_BADAUTH 6 /* We've sent a Failure msg */ 142*10465441SEvalZero 143*10465441SEvalZero extern chap_state chap[]; 144*10465441SEvalZero 145*10465441SEvalZero void ChapAuthWithPeer (int, char *, u_char); 146*10465441SEvalZero void ChapAuthPeer (int, char *, u_char); 147*10465441SEvalZero 148*10465441SEvalZero extern struct protent chap_protent; 149*10465441SEvalZero 150*10465441SEvalZero #endif /* CHAP_H */ 151