1 #ifndef EAP_SIM_COMMON_H
2 #define EAP_SIM_COMMON_H
4 #define EAP_SIM_NONCE_S_LEN 16
5 #define EAP_SIM_NONCE_MT_LEN 16
6 #define EAP_SIM_MAC_LEN 16
7 #define EAP_SIM_MK_LEN 20
8 #define EAP_SIM_K_AUT_LEN 16
9 #define EAP_SIM_K_ENCR_LEN 16
10 #define EAP_SIM_KEYING_DATA_LEN 64
11 #define EAP_SIM_IV_LEN 16
13 #define GSM_RAND_LEN 16
15 #define AKA_RAND_LEN 16
16 #define AKA_AUTN_LEN 16
18 void eap_sim_derive_keys(const u8 *mk, u8 *k_encr, u8 *k_aut, u8 *msk);
19 void eap_sim_derive_keys_reauth(unsigned int _counter,
20 const u8 *identity, size_t identity_len,
21 const u8 *nonce_s, const u8 *mk, u8 *msk);
22 int eap_sim_verify_mac(const u8 *k_aut, u8 *req, size_t req_len, u8 *mac,
23 u8 *extra, size_t extra_len);
24 void eap_sim_add_mac(const u8 *k_aut, u8 *msg, size_t msg_len, u8 *mac,
25 const u8 *extra, size_t extra_len);
28 /* EAP-SIM/AKA Attributes (0..127 non-skippable) */
29 #define EAP_SIM_AT_RAND 1
30 #define EAP_SIM_AT_AUTN 2 /* only AKA */
31 #define EAP_SIM_AT_RES 3 /* only AKA, only send */
32 #define EAP_SIM_AT_AUTS 4 /* only AKA, only send */
33 #define EAP_SIM_AT_PADDING 6 /* only encrypted */
34 #define EAP_SIM_AT_NONCE_MT 7 /* only SIM, only send */
35 #define EAP_SIM_AT_PERMANENT_ID_REQ 10
36 #define EAP_SIM_AT_MAC 11
37 #define EAP_SIM_AT_NOTIFICATION 12
38 #define EAP_SIM_AT_ANY_ID_REQ 13
39 #define EAP_SIM_AT_IDENTITY 14 /* only send */
40 #define EAP_SIM_AT_VERSION_LIST 15 /* only SIM */
41 #define EAP_SIM_AT_SELECTED_VERSION 16 /* only SIM */
42 #define EAP_SIM_AT_FULLAUTH_ID_REQ 17
43 #define EAP_SIM_AT_COUNTER 19 /* only encrypted */
44 #define EAP_SIM_AT_COUNTER_TOO_SMALL 20 /* only encrypted */
45 #define EAP_SIM_AT_NONCE_S 21 /* only encrypted */
46 #define EAP_SIM_AT_CLIENT_ERROR_CODE 22 /* only send */
47 #define EAP_SIM_AT_IV 129
48 #define EAP_SIM_AT_ENCR_DATA 130
49 #define EAP_SIM_AT_NEXT_PSEUDONYM 132 /* only encrypted */
50 #define EAP_SIM_AT_NEXT_REAUTH_ID 133 /* only encrypted */
51 #define EAP_SIM_AT_CHECKCODE 134 /* only AKA */
52 #define EAP_SIM_AT_RESULT_IND 135
54 /* AT_NOTIFICATION notification code values */
55 #define EAP_SIM_GENERAL_FAILURE_AFTER_AUTH 0
56 #define EAP_SIM_TEMPORARILY_DENIED 1026
57 #define EAP_SIM_NOT_SUBSCRIBED 1031
58 #define EAP_SIM_GENERAL_FAILURE_BEFORE_AUTH 16384
59 #define EAP_SIM_SUCCESS 32768
63 NO_ID_REQ, ANY_ID, FULLAUTH_ID, PERMANENT_ID
67 struct eap_sim_attrs {
68 u8 *rand, *autn, *mac, *iv, *encr_data, *version_list, *nonce_s;
69 u8 *next_pseudonym, *next_reauth_id;
70 u8 *nonce_mt, *identity;
71 size_t num_chal, version_list_len, encr_data_len;
72 size_t next_pseudonym_len, next_reauth_id_len, identity_len;
73 enum eap_sim_id_req id_req;
74 int notification, counter, selected_version, client_error_code;
77 int eap_sim_parse_attr(u8 *start, u8 *end, struct eap_sim_attrs *attr,
79 int eap_sim_parse_encr(const u8 *k_encr, u8 *encr_data, size_t encr_data_len,
80 const u8 *iv, struct eap_sim_attrs *attr, int aka);
85 struct eap_sim_msg * eap_sim_msg_init(int code, int id, int type, int subtype);
86 u8 * eap_sim_msg_finish(struct eap_sim_msg *msg, size_t *len, const u8 *k_aut,
87 const u8 *extra, size_t extra_len);
88 void eap_sim_msg_free(struct eap_sim_msg *msg);
89 u8 * eap_sim_msg_add_full(struct eap_sim_msg *msg, u8 attr,
90 const u8 *data, size_t len);
91 u8 * eap_sim_msg_add(struct eap_sim_msg *msg, u8 attr,
92 u16 value, const u8 *data, size_t len);
93 u8 * eap_sim_msg_add_mac(struct eap_sim_msg *msg, u8 attr);
94 int eap_sim_msg_add_encr_start(struct eap_sim_msg *msg, u8 attr_iv,
96 int eap_sim_msg_add_encr_end(struct eap_sim_msg *msg, u8 *k_encr,
99 void eap_sim_report_notification(void *msg_ctx, int notification, int aka);
101 #endif /* EAP_SIM_COMMON_H */