2 * Copyright (c) 1997, 1998 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #include "gssapi_locl.h"
36 RCSID("$Id: get_mic.c,v 1.9 1999/12/02 17:05:03 joda Exp $");
39 (OM_uint32 * minor_status,
40 const gss_ctx_id_t context_handle,
42 const gss_buffer_t message_buffer,
43 gss_buffer_t message_token
49 des_key_schedule schedule;
53 size_t len, total_len;
55 gssapi_krb5_encap_length (22, &len, &total_len);
57 message_token->length = total_len;
58 message_token->value = malloc (total_len);
59 if (message_token->value == NULL)
62 p = gssapi_krb5_make_header(message_token->value,
66 memcpy (p, "\x00\x00", 2);
68 memcpy (p, "\xff\xff\xff\xff", 4);
77 md5_update (&md5, p - 24, 8);
78 md5_update (&md5, message_buffer->value,
79 message_buffer->length);
80 md5_finito (&md5, hash);
82 memset (&zero, 0, sizeof(zero));
83 gss_krb5_getsomekey(context_handle, &key);
84 des_set_key (&key, schedule);
85 des_cbc_cksum ((des_cblock *)hash,
86 (des_cblock *)hash, sizeof(hash), schedule, &zero);
87 memcpy (p - 8, hash, 8);
90 krb5_auth_getlocalseqnumber (gssapi_krb5_context,
91 context_handle->auth_context,
95 p[0] = (seq_number >> 0) & 0xFF;
96 p[1] = (seq_number >> 8) & 0xFF;
97 p[2] = (seq_number >> 16) & 0xFF;
98 p[3] = (seq_number >> 24) & 0xFF;
100 (context_handle->more_flags & LOCAL) ? 0 : 0xFF,
103 des_set_key (&key, schedule);
104 des_cbc_encrypt ((des_cblock *)p, (des_cblock *)p, 8,
105 schedule, (des_cblock *)(p + 8), DES_ENCRYPT);
107 krb5_auth_setlocalseqnumber (gssapi_krb5_context,
108 context_handle->auth_context,
111 memset (key, 0, sizeof(key));
112 memset (schedule, 0, sizeof(schedule));
114 return GSS_S_COMPLETE;