2 * SPDX-License-Identifier: BSD-3-Clause
4 * Copyright (c) 2003 Bruce M. Simpson <bms@spc.org>
5 * Copyright (c) 2016 Andrey V. Elsukov <ae@FreeBSD.org>
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
11 * 1. Redistributions of source code must retain the above copyright
12 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
16 * 3. The name of the author may not be used to endorse or promote products
17 * derived from this software without specific prior written permission.
19 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
20 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
21 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
22 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
23 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
24 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
25 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
26 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
27 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
28 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
31 /* TCP MD5 Signature Option (RFC2385) */
32 #include <sys/cdefs.h>
33 __FBSDID("$FreeBSD$");
36 #include "opt_inet6.h"
37 #include "opt_ipsec.h"
39 #include <sys/param.h>
40 #include <sys/systm.h>
44 #include <sys/rmlock.h>
45 #include <sys/socket.h>
46 #include <sys/sockopt.h>
47 #include <sys/kernel.h>
48 #include <sys/module.h>
49 #include <sys/protosw.h>
51 #include <netinet/in.h>
52 #include <netinet/in_pcb.h>
53 #include <netinet/in_systm.h>
54 #include <netinet/ip.h>
55 #include <netinet/ip_var.h>
56 #include <netinet/tcp.h>
57 #include <netinet/tcp_var.h>
58 #include <netinet/udp.h>
62 #include <netipsec/ipsec.h>
63 #include <netipsec/ipsec_support.h>
64 #include <netipsec/xform.h>
67 #include <netinet/ip6.h>
68 #include <netipsec/ipsec6.h>
71 #include <netipsec/key.h>
72 #include <netipsec/key_debug.h>
74 #define TCP_SIGLEN 16 /* length of computed digest in bytes */
75 #define TCP_KEYLEN_MIN 1 /* minimum length of TCP-MD5 key */
76 #define TCP_KEYLEN_MAX 80 /* maximum length of TCP-MD5 key */
79 tcp_ipsec_pcbctl(struct inpcb *inp, struct sockopt *sopt)
84 if (sopt->sopt_name != TCP_MD5SIG) {
88 if (sopt->sopt_dir == SOPT_GET) {
90 if (inp->inp_flags & INP_DROPPED) {
95 optval = (tp->t_flags & TF_SIGNATURE) ? 1 : 0;
98 /* On success return with released INP_WLOCK */
99 return (sooptcopyout(sopt, &optval, sizeof(optval)));
102 error = sooptcopyin(sopt, &optval, sizeof(optval), sizeof(optval));
106 /* INP_WLOCK_RECHECK */
108 if (inp->inp_flags & INP_DROPPED) {
114 tp->t_flags |= TF_SIGNATURE;
116 tp->t_flags &= ~TF_SIGNATURE;
123 * Callback function invoked by m_apply() to digest TCP segment data
124 * contained within an mbuf chain.
127 tcp_signature_apply(void *fstate, void *data, u_int len)
130 MD5Update(fstate, (u_char *)data, len);
136 ip_pseudo_compute(struct mbuf *m, MD5_CTX *ctx)
142 ip = mtod(m, struct ip *);
143 ipp.ippseudo_src.s_addr = ip->ip_src.s_addr;
144 ipp.ippseudo_dst.s_addr = ip->ip_dst.s_addr;
145 ipp.ippseudo_p = IPPROTO_TCP;
146 ipp.ippseudo_pad = 0;
147 hdr_len = ip->ip_hl << 2;
148 if (ip->ip_p == IPPROTO_UDP)
150 hdr_len += sizeof(struct udphdr);
151 ipp.ippseudo_len = htons(m->m_pkthdr.len - hdr_len);
152 MD5Update(ctx, (char *)&ipp, sizeof(ipp));
159 ip6_pseudo_compute(struct mbuf *m, MD5_CTX *ctx)
162 struct in6_addr src, dst;
169 ip6 = mtod(m, struct ip6_hdr *);
170 ip6p.src = ip6->ip6_src;
171 ip6p.dst = ip6->ip6_dst;
172 hdr_len = sizeof(struct ip6_hdr);
173 if (ip6->ip6_nxt == IPPROTO_UDP)
175 hdr_len += sizeof(struct udphdr);
176 /* XXX: ext headers */
177 ip6p.len = htonl(m->m_pkthdr.len - hdr_len);
178 ip6p.nxt = htonl(IPPROTO_TCP);
179 MD5Update(ctx, (char *)&ip6p, sizeof(ip6p));
185 tcp_signature_compute(struct mbuf *m, struct tcphdr *th,
186 struct secasvar *sav, u_char *buf)
193 /* Step 1: Update MD5 hash with IP(v6) pseudo-header. */
194 switch (sav->sah->saidx.dst.sa.sa_family) {
197 len = ip_pseudo_compute(m, &ctx);
202 len = ip6_pseudo_compute(m, &ctx);
206 return (EAFNOSUPPORT);
209 * Step 2: Update MD5 hash with TCP header, excluding options.
210 * The TCP checksum must be set to zero.
214 MD5Update(&ctx, (char *)th, sizeof(struct tcphdr));
217 * Step 3: Update MD5 hash with TCP segment data.
218 * Use m_apply() to avoid an early m_pullup().
220 len += (th->th_off << 2);
221 if (m->m_pkthdr.len - len > 0)
222 m_apply(m, len, m->m_pkthdr.len - len,
223 tcp_signature_apply, &ctx);
225 * Step 4: Update MD5 hash with shared secret.
227 MD5Update(&ctx, sav->key_auth->key_data, _KEYLEN(sav->key_auth));
229 key_sa_recordxfer(sav, m);
234 setsockaddrs(const struct mbuf *m, union sockaddr_union *src,
235 union sockaddr_union *dst)
239 IPSEC_ASSERT(m->m_len >= sizeof(*ip), ("unexpected mbuf len"));
241 ip = mtod(m, struct ip *);
245 ipsec4_setsockaddrs(m, src, dst);
249 case (IPV6_VERSION >> 4):
250 ipsec6_setsockaddrs(m, src, dst);
254 bzero(src, sizeof(*src));
255 bzero(dst, sizeof(*dst));
260 * Compute TCP-MD5 hash of an *INBOUND* TCP segment.
262 * m pointer to head of mbuf chain
263 * th pointer to TCP header
264 * buf pointer to storage for computed MD5 digest
266 * Return 0 if successful, otherwise return error code.
269 tcp_ipsec_input(struct mbuf *m, struct tcphdr *th, u_char *buf)
271 char tmpdigest[TCP_SIGLEN];
272 struct secasindex saidx;
273 struct secasvar *sav;
275 setsockaddrs(m, &saidx.src, &saidx.dst);
276 saidx.proto = IPPROTO_TCP;
277 saidx.mode = IPSEC_MODE_TCPMD5;
279 sav = key_allocsa_tcpmd5(&saidx);
281 KMOD_TCPSTAT_INC(tcps_sig_err_buildsig);
286 KMOD_TCPSTAT_INC(tcps_sig_err_nosigopt);
290 * tcp_input() operates with TCP header fields in host
291 * byte order. We expect them in network byte order.
293 tcp_fields_to_net(th);
294 tcp_signature_compute(m, th, sav, tmpdigest);
295 tcp_fields_to_host(th);
297 if (bcmp(buf, tmpdigest, TCP_SIGLEN) != 0) {
298 KMOD_TCPSTAT_INC(tcps_sig_rcvbadsig);
301 KMOD_TCPSTAT_INC(tcps_sig_rcvgoodsig);
306 * Compute TCP-MD5 hash of an *OUTBOUND* TCP segment.
308 * m pointer to head of mbuf chain
309 * th pointer to TCP header
310 * buf pointer to storage for computed MD5 digest
312 * Return 0 if successful, otherwise return error code.
315 tcp_ipsec_output(struct mbuf *m, struct tcphdr *th, u_char *buf)
317 struct secasindex saidx;
318 struct secasvar *sav;
320 setsockaddrs(m, &saidx.src, &saidx.dst);
321 saidx.proto = IPPROTO_TCP;
322 saidx.mode = IPSEC_MODE_TCPMD5;
324 sav = key_allocsa_tcpmd5(&saidx);
326 KMOD_TCPSTAT_INC(tcps_sig_err_buildsig);
329 tcp_signature_compute(m, th, sav, buf);
335 * Initialize a TCP-MD5 SA. Called when the SA is being set up.
337 * We don't need to set up the tdb prefixed fields, as we don't use the
338 * opencrypto code; we just perform a key length check.
340 * XXX: Currently we have used single 'magic' SPI and need to still
343 * This allows per-host granularity without affecting the userland
344 * interface, which is a simple socket option toggle switch,
345 * TCP_SIGNATURE_ENABLE.
347 * To allow per-service granularity requires that we have a means
348 * of mapping port to SPI. The mandated way of doing this is to
349 * use SPD entries to specify packet flows which get the TCP-MD5
350 * treatment, however the code to do this is currently unstable
351 * and unsuitable for production use.
353 * Therefore we use this compromise in the meantime.
356 tcpsignature_init(struct secasvar *sav, struct xformsw *xsp)
360 if (sav->alg_auth != SADB_X_AALG_TCP_MD5) {
361 DPRINTF(("%s: unsupported authentication algorithm %u\n",
362 __func__, sav->alg_auth));
365 if (sav->key_auth == NULL) {
366 DPRINTF(("%s: no authentication key present\n", __func__));
369 keylen = _KEYLEN(sav->key_auth);
370 if ((keylen < TCP_KEYLEN_MIN) || (keylen > TCP_KEYLEN_MAX)) {
371 DPRINTF(("%s: invalid key length %u\n", __func__, keylen));
374 sav->tdb_xform = xsp;
379 * Called when the SA is deleted.
382 tcpsignature_cleanup(struct secasvar *sav)
386 static struct xformsw tcpsignature_xformsw = {
387 .xf_type = XF_TCPSIGNATURE,
388 .xf_name = "TCP-MD5",
389 .xf_init = tcpsignature_init,
390 .xf_cleanup = tcpsignature_cleanup,
393 static const struct tcpmd5_methods tcpmd5_methods = {
394 .input = tcp_ipsec_input,
395 .output = tcp_ipsec_output,
396 .pcbctl = tcp_ipsec_pcbctl,
400 /* TCP-MD5 support is build in the kernel */
401 static const struct tcpmd5_support tcpmd5_ipsec = {
402 .enabled = IPSEC_MODULE_ENABLED,
403 .methods = &tcpmd5_methods
405 const struct tcpmd5_support * const tcp_ipsec_support = &tcpmd5_ipsec;
406 #endif /* !KLD_MODULE */
409 tcpmd5_modevent(module_t mod, int type, void *data)
414 xform_attach(&tcpsignature_xformsw);
416 tcpmd5_support_enable(&tcpmd5_methods);
421 tcpmd5_support_disable();
423 xform_detach(&tcpsignature_xformsw);
431 static moduledata_t tcpmd5_mod = {
437 DECLARE_MODULE(tcpmd5, tcpmd5_mod, SI_SUB_PROTO_DOMAIN, SI_ORDER_ANY);
438 MODULE_VERSION(tcpmd5, 1);
440 MODULE_DEPEND(tcpmd5, ipsec_support, 1, 1, 1);