xref: /nrf52832-nimble/rt-thread/components/net/lwip-2.0.2/src/apps/snmp/snmpv3.c (revision 104654410c56c573564690304ae786df310c91fc)
1*10465441SEvalZero /**
2*10465441SEvalZero  * @file
3*10465441SEvalZero  * Additional SNMPv3 functionality RFC3414 and RFC3826.
4*10465441SEvalZero  */
5*10465441SEvalZero 
6*10465441SEvalZero /*
7*10465441SEvalZero  * Copyright (c) 2016 Elias Oenal.
8*10465441SEvalZero  * All rights reserved.
9*10465441SEvalZero  *
10*10465441SEvalZero  * Redistribution and use in source and binary forms, with or without modification,
11*10465441SEvalZero  * are permitted provided that the following conditions are met:
12*10465441SEvalZero  *
13*10465441SEvalZero  * 1. Redistributions of source code must retain the above copyright notice,
14*10465441SEvalZero  *    this list of conditions and the following disclaimer.
15*10465441SEvalZero  * 2. Redistributions in binary form must reproduce the above copyright notice,
16*10465441SEvalZero  *    this list of conditions and the following disclaimer in the documentation
17*10465441SEvalZero  *    and/or other materials provided with the distribution.
18*10465441SEvalZero  * 3. The name of the author may not be used to endorse or promote products
19*10465441SEvalZero  *    derived from this software without specific prior written permission.
20*10465441SEvalZero  *
21*10465441SEvalZero  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED
22*10465441SEvalZero  * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
23*10465441SEvalZero  * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT
24*10465441SEvalZero  * SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
25*10465441SEvalZero  * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
26*10465441SEvalZero  * OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
27*10465441SEvalZero  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
28*10465441SEvalZero  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
29*10465441SEvalZero  * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY
30*10465441SEvalZero  * OF SUCH DAMAGE.
31*10465441SEvalZero  *
32*10465441SEvalZero  * Author: Elias Oenal <[email protected]>
33*10465441SEvalZero  */
34*10465441SEvalZero 
35*10465441SEvalZero #include "snmpv3_priv.h"
36*10465441SEvalZero #include "lwip/apps/snmpv3.h"
37*10465441SEvalZero #include "lwip/sys.h"
38*10465441SEvalZero #include <string.h>
39*10465441SEvalZero 
40*10465441SEvalZero #if LWIP_SNMP && LWIP_SNMP_V3
41*10465441SEvalZero 
42*10465441SEvalZero #ifdef LWIP_SNMPV3_INCLUDE_ENGINE
43*10465441SEvalZero #include LWIP_SNMPV3_INCLUDE_ENGINE
44*10465441SEvalZero #endif
45*10465441SEvalZero 
46*10465441SEvalZero #define SNMP_MAX_TIME_BOOT 2147483647UL
47*10465441SEvalZero 
48*10465441SEvalZero /** Call this if engine has been changed. Has to reset boots, see below */
49*10465441SEvalZero void
snmpv3_engine_id_changed(void)50*10465441SEvalZero snmpv3_engine_id_changed(void)
51*10465441SEvalZero {
52*10465441SEvalZero   snmpv3_set_engine_boots(0);
53*10465441SEvalZero }
54*10465441SEvalZero 
55*10465441SEvalZero /** According to RFC3414 2.2.2.
56*10465441SEvalZero  *
57*10465441SEvalZero  * The number of times that the SNMP engine has
58*10465441SEvalZero  * (re-)initialized itself since snmpEngineID
59*10465441SEvalZero  * was last configured.
60*10465441SEvalZero  */
61*10465441SEvalZero u32_t
snmpv3_get_engine_boots_internal(void)62*10465441SEvalZero snmpv3_get_engine_boots_internal(void)
63*10465441SEvalZero {
64*10465441SEvalZero   if (snmpv3_get_engine_boots() == 0 ||
65*10465441SEvalZero       snmpv3_get_engine_boots() < SNMP_MAX_TIME_BOOT) {
66*10465441SEvalZero     return snmpv3_get_engine_boots();
67*10465441SEvalZero   }
68*10465441SEvalZero 
69*10465441SEvalZero   snmpv3_set_engine_boots(SNMP_MAX_TIME_BOOT);
70*10465441SEvalZero   return snmpv3_get_engine_boots();
71*10465441SEvalZero }
72*10465441SEvalZero 
73*10465441SEvalZero /** RFC3414 2.2.2.
74*10465441SEvalZero  *
75*10465441SEvalZero  * Once the timer reaches 2147483647 it gets reset to zero and the
76*10465441SEvalZero  * engine boot ups get incremented.
77*10465441SEvalZero  */
78*10465441SEvalZero u32_t
snmpv3_get_engine_time_internal(void)79*10465441SEvalZero snmpv3_get_engine_time_internal(void)
80*10465441SEvalZero {
81*10465441SEvalZero   if (snmpv3_get_engine_time() >= SNMP_MAX_TIME_BOOT) {
82*10465441SEvalZero     snmpv3_reset_engine_time();
83*10465441SEvalZero 
84*10465441SEvalZero     if (snmpv3_get_engine_boots() < SNMP_MAX_TIME_BOOT - 1) {
85*10465441SEvalZero       snmpv3_set_engine_boots(snmpv3_get_engine_boots() + 1);
86*10465441SEvalZero     } else {
87*10465441SEvalZero       snmpv3_set_engine_boots(SNMP_MAX_TIME_BOOT);
88*10465441SEvalZero     }
89*10465441SEvalZero   }
90*10465441SEvalZero 
91*10465441SEvalZero   return snmpv3_get_engine_time();
92*10465441SEvalZero }
93*10465441SEvalZero 
94*10465441SEvalZero #if LWIP_SNMP_V3_CRYPTO
95*10465441SEvalZero 
96*10465441SEvalZero /* This function ignores the byte order suggestion in RFC3414
97*10465441SEvalZero  * since it simply doesn't influence the effectiveness of an IV.
98*10465441SEvalZero  *
99*10465441SEvalZero  * Implementing RFC3826 priv param algorithm if LWIP_RAND is available.
100*10465441SEvalZero  *
101*10465441SEvalZero  * @todo: This is a potential thread safety issue.
102*10465441SEvalZero  */
103*10465441SEvalZero err_t
snmpv3_build_priv_param(u8_t * priv_param)104*10465441SEvalZero snmpv3_build_priv_param(u8_t* priv_param)
105*10465441SEvalZero {
106*10465441SEvalZero #ifdef LWIP_RAND /* Based on RFC3826 */
107*10465441SEvalZero   static u8_t init;
108*10465441SEvalZero   static u32_t priv1, priv2;
109*10465441SEvalZero 
110*10465441SEvalZero   /* Lazy initialisation */
111*10465441SEvalZero   if (init == 0) {
112*10465441SEvalZero     init = 1;
113*10465441SEvalZero     priv1 = LWIP_RAND();
114*10465441SEvalZero     priv2 = LWIP_RAND();
115*10465441SEvalZero   }
116*10465441SEvalZero 
117*10465441SEvalZero   SMEMCPY(&priv_param[0], &priv1, sizeof(priv1));
118*10465441SEvalZero   SMEMCPY(&priv_param[4], &priv2, sizeof(priv2));
119*10465441SEvalZero 
120*10465441SEvalZero   /* Emulate 64bit increment */
121*10465441SEvalZero   priv1++;
122*10465441SEvalZero   if (!priv1) { /* Overflow */
123*10465441SEvalZero     priv2++;
124*10465441SEvalZero   }
125*10465441SEvalZero #else /* Based on RFC3414 */
126*10465441SEvalZero   static u32_t ctr;
127*10465441SEvalZero   u32_t boots = LWIP_SNMPV3_GET_ENGINE_BOOTS();
128*10465441SEvalZero   SMEMCPY(&priv_param[0], &boots, 4);
129*10465441SEvalZero   SMEMCPY(&priv_param[4], &ctr, 4);
130*10465441SEvalZero   ctr++;
131*10465441SEvalZero #endif
132*10465441SEvalZero   return ERR_OK;
133*10465441SEvalZero }
134*10465441SEvalZero #endif /* LWIP_SNMP_V3_CRYPTO */
135*10465441SEvalZero 
136*10465441SEvalZero #endif
137