1 /*
2 * IEEE 802.1X-2010 Key Agree Protocol of PAE state machine
3 * Copyright (c) 2013, Qualcomm Atheros, Inc.
4 *
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
7 */
8
9 #include <time.h>
10 #include "includes.h"
11 #include "common.h"
12 #include "list.h"
13 #include "eloop.h"
14 #include "wpabuf.h"
15 #include "state_machine.h"
16 #include "l2_packet/l2_packet.h"
17 #include "common/eapol_common.h"
18 #include "crypto/aes_wrap.h"
19 #include "ieee802_1x_cp.h"
20 #include "ieee802_1x_key.h"
21 #include "ieee802_1x_kay.h"
22 #include "ieee802_1x_kay_i.h"
23 #include "ieee802_1x_secy_ops.h"
24
25
26 #define DEFAULT_SA_KEY_LEN 16
27 #define DEFAULT_ICV_LEN 16
28 #define MAX_ICV_LEN 32 /* 32 bytes, 256 bits */
29
30 #define PENDING_PN_EXHAUSTION 0xC0000000
31
32 /* IEEE Std 802.1X-2010, Table 9-1 - MKA Algorithm Agility */
33 #define MKA_ALGO_AGILITY_2009 { 0x00, 0x80, 0xC2, 0x01 }
34 static u8 mka_algo_agility[4] = MKA_ALGO_AGILITY_2009;
35
36 /* IEEE802.1AE-2006 Table 14-1 MACsec Cipher Suites */
37 static struct macsec_ciphersuite cipher_suite_tbl[] = {
38 /* GCM-AES-128 */
39 {
40 CS_ID_GCM_AES_128,
41 CS_NAME_GCM_AES_128,
42 MACSEC_CAP_INTEG_AND_CONF_0_30_50,
43 16,
44
45 0 /* index */
46 },
47 };
48 #define CS_TABLE_SIZE (ARRAY_SIZE(cipher_suite_tbl))
49 #define DEFAULT_CS_INDEX 0
50
51 static struct mka_alg mka_alg_tbl[] = {
52 {
53 MKA_ALGO_AGILITY_2009,
54 /* 128-bit CAK, KEK, ICK, ICV */
55 16, 16, 16, 16,
56 ieee802_1x_cak_128bits_aes_cmac,
57 ieee802_1x_ckn_128bits_aes_cmac,
58 ieee802_1x_kek_128bits_aes_cmac,
59 ieee802_1x_ick_128bits_aes_cmac,
60 ieee802_1x_icv_128bits_aes_cmac,
61
62 1, /* index */
63 },
64 };
65 #define MKA_ALG_TABLE_SIZE (ARRAY_SIZE(mka_alg_tbl))
66
67
is_ki_equal(struct ieee802_1x_mka_ki * ki1,struct ieee802_1x_mka_ki * ki2)68 static int is_ki_equal(struct ieee802_1x_mka_ki *ki1,
69 struct ieee802_1x_mka_ki *ki2)
70 {
71 return os_memcmp(ki1->mi, ki2->mi, MI_LEN) == 0 &&
72 ki1->kn == ki2->kn;
73 }
74
75
76 struct mka_param_body_handler {
77 int (*body_tx)(struct ieee802_1x_mka_participant *participant,
78 struct wpabuf *buf);
79 int (*body_rx)(struct ieee802_1x_mka_participant *participant,
80 const u8 *mka_msg, size_t msg_len);
81 int (*body_length)(struct ieee802_1x_mka_participant *participant);
82 Boolean (*body_present)(struct ieee802_1x_mka_participant *participant);
83 };
84
85
set_mka_param_body_len(void * body,unsigned int len)86 static void set_mka_param_body_len(void *body, unsigned int len)
87 {
88 struct ieee802_1x_mka_hdr *hdr = body;
89 hdr->length = (len >> 8) & 0x0f;
90 hdr->length1 = len & 0xff;
91 }
92
93
get_mka_param_body_len(const void * body)94 static unsigned int get_mka_param_body_len(const void *body)
95 {
96 const struct ieee802_1x_mka_hdr *hdr = body;
97 return (hdr->length << 8) | hdr->length1;
98 }
99
100
get_mka_param_body_type(const void * body)101 static int get_mka_param_body_type(const void *body)
102 {
103 const struct ieee802_1x_mka_hdr *hdr = body;
104 return hdr->type;
105 }
106
107
108 /**
109 * ieee802_1x_mka_dump_basic_body -
110 */
111 static void
ieee802_1x_mka_dump_basic_body(struct ieee802_1x_mka_basic_body * body)112 ieee802_1x_mka_dump_basic_body(struct ieee802_1x_mka_basic_body *body)
113 {
114 size_t body_len;
115
116 if (!body)
117 return;
118
119 body_len = get_mka_param_body_len(body);
120 wpa_printf(MSG_DEBUG, "*** MKA Basic Parameter set ***");
121 wpa_printf(MSG_DEBUG, "\tVersion.......: %d", body->version);
122 wpa_printf(MSG_DEBUG, "\tPriority......: %d", body->priority);
123 wpa_printf(MSG_DEBUG, "\tKeySvr........: %d", body->key_server);
124 wpa_printf(MSG_DEBUG, "\tMACSecDesired.: %d", body->macsec_desired);
125 wpa_printf(MSG_DEBUG, "\tMACSecCapable.: %d", body->macsec_capbility);
126 wpa_printf(MSG_DEBUG, "\tBody Length...: %d", (int) body_len);
127 wpa_printf(MSG_DEBUG, "\tSCI MAC.......: " MACSTR,
128 MAC2STR(body->actor_sci.addr));
129 wpa_printf(MSG_DEBUG, "\tSCI Port .....: %d",
130 be_to_host16(body->actor_sci.port));
131 wpa_hexdump(MSG_DEBUG, "\tMember Id.....:",
132 body->actor_mi, sizeof(body->actor_mi));
133 wpa_printf(MSG_DEBUG, "\tMessage Number: %d",
134 be_to_host32(body->actor_mn));
135 wpa_hexdump(MSG_DEBUG, "\tAlgo Agility..:",
136 body->algo_agility, sizeof(body->algo_agility));
137 wpa_hexdump_ascii(MSG_DEBUG, "\tCAK Name......:", body->ckn,
138 body_len + MKA_HDR_LEN - sizeof(*body));
139 }
140
141
142 /**
143 * ieee802_1x_mka_dump_peer_body -
144 */
145 static void
ieee802_1x_mka_dump_peer_body(struct ieee802_1x_mka_peer_body * body)146 ieee802_1x_mka_dump_peer_body(struct ieee802_1x_mka_peer_body *body)
147 {
148 size_t body_len;
149 size_t i;
150 u8 *mi;
151 u32 mn;
152
153 if (body == NULL)
154 return;
155
156 body_len = get_mka_param_body_len(body);
157 if (body->type == MKA_LIVE_PEER_LIST) {
158 wpa_printf(MSG_DEBUG, "*** Live Peer List ***");
159 wpa_printf(MSG_DEBUG, "\tBody Length...: %d", (int) body_len);
160 } else if (body->type == MKA_POTENTIAL_PEER_LIST) {
161 wpa_printf(MSG_DEBUG, "*** Potential Live Peer List ***");
162 wpa_printf(MSG_DEBUG, "\tBody Length...: %d", (int) body_len);
163 }
164
165 for (i = 0; i < body_len; i += MI_LEN + sizeof(mn)) {
166 mi = body->peer + i;
167 os_memcpy(&mn, mi + MI_LEN, sizeof(mn));
168 wpa_hexdump_ascii(MSG_DEBUG, "\tMember Id.....:", mi, MI_LEN);
169 wpa_printf(MSG_DEBUG, "\tMessage Number: %d", be_to_host32(mn));
170 }
171 }
172
173
174 /**
175 * ieee802_1x_mka_dump_dist_sak_body -
176 */
177 static void
ieee802_1x_mka_dump_dist_sak_body(struct ieee802_1x_mka_dist_sak_body * body)178 ieee802_1x_mka_dump_dist_sak_body(struct ieee802_1x_mka_dist_sak_body *body)
179 {
180 size_t body_len;
181
182 if (body == NULL)
183 return;
184
185 body_len = get_mka_param_body_len(body);
186 wpa_printf(MSG_INFO, "*** Distributed SAK ***");
187 wpa_printf(MSG_INFO, "\tDistributed AN........: %d", body->dan);
188 wpa_printf(MSG_INFO, "\tConfidentiality Offset: %d",
189 body->confid_offset);
190 wpa_printf(MSG_INFO, "\tBody Length...........: %d", (int) body_len);
191 if (!body_len)
192 return;
193
194 wpa_printf(MSG_INFO, "\tKey Number............: %d",
195 be_to_host32(body->kn));
196 wpa_hexdump(MSG_INFO, "\tAES Key Wrap of SAK...:", body->sak, 24);
197 }
198
199
yes_no(int val)200 static const char * yes_no(int val)
201 {
202 return val ? "Yes" : "No";
203 }
204
205
206 /**
207 * ieee802_1x_mka_dump_sak_use_body -
208 */
209 static void
ieee802_1x_mka_dump_sak_use_body(struct ieee802_1x_mka_sak_use_body * body)210 ieee802_1x_mka_dump_sak_use_body(struct ieee802_1x_mka_sak_use_body *body)
211 {
212 int body_len;
213
214 if (body == NULL)
215 return;
216
217 body_len = get_mka_param_body_len(body);
218 wpa_printf(MSG_DEBUG, "*** MACsec SAK Use ***");
219 wpa_printf(MSG_DEBUG, "\tLatest Key AN....: %d", body->lan);
220 wpa_printf(MSG_DEBUG, "\tLatest Key Tx....: %s", yes_no(body->ltx));
221 wpa_printf(MSG_DEBUG, "\tLatest Key Rx....: %s", yes_no(body->lrx));
222 wpa_printf(MSG_DEBUG, "\tOld Key AN....: %d", body->oan);
223 wpa_printf(MSG_DEBUG, "\tOld Key Tx....: %s", yes_no(body->otx));
224 wpa_printf(MSG_DEBUG, "\tOld Key Rx....: %s", yes_no(body->orx));
225 wpa_printf(MSG_DEBUG, "\tPlain Key Tx....: %s", yes_no(body->ptx));
226 wpa_printf(MSG_DEBUG, "\tPlain Key Rx....: %s", yes_no(body->prx));
227 wpa_printf(MSG_DEBUG, "\tDelay Protect....: %s",
228 yes_no(body->delay_protect));
229 wpa_printf(MSG_DEBUG, "\tBody Length......: %d", body_len);
230 if (!body_len)
231 return;
232
233 wpa_hexdump(MSG_DEBUG, "\tKey Server MI....:",
234 body->lsrv_mi, sizeof(body->lsrv_mi));
235 wpa_printf(MSG_DEBUG, "\tKey Number.......: %u",
236 be_to_host32(body->lkn));
237 wpa_printf(MSG_DEBUG, "\tLowest PN........: %u",
238 be_to_host32(body->llpn));
239 wpa_hexdump_ascii(MSG_DEBUG, "\tOld Key Server MI....:",
240 body->osrv_mi, sizeof(body->osrv_mi));
241 wpa_printf(MSG_DEBUG, "\tOld Key Number.......: %u",
242 be_to_host32(body->okn));
243 wpa_printf(MSG_DEBUG, "\tOld Lowest PN........: %u",
244 be_to_host32(body->olpn));
245 }
246
247
248 /**
249 * ieee802_1x_kay_get_participant -
250 */
251 static struct ieee802_1x_mka_participant *
ieee802_1x_kay_get_participant(struct ieee802_1x_kay * kay,const u8 * ckn)252 ieee802_1x_kay_get_participant(struct ieee802_1x_kay *kay, const u8 *ckn)
253 {
254 struct ieee802_1x_mka_participant *participant;
255
256 dl_list_for_each(participant, &kay->participant_list,
257 struct ieee802_1x_mka_participant, list) {
258 if (os_memcmp(participant->ckn.name, ckn,
259 participant->ckn.len) == 0)
260 return participant;
261 }
262
263 wpa_printf(MSG_DEBUG, "KaY: participant is not found");
264
265 return NULL;
266 }
267
268
269 /**
270 * ieee802_1x_kay_get_principal_participant -
271 */
272 static struct ieee802_1x_mka_participant *
ieee802_1x_kay_get_principal_participant(struct ieee802_1x_kay * kay)273 ieee802_1x_kay_get_principal_participant(struct ieee802_1x_kay *kay)
274 {
275 struct ieee802_1x_mka_participant *participant;
276
277 dl_list_for_each(participant, &kay->participant_list,
278 struct ieee802_1x_mka_participant, list) {
279 if (participant->principal)
280 return participant;
281 }
282
283 wpa_printf(MSG_DEBUG, "KaY: principal participant is not founded");
284 return NULL;
285 }
286
287
get_peer_mi(struct dl_list * peers,const u8 * mi)288 static struct ieee802_1x_kay_peer * get_peer_mi(struct dl_list *peers,
289 const u8 *mi)
290 {
291 struct ieee802_1x_kay_peer *peer;
292
293 dl_list_for_each(peer, peers, struct ieee802_1x_kay_peer, list) {
294 if (os_memcmp(peer->mi, mi, MI_LEN) == 0)
295 return peer;
296 }
297
298 return NULL;
299 }
300
301
302 /**
303 * ieee802_1x_kay_is_in_potential_peer
304 */
305 static Boolean
ieee802_1x_kay_is_in_potential_peer(struct ieee802_1x_mka_participant * participant,const u8 * mi)306 ieee802_1x_kay_is_in_potential_peer(
307 struct ieee802_1x_mka_participant *participant, const u8 *mi)
308 {
309 return get_peer_mi(&participant->potential_peers, mi) != NULL;
310 }
311
312
313 /**
314 * ieee802_1x_kay_is_in_live_peer
315 */
316 static Boolean
ieee802_1x_kay_is_in_live_peer(struct ieee802_1x_mka_participant * participant,const u8 * mi)317 ieee802_1x_kay_is_in_live_peer(
318 struct ieee802_1x_mka_participant *participant, const u8 *mi)
319 {
320 return get_peer_mi(&participant->live_peers, mi) != NULL;
321 }
322
323
324 /**
325 * ieee802_1x_kay_is_in_peer
326 */
327 static Boolean
ieee802_1x_kay_is_in_peer(struct ieee802_1x_mka_participant * participant,const u8 * mi)328 ieee802_1x_kay_is_in_peer(struct ieee802_1x_mka_participant *participant,
329 const u8 *mi)
330 {
331 return ieee802_1x_kay_is_in_live_peer(participant, mi) ||
332 ieee802_1x_kay_is_in_potential_peer(participant, mi);
333 }
334
335
336 /**
337 * ieee802_1x_kay_get_peer
338 */
339 static struct ieee802_1x_kay_peer *
ieee802_1x_kay_get_peer(struct ieee802_1x_mka_participant * participant,const u8 * mi)340 ieee802_1x_kay_get_peer(struct ieee802_1x_mka_participant *participant,
341 const u8 *mi)
342 {
343 struct ieee802_1x_kay_peer *peer;
344
345 peer = get_peer_mi(&participant->live_peers, mi);
346 if (peer)
347 return peer;
348
349 return get_peer_mi(&participant->potential_peers, mi);
350 }
351
352
353 /**
354 * ieee802_1x_kay_get_live_peer
355 */
356 static struct ieee802_1x_kay_peer *
ieee802_1x_kay_get_live_peer(struct ieee802_1x_mka_participant * participant,const u8 * mi)357 ieee802_1x_kay_get_live_peer(struct ieee802_1x_mka_participant *participant,
358 const u8 *mi)
359 {
360 return get_peer_mi(&participant->live_peers, mi);
361 }
362
363
364 /**
365 * ieee802_1x_kay_get_cipher_suite
366 */
367 static struct macsec_ciphersuite *
ieee802_1x_kay_get_cipher_suite(struct ieee802_1x_mka_participant * participant,u8 * cs_id)368 ieee802_1x_kay_get_cipher_suite(struct ieee802_1x_mka_participant *participant,
369 u8 *cs_id)
370 {
371 unsigned int i;
372
373 for (i = 0; i < CS_TABLE_SIZE; i++) {
374 if (os_memcmp(cipher_suite_tbl[i].id, cs_id, CS_ID_LEN) == 0)
375 break;
376 }
377 if (i >= CS_TABLE_SIZE)
378 return NULL;
379
380 return &cipher_suite_tbl[i];
381 }
382
383
384 /**
385 * ieee802_1x_kay_get_peer_sci
386 */
387 static struct ieee802_1x_kay_peer *
ieee802_1x_kay_get_peer_sci(struct ieee802_1x_mka_participant * participant,const struct ieee802_1x_mka_sci * sci)388 ieee802_1x_kay_get_peer_sci(struct ieee802_1x_mka_participant *participant,
389 const struct ieee802_1x_mka_sci *sci)
390 {
391 struct ieee802_1x_kay_peer *peer;
392
393 dl_list_for_each(peer, &participant->live_peers,
394 struct ieee802_1x_kay_peer, list) {
395 if (os_memcmp(&peer->sci, sci, sizeof(peer->sci)) == 0)
396 return peer;
397 }
398
399 dl_list_for_each(peer, &participant->potential_peers,
400 struct ieee802_1x_kay_peer, list) {
401 if (os_memcmp(&peer->sci, sci, sizeof(peer->sci)) == 0)
402 return peer;
403 }
404
405 return NULL;
406 }
407
408
409 /**
410 * ieee802_1x_kay_init_receive_sa -
411 */
412 static struct receive_sa *
ieee802_1x_kay_init_receive_sa(struct receive_sc * psc,u8 an,u32 lowest_pn,struct data_key * key)413 ieee802_1x_kay_init_receive_sa(struct receive_sc *psc, u8 an, u32 lowest_pn,
414 struct data_key *key)
415 {
416 struct receive_sa *psa;
417
418 if (!psc || !key)
419 return NULL;
420
421 psa = os_zalloc(sizeof(*psa));
422 if (!psa) {
423 wpa_printf(MSG_ERROR, "%s: out of memory", __func__);
424 return NULL;
425 }
426
427 psa->pkey = key;
428 psa->lowest_pn = lowest_pn;
429 psa->next_pn = lowest_pn;
430 psa->an = an;
431 psa->sc = psc;
432
433 os_get_time(&psa->created_time);
434 psa->in_use = FALSE;
435
436 dl_list_add(&psc->sa_list, &psa->list);
437 wpa_printf(MSG_DEBUG,
438 "KaY: Create receive SA(AN: %d lowest_pn: %u of SC(channel: %d)",
439 (int) an, lowest_pn, psc->channel);
440
441 return psa;
442 }
443
444
445 /**
446 * ieee802_1x_kay_deinit_receive_sa -
447 */
ieee802_1x_kay_deinit_receive_sa(struct receive_sa * psa)448 static void ieee802_1x_kay_deinit_receive_sa(struct receive_sa *psa)
449 {
450 psa->pkey = NULL;
451 wpa_printf(MSG_DEBUG,
452 "KaY: Delete receive SA(an: %d) of SC(channel: %d)",
453 psa->an, psa->sc->channel);
454 dl_list_del(&psa->list);
455 os_free(psa);
456 }
457
458
459 /**
460 * ieee802_1x_kay_init_receive_sc -
461 */
462 static struct receive_sc *
ieee802_1x_kay_init_receive_sc(const struct ieee802_1x_mka_sci * psci,int channel)463 ieee802_1x_kay_init_receive_sc(const struct ieee802_1x_mka_sci *psci,
464 int channel)
465 {
466 struct receive_sc *psc;
467
468 if (!psci)
469 return NULL;
470
471 psc = os_zalloc(sizeof(*psc));
472 if (!psc) {
473 wpa_printf(MSG_ERROR, "%s: out of memory", __func__);
474 return NULL;
475 }
476
477 os_memcpy(&psc->sci, psci, sizeof(psc->sci));
478 psc->channel = channel;
479
480 os_get_time(&psc->created_time);
481 psc->receiving = FALSE;
482
483 dl_list_init(&psc->sa_list);
484 wpa_printf(MSG_DEBUG, "KaY: Create receive SC(channel: %d)", channel);
485 wpa_hexdump(MSG_DEBUG, "SCI: ", (u8 *)psci, sizeof(*psci));
486
487 return psc;
488 }
489
490
491 /**
492 * ieee802_1x_kay_deinit_receive_sc -
493 **/
494 static void
ieee802_1x_kay_deinit_receive_sc(struct ieee802_1x_mka_participant * participant,struct receive_sc * psc)495 ieee802_1x_kay_deinit_receive_sc(
496 struct ieee802_1x_mka_participant *participant, struct receive_sc *psc)
497 {
498 struct receive_sa *psa, *pre_sa;
499
500 wpa_printf(MSG_DEBUG, "KaY: Delete receive SC(channel: %d)",
501 psc->channel);
502 dl_list_for_each_safe(psa, pre_sa, &psc->sa_list, struct receive_sa,
503 list) {
504 secy_disable_receive_sa(participant->kay, psa);
505 ieee802_1x_kay_deinit_receive_sa(psa);
506 }
507 dl_list_del(&psc->list);
508 os_free(psc);
509 }
510
511
512 /**
513 * ieee802_1x_kay_create_live_peer
514 */
515 static struct ieee802_1x_kay_peer *
ieee802_1x_kay_create_live_peer(struct ieee802_1x_mka_participant * participant,u8 * mi,u32 mn)516 ieee802_1x_kay_create_live_peer(struct ieee802_1x_mka_participant *participant,
517 u8 *mi, u32 mn)
518 {
519 struct ieee802_1x_kay_peer *peer;
520 struct receive_sc *rxsc;
521 u32 sc_ch = 0;
522
523 peer = os_zalloc(sizeof(*peer));
524 if (peer == NULL) {
525 wpa_printf(MSG_ERROR, "KaY-%s: out of memory", __func__);
526 return NULL;
527 }
528
529 os_memcpy(peer->mi, mi, MI_LEN);
530 peer->mn = mn;
531 peer->expire = time(NULL) + MKA_LIFE_TIME / 1000;
532 peer->sak_used = FALSE;
533 os_memcpy(&peer->sci, &participant->current_peer_sci,
534 sizeof(peer->sci));
535 dl_list_add(&participant->live_peers, &peer->list);
536
537 secy_get_available_receive_sc(participant->kay, &sc_ch);
538
539 rxsc = ieee802_1x_kay_init_receive_sc(&peer->sci, sc_ch);
540 if (!rxsc)
541 return NULL;
542
543 dl_list_add(&participant->rxsc_list, &rxsc->list);
544 secy_create_receive_sc(participant->kay, rxsc);
545
546 wpa_printf(MSG_DEBUG, "KaY: Live peer created");
547 wpa_hexdump(MSG_DEBUG, "\tMI: ", peer->mi, sizeof(peer->mi));
548 wpa_printf(MSG_DEBUG, "\tMN: %d", peer->mn);
549 wpa_hexdump(MSG_DEBUG, "\tSCI Addr: ", peer->sci.addr, ETH_ALEN);
550 wpa_printf(MSG_DEBUG, "\tPort: %d", peer->sci.port);
551
552 return peer;
553 }
554
555
556 /**
557 * ieee802_1x_kay_create_potential_peer
558 */
559 static struct ieee802_1x_kay_peer *
ieee802_1x_kay_create_potential_peer(struct ieee802_1x_mka_participant * participant,const u8 * mi,u32 mn)560 ieee802_1x_kay_create_potential_peer(
561 struct ieee802_1x_mka_participant *participant, const u8 *mi, u32 mn)
562 {
563 struct ieee802_1x_kay_peer *peer;
564
565 peer = os_zalloc(sizeof(*peer));
566 if (peer == NULL) {
567 wpa_printf(MSG_ERROR, "KaY-%s: out of memory", __func__);
568 return NULL;
569 }
570
571 os_memcpy(peer->mi, mi, MI_LEN);
572 peer->mn = mn;
573 peer->expire = time(NULL) + MKA_LIFE_TIME / 1000;
574 peer->sak_used = FALSE;
575
576 dl_list_add(&participant->potential_peers, &peer->list);
577
578 wpa_printf(MSG_DEBUG, "KaY: potential peer created");
579 wpa_hexdump(MSG_DEBUG, "\tMI: ", peer->mi, sizeof(peer->mi));
580 wpa_printf(MSG_DEBUG, "\tMN: %d", peer->mn);
581 wpa_hexdump(MSG_DEBUG, "\tSCI Addr: ", peer->sci.addr, ETH_ALEN);
582 wpa_printf(MSG_DEBUG, "\tPort: %d", peer->sci.port);
583
584 return peer;
585 }
586
587
588 /**
589 * ieee802_1x_kay_move_live_peer
590 */
591 static struct ieee802_1x_kay_peer *
ieee802_1x_kay_move_live_peer(struct ieee802_1x_mka_participant * participant,u8 * mi,u32 mn)592 ieee802_1x_kay_move_live_peer(struct ieee802_1x_mka_participant *participant,
593 u8 *mi, u32 mn)
594 {
595 struct ieee802_1x_kay_peer *peer;
596 struct receive_sc *rxsc;
597 u32 sc_ch = 0;
598
599 dl_list_for_each(peer, &participant->potential_peers,
600 struct ieee802_1x_kay_peer, list) {
601 if (os_memcmp(peer->mi, mi, MI_LEN) == 0)
602 break;
603 }
604
605 os_memcpy(&peer->sci, &participant->current_peer_sci,
606 sizeof(peer->sci));
607 peer->mn = mn;
608 peer->expire = time(NULL) + MKA_LIFE_TIME / 1000;
609
610 wpa_printf(MSG_DEBUG, "KaY: move potential peer to live peer");
611 wpa_hexdump(MSG_DEBUG, "\tMI: ", peer->mi, sizeof(peer->mi));
612 wpa_printf(MSG_DEBUG, "\tMN: %d", peer->mn);
613 wpa_hexdump(MSG_DEBUG, "\tSCI Addr: ", peer->sci.addr, ETH_ALEN);
614 wpa_printf(MSG_DEBUG, "\tPort: %d", peer->sci.port);
615
616 dl_list_del(&peer->list);
617 dl_list_add_tail(&participant->live_peers, &peer->list);
618
619 secy_get_available_receive_sc(participant->kay, &sc_ch);
620
621 rxsc = ieee802_1x_kay_init_receive_sc(&peer->sci, sc_ch);
622 if (!rxsc)
623 return NULL;
624
625 dl_list_add(&participant->rxsc_list, &rxsc->list);
626 secy_create_receive_sc(participant->kay, rxsc);
627
628 return peer;
629 }
630
631
632
633 /**
634 * ieee802_1x_mka_basic_body_present -
635 */
636 static Boolean
ieee802_1x_mka_basic_body_present(struct ieee802_1x_mka_participant * participant)637 ieee802_1x_mka_basic_body_present(
638 struct ieee802_1x_mka_participant *participant)
639 {
640 return TRUE;
641 }
642
643
644 /**
645 * ieee802_1x_mka_basic_body_length -
646 */
647 static int
ieee802_1x_mka_basic_body_length(struct ieee802_1x_mka_participant * participant)648 ieee802_1x_mka_basic_body_length(struct ieee802_1x_mka_participant *participant)
649 {
650 int length;
651
652 length = sizeof(struct ieee802_1x_mka_basic_body);
653 length += participant->ckn.len;
654 return (length + 0x3) & ~0x3;
655 }
656
657
658 /**
659 * ieee802_1x_mka_encode_basic_body
660 */
661 static int
ieee802_1x_mka_encode_basic_body(struct ieee802_1x_mka_participant * participant,struct wpabuf * buf)662 ieee802_1x_mka_encode_basic_body(
663 struct ieee802_1x_mka_participant *participant,
664 struct wpabuf *buf)
665 {
666 struct ieee802_1x_mka_basic_body *body;
667 struct ieee802_1x_kay *kay = participant->kay;
668 unsigned int length = ieee802_1x_mka_basic_body_length(participant);
669
670 body = wpabuf_put(buf, length);
671
672 body->version = kay->mka_version;
673 body->priority = kay->actor_priority;
674 if (participant->is_elected)
675 body->key_server = participant->is_key_server;
676 else
677 body->key_server = participant->can_be_key_server;
678
679 body->macsec_desired = kay->macsec_desired;
680 body->macsec_capbility = kay->macsec_capable;
681 set_mka_param_body_len(body, length - MKA_HDR_LEN);
682
683 os_memcpy(body->actor_sci.addr, kay->actor_sci.addr,
684 sizeof(kay->actor_sci.addr));
685 body->actor_sci.port = host_to_be16(kay->actor_sci.port);
686
687 os_memcpy(body->actor_mi, participant->mi, sizeof(body->actor_mi));
688 participant->mn = participant->mn + 1;
689 body->actor_mn = host_to_be32(participant->mn);
690 os_memcpy(body->algo_agility, participant->kay->algo_agility,
691 sizeof(body->algo_agility));
692
693 os_memcpy(body->ckn, participant->ckn.name, participant->ckn.len);
694
695 ieee802_1x_mka_dump_basic_body(body);
696
697 return 0;
698 }
699
700
701 /**
702 * ieee802_1x_mka_decode_basic_body -
703 */
704 static struct ieee802_1x_mka_participant *
ieee802_1x_mka_decode_basic_body(struct ieee802_1x_kay * kay,const u8 * mka_msg,size_t msg_len)705 ieee802_1x_mka_decode_basic_body(struct ieee802_1x_kay *kay, const u8 *mka_msg,
706 size_t msg_len)
707 {
708 struct ieee802_1x_mka_participant *participant;
709 const struct ieee802_1x_mka_basic_body *body;
710 struct ieee802_1x_kay_peer *peer;
711
712 body = (const struct ieee802_1x_mka_basic_body *) mka_msg;
713
714 if (body->version > MKA_VERSION_ID) {
715 wpa_printf(MSG_DEBUG,
716 "KaY: peer's version(%d) greater than mka current version(%d)",
717 body->version, MKA_VERSION_ID);
718 }
719 if (kay->is_obliged_key_server && body->key_server) {
720 wpa_printf(MSG_DEBUG, "I must be as key server");
721 return NULL;
722 }
723
724 participant = ieee802_1x_kay_get_participant(kay, body->ckn);
725 if (!participant) {
726 wpa_printf(MSG_DEBUG, "Peer is not included in my CA");
727 return NULL;
728 }
729
730 /* If the peer's MI is my MI, I will choose new MI */
731 if (os_memcmp(body->actor_mi, participant->mi, MI_LEN) == 0) {
732 if (os_get_random(participant->mi, sizeof(participant->mi)) < 0)
733 return NULL;
734 participant->mn = 0;
735 }
736
737 os_memcpy(participant->current_peer_id.mi, body->actor_mi, MI_LEN);
738 participant->current_peer_id.mn = be_to_host32(body->actor_mn);
739 os_memcpy(participant->current_peer_sci.addr, body->actor_sci.addr,
740 sizeof(participant->current_peer_sci.addr));
741 participant->current_peer_sci.port = be_to_host16(body->actor_sci.port);
742
743 /* handler peer */
744 peer = ieee802_1x_kay_get_peer(participant, body->actor_mi);
745 if (!peer) {
746 /* Check duplicated SCI */
747 /* TODO: What policy should be applied to detect duplicated SCI
748 * is active attacker or a valid peer whose MI is be changed?
749 */
750 peer = ieee802_1x_kay_get_peer_sci(participant,
751 &body->actor_sci);
752 if (peer) {
753 wpa_printf(MSG_WARNING,
754 "KaY: duplicated SCI detected, Maybe active attacker");
755 dl_list_del(&peer->list);
756 os_free(peer);
757 }
758
759 peer = ieee802_1x_kay_create_potential_peer(
760 participant, body->actor_mi,
761 be_to_host32(body->actor_mn));
762 if (!peer)
763 return NULL;
764
765 peer->macsec_desired = body->macsec_desired;
766 peer->macsec_capbility = body->macsec_capbility;
767 peer->is_key_server = (Boolean) body->key_server;
768 peer->key_server_priority = body->priority;
769 } else if (peer->mn < be_to_host32(body->actor_mn)) {
770 peer->mn = be_to_host32(body->actor_mn);
771 peer->expire = time(NULL) + MKA_LIFE_TIME / 1000;
772 peer->macsec_desired = body->macsec_desired;
773 peer->macsec_capbility = body->macsec_capbility;
774 peer->is_key_server = (Boolean) body->key_server;
775 peer->key_server_priority = body->priority;
776 } else {
777 wpa_printf(MSG_WARNING, "KaY: The peer MN have received");
778 return NULL;
779 }
780
781 return participant;
782 }
783
784
785 /**
786 * ieee802_1x_mka_live_peer_body_present
787 */
788 static Boolean
ieee802_1x_mka_live_peer_body_present(struct ieee802_1x_mka_participant * participant)789 ieee802_1x_mka_live_peer_body_present(
790 struct ieee802_1x_mka_participant *participant)
791 {
792 return !dl_list_empty(&participant->live_peers);
793 }
794
795
796 /**
797 * ieee802_1x_kay_get_live_peer_length
798 */
799 static int
ieee802_1x_mka_get_live_peer_length(struct ieee802_1x_mka_participant * participant)800 ieee802_1x_mka_get_live_peer_length(
801 struct ieee802_1x_mka_participant *participant)
802 {
803 int len = MKA_HDR_LEN;
804 struct ieee802_1x_kay_peer *peer;
805
806 dl_list_for_each(peer, &participant->live_peers,
807 struct ieee802_1x_kay_peer, list)
808 len += sizeof(struct ieee802_1x_mka_peer_id);
809
810 return (len + 0x3) & ~0x3;
811 }
812
813
814 /**
815 * ieee802_1x_mka_encode_live_peer_body -
816 */
817 static int
ieee802_1x_mka_encode_live_peer_body(struct ieee802_1x_mka_participant * participant,struct wpabuf * buf)818 ieee802_1x_mka_encode_live_peer_body(
819 struct ieee802_1x_mka_participant *participant,
820 struct wpabuf *buf)
821 {
822 struct ieee802_1x_mka_peer_body *body;
823 struct ieee802_1x_kay_peer *peer;
824 unsigned int length;
825 struct ieee802_1x_mka_peer_id *body_peer;
826
827 length = ieee802_1x_mka_get_live_peer_length(participant);
828 body = wpabuf_put(buf, sizeof(struct ieee802_1x_mka_peer_body));
829
830 body->type = MKA_LIVE_PEER_LIST;
831 set_mka_param_body_len(body, length - MKA_HDR_LEN);
832
833 dl_list_for_each(peer, &participant->live_peers,
834 struct ieee802_1x_kay_peer, list) {
835 body_peer = wpabuf_put(buf,
836 sizeof(struct ieee802_1x_mka_peer_id));
837 os_memcpy(body_peer->mi, peer->mi, MI_LEN);
838 body_peer->mn = host_to_be32(peer->mn);
839 body_peer++;
840 }
841
842 ieee802_1x_mka_dump_peer_body(body);
843 return 0;
844 }
845
846 /**
847 * ieee802_1x_mka_potential_peer_body_present
848 */
849 static Boolean
ieee802_1x_mka_potential_peer_body_present(struct ieee802_1x_mka_participant * participant)850 ieee802_1x_mka_potential_peer_body_present(
851 struct ieee802_1x_mka_participant *participant)
852 {
853 return !dl_list_empty(&participant->potential_peers);
854 }
855
856
857 /**
858 * ieee802_1x_kay_get_potential_peer_length
859 */
860 static int
ieee802_1x_mka_get_potential_peer_length(struct ieee802_1x_mka_participant * participant)861 ieee802_1x_mka_get_potential_peer_length(
862 struct ieee802_1x_mka_participant *participant)
863 {
864 int len = MKA_HDR_LEN;
865 struct ieee802_1x_kay_peer *peer;
866
867 dl_list_for_each(peer, &participant->potential_peers,
868 struct ieee802_1x_kay_peer, list)
869 len += sizeof(struct ieee802_1x_mka_peer_id);
870
871 return (len + 0x3) & ~0x3;
872 }
873
874
875 /**
876 * ieee802_1x_mka_encode_potential_peer_body -
877 */
878 static int
ieee802_1x_mka_encode_potential_peer_body(struct ieee802_1x_mka_participant * participant,struct wpabuf * buf)879 ieee802_1x_mka_encode_potential_peer_body(
880 struct ieee802_1x_mka_participant *participant,
881 struct wpabuf *buf)
882 {
883 struct ieee802_1x_mka_peer_body *body;
884 struct ieee802_1x_kay_peer *peer;
885 unsigned int length;
886 struct ieee802_1x_mka_peer_id *body_peer;
887
888 length = ieee802_1x_mka_get_potential_peer_length(participant);
889 body = wpabuf_put(buf, sizeof(struct ieee802_1x_mka_peer_body));
890
891 body->type = MKA_POTENTIAL_PEER_LIST;
892 set_mka_param_body_len(body, length - MKA_HDR_LEN);
893
894 dl_list_for_each(peer, &participant->potential_peers,
895 struct ieee802_1x_kay_peer, list) {
896 body_peer = wpabuf_put(buf,
897 sizeof(struct ieee802_1x_mka_peer_id));
898 os_memcpy(body_peer->mi, peer->mi, MI_LEN);
899 body_peer->mn = host_to_be32(peer->mn);
900 body_peer++;
901 }
902
903 ieee802_1x_mka_dump_peer_body(body);
904 return 0;
905 }
906
907
908 /**
909 * ieee802_1x_mka_i_in_peerlist -
910 */
911 static Boolean
ieee802_1x_mka_i_in_peerlist(struct ieee802_1x_mka_participant * participant,const u8 * mka_msg,size_t msg_len)912 ieee802_1x_mka_i_in_peerlist(struct ieee802_1x_mka_participant *participant,
913 const u8 *mka_msg, size_t msg_len)
914 {
915 Boolean included = FALSE;
916 struct ieee802_1x_mka_hdr *hdr;
917 size_t body_len;
918 size_t left_len;
919 int body_type;
920 u32 peer_mn;
921 const u8 *peer_mi;
922 const u8 *pos;
923 size_t i;
924
925 pos = mka_msg;
926 left_len = msg_len;
927 while (left_len > (MKA_HDR_LEN + DEFAULT_ICV_LEN)) {
928 hdr = (struct ieee802_1x_mka_hdr *) pos;
929 body_len = get_mka_param_body_len(hdr);
930 body_type = get_mka_param_body_type(hdr);
931
932 if (body_type != MKA_LIVE_PEER_LIST &&
933 body_type != MKA_POTENTIAL_PEER_LIST)
934 goto SKIP_PEER;
935
936 ieee802_1x_mka_dump_peer_body(
937 (struct ieee802_1x_mka_peer_body *)pos);
938
939 if (left_len < (MKA_HDR_LEN + body_len + DEFAULT_ICV_LEN)) {
940 wpa_printf(MSG_ERROR,
941 "KaY: MKA Peer Packet Body Length (%d bytes) is less than the Parameter Set Header Length (%d bytes) + the Parameter Set Body Length (%d bytes) + %d bytes of ICV",
942 (int) left_len, (int) MKA_HDR_LEN,
943 (int) body_len, DEFAULT_ICV_LEN);
944 goto SKIP_PEER;
945 }
946
947 if ((body_len % 16) != 0) {
948 wpa_printf(MSG_ERROR,
949 "KaY: MKA Peer Packet Body Length (%d bytes) should multiple of 16 octets",
950 (int) body_len);
951 goto SKIP_PEER;
952 }
953
954 for (i = 0; i < body_len; i += MI_LEN + sizeof(peer_mn)) {
955 peer_mi = MKA_HDR_LEN + pos + i;
956 os_memcpy(&peer_mn, peer_mi + MI_LEN, sizeof(peer_mn));
957 peer_mn = be_to_host32(peer_mn);
958 if (os_memcmp(peer_mi, participant->mi, MI_LEN) == 0 &&
959 peer_mn == participant->mn) {
960 included = TRUE;
961 break;
962 }
963 }
964
965 if (included)
966 return TRUE;
967
968 SKIP_PEER:
969 left_len -= body_len + MKA_HDR_LEN;
970 pos += body_len + MKA_HDR_LEN;
971 }
972
973 return FALSE;
974 }
975
976
977 /**
978 * ieee802_1x_mka_decode_live_peer_body -
979 */
ieee802_1x_mka_decode_live_peer_body(struct ieee802_1x_mka_participant * participant,const u8 * peer_msg,size_t msg_len)980 static int ieee802_1x_mka_decode_live_peer_body(
981 struct ieee802_1x_mka_participant *participant,
982 const u8 *peer_msg, size_t msg_len)
983 {
984 const struct ieee802_1x_mka_hdr *hdr;
985 struct ieee802_1x_kay_peer *peer;
986 size_t body_len;
987 u32 peer_mn;
988 const u8 *peer_mi;
989 size_t i;
990 Boolean is_included;
991
992 is_included = ieee802_1x_kay_is_in_live_peer(
993 participant, participant->current_peer_id.mi);
994
995 hdr = (const struct ieee802_1x_mka_hdr *) peer_msg;
996 body_len = get_mka_param_body_len(hdr);
997
998 for (i = 0; i < body_len; i += MI_LEN + sizeof(peer_mn)) {
999 peer_mi = MKA_HDR_LEN + peer_msg + i;
1000 os_memcpy(&peer_mn, peer_mi + MI_LEN, sizeof(peer_mn));
1001 peer_mn = be_to_host32(peer_mn);
1002
1003 /* it is myself */
1004 if (os_memcmp(peer_mi, participant->mi, MI_LEN) == 0) {
1005 /* My message id is used by other participant */
1006 if (peer_mn > participant->mn) {
1007 if (os_get_random(participant->mi,
1008 sizeof(participant->mi)) < 0)
1009 wpa_printf(MSG_DEBUG,
1010 "KaY: Could not update mi");
1011 participant->mn = 0;
1012 }
1013 continue;
1014 }
1015 if (!is_included)
1016 continue;
1017
1018 peer = ieee802_1x_kay_get_peer(participant, peer_mi);
1019 if (NULL != peer) {
1020 peer->mn = peer_mn;
1021 peer->expire = time(NULL) + MKA_LIFE_TIME / 1000;
1022 } else {
1023 if (!ieee802_1x_kay_create_potential_peer(
1024 participant, peer_mi, peer_mn)) {
1025 return -1;
1026 }
1027 }
1028 }
1029
1030 return 0;
1031 }
1032
1033
1034 /**
1035 * ieee802_1x_mka_decode_potential_peer_body -
1036 */
1037 static int
ieee802_1x_mka_decode_potential_peer_body(struct ieee802_1x_mka_participant * participant,const u8 * peer_msg,size_t msg_len)1038 ieee802_1x_mka_decode_potential_peer_body(
1039 struct ieee802_1x_mka_participant *participant,
1040 const u8 *peer_msg, size_t msg_len)
1041 {
1042 struct ieee802_1x_mka_hdr *hdr;
1043 size_t body_len;
1044 u32 peer_mn;
1045 const u8 *peer_mi;
1046 size_t i;
1047
1048 hdr = (struct ieee802_1x_mka_hdr *) peer_msg;
1049 body_len = get_mka_param_body_len(hdr);
1050
1051 for (i = 0; i < body_len; i += MI_LEN + sizeof(peer_mn)) {
1052 peer_mi = MKA_HDR_LEN + peer_msg + i;
1053 os_memcpy(&peer_mn, peer_mi + MI_LEN, sizeof(peer_mn));
1054 peer_mn = be_to_host32(peer_mn);
1055
1056 /* it is myself */
1057 if (os_memcmp(peer_mi, participant->mi, MI_LEN) == 0) {
1058 /* My message id is used by other participant */
1059 if (peer_mn > participant->mn) {
1060 if (os_get_random(participant->mi,
1061 sizeof(participant->mi)) < 0)
1062 wpa_printf(MSG_DEBUG,
1063 "KaY: Could not update mi");
1064 participant->mn = 0;
1065 }
1066 continue;
1067 }
1068 }
1069
1070 return 0;
1071 }
1072
1073
1074 /**
1075 * ieee802_1x_mka_sak_use_body_present
1076 */
1077 static Boolean
ieee802_1x_mka_sak_use_body_present(struct ieee802_1x_mka_participant * participant)1078 ieee802_1x_mka_sak_use_body_present(
1079 struct ieee802_1x_mka_participant *participant)
1080 {
1081 if (participant->to_use_sak)
1082 return TRUE;
1083 else
1084 return FALSE;
1085 }
1086
1087
1088 /**
1089 * ieee802_1x_mka_get_sak_use_length
1090 */
1091 static int
ieee802_1x_mka_get_sak_use_length(struct ieee802_1x_mka_participant * participant)1092 ieee802_1x_mka_get_sak_use_length(
1093 struct ieee802_1x_mka_participant *participant)
1094 {
1095 int length = MKA_HDR_LEN;
1096
1097 if (participant->kay->macsec_desired && participant->advised_desired)
1098 length = sizeof(struct ieee802_1x_mka_sak_use_body);
1099 else
1100 length = MKA_HDR_LEN;
1101
1102 length = (length + 0x3) & ~0x3;
1103
1104 return length;
1105 }
1106
1107
1108 /**
1109 *
1110 */
1111 static u32
ieee802_1x_mka_get_lpn(struct ieee802_1x_mka_participant * principal,struct ieee802_1x_mka_ki * ki)1112 ieee802_1x_mka_get_lpn(struct ieee802_1x_mka_participant *principal,
1113 struct ieee802_1x_mka_ki *ki)
1114 {
1115 struct receive_sa *rxsa;
1116 struct receive_sc *rxsc;
1117 u32 lpn = 0;
1118
1119 dl_list_for_each(rxsc, &principal->rxsc_list, struct receive_sc, list) {
1120 dl_list_for_each(rxsa, &rxsc->sa_list, struct receive_sa, list)
1121 {
1122 if (is_ki_equal(&rxsa->pkey->key_identifier, ki)) {
1123 secy_get_receive_lowest_pn(principal->kay,
1124 rxsa);
1125
1126 lpn = lpn > rxsa->lowest_pn ?
1127 lpn : rxsa->lowest_pn;
1128 break;
1129 }
1130 }
1131 }
1132
1133 if (lpn == 0)
1134 lpn = 1;
1135
1136 return lpn;
1137 }
1138
1139
1140 /**
1141 * ieee802_1x_mka_encode_sak_use_body -
1142 */
1143 static int
ieee802_1x_mka_encode_sak_use_body(struct ieee802_1x_mka_participant * participant,struct wpabuf * buf)1144 ieee802_1x_mka_encode_sak_use_body(
1145 struct ieee802_1x_mka_participant *participant,
1146 struct wpabuf *buf)
1147 {
1148 struct ieee802_1x_mka_sak_use_body *body;
1149 unsigned int length;
1150 u32 pn = 1;
1151
1152 length = ieee802_1x_mka_get_sak_use_length(participant);
1153 body = wpabuf_put(buf, sizeof(struct ieee802_1x_mka_sak_use_body));
1154
1155 body->type = MKA_SAK_USE;
1156 set_mka_param_body_len(body, length - MKA_HDR_LEN);
1157
1158 if (length == MKA_HDR_LEN) {
1159 body->ptx = TRUE;
1160 body->prx = TRUE;
1161 body->lan = 0;
1162 body->lrx = FALSE;
1163 body->ltx = FALSE;
1164 body->delay_protect = FALSE;
1165 return 0;
1166 }
1167
1168 /* data protect, lowest accept packet number */
1169 body->delay_protect = participant->kay->macsec_replay_protect;
1170 pn = ieee802_1x_mka_get_lpn(participant, &participant->lki);
1171 if (pn > participant->kay->pn_exhaustion) {
1172 wpa_printf(MSG_WARNING, "KaY: My LPN exhaustion");
1173 if (participant->is_key_server)
1174 participant->new_sak = TRUE;
1175 }
1176
1177 body->llpn = host_to_be32(pn);
1178 pn = ieee802_1x_mka_get_lpn(participant, &participant->oki);
1179 body->olpn = host_to_be32(pn);
1180
1181 /* plain tx, plain rx */
1182 if (participant->kay->macsec_protect)
1183 body->ptx = FALSE;
1184 else
1185 body->ptx = TRUE;
1186
1187 if (participant->kay->macsec_validate == Strict)
1188 body->prx = FALSE;
1189 else
1190 body->prx = TRUE;
1191
1192 /* latest key: rx, tx, key server member identifier key number */
1193 body->lan = participant->lan;
1194 os_memcpy(body->lsrv_mi, participant->lki.mi,
1195 sizeof(body->lsrv_mi));
1196 body->lkn = host_to_be32(participant->lki.kn);
1197 body->lrx = participant->lrx;
1198 body->ltx = participant->ltx;
1199
1200 /* old key: rx, tx, key server member identifier key number */
1201 body->oan = participant->oan;
1202 if (participant->oki.kn != participant->lki.kn &&
1203 participant->oki.kn != 0) {
1204 body->otx = TRUE;
1205 body->orx = TRUE;
1206 os_memcpy(body->osrv_mi, participant->oki.mi,
1207 sizeof(body->osrv_mi));
1208 body->okn = host_to_be32(participant->oki.kn);
1209 } else {
1210 body->otx = FALSE;
1211 body->orx = FALSE;
1212 }
1213
1214 /* set CP's variable */
1215 if (body->ltx) {
1216 if (!participant->kay->tx_enable)
1217 participant->kay->tx_enable = TRUE;
1218
1219 if (!participant->kay->port_enable)
1220 participant->kay->port_enable = TRUE;
1221 }
1222 if (body->lrx) {
1223 if (!participant->kay->rx_enable)
1224 participant->kay->rx_enable = TRUE;
1225 }
1226
1227 ieee802_1x_mka_dump_sak_use_body(body);
1228 return 0;
1229 }
1230
1231
1232 /**
1233 * ieee802_1x_mka_decode_sak_use_body -
1234 */
1235 static int
ieee802_1x_mka_decode_sak_use_body(struct ieee802_1x_mka_participant * participant,const u8 * mka_msg,size_t msg_len)1236 ieee802_1x_mka_decode_sak_use_body(
1237 struct ieee802_1x_mka_participant *participant,
1238 const u8 *mka_msg, size_t msg_len)
1239 {
1240 struct ieee802_1x_mka_hdr *hdr;
1241 struct ieee802_1x_mka_sak_use_body *body;
1242 struct ieee802_1x_kay_peer *peer;
1243 struct transmit_sa *txsa;
1244 struct data_key *sa_key = NULL;
1245 size_t body_len;
1246 struct ieee802_1x_mka_ki ki;
1247 u32 lpn;
1248 Boolean all_receiving;
1249 Boolean founded;
1250
1251 if (!participant->principal) {
1252 wpa_printf(MSG_WARNING, "KaY: Participant is not principal");
1253 return -1;
1254 }
1255 peer = ieee802_1x_kay_get_live_peer(participant,
1256 participant->current_peer_id.mi);
1257 if (!peer) {
1258 wpa_printf(MSG_WARNING, "KaY: the peer is not my live peer");
1259 return -1;
1260 }
1261
1262 hdr = (struct ieee802_1x_mka_hdr *) mka_msg;
1263 body_len = get_mka_param_body_len(hdr);
1264 body = (struct ieee802_1x_mka_sak_use_body *) mka_msg;
1265 ieee802_1x_mka_dump_sak_use_body(body);
1266
1267 if ((body_len != 0) && (body_len < 40)) {
1268 wpa_printf(MSG_ERROR,
1269 "KaY: MKA Use SAK Packet Body Length (%d bytes) should be 0, 40, or more octets",
1270 (int) body_len);
1271 return -1;
1272 }
1273
1274 /* TODO: what action should I take when peer does not support MACsec */
1275 if (body_len == 0) {
1276 wpa_printf(MSG_WARNING, "KaY: Peer does not support MACsec");
1277 return 0;
1278 }
1279
1280 /* TODO: when the plain tx or rx of peer is true, should I change
1281 * the attribute of controlled port
1282 */
1283 if (body->prx)
1284 wpa_printf(MSG_WARNING, "KaY: peer's plain rx are TRUE");
1285
1286 if (body->ptx)
1287 wpa_printf(MSG_WARNING, "KaY: peer's plain tx are TRUE");
1288
1289 /* check latest key is valid */
1290 if (body->ltx || body->lrx) {
1291 founded = FALSE;
1292 os_memcpy(ki.mi, body->lsrv_mi, sizeof(ki.mi));
1293 ki.kn = ntohl(body->lkn);
1294 dl_list_for_each(sa_key, &participant->sak_list,
1295 struct data_key, list) {
1296 if (is_ki_equal(&sa_key->key_identifier, &ki)) {
1297 founded = TRUE;
1298 break;
1299 }
1300 }
1301 if (!founded) {
1302 wpa_printf(MSG_WARNING, "KaY: Latest key is invalid");
1303 return -1;
1304 }
1305 if (os_memcmp(participant->lki.mi, body->lsrv_mi,
1306 sizeof(participant->lki.mi)) == 0 &&
1307 ntohl(body->lkn) == participant->lki.kn &&
1308 body->lan == participant->lan) {
1309 peer->sak_used = TRUE;
1310 }
1311 if (body->ltx && peer->is_key_server) {
1312 ieee802_1x_cp_set_servertransmitting(
1313 participant->kay->cp, TRUE);
1314 ieee802_1x_cp_sm_step(participant->kay->cp);
1315 }
1316 }
1317
1318 /* check old key is valid */
1319 if (body->otx || body->orx) {
1320 if (os_memcmp(participant->oki.mi, body->osrv_mi,
1321 sizeof(participant->oki.mi)) != 0 ||
1322 ntohl(body->okn) != participant->oki.kn ||
1323 body->oan != participant->oan) {
1324 wpa_printf(MSG_WARNING, "KaY: Old key is invalid");
1325 return -1;
1326 }
1327 }
1328
1329 /* TODO: how to set the MACsec hardware when delay_protect is true */
1330 if (body->delay_protect && (!ntohl(body->llpn) || !ntohl(body->olpn))) {
1331 wpa_printf(MSG_WARNING,
1332 "KaY: Lowest packet number should greater than 0 when delay_protect is TRUE");
1333 return -1;
1334 }
1335
1336 /* check all live peer have used the sak for receiving sa */
1337 all_receiving = TRUE;
1338 dl_list_for_each(peer, &participant->live_peers,
1339 struct ieee802_1x_kay_peer, list) {
1340 if (!peer->sak_used) {
1341 all_receiving = FALSE;
1342 break;
1343 }
1344 }
1345 if (all_receiving) {
1346 participant->to_dist_sak = FALSE;
1347 ieee802_1x_cp_set_allreceiving(participant->kay->cp, TRUE);
1348 ieee802_1x_cp_sm_step(participant->kay->cp);
1349 }
1350
1351 /* if i'm key server, and detects peer member pn exhaustion, rekey.*/
1352 lpn = ntohl(body->llpn);
1353 if (lpn > participant->kay->pn_exhaustion) {
1354 if (participant->is_key_server) {
1355 participant->new_sak = TRUE;
1356 wpa_printf(MSG_WARNING, "KaY: Peer LPN exhaustion");
1357 }
1358 }
1359
1360 founded = FALSE;
1361 dl_list_for_each(txsa, &participant->txsc->sa_list,
1362 struct transmit_sa, list) {
1363 if (sa_key != NULL && txsa->pkey == sa_key) {
1364 founded = TRUE;
1365 break;
1366 }
1367 }
1368 if (!founded) {
1369 wpa_printf(MSG_WARNING, "KaY: Can't find txsa");
1370 return -1;
1371 }
1372
1373 /* FIXME: Secy creates txsa with default npn. If MKA detected Latest Key
1374 * npn is larger than txsa's npn, set it to txsa.
1375 */
1376 secy_get_transmit_next_pn(participant->kay, txsa);
1377 if (lpn > txsa->next_pn) {
1378 secy_set_transmit_next_pn(participant->kay, txsa);
1379 wpa_printf(MSG_INFO, "KaY: update lpn =0x%x", lpn);
1380 }
1381
1382 return 0;
1383 }
1384
1385
1386 /**
1387 * ieee802_1x_mka_dist_sak_body_present
1388 */
1389 static Boolean
ieee802_1x_mka_dist_sak_body_present(struct ieee802_1x_mka_participant * participant)1390 ieee802_1x_mka_dist_sak_body_present(
1391 struct ieee802_1x_mka_participant *participant)
1392 {
1393 if (!participant->to_dist_sak || !participant->new_key)
1394 return FALSE;
1395
1396 return TRUE;
1397 }
1398
1399
1400 /**
1401 * ieee802_1x_kay_get_dist_sak_length
1402 */
1403 static int
ieee802_1x_mka_get_dist_sak_length(struct ieee802_1x_mka_participant * participant)1404 ieee802_1x_mka_get_dist_sak_length(
1405 struct ieee802_1x_mka_participant *participant)
1406 {
1407 int length;
1408 int cs_index = participant->kay->macsec_csindex;
1409
1410 if (participant->advised_desired) {
1411 length = sizeof(struct ieee802_1x_mka_dist_sak_body);
1412 if (cs_index != DEFAULT_CS_INDEX)
1413 length += CS_ID_LEN;
1414
1415 length += cipher_suite_tbl[cs_index].sak_len + 8;
1416 } else {
1417 length = MKA_HDR_LEN;
1418 }
1419 length = (length + 0x3) & ~0x3;
1420
1421 return length;
1422 }
1423
1424
1425 /**
1426 * ieee802_1x_mka_encode_dist_sak_body -
1427 */
1428 static int
ieee802_1x_mka_encode_dist_sak_body(struct ieee802_1x_mka_participant * participant,struct wpabuf * buf)1429 ieee802_1x_mka_encode_dist_sak_body(
1430 struct ieee802_1x_mka_participant *participant,
1431 struct wpabuf *buf)
1432 {
1433 struct ieee802_1x_mka_dist_sak_body *body;
1434 struct data_key *sak;
1435 unsigned int length;
1436 int cs_index;
1437 int sak_pos;
1438
1439 length = ieee802_1x_mka_get_dist_sak_length(participant);
1440 body = wpabuf_put(buf, length);
1441 body->type = MKA_DISTRIBUTED_SAK;
1442 set_mka_param_body_len(body, length - MKA_HDR_LEN);
1443 if (length == MKA_HDR_LEN) {
1444 body->confid_offset = 0;
1445 body->dan = 0;
1446 return 0;
1447 }
1448
1449 sak = participant->new_key;
1450 body->confid_offset = sak->confidentiality_offset;
1451 body->dan = sak->an;
1452 body->kn = host_to_be32(sak->key_identifier.kn);
1453 cs_index = participant->kay->macsec_csindex;
1454 sak_pos = 0;
1455 if (cs_index != DEFAULT_CS_INDEX) {
1456 os_memcpy(body->sak, cipher_suite_tbl[cs_index].id, CS_ID_LEN);
1457 sak_pos = CS_ID_LEN;
1458 }
1459 if (aes_wrap(participant->kek.key, 16,
1460 cipher_suite_tbl[cs_index].sak_len / 8,
1461 sak->key, body->sak + sak_pos)) {
1462 wpa_printf(MSG_ERROR, "KaY: AES wrap failed");
1463 return -1;
1464 }
1465
1466 ieee802_1x_mka_dump_dist_sak_body(body);
1467
1468 return 0;
1469 }
1470
1471
1472 /**
1473 * ieee802_1x_kay_init_data_key -
1474 */
1475 static struct data_key *
ieee802_1x_kay_init_data_key(const struct key_conf * conf)1476 ieee802_1x_kay_init_data_key(const struct key_conf *conf)
1477 {
1478 struct data_key *pkey;
1479
1480 if (!conf)
1481 return NULL;
1482
1483 pkey = os_zalloc(sizeof(*pkey));
1484 if (pkey == NULL) {
1485 wpa_printf(MSG_ERROR, "%s: out of memory", __func__);
1486 return NULL;
1487 }
1488
1489 pkey->key = os_zalloc(conf->key_len);
1490 if (pkey->key == NULL) {
1491 wpa_printf(MSG_ERROR, "%s: out of memory", __func__);
1492 os_free(pkey);
1493 return NULL;
1494 }
1495
1496 os_memcpy(pkey->key, conf->key, conf->key_len);
1497 os_memcpy(&pkey->key_identifier, &conf->ki,
1498 sizeof(pkey->key_identifier));
1499 pkey->confidentiality_offset = conf->offset;
1500 pkey->an = conf->an;
1501 pkey->transmits = conf->tx;
1502 pkey->receives = conf->rx;
1503 os_get_time(&pkey->created_time);
1504
1505 pkey->user = 1;
1506
1507 return pkey;
1508 }
1509
1510
1511 /**
1512 * ieee802_1x_kay_decode_dist_sak_body -
1513 */
1514 static int
ieee802_1x_mka_decode_dist_sak_body(struct ieee802_1x_mka_participant * participant,const u8 * mka_msg,size_t msg_len)1515 ieee802_1x_mka_decode_dist_sak_body(
1516 struct ieee802_1x_mka_participant *participant,
1517 const u8 *mka_msg, size_t msg_len)
1518 {
1519 struct ieee802_1x_mka_hdr *hdr;
1520 struct ieee802_1x_mka_dist_sak_body *body;
1521 struct ieee802_1x_kay_peer *peer;
1522 struct macsec_ciphersuite *cs;
1523 size_t body_len;
1524 struct key_conf *conf;
1525 struct data_key *sa_key = NULL;
1526 struct ieee802_1x_mka_ki sak_ki;
1527 int sak_len;
1528 u8 *wrap_sak;
1529 u8 *unwrap_sak;
1530
1531 hdr = (struct ieee802_1x_mka_hdr *) mka_msg;
1532 body_len = get_mka_param_body_len(hdr);
1533 if ((body_len != 0) && (body_len != 28) && (body_len < 36)) {
1534 wpa_printf(MSG_ERROR,
1535 "KaY: MKA Use SAK Packet Body Length (%d bytes) should be 0, 28, 36, or more octets",
1536 (int) body_len);
1537 return -1;
1538 }
1539
1540 if (!participant->principal) {
1541 wpa_printf(MSG_ERROR,
1542 "KaY: I can't accept the distributed SAK as I am not principal");
1543 return -1;
1544 }
1545 if (participant->is_key_server) {
1546 wpa_printf(MSG_ERROR,
1547 "KaY: I can't accept the distributed SAK as myself is key server ");
1548 return -1;
1549 }
1550 if (!participant->kay->macsec_desired ||
1551 participant->kay->macsec_capable == MACSEC_CAP_NOT_IMPLEMENTED) {
1552 wpa_printf(MSG_ERROR,
1553 "KaY: I am not MACsec-desired or without MACsec capable");
1554 return -1;
1555 }
1556
1557 peer = ieee802_1x_kay_get_live_peer(participant,
1558 participant->current_peer_id.mi);
1559 if (!peer) {
1560 wpa_printf(MSG_ERROR,
1561 "KaY: The key server is not in my live peers list");
1562 return -1;
1563 }
1564 if (os_memcmp(&participant->kay->key_server_sci,
1565 &peer->sci, sizeof(struct ieee802_1x_mka_sci)) != 0) {
1566 wpa_printf(MSG_ERROR, "KaY: The key server is not elected");
1567 return -1;
1568 }
1569 if (body_len == 0) {
1570 participant->kay->authenticated = TRUE;
1571 participant->kay->secured = FALSE;
1572 participant->kay->failed = FALSE;
1573 participant->advised_desired = FALSE;
1574 ieee802_1x_cp_connect_authenticated(participant->kay->cp);
1575 ieee802_1x_cp_sm_step(participant->kay->cp);
1576 wpa_printf(MSG_WARNING, "KaY:The Key server advise no MACsec");
1577 participant->to_use_sak = TRUE;
1578 return 0;
1579 }
1580 participant->advised_desired = TRUE;
1581 participant->kay->authenticated = FALSE;
1582 participant->kay->secured = TRUE;
1583 participant->kay->failed = FALSE;
1584 ieee802_1x_cp_connect_secure(participant->kay->cp);
1585 ieee802_1x_cp_sm_step(participant->kay->cp);
1586
1587 body = (struct ieee802_1x_mka_dist_sak_body *)mka_msg;
1588 ieee802_1x_mka_dump_dist_sak_body(body);
1589 dl_list_for_each(sa_key, &participant->sak_list, struct data_key, list)
1590 {
1591 if (os_memcmp(sa_key->key_identifier.mi,
1592 participant->current_peer_id.mi, MI_LEN) == 0 &&
1593 sa_key->key_identifier.kn == be_to_host32(body->kn)) {
1594 wpa_printf(MSG_WARNING, "KaY:The Key has installed");
1595 return 0;
1596 }
1597 }
1598 if (body_len == 28) {
1599 sak_len = DEFAULT_SA_KEY_LEN;
1600 wrap_sak = body->sak;
1601 participant->kay->macsec_csindex = DEFAULT_CS_INDEX;
1602 } else {
1603 cs = ieee802_1x_kay_get_cipher_suite(participant, body->sak);
1604 if (!cs) {
1605 wpa_printf(MSG_ERROR,
1606 "KaY: I can't support the Cipher Suite advised by key server");
1607 return -1;
1608 }
1609 sak_len = cs->sak_len;
1610 wrap_sak = body->sak + CS_ID_LEN;
1611 participant->kay->macsec_csindex = cs->index;
1612 }
1613
1614 unwrap_sak = os_zalloc(sak_len);
1615 if (!unwrap_sak) {
1616 wpa_printf(MSG_ERROR, "KaY-%s: Out of memory", __func__);
1617 return -1;
1618 }
1619 if (aes_unwrap(participant->kek.key, 16, sak_len >> 3, wrap_sak,
1620 unwrap_sak)) {
1621 wpa_printf(MSG_ERROR, "KaY: AES unwrap failed");
1622 os_free(unwrap_sak);
1623 return -1;
1624 }
1625 wpa_hexdump(MSG_DEBUG, "\tAES Key Unwrap of SAK:", unwrap_sak, sak_len);
1626
1627 conf = os_zalloc(sizeof(*conf));
1628 if (!conf) {
1629 wpa_printf(MSG_ERROR, "KaY-%s: Out of memory", __func__);
1630 os_free(unwrap_sak);
1631 return -1;
1632 }
1633 conf->key_len = sak_len;
1634
1635 conf->key = os_zalloc(conf->key_len);
1636 if (!conf->key) {
1637 wpa_printf(MSG_ERROR, "KaY-%s: Out of memory", __func__);
1638 os_free(unwrap_sak);
1639 os_free(conf);
1640 return -1;
1641 }
1642
1643 os_memcpy(conf->key, unwrap_sak, conf->key_len);
1644
1645 os_memcpy(&sak_ki.mi, &participant->current_peer_id.mi,
1646 sizeof(sak_ki.mi));
1647 sak_ki.kn = be_to_host32(body->kn);
1648
1649 os_memcpy(conf->ki.mi, sak_ki.mi, MI_LEN);
1650 conf->ki.kn = sak_ki.kn;
1651 conf->an = body->dan;
1652 conf->offset = body->confid_offset;
1653 conf->rx = TRUE;
1654 conf->tx = TRUE;
1655
1656 sa_key = ieee802_1x_kay_init_data_key(conf);
1657 if (!sa_key) {
1658 os_free(unwrap_sak);
1659 os_free(conf->key);
1660 os_free(conf);
1661 return -1;
1662 }
1663
1664 dl_list_add(&participant->sak_list, &sa_key->list);
1665
1666 ieee802_1x_cp_set_ciphersuite(
1667 participant->kay->cp,
1668 cipher_suite_tbl[participant->kay->macsec_csindex].id);
1669 ieee802_1x_cp_sm_step(participant->kay->cp);
1670 ieee802_1x_cp_set_offset(participant->kay->cp, body->confid_offset);
1671 ieee802_1x_cp_sm_step(participant->kay->cp);
1672 ieee802_1x_cp_set_distributedki(participant->kay->cp, &sak_ki);
1673 ieee802_1x_cp_set_distributedan(participant->kay->cp, body->dan);
1674 ieee802_1x_cp_signal_newsak(participant->kay->cp);
1675 ieee802_1x_cp_sm_step(participant->kay->cp);
1676
1677 participant->to_use_sak = TRUE;
1678
1679 os_free(unwrap_sak);
1680 os_free(conf->key);
1681 os_free(conf);
1682
1683 return 0;
1684 }
1685
1686
1687 /**
1688 * ieee802_1x_mka_icv_body_present
1689 */
1690 static Boolean
ieee802_1x_mka_icv_body_present(struct ieee802_1x_mka_participant * participant)1691 ieee802_1x_mka_icv_body_present(struct ieee802_1x_mka_participant *participant)
1692 {
1693 return TRUE;
1694 }
1695
1696
1697 /**
1698 * ieee802_1x_kay_get_icv_length
1699 */
1700 static int
ieee802_1x_mka_get_icv_length(struct ieee802_1x_mka_participant * participant)1701 ieee802_1x_mka_get_icv_length(struct ieee802_1x_mka_participant *participant)
1702 {
1703 int length;
1704
1705 length = sizeof(struct ieee802_1x_mka_icv_body);
1706 length += mka_alg_tbl[participant->kay->mka_algindex].icv_len;
1707
1708 return (length + 0x3) & ~0x3;
1709 }
1710
1711
1712 /**
1713 * ieee802_1x_mka_encode_icv_body -
1714 */
1715 static int
ieee802_1x_mka_encode_icv_body(struct ieee802_1x_mka_participant * participant,struct wpabuf * buf)1716 ieee802_1x_mka_encode_icv_body(struct ieee802_1x_mka_participant *participant,
1717 struct wpabuf *buf)
1718 {
1719 struct ieee802_1x_mka_icv_body *body;
1720 unsigned int length;
1721 u8 cmac[MAX_ICV_LEN];
1722
1723 length = ieee802_1x_mka_get_icv_length(participant);
1724 if (length != DEFAULT_ICV_LEN) {
1725 body = wpabuf_put(buf, MKA_HDR_LEN);
1726 body->type = MKA_ICV_INDICATOR;
1727 set_mka_param_body_len(body, length - MKA_HDR_LEN);
1728 }
1729
1730 if (mka_alg_tbl[participant->kay->mka_algindex].icv_hash(
1731 participant->ick.key, wpabuf_head(buf), buf->used, cmac)) {
1732 wpa_printf(MSG_ERROR, "KaY, omac1_aes_128 failed");
1733 return -1;
1734 }
1735
1736 if (length != DEFAULT_ICV_LEN) {
1737 os_memcpy(wpabuf_put(buf, length - MKA_HDR_LEN), cmac,
1738 length - MKA_HDR_LEN);
1739 } else {
1740 os_memcpy(wpabuf_put(buf, length), cmac, length);
1741 }
1742
1743 return 0;
1744 }
1745
1746 /**
1747 * ieee802_1x_mka_decode_icv_body -
1748 */
1749 static u8 *
ieee802_1x_mka_decode_icv_body(struct ieee802_1x_mka_participant * participant,const u8 * mka_msg,size_t msg_len)1750 ieee802_1x_mka_decode_icv_body(struct ieee802_1x_mka_participant *participant,
1751 const u8 *mka_msg, size_t msg_len)
1752 {
1753 struct ieee802_1x_mka_hdr *hdr;
1754 struct ieee802_1x_mka_icv_body *body;
1755 size_t body_len;
1756 size_t left_len;
1757 int body_type;
1758 const u8 *pos;
1759
1760 pos = mka_msg;
1761 left_len = msg_len;
1762 while (left_len > (MKA_HDR_LEN + DEFAULT_ICV_LEN)) {
1763 hdr = (struct ieee802_1x_mka_hdr *) pos;
1764 body_len = get_mka_param_body_len(hdr);
1765 body_type = get_mka_param_body_type(hdr);
1766
1767 if (left_len < (body_len + MKA_HDR_LEN))
1768 break;
1769
1770 if (body_type != MKA_ICV_INDICATOR) {
1771 left_len -= MKA_HDR_LEN + body_len;
1772 pos += MKA_HDR_LEN + body_len;
1773 continue;
1774 }
1775
1776 body = (struct ieee802_1x_mka_icv_body *)pos;
1777 if (body_len
1778 < mka_alg_tbl[participant->kay->mka_algindex].icv_len) {
1779 return NULL;
1780 }
1781
1782 return body->icv;
1783 }
1784
1785 return (u8 *) (mka_msg + msg_len - DEFAULT_ICV_LEN);
1786 }
1787
1788
1789 /**
1790 * ieee802_1x_mka_decode_dist_cak_body-
1791 */
1792 static int
ieee802_1x_mka_decode_dist_cak_body(struct ieee802_1x_mka_participant * participant,const u8 * mka_msg,size_t msg_len)1793 ieee802_1x_mka_decode_dist_cak_body(
1794 struct ieee802_1x_mka_participant *participant,
1795 const u8 *mka_msg, size_t msg_len)
1796 {
1797 struct ieee802_1x_mka_hdr *hdr;
1798 size_t body_len;
1799
1800 hdr = (struct ieee802_1x_mka_hdr *) mka_msg;
1801 body_len = get_mka_param_body_len(hdr);
1802 if (body_len < 28) {
1803 wpa_printf(MSG_ERROR,
1804 "KaY: MKA Use SAK Packet Body Length (%d bytes) should be 28 or more octets",
1805 (int) body_len);
1806 return -1;
1807 }
1808
1809 return 0;
1810 }
1811
1812
1813 /**
1814 * ieee802_1x_mka_decode_kmd_body -
1815 */
1816 static int
ieee802_1x_mka_decode_kmd_body(struct ieee802_1x_mka_participant * participant,const u8 * mka_msg,size_t msg_len)1817 ieee802_1x_mka_decode_kmd_body(
1818 struct ieee802_1x_mka_participant *participant,
1819 const u8 *mka_msg, size_t msg_len)
1820 {
1821 struct ieee802_1x_mka_hdr *hdr;
1822 size_t body_len;
1823
1824 hdr = (struct ieee802_1x_mka_hdr *) mka_msg;
1825 body_len = get_mka_param_body_len(hdr);
1826 if (body_len < 5) {
1827 wpa_printf(MSG_ERROR,
1828 "KaY: MKA Use SAK Packet Body Length (%d bytes) should be 5 or more octets",
1829 (int) body_len);
1830 return -1;
1831 }
1832
1833 return 0;
1834 }
1835
1836
1837 /**
1838 * ieee802_1x_mka_decode_announce_body -
1839 */
ieee802_1x_mka_decode_announce_body(struct ieee802_1x_mka_participant * participant,const u8 * mka_msg,size_t msg_len)1840 static int ieee802_1x_mka_decode_announce_body(
1841 struct ieee802_1x_mka_participant *participant,
1842 const u8 *mka_msg, size_t msg_len)
1843 {
1844 return 0;
1845 }
1846
1847
1848 static struct mka_param_body_handler mak_body_handler[] = {
1849 /* basic parameter set */
1850 {
1851 ieee802_1x_mka_encode_basic_body,
1852 NULL,
1853 ieee802_1x_mka_basic_body_length,
1854 ieee802_1x_mka_basic_body_present
1855 },
1856
1857 /* live peer list parameter set */
1858 {
1859 ieee802_1x_mka_encode_live_peer_body,
1860 ieee802_1x_mka_decode_live_peer_body,
1861 ieee802_1x_mka_get_live_peer_length,
1862 ieee802_1x_mka_live_peer_body_present
1863 },
1864
1865 /* potential peer list parameter set */
1866 {
1867 ieee802_1x_mka_encode_potential_peer_body,
1868 ieee802_1x_mka_decode_potential_peer_body,
1869 ieee802_1x_mka_get_potential_peer_length,
1870 ieee802_1x_mka_potential_peer_body_present
1871 },
1872
1873 /* sak use parameter set */
1874 {
1875 ieee802_1x_mka_encode_sak_use_body,
1876 ieee802_1x_mka_decode_sak_use_body,
1877 ieee802_1x_mka_get_sak_use_length,
1878 ieee802_1x_mka_sak_use_body_present
1879 },
1880
1881 /* distribute sak parameter set */
1882 {
1883 ieee802_1x_mka_encode_dist_sak_body,
1884 ieee802_1x_mka_decode_dist_sak_body,
1885 ieee802_1x_mka_get_dist_sak_length,
1886 ieee802_1x_mka_dist_sak_body_present
1887 },
1888
1889 /* distribute cak parameter set */
1890 {
1891 NULL,
1892 ieee802_1x_mka_decode_dist_cak_body,
1893 NULL,
1894 NULL
1895 },
1896
1897 /* kmd parameter set */
1898 {
1899 NULL,
1900 ieee802_1x_mka_decode_kmd_body,
1901 NULL,
1902 NULL
1903 },
1904
1905 /* announce parameter set */
1906 {
1907 NULL,
1908 ieee802_1x_mka_decode_announce_body,
1909 NULL,
1910 NULL
1911 },
1912
1913 /* icv parameter set */
1914 {
1915 ieee802_1x_mka_encode_icv_body,
1916 NULL,
1917 ieee802_1x_mka_get_icv_length,
1918 ieee802_1x_mka_icv_body_present
1919 },
1920 };
1921
1922
1923 /**
1924 * ieee802_1x_kay_deinit_data_key -
1925 */
ieee802_1x_kay_deinit_data_key(struct data_key * pkey)1926 void ieee802_1x_kay_deinit_data_key(struct data_key *pkey)
1927 {
1928 if (!pkey)
1929 return;
1930
1931 pkey->user--;
1932 if (pkey->user > 1)
1933 return;
1934
1935 dl_list_del(&pkey->list);
1936 os_free(pkey->key);
1937 os_free(pkey);
1938 }
1939
1940
1941 /**
1942 * ieee802_1x_kay_generate_new_sak -
1943 */
1944 static int
ieee802_1x_kay_generate_new_sak(struct ieee802_1x_mka_participant * participant)1945 ieee802_1x_kay_generate_new_sak(struct ieee802_1x_mka_participant *participant)
1946 {
1947 struct data_key *sa_key = NULL;
1948 struct key_conf *conf;
1949 struct ieee802_1x_kay_peer *peer;
1950 struct ieee802_1x_kay *kay = participant->kay;
1951 int ctx_len, ctx_offset;
1952 u8 *context;
1953
1954 /* check condition for generating a fresh SAK:
1955 * must have one live peer
1956 * and MKA life time elapse since last distribution
1957 * or potential peer is empty
1958 */
1959 if (dl_list_empty(&participant->live_peers)) {
1960 wpa_printf(MSG_ERROR,
1961 "KaY: Live peers list must not empty when generating fresh SAK");
1962 return -1;
1963 }
1964
1965 /* FIXME: A fresh SAK not generated until
1966 * the live peer list contains at least one peer and
1967 * MKA life time has elapsed since the prior SAK was first distributed,
1968 * or the Key server's potential peer is empty
1969 * but I can't understand the second item, so
1970 * here only check first item and ingore
1971 * && (!dl_list_empty(&participant->potential_peers))) {
1972 */
1973 if ((time(NULL) - kay->dist_time) < MKA_LIFE_TIME / 1000) {
1974 wpa_printf(MSG_ERROR,
1975 "KaY: Life time have not elapsed since prior SAK distributed");
1976 return -1;
1977 }
1978
1979 conf = os_zalloc(sizeof(*conf));
1980 if (!conf) {
1981 wpa_printf(MSG_ERROR, "KaY-%s: Out of memory", __func__);
1982 return -1;
1983 }
1984 conf->key_len = cipher_suite_tbl[kay->macsec_csindex].sak_len;
1985
1986 conf->key = os_zalloc(conf->key_len);
1987 if (!conf->key) {
1988 os_free(conf);
1989 wpa_printf(MSG_ERROR, "KaY-%s: Out of memory", __func__);
1990 return -1;
1991 }
1992
1993 ctx_len = conf->key_len + sizeof(kay->dist_kn);
1994 dl_list_for_each(peer, &participant->live_peers,
1995 struct ieee802_1x_kay_peer, list)
1996 ctx_len += sizeof(peer->mi);
1997 ctx_len += sizeof(participant->mi);
1998
1999 context = os_zalloc(ctx_len);
2000 if (!context) {
2001 os_free(conf->key);
2002 os_free(conf);
2003 return -1;
2004 }
2005 ctx_offset = 0;
2006 if (os_get_random(context + ctx_offset, conf->key_len) < 0) {
2007 os_free(context);
2008 os_free(conf->key);
2009 os_free(conf);
2010 return -1;
2011 }
2012 ctx_offset += conf->key_len;
2013 dl_list_for_each(peer, &participant->live_peers,
2014 struct ieee802_1x_kay_peer, list) {
2015 os_memcpy(context + ctx_offset, peer->mi, sizeof(peer->mi));
2016 ctx_offset += sizeof(peer->mi);
2017 }
2018 os_memcpy(context + ctx_offset, participant->mi,
2019 sizeof(participant->mi));
2020 ctx_offset += sizeof(participant->mi);
2021 os_memcpy(context + ctx_offset, &kay->dist_kn, sizeof(kay->dist_kn));
2022
2023 if (conf->key_len == 16) {
2024 ieee802_1x_sak_128bits_aes_cmac(participant->cak.key,
2025 context, ctx_len, conf->key);
2026 } else if (conf->key_len == 32) {
2027 ieee802_1x_sak_128bits_aes_cmac(participant->cak.key,
2028 context, ctx_len, conf->key);
2029 } else {
2030 wpa_printf(MSG_ERROR, "KaY: SAK Length not support");
2031 os_free(conf->key);
2032 os_free(conf);
2033 os_free(context);
2034 return -1;
2035 }
2036 wpa_hexdump(MSG_DEBUG, "KaY: generated new SAK",
2037 conf->key, conf->key_len);
2038
2039 os_memcpy(conf->ki.mi, participant->mi, MI_LEN);
2040 conf->ki.kn = participant->kay->dist_kn;
2041 conf->an = participant->kay->dist_an;
2042 conf->offset = kay->macsec_confidentiality;
2043 conf->rx = TRUE;
2044 conf->tx = TRUE;
2045
2046 sa_key = ieee802_1x_kay_init_data_key(conf);
2047 if (!sa_key) {
2048 os_free(conf->key);
2049 os_free(conf);
2050 os_free(context);
2051 return -1;
2052 }
2053 participant->new_key = sa_key;
2054
2055 dl_list_add(&participant->sak_list, &sa_key->list);
2056 ieee802_1x_cp_set_ciphersuite(participant->kay->cp,
2057 cipher_suite_tbl[kay->macsec_csindex].id);
2058 ieee802_1x_cp_sm_step(kay->cp);
2059 ieee802_1x_cp_set_offset(kay->cp, conf->offset);
2060 ieee802_1x_cp_sm_step(kay->cp);
2061 ieee802_1x_cp_set_distributedki(kay->cp, &conf->ki);
2062 ieee802_1x_cp_set_distributedan(kay->cp, conf->an);
2063 ieee802_1x_cp_signal_newsak(kay->cp);
2064 ieee802_1x_cp_sm_step(kay->cp);
2065
2066 dl_list_for_each(peer, &participant->live_peers,
2067 struct ieee802_1x_kay_peer, list)
2068 peer->sak_used = FALSE;
2069
2070 participant->kay->dist_kn++;
2071 participant->kay->dist_an++;
2072 if (participant->kay->dist_an > 3)
2073 participant->kay->dist_an = 0;
2074
2075 participant->kay->dist_time = time(NULL);
2076
2077 os_free(conf->key);
2078 os_free(conf);
2079 os_free(context);
2080 return 0;
2081 }
2082
2083
2084 /**
2085 * ieee802_1x_kay_elect_key_server - elect the key server
2086 * when to elect: whenever the live peers list changes
2087 */
2088 static int
ieee802_1x_kay_elect_key_server(struct ieee802_1x_mka_participant * participant)2089 ieee802_1x_kay_elect_key_server(struct ieee802_1x_mka_participant *participant)
2090 {
2091 struct ieee802_1x_kay_peer *peer;
2092 struct ieee802_1x_kay_peer *key_server = NULL;
2093 struct ieee802_1x_kay *kay = participant->kay;
2094 Boolean i_is_key_server;
2095 int i;
2096
2097 if (participant->is_obliged_key_server) {
2098 participant->new_sak = TRUE;
2099 participant->to_dist_sak = FALSE;
2100 ieee802_1x_cp_set_electedself(kay->cp, TRUE);
2101 return 0;
2102 }
2103
2104 /* elect the key server among the peers */
2105 dl_list_for_each(peer, &participant->live_peers,
2106 struct ieee802_1x_kay_peer, list) {
2107 if (!peer->is_key_server)
2108 continue;
2109
2110 if (!key_server) {
2111 key_server = peer;
2112 continue;
2113 }
2114
2115 if (peer->key_server_priority <
2116 key_server->key_server_priority) {
2117 key_server = peer;
2118 } else if (peer->key_server_priority ==
2119 key_server->key_server_priority) {
2120 for (i = 0; i < 6; i++) {
2121 if (peer->sci.addr[i] <
2122 key_server->sci.addr[i])
2123 key_server = peer;
2124 }
2125 }
2126 }
2127
2128 /* elect the key server between me and the above elected peer */
2129 i_is_key_server = FALSE;
2130 if (key_server && participant->can_be_key_server) {
2131 if (kay->actor_priority
2132 < key_server->key_server_priority) {
2133 i_is_key_server = TRUE;
2134 } else if (kay->actor_priority
2135 == key_server->key_server_priority) {
2136 for (i = 0; i < 6; i++) {
2137 if (kay->actor_sci.addr[i]
2138 < key_server->sci.addr[i]) {
2139 i_is_key_server = TRUE;
2140 }
2141 }
2142 }
2143 }
2144
2145 if (!key_server && !i_is_key_server) {
2146 participant->principal = FALSE;
2147 participant->is_key_server = FALSE;
2148 participant->is_elected = FALSE;
2149 return 0;
2150 }
2151
2152 if (i_is_key_server) {
2153 ieee802_1x_cp_set_electedself(kay->cp, TRUE);
2154 if (os_memcmp(&kay->key_server_sci, &kay->actor_sci,
2155 sizeof(kay->key_server_sci))) {
2156 ieee802_1x_cp_signal_chgdserver(kay->cp);
2157 ieee802_1x_cp_sm_step(kay->cp);
2158 }
2159
2160 participant->is_key_server = TRUE;
2161 participant->principal = TRUE;
2162 participant->new_sak = TRUE;
2163 wpa_printf(MSG_DEBUG, "KaY: I is elected as key server");
2164 participant->to_dist_sak = FALSE;
2165 participant->is_elected = TRUE;
2166
2167 os_memcpy(&kay->key_server_sci, &kay->actor_sci,
2168 sizeof(kay->key_server_sci));
2169 kay->key_server_priority = kay->actor_priority;
2170 }
2171
2172 if (key_server) {
2173 ieee802_1x_cp_set_electedself(kay->cp, FALSE);
2174 if (os_memcmp(&kay->key_server_sci, &key_server->sci,
2175 sizeof(kay->key_server_sci))) {
2176 ieee802_1x_cp_signal_chgdserver(kay->cp);
2177 ieee802_1x_cp_sm_step(kay->cp);
2178 }
2179
2180 participant->is_key_server = FALSE;
2181 participant->principal = TRUE;
2182 participant->is_elected = TRUE;
2183
2184 os_memcpy(&kay->key_server_sci, &key_server->sci,
2185 sizeof(kay->key_server_sci));
2186 kay->key_server_priority = key_server->key_server_priority;
2187 }
2188
2189 return 0;
2190 }
2191
2192
2193 /**
2194 * ieee802_1x_kay_decide_macsec_use - the key server determinate
2195 * how to use MACsec: whether use MACsec and its capability
2196 * protectFrames will be advised if the key server and one of its live peers are
2197 * MACsec capable and one of those request MACsec protection
2198 */
2199 static int
ieee802_1x_kay_decide_macsec_use(struct ieee802_1x_mka_participant * participant)2200 ieee802_1x_kay_decide_macsec_use(
2201 struct ieee802_1x_mka_participant *participant)
2202 {
2203 struct ieee802_1x_kay *kay = participant->kay;
2204 struct ieee802_1x_kay_peer *peer;
2205 enum macsec_cap less_capability;
2206 Boolean has_peer;
2207
2208 if (!participant->is_key_server)
2209 return -1;
2210
2211 /* key server self is MACsec-desired and requesting MACsec */
2212 if (!kay->macsec_desired) {
2213 participant->advised_desired = FALSE;
2214 return -1;
2215 }
2216 if (kay->macsec_capable == MACSEC_CAP_NOT_IMPLEMENTED) {
2217 participant->advised_desired = FALSE;
2218 return -1;
2219 }
2220 less_capability = kay->macsec_capable;
2221
2222 /* at least one of peers is MACsec-desired and requesting MACsec */
2223 has_peer = FALSE;
2224 dl_list_for_each(peer, &participant->live_peers,
2225 struct ieee802_1x_kay_peer, list) {
2226 if (!peer->macsec_desired)
2227 continue;
2228
2229 if (peer->macsec_capbility == MACSEC_CAP_NOT_IMPLEMENTED)
2230 continue;
2231
2232 less_capability = (less_capability < peer->macsec_capbility) ?
2233 less_capability : peer->macsec_capbility;
2234 has_peer = TRUE;
2235 }
2236
2237 if (has_peer) {
2238 participant->advised_desired = TRUE;
2239 participant->advised_capability = less_capability;
2240 kay->authenticated = FALSE;
2241 kay->secured = TRUE;
2242 kay->failed = FALSE;
2243 ieee802_1x_cp_connect_secure(kay->cp);
2244 ieee802_1x_cp_sm_step(kay->cp);
2245 } else {
2246 participant->advised_desired = FALSE;
2247 participant->advised_capability = MACSEC_CAP_NOT_IMPLEMENTED;
2248 participant->to_use_sak = FALSE;
2249 kay->authenticated = TRUE;
2250 kay->secured = FALSE;
2251 kay->failed = FALSE;
2252 kay->ltx_kn = 0;
2253 kay->ltx_an = 0;
2254 kay->lrx_kn = 0;
2255 kay->lrx_an = 0;
2256 kay->otx_kn = 0;
2257 kay->otx_an = 0;
2258 kay->orx_kn = 0;
2259 kay->orx_an = 0;
2260 ieee802_1x_cp_connect_authenticated(kay->cp);
2261 ieee802_1x_cp_sm_step(kay->cp);
2262 }
2263
2264 return 0;
2265 }
2266
2267 static const u8 pae_group_addr[ETH_ALEN] = {
2268 0x01, 0x80, 0xc2, 0x00, 0x00, 0x03
2269 };
2270
2271
2272 /**
2273 * ieee802_1x_kay_encode_mkpdu -
2274 */
2275 static int
ieee802_1x_kay_encode_mkpdu(struct ieee802_1x_mka_participant * participant,struct wpabuf * pbuf)2276 ieee802_1x_kay_encode_mkpdu(struct ieee802_1x_mka_participant *participant,
2277 struct wpabuf *pbuf)
2278 {
2279 unsigned int i;
2280 struct ieee8023_hdr *ether_hdr;
2281 struct ieee802_1x_hdr *eapol_hdr;
2282
2283 ether_hdr = wpabuf_put(pbuf, sizeof(*ether_hdr));
2284 os_memcpy(ether_hdr->dest, pae_group_addr, sizeof(ether_hdr->dest));
2285 os_memcpy(ether_hdr->src, participant->kay->actor_sci.addr,
2286 sizeof(ether_hdr->dest));
2287 ether_hdr->ethertype = host_to_be16(ETH_P_EAPOL);
2288
2289 eapol_hdr = wpabuf_put(pbuf, sizeof(*eapol_hdr));
2290 eapol_hdr->version = EAPOL_VERSION;
2291 eapol_hdr->type = IEEE802_1X_TYPE_EAPOL_MKA;
2292 eapol_hdr->length = host_to_be16(pbuf->size - pbuf->used);
2293
2294 for (i = 0; i < ARRAY_SIZE(mak_body_handler); i++) {
2295 if (mak_body_handler[i].body_present &&
2296 mak_body_handler[i].body_present(participant)) {
2297 if (mak_body_handler[i].body_tx(participant, pbuf))
2298 return -1;
2299 }
2300 }
2301
2302 return 0;
2303 }
2304
2305 /**
2306 * ieee802_1x_participant_send_mkpdu -
2307 */
2308 static int
ieee802_1x_participant_send_mkpdu(struct ieee802_1x_mka_participant * participant)2309 ieee802_1x_participant_send_mkpdu(
2310 struct ieee802_1x_mka_participant *participant)
2311 {
2312 struct wpabuf *buf;
2313 struct ieee802_1x_kay *kay = participant->kay;
2314 size_t length = 0;
2315 unsigned int i;
2316
2317 wpa_printf(MSG_DEBUG, "KaY: to enpacket and send the MKPDU");
2318 length += sizeof(struct ieee802_1x_hdr) + sizeof(struct ieee8023_hdr);
2319 for (i = 0; i < ARRAY_SIZE(mak_body_handler); i++) {
2320 if (mak_body_handler[i].body_present &&
2321 mak_body_handler[i].body_present(participant))
2322 length += mak_body_handler[i].body_length(participant);
2323 }
2324
2325 buf = wpabuf_alloc(length);
2326 if (!buf) {
2327 wpa_printf(MSG_ERROR, "KaY: out of memory");
2328 return -1;
2329 }
2330
2331 if (ieee802_1x_kay_encode_mkpdu(participant, buf)) {
2332 wpa_printf(MSG_ERROR, "KaY: encode mkpdu fail!");
2333 return -1;
2334 }
2335
2336 l2_packet_send(kay->l2_mka, NULL, 0, wpabuf_head(buf), wpabuf_len(buf));
2337 wpabuf_free(buf);
2338
2339 kay->active = TRUE;
2340 participant->active = TRUE;
2341
2342 return 0;
2343 }
2344
2345
2346 static void ieee802_1x_kay_deinit_transmit_sa(struct transmit_sa *psa);
2347 /**
2348 * ieee802_1x_participant_timer -
2349 */
ieee802_1x_participant_timer(void * eloop_ctx,void * timeout_ctx)2350 static void ieee802_1x_participant_timer(void *eloop_ctx, void *timeout_ctx)
2351 {
2352 struct ieee802_1x_mka_participant *participant;
2353 struct ieee802_1x_kay *kay;
2354 struct ieee802_1x_kay_peer *peer, *pre_peer;
2355 time_t now = time(NULL);
2356 Boolean lp_changed;
2357 struct receive_sc *rxsc, *pre_rxsc;
2358 struct transmit_sa *txsa, *pre_txsa;
2359
2360 participant = (struct ieee802_1x_mka_participant *)eloop_ctx;
2361 kay = participant->kay;
2362 if (participant->cak_life) {
2363 if (now > participant->cak_life) {
2364 kay->authenticated = FALSE;
2365 kay->secured = FALSE;
2366 kay->failed = TRUE;
2367 ieee802_1x_kay_delete_mka(kay, &participant->ckn);
2368 return;
2369 }
2370 }
2371
2372 /* should delete MKA instance if there are not live peers
2373 * when the MKA life elapsed since its creating */
2374 if (participant->mka_life) {
2375 if (dl_list_empty(&participant->live_peers)) {
2376 if (now > participant->mka_life) {
2377 kay->authenticated = FALSE;
2378 kay->secured = FALSE;
2379 kay->failed = TRUE;
2380 ieee802_1x_kay_delete_mka(kay,
2381 &participant->ckn);
2382 return;
2383 }
2384 } else {
2385 participant->mka_life = 0;
2386 }
2387 }
2388
2389 lp_changed = FALSE;
2390 dl_list_for_each_safe(peer, pre_peer, &participant->live_peers,
2391 struct ieee802_1x_kay_peer, list) {
2392 if (now > peer->expire) {
2393 wpa_printf(MSG_DEBUG, "KaY: Live peer removed");
2394 wpa_hexdump(MSG_DEBUG, "\tMI: ", peer->mi,
2395 sizeof(peer->mi));
2396 wpa_printf(MSG_DEBUG, "\tMN: %d", peer->mn);
2397 dl_list_for_each_safe(rxsc, pre_rxsc,
2398 &participant->rxsc_list,
2399 struct receive_sc, list) {
2400 if (os_memcmp(&rxsc->sci, &peer->sci,
2401 sizeof(rxsc->sci)) == 0) {
2402 secy_delete_receive_sc(kay, rxsc);
2403 ieee802_1x_kay_deinit_receive_sc(
2404 participant, rxsc);
2405 }
2406 }
2407 dl_list_del(&peer->list);
2408 os_free(peer);
2409 lp_changed = TRUE;
2410 }
2411 }
2412
2413 if (lp_changed) {
2414 if (dl_list_empty(&participant->live_peers)) {
2415 participant->advised_desired = FALSE;
2416 participant->advised_capability =
2417 MACSEC_CAP_NOT_IMPLEMENTED;
2418 participant->to_use_sak = FALSE;
2419 kay->authenticated = TRUE;
2420 kay->secured = FALSE;
2421 kay->failed = FALSE;
2422 kay->ltx_kn = 0;
2423 kay->ltx_an = 0;
2424 kay->lrx_kn = 0;
2425 kay->lrx_an = 0;
2426 kay->otx_kn = 0;
2427 kay->otx_an = 0;
2428 kay->orx_kn = 0;
2429 kay->orx_an = 0;
2430 dl_list_for_each_safe(txsa, pre_txsa,
2431 &participant->txsc->sa_list,
2432 struct transmit_sa, list) {
2433 secy_disable_transmit_sa(kay, txsa);
2434 ieee802_1x_kay_deinit_transmit_sa(txsa);
2435 }
2436
2437 ieee802_1x_cp_connect_authenticated(kay->cp);
2438 ieee802_1x_cp_sm_step(kay->cp);
2439 } else {
2440 ieee802_1x_kay_elect_key_server(participant);
2441 ieee802_1x_kay_decide_macsec_use(participant);
2442 }
2443 }
2444
2445 dl_list_for_each_safe(peer, pre_peer, &participant->potential_peers,
2446 struct ieee802_1x_kay_peer, list) {
2447 if (now > peer->expire) {
2448 wpa_printf(MSG_DEBUG, "KaY: Potential peer removed");
2449 wpa_hexdump(MSG_DEBUG, "\tMI: ", peer->mi,
2450 sizeof(peer->mi));
2451 wpa_printf(MSG_DEBUG, "\tMN: %d", peer->mn);
2452 dl_list_del(&peer->list);
2453 os_free(peer);
2454 }
2455 }
2456
2457 if (participant->new_sak) {
2458 if (!ieee802_1x_kay_generate_new_sak(participant))
2459 participant->to_dist_sak = TRUE;
2460
2461 participant->new_sak = FALSE;
2462 }
2463
2464 if (participant->retry_count < MAX_RETRY_CNT) {
2465 ieee802_1x_participant_send_mkpdu(participant);
2466 participant->retry_count++;
2467 }
2468
2469 eloop_register_timeout(MKA_HELLO_TIME / 1000, 0,
2470 ieee802_1x_participant_timer,
2471 participant, NULL);
2472 }
2473
2474
2475 /**
2476 * ieee802_1x_kay_init_transmit_sa -
2477 */
2478 static struct transmit_sa *
ieee802_1x_kay_init_transmit_sa(struct transmit_sc * psc,u8 an,u32 next_PN,struct data_key * key)2479 ieee802_1x_kay_init_transmit_sa(struct transmit_sc *psc, u8 an, u32 next_PN,
2480 struct data_key *key)
2481 {
2482 struct transmit_sa *psa;
2483
2484 key->tx_latest = TRUE;
2485 key->rx_latest = TRUE;
2486
2487 psa = os_zalloc(sizeof(*psa));
2488 if (!psa) {
2489 wpa_printf(MSG_ERROR, "%s: out of memory", __func__);
2490 return NULL;
2491 }
2492
2493 if (key->confidentiality_offset >= CONFIDENTIALITY_OFFSET_0 &&
2494 key->confidentiality_offset <= CONFIDENTIALITY_OFFSET_50)
2495 psa->confidentiality = TRUE;
2496 else
2497 psa->confidentiality = FALSE;
2498
2499 psa->an = an;
2500 psa->pkey = key;
2501 psa->next_pn = next_PN;
2502 psa->sc = psc;
2503
2504 os_get_time(&psa->created_time);
2505 psa->in_use = FALSE;
2506
2507 dl_list_add(&psc->sa_list, &psa->list);
2508 wpa_printf(MSG_DEBUG,
2509 "KaY: Create transmit SA(an: %d, next_PN: %u) of SC(channel: %d)",
2510 (int) an, next_PN, psc->channel);
2511
2512 return psa;
2513 }
2514
2515
2516 /**
2517 * ieee802_1x_kay_deinit_transmit_sa -
2518 */
ieee802_1x_kay_deinit_transmit_sa(struct transmit_sa * psa)2519 static void ieee802_1x_kay_deinit_transmit_sa(struct transmit_sa *psa)
2520 {
2521 psa->pkey = NULL;
2522 wpa_printf(MSG_DEBUG,
2523 "KaY: Delete transmit SA(an: %d) of SC(channel: %d)",
2524 psa->an, psa->sc->channel);
2525 dl_list_del(&psa->list);
2526 os_free(psa);
2527 }
2528
2529
2530 /**
2531 * init_transmit_sc -
2532 */
2533 static struct transmit_sc *
ieee802_1x_kay_init_transmit_sc(const struct ieee802_1x_mka_sci * sci,int channel)2534 ieee802_1x_kay_init_transmit_sc(const struct ieee802_1x_mka_sci *sci,
2535 int channel)
2536 {
2537 struct transmit_sc *psc;
2538
2539 psc = os_zalloc(sizeof(*psc));
2540 if (!psc) {
2541 wpa_printf(MSG_ERROR, "%s: out of memory", __func__);
2542 return NULL;
2543 }
2544 os_memcpy(&psc->sci, sci, sizeof(psc->sci));
2545 psc->channel = channel;
2546
2547 os_get_time(&psc->created_time);
2548 psc->transmitting = FALSE;
2549 psc->encoding_sa = FALSE;
2550 psc->enciphering_sa = FALSE;
2551
2552 dl_list_init(&psc->sa_list);
2553 wpa_printf(MSG_DEBUG, "KaY: Create transmit SC(channel: %d)", channel);
2554 wpa_hexdump(MSG_DEBUG, "SCI: ", (u8 *)sci , sizeof(*sci));
2555
2556 return psc;
2557 }
2558
2559
2560 /**
2561 * ieee802_1x_kay_deinit_transmit_sc -
2562 */
2563 static void
ieee802_1x_kay_deinit_transmit_sc(struct ieee802_1x_mka_participant * participant,struct transmit_sc * psc)2564 ieee802_1x_kay_deinit_transmit_sc(
2565 struct ieee802_1x_mka_participant *participant, struct transmit_sc *psc)
2566 {
2567 struct transmit_sa *psa, *tmp;
2568
2569 wpa_printf(MSG_DEBUG, "KaY: Delete transmit SC(channel: %d)",
2570 psc->channel);
2571 dl_list_for_each_safe(psa, tmp, &psc->sa_list, struct transmit_sa,
2572 list) {
2573 secy_disable_transmit_sa(participant->kay, psa);
2574 ieee802_1x_kay_deinit_transmit_sa(psa);
2575 }
2576
2577 os_free(psc);
2578 }
2579
2580
2581 /****************** Interface between CP and KAY *********************/
2582 /**
2583 * ieee802_1x_kay_set_latest_sa_attr -
2584 */
ieee802_1x_kay_set_latest_sa_attr(struct ieee802_1x_kay * kay,struct ieee802_1x_mka_ki * lki,u8 lan,Boolean ltx,Boolean lrx)2585 int ieee802_1x_kay_set_latest_sa_attr(struct ieee802_1x_kay *kay,
2586 struct ieee802_1x_mka_ki *lki, u8 lan,
2587 Boolean ltx, Boolean lrx)
2588 {
2589 struct ieee802_1x_mka_participant *principal;
2590
2591 principal = ieee802_1x_kay_get_principal_participant(kay);
2592 if (!principal)
2593 return -1;
2594
2595 if (!lki)
2596 os_memset(&principal->lki, 0, sizeof(principal->lki));
2597 else
2598 os_memcpy(&principal->lki, lki, sizeof(principal->lki));
2599
2600 principal->lan = lan;
2601 principal->ltx = ltx;
2602 principal->lrx = lrx;
2603 if (!lki) {
2604 kay->ltx_kn = 0;
2605 kay->lrx_kn = 0;
2606 } else {
2607 kay->ltx_kn = lki->kn;
2608 kay->lrx_kn = lki->kn;
2609 }
2610 kay->ltx_an = lan;
2611 kay->lrx_an = lan;
2612
2613 return 0;
2614 }
2615
2616
2617 /**
2618 * ieee802_1x_kay_set_old_sa_attr -
2619 */
ieee802_1x_kay_set_old_sa_attr(struct ieee802_1x_kay * kay,struct ieee802_1x_mka_ki * oki,u8 oan,Boolean otx,Boolean orx)2620 int ieee802_1x_kay_set_old_sa_attr(struct ieee802_1x_kay *kay,
2621 struct ieee802_1x_mka_ki *oki,
2622 u8 oan, Boolean otx, Boolean orx)
2623 {
2624 struct ieee802_1x_mka_participant *principal;
2625
2626 principal = ieee802_1x_kay_get_principal_participant(kay);
2627 if (!principal)
2628 return -1;
2629
2630 if (!oki)
2631 os_memset(&principal->oki, 0, sizeof(principal->oki));
2632 else
2633 os_memcpy(&principal->oki, oki, sizeof(principal->oki));
2634
2635 principal->oan = oan;
2636 principal->otx = otx;
2637 principal->orx = orx;
2638
2639 if (!oki) {
2640 kay->otx_kn = 0;
2641 kay->orx_kn = 0;
2642 } else {
2643 kay->otx_kn = oki->kn;
2644 kay->orx_kn = oki->kn;
2645 }
2646 kay->otx_an = oan;
2647 kay->orx_an = oan;
2648
2649 return 0;
2650 }
2651
2652
2653 /**
2654 * ieee802_1x_kay_create_sas -
2655 */
ieee802_1x_kay_create_sas(struct ieee802_1x_kay * kay,struct ieee802_1x_mka_ki * lki)2656 int ieee802_1x_kay_create_sas(struct ieee802_1x_kay *kay,
2657 struct ieee802_1x_mka_ki *lki)
2658 {
2659 struct data_key *sa_key, *latest_sak;
2660 struct ieee802_1x_mka_participant *principal;
2661 struct receive_sc *rxsc;
2662 struct receive_sa *rxsa;
2663 struct transmit_sa *txsa;
2664
2665 principal = ieee802_1x_kay_get_principal_participant(kay);
2666 if (!principal)
2667 return -1;
2668
2669 latest_sak = NULL;
2670 dl_list_for_each(sa_key, &principal->sak_list, struct data_key, list) {
2671 if (is_ki_equal(&sa_key->key_identifier, lki)) {
2672 sa_key->rx_latest = TRUE;
2673 sa_key->tx_latest = TRUE;
2674 latest_sak = sa_key;
2675 principal->to_use_sak = TRUE;
2676 } else {
2677 sa_key->rx_latest = FALSE;
2678 sa_key->tx_latest = FALSE;
2679 }
2680 }
2681 if (!latest_sak) {
2682 wpa_printf(MSG_ERROR, "lki related sak not found");
2683 return -1;
2684 }
2685
2686 dl_list_for_each(rxsc, &principal->rxsc_list, struct receive_sc, list) {
2687 rxsa = ieee802_1x_kay_init_receive_sa(rxsc, latest_sak->an, 1,
2688 latest_sak);
2689 if (!rxsa)
2690 return -1;
2691
2692 secy_create_receive_sa(kay, rxsa);
2693 }
2694
2695 txsa = ieee802_1x_kay_init_transmit_sa(principal->txsc, latest_sak->an,
2696 1, latest_sak);
2697 if (!txsa)
2698 return -1;
2699
2700 secy_create_transmit_sa(kay, txsa);
2701
2702
2703
2704 return 0;
2705 }
2706
2707
2708 /**
2709 * ieee802_1x_kay_delete_sas -
2710 */
ieee802_1x_kay_delete_sas(struct ieee802_1x_kay * kay,struct ieee802_1x_mka_ki * ki)2711 int ieee802_1x_kay_delete_sas(struct ieee802_1x_kay *kay,
2712 struct ieee802_1x_mka_ki *ki)
2713 {
2714 struct data_key *sa_key, *pre_key;
2715 struct transmit_sa *txsa, *pre_txsa;
2716 struct receive_sa *rxsa, *pre_rxsa;
2717 struct receive_sc *rxsc;
2718 struct ieee802_1x_mka_participant *principal;
2719
2720 wpa_printf(MSG_DEBUG, "KaY: Entry into %s", __func__);
2721 principal = ieee802_1x_kay_get_principal_participant(kay);
2722 if (!principal)
2723 return -1;
2724
2725 /* remove the transmit sa */
2726 dl_list_for_each_safe(txsa, pre_txsa, &principal->txsc->sa_list,
2727 struct transmit_sa, list) {
2728 if (is_ki_equal(&txsa->pkey->key_identifier, ki)) {
2729 secy_disable_transmit_sa(kay, txsa);
2730 ieee802_1x_kay_deinit_transmit_sa(txsa);
2731 }
2732 }
2733
2734 /* remove the receive sa */
2735 dl_list_for_each(rxsc, &principal->rxsc_list, struct receive_sc, list) {
2736 dl_list_for_each_safe(rxsa, pre_rxsa, &rxsc->sa_list,
2737 struct receive_sa, list) {
2738 if (is_ki_equal(&rxsa->pkey->key_identifier, ki)) {
2739 secy_disable_receive_sa(kay, rxsa);
2740 ieee802_1x_kay_deinit_receive_sa(rxsa);
2741 }
2742 }
2743 }
2744
2745 /* remove the sak */
2746 dl_list_for_each_safe(sa_key, pre_key, &principal->sak_list,
2747 struct data_key, list) {
2748 if (is_ki_equal(&sa_key->key_identifier, ki)) {
2749 ieee802_1x_kay_deinit_data_key(sa_key);
2750 break;
2751 }
2752 if (principal->new_key == sa_key)
2753 principal->new_key = NULL;
2754 }
2755
2756 return 0;
2757 }
2758
2759
2760 /**
2761 * ieee802_1x_kay_enable_tx_sas -
2762 */
ieee802_1x_kay_enable_tx_sas(struct ieee802_1x_kay * kay,struct ieee802_1x_mka_ki * lki)2763 int ieee802_1x_kay_enable_tx_sas(struct ieee802_1x_kay *kay,
2764 struct ieee802_1x_mka_ki *lki)
2765 {
2766 struct ieee802_1x_mka_participant *principal;
2767 struct transmit_sa *txsa;
2768
2769 principal = ieee802_1x_kay_get_principal_participant(kay);
2770 if (!principal)
2771 return -1;
2772
2773 dl_list_for_each(txsa, &principal->txsc->sa_list, struct transmit_sa,
2774 list) {
2775 if (is_ki_equal(&txsa->pkey->key_identifier, lki)) {
2776 txsa->in_use = TRUE;
2777 secy_enable_transmit_sa(kay, txsa);
2778 ieee802_1x_cp_set_usingtransmitas(
2779 principal->kay->cp, TRUE);
2780 ieee802_1x_cp_sm_step(principal->kay->cp);
2781 }
2782 }
2783
2784 return 0;
2785 }
2786
2787
2788 /**
2789 * ieee802_1x_kay_enable_rx_sas -
2790 */
ieee802_1x_kay_enable_rx_sas(struct ieee802_1x_kay * kay,struct ieee802_1x_mka_ki * lki)2791 int ieee802_1x_kay_enable_rx_sas(struct ieee802_1x_kay *kay,
2792 struct ieee802_1x_mka_ki *lki)
2793 {
2794 struct ieee802_1x_mka_participant *principal;
2795 struct receive_sa *rxsa;
2796 struct receive_sc *rxsc;
2797
2798 principal = ieee802_1x_kay_get_principal_participant(kay);
2799 if (!principal)
2800 return -1;
2801
2802 dl_list_for_each(rxsc, &principal->rxsc_list, struct receive_sc, list) {
2803 dl_list_for_each(rxsa, &rxsc->sa_list, struct receive_sa, list)
2804 {
2805 if (is_ki_equal(&rxsa->pkey->key_identifier, lki)) {
2806 rxsa->in_use = TRUE;
2807 secy_enable_receive_sa(kay, rxsa);
2808 ieee802_1x_cp_set_usingreceivesas(
2809 principal->kay->cp, TRUE);
2810 ieee802_1x_cp_sm_step(principal->kay->cp);
2811 }
2812 }
2813 }
2814
2815 return 0;
2816 }
2817
2818
2819 /**
2820 * ieee802_1x_kay_enable_new_info -
2821 */
ieee802_1x_kay_enable_new_info(struct ieee802_1x_kay * kay)2822 int ieee802_1x_kay_enable_new_info(struct ieee802_1x_kay *kay)
2823 {
2824 struct ieee802_1x_mka_participant *principal;
2825
2826 principal = ieee802_1x_kay_get_principal_participant(kay);
2827 if (!principal)
2828 return -1;
2829
2830 if (principal->retry_count < MAX_RETRY_CNT) {
2831 ieee802_1x_participant_send_mkpdu(principal);
2832 principal->retry_count++;
2833 }
2834
2835 return 0;
2836 }
2837
2838
2839 /**
2840 * ieee802_1x_kay_cp_conf -
2841 */
ieee802_1x_kay_cp_conf(struct ieee802_1x_kay * kay,struct ieee802_1x_cp_conf * pconf)2842 int ieee802_1x_kay_cp_conf(struct ieee802_1x_kay *kay,
2843 struct ieee802_1x_cp_conf *pconf)
2844 {
2845 pconf->protect = kay->macsec_protect;
2846 pconf->replay_protect = kay->macsec_replay_protect;
2847 pconf->validate = kay->macsec_validate;
2848
2849 return 0;
2850 }
2851
2852
2853 /**
2854 * ieee802_1x_kay_alloc_cp_sm -
2855 */
2856 static struct ieee802_1x_cp_sm *
ieee802_1x_kay_alloc_cp_sm(struct ieee802_1x_kay * kay)2857 ieee802_1x_kay_alloc_cp_sm(struct ieee802_1x_kay *kay)
2858 {
2859 struct ieee802_1x_cp_conf conf;
2860
2861 os_memset(&conf, 0, sizeof(conf));
2862 conf.protect = kay->macsec_protect;
2863 conf.replay_protect = kay->macsec_replay_protect;
2864 conf.validate = kay->macsec_validate;
2865 conf.replay_window = kay->macsec_replay_window;
2866
2867 return ieee802_1x_cp_sm_init(kay, &conf);
2868 }
2869
2870
2871 /**
2872 * ieee802_1x_kay_mkpdu_sanity_check -
2873 * sanity check specified in clause 11.11.2 of IEEE802.1X-2010
2874 */
ieee802_1x_kay_mkpdu_sanity_check(struct ieee802_1x_kay * kay,const u8 * buf,size_t len)2875 static int ieee802_1x_kay_mkpdu_sanity_check(struct ieee802_1x_kay *kay,
2876 const u8 *buf, size_t len)
2877 {
2878 struct ieee8023_hdr *eth_hdr;
2879 struct ieee802_1x_hdr *eapol_hdr;
2880 struct ieee802_1x_mka_hdr *mka_hdr;
2881 struct ieee802_1x_mka_basic_body *body;
2882 size_t mka_msg_len;
2883 struct ieee802_1x_mka_participant *participant;
2884 size_t body_len;
2885 u8 icv[MAX_ICV_LEN];
2886 u8 *msg_icv;
2887
2888 eth_hdr = (struct ieee8023_hdr *) buf;
2889 eapol_hdr = (struct ieee802_1x_hdr *) (eth_hdr + 1);
2890 mka_hdr = (struct ieee802_1x_mka_hdr *) (eapol_hdr + 1);
2891
2892 /* destination address should be not individual address */
2893 if (os_memcmp(eth_hdr->dest, pae_group_addr, ETH_ALEN) != 0) {
2894 wpa_printf(MSG_MSGDUMP,
2895 "KaY: ethernet destination address is not PAE group address");
2896 return -1;
2897 }
2898
2899 /* MKPDU should not less than 32 octets */
2900 mka_msg_len = be_to_host16(eapol_hdr->length);
2901 if (mka_msg_len < 32) {
2902 wpa_printf(MSG_MSGDUMP, "KaY: MKPDU is less than 32 octets");
2903 return -1;
2904 }
2905 /* MKPDU should multiple 4 octets */
2906 if ((mka_msg_len % 4) != 0) {
2907 wpa_printf(MSG_MSGDUMP,
2908 "KaY: MKPDU is not multiple of 4 octets");
2909 return -1;
2910 }
2911
2912 body = (struct ieee802_1x_mka_basic_body *) mka_hdr;
2913 ieee802_1x_mka_dump_basic_body(body);
2914 body_len = get_mka_param_body_len(body);
2915 /* EAPOL-MKA body should comprise basic parameter set and ICV */
2916 if (mka_msg_len < MKA_HDR_LEN + body_len + DEFAULT_ICV_LEN) {
2917 wpa_printf(MSG_ERROR,
2918 "KaY: Received EAPOL-MKA Packet Body Length (%d bytes) is less than the Basic Parameter Set Header Length (%d bytes) + the Basic Parameter Set Body Length (%d bytes) + %d bytes of ICV",
2919 (int) mka_msg_len, (int) MKA_HDR_LEN,
2920 (int) body_len, DEFAULT_ICV_LEN);
2921 return -1;
2922 }
2923
2924 /* CKN should be owned by I */
2925 participant = ieee802_1x_kay_get_participant(kay, body->ckn);
2926 if (!participant) {
2927 wpa_printf(MSG_DEBUG, "CKN is not included in my CA");
2928 return -1;
2929 }
2930
2931 /* algorithm agility check */
2932 if (os_memcmp(body->algo_agility, mka_algo_agility,
2933 sizeof(body->algo_agility)) != 0) {
2934 wpa_printf(MSG_ERROR,
2935 "KaY: peer's algorithm agility not supported for me");
2936 return -1;
2937 }
2938
2939 /* ICV check */
2940 /*
2941 * The ICV will comprise the final octets of the packet body, whatever
2942 * its size, not the fixed length 16 octets, indicated by the EAPOL
2943 * packet body length.
2944 */
2945 if (mka_alg_tbl[kay->mka_algindex].icv_hash(
2946 participant->ick.key,
2947 buf, len - mka_alg_tbl[kay->mka_algindex].icv_len, icv)) {
2948 wpa_printf(MSG_ERROR, "KaY: omac1_aes_128 failed");
2949 return -1;
2950 }
2951 msg_icv = ieee802_1x_mka_decode_icv_body(participant, (u8 *) mka_hdr,
2952 mka_msg_len);
2953
2954 if (msg_icv) {
2955 if (os_memcmp_const(msg_icv, icv,
2956 mka_alg_tbl[kay->mka_algindex].icv_len) !=
2957 0) {
2958 wpa_printf(MSG_ERROR,
2959 "KaY: Computed ICV is not equal to Received ICV");
2960 return -1;
2961 }
2962 } else {
2963 wpa_printf(MSG_ERROR, "KaY: No ICV");
2964 return -1;
2965 }
2966
2967 return 0;
2968 }
2969
2970
2971 /**
2972 * ieee802_1x_kay_decode_mkpdu -
2973 */
ieee802_1x_kay_decode_mkpdu(struct ieee802_1x_kay * kay,const u8 * buf,size_t len)2974 static int ieee802_1x_kay_decode_mkpdu(struct ieee802_1x_kay *kay,
2975 const u8 *buf, size_t len)
2976 {
2977 struct ieee802_1x_mka_participant *participant;
2978 struct ieee802_1x_mka_hdr *hdr;
2979 size_t body_len;
2980 size_t left_len;
2981 int body_type;
2982 int i;
2983 const u8 *pos;
2984 Boolean my_included;
2985 Boolean handled[256];
2986
2987 if (ieee802_1x_kay_mkpdu_sanity_check(kay, buf, len))
2988 return -1;
2989
2990 /* handle basic parameter set */
2991 pos = buf + sizeof(struct ieee8023_hdr) + sizeof(struct ieee802_1x_hdr);
2992 left_len = len - sizeof(struct ieee8023_hdr) -
2993 sizeof(struct ieee802_1x_hdr);
2994 participant = ieee802_1x_mka_decode_basic_body(kay, pos, left_len);
2995 if (!participant)
2996 return -1;
2997
2998 /* to skip basic parameter set */
2999 hdr = (struct ieee802_1x_mka_hdr *) pos;
3000 body_len = get_mka_param_body_len(hdr);
3001 pos += body_len + MKA_HDR_LEN;
3002 left_len -= body_len + MKA_HDR_LEN;
3003
3004 /* check i am in the peer's peer list */
3005 my_included = ieee802_1x_mka_i_in_peerlist(participant, pos, left_len);
3006 if (my_included) {
3007 /* accept the peer as live peer */
3008 if (!ieee802_1x_kay_is_in_peer(
3009 participant,
3010 participant->current_peer_id.mi)) {
3011 if (!ieee802_1x_kay_create_live_peer(
3012 participant,
3013 participant->current_peer_id.mi,
3014 participant->current_peer_id.mn))
3015 return -1;
3016 ieee802_1x_kay_elect_key_server(participant);
3017 ieee802_1x_kay_decide_macsec_use(participant);
3018 }
3019 if (ieee802_1x_kay_is_in_potential_peer(
3020 participant, participant->current_peer_id.mi)) {
3021 ieee802_1x_kay_move_live_peer(
3022 participant, participant->current_peer_id.mi,
3023 participant->current_peer_id.mn);
3024 ieee802_1x_kay_elect_key_server(participant);
3025 ieee802_1x_kay_decide_macsec_use(participant);
3026 }
3027 }
3028
3029 /*
3030 * Handle other parameter set than basic parameter set.
3031 * Each parameter set should be present only once.
3032 */
3033 for (i = 0; i < 256; i++)
3034 handled[i] = FALSE;
3035
3036 handled[0] = TRUE;
3037 while (left_len > MKA_HDR_LEN + DEFAULT_ICV_LEN) {
3038 hdr = (struct ieee802_1x_mka_hdr *) pos;
3039 body_len = get_mka_param_body_len(hdr);
3040 body_type = get_mka_param_body_type(hdr);
3041
3042 if (body_type == MKA_ICV_INDICATOR)
3043 return 0;
3044
3045 if (left_len < (MKA_HDR_LEN + body_len + DEFAULT_ICV_LEN)) {
3046 wpa_printf(MSG_ERROR,
3047 "KaY: MKA Peer Packet Body Length (%d bytes) is less than the Parameter Set Header Length (%d bytes) + the Parameter Set Body Length (%d bytes) + %d bytes of ICV",
3048 (int) left_len, (int) MKA_HDR_LEN,
3049 (int) body_len, DEFAULT_ICV_LEN);
3050 goto next_para_set;
3051 }
3052
3053 if (handled[body_type])
3054 goto next_para_set;
3055
3056 handled[body_type] = TRUE;
3057 if (mak_body_handler[body_type].body_rx) {
3058 mak_body_handler[body_type].body_rx
3059 (participant, pos, left_len);
3060 } else {
3061 wpa_printf(MSG_ERROR,
3062 "The type %d not supported in this MKA version %d",
3063 body_type, MKA_VERSION_ID);
3064 }
3065
3066 next_para_set:
3067 pos += body_len + MKA_HDR_LEN;
3068 left_len -= body_len + MKA_HDR_LEN;
3069 }
3070
3071 kay->active = TRUE;
3072 participant->retry_count = 0;
3073 participant->active = TRUE;
3074
3075 return 0;
3076 }
3077
3078
3079
kay_l2_receive(void * ctx,const u8 * src_addr,const u8 * buf,size_t len)3080 static void kay_l2_receive(void *ctx, const u8 *src_addr, const u8 *buf,
3081 size_t len)
3082 {
3083 struct ieee802_1x_kay *kay = ctx;
3084 struct ieee8023_hdr *eth_hdr;
3085 struct ieee802_1x_hdr *eapol_hdr;
3086
3087 /* must contain at least ieee8023_hdr + ieee802_1x_hdr */
3088 if (len < sizeof(*eth_hdr) + sizeof(*eapol_hdr)) {
3089 wpa_printf(MSG_MSGDUMP, "KaY: EAPOL frame too short (%lu)",
3090 (unsigned long) len);
3091 return;
3092 }
3093
3094 eth_hdr = (struct ieee8023_hdr *) buf;
3095 eapol_hdr = (struct ieee802_1x_hdr *) (eth_hdr + 1);
3096 if (len != sizeof(*eth_hdr) + sizeof(*eapol_hdr) +
3097 ntohs(eapol_hdr->length)) {
3098 wpa_printf(MSG_MSGDUMP, "KAY: EAPOL MPDU is invalid: (%lu-%lu)",
3099 (unsigned long) len,
3100 (unsigned long) ntohs(eapol_hdr->length));
3101 return;
3102 }
3103
3104 if (eapol_hdr->version < EAPOL_VERSION) {
3105 wpa_printf(MSG_MSGDUMP, "KaY: version %d does not support MKA",
3106 eapol_hdr->version);
3107 return;
3108 }
3109 if (ntohs(eth_hdr->ethertype) != ETH_P_PAE ||
3110 eapol_hdr->type != IEEE802_1X_TYPE_EAPOL_MKA)
3111 return;
3112
3113 wpa_hexdump(MSG_DEBUG, "RX EAPOL-MKA: ", buf, len);
3114 if (dl_list_empty(&kay->participant_list)) {
3115 wpa_printf(MSG_ERROR, "KaY: no MKA participant instance");
3116 return;
3117 }
3118
3119 ieee802_1x_kay_decode_mkpdu(kay, buf, len);
3120 }
3121
3122
3123 /**
3124 * ieee802_1x_kay_init -
3125 */
3126 struct ieee802_1x_kay *
ieee802_1x_kay_init(struct ieee802_1x_kay_ctx * ctx,enum macsec_policy policy,const char * ifname,const u8 * addr)3127 ieee802_1x_kay_init(struct ieee802_1x_kay_ctx *ctx, enum macsec_policy policy,
3128 const char *ifname, const u8 *addr)
3129 {
3130 struct ieee802_1x_kay *kay;
3131
3132 kay = os_zalloc(sizeof(*kay));
3133 if (!kay) {
3134 wpa_printf(MSG_ERROR, "KaY-%s: out of memory", __func__);
3135 return NULL;
3136 }
3137
3138 kay->ctx = ctx;
3139
3140 kay->enable = TRUE;
3141 kay->active = FALSE;
3142
3143 kay->authenticated = FALSE;
3144 kay->secured = FALSE;
3145 kay->failed = FALSE;
3146 kay->policy = policy;
3147
3148 os_strlcpy(kay->if_name, ifname, IFNAMSIZ);
3149 os_memcpy(kay->actor_sci.addr, addr, ETH_ALEN);
3150 kay->actor_sci.port = 0x0001;
3151 kay->actor_priority = DEFAULT_PRIO_NOT_KEY_SERVER;
3152
3153 /* While actor acts as a key server, shall distribute sakey */
3154 kay->dist_kn = 1;
3155 kay->dist_an = 0;
3156 kay->dist_time = 0;
3157
3158 kay->pn_exhaustion = PENDING_PN_EXHAUSTION;
3159 kay->macsec_csindex = DEFAULT_CS_INDEX;
3160 kay->mka_algindex = DEFAULT_MKA_ALG_INDEX;
3161 kay->mka_version = MKA_VERSION_ID;
3162
3163 os_memcpy(kay->algo_agility, mka_algo_agility,
3164 sizeof(kay->algo_agility));
3165
3166 dl_list_init(&kay->participant_list);
3167
3168 if (policy == DO_NOT_SECURE) {
3169 kay->macsec_capable = MACSEC_CAP_NOT_IMPLEMENTED;
3170 kay->macsec_desired = FALSE;
3171 kay->macsec_protect = FALSE;
3172 kay->macsec_validate = Disabled;
3173 kay->macsec_replay_protect = FALSE;
3174 kay->macsec_replay_window = 0;
3175 kay->macsec_confidentiality = CONFIDENTIALITY_NONE;
3176 } else {
3177 kay->macsec_capable = MACSEC_CAP_INTEG_AND_CONF_0_30_50;
3178 kay->macsec_desired = TRUE;
3179 kay->macsec_protect = TRUE;
3180 kay->macsec_validate = Strict;
3181 kay->macsec_replay_protect = FALSE;
3182 kay->macsec_replay_window = 0;
3183 kay->macsec_confidentiality = CONFIDENTIALITY_OFFSET_0;
3184 }
3185
3186 wpa_printf(MSG_DEBUG, "KaY: state machine created");
3187
3188 /* Initialize the SecY must be prio to CP, as CP will control SecY */
3189 secy_init_macsec(kay);
3190 secy_get_available_transmit_sc(kay, &kay->sc_ch);
3191
3192 wpa_printf(MSG_DEBUG, "KaY: secy init macsec done");
3193
3194 /* init CP */
3195 kay->cp = ieee802_1x_kay_alloc_cp_sm(kay);
3196 if (kay->cp == NULL) {
3197 ieee802_1x_kay_deinit(kay);
3198 return NULL;
3199 }
3200
3201 if (policy == DO_NOT_SECURE) {
3202 ieee802_1x_cp_connect_authenticated(kay->cp);
3203 ieee802_1x_cp_sm_step(kay->cp);
3204 } else {
3205 kay->l2_mka = l2_packet_init(kay->if_name, NULL, ETH_P_PAE,
3206 kay_l2_receive, kay, 1);
3207 if (kay->l2_mka == NULL) {
3208 wpa_printf(MSG_WARNING,
3209 "KaY: Failed to initialize L2 packet processing for MKA packet");
3210 ieee802_1x_kay_deinit(kay);
3211 return NULL;
3212 }
3213 }
3214
3215 return kay;
3216 }
3217
3218
3219 /**
3220 * ieee802_1x_kay_deinit -
3221 */
3222 void
ieee802_1x_kay_deinit(struct ieee802_1x_kay * kay)3223 ieee802_1x_kay_deinit(struct ieee802_1x_kay *kay)
3224 {
3225 struct ieee802_1x_mka_participant *participant;
3226
3227 if (!kay)
3228 return;
3229
3230 wpa_printf(MSG_DEBUG, "KaY: state machine removed");
3231
3232 while (!dl_list_empty(&kay->participant_list)) {
3233 participant = dl_list_entry(kay->participant_list.next,
3234 struct ieee802_1x_mka_participant,
3235 list);
3236 ieee802_1x_kay_delete_mka(kay, &participant->ckn);
3237 }
3238
3239 ieee802_1x_cp_sm_deinit(kay->cp);
3240 secy_deinit_macsec(kay);
3241
3242 if (kay->l2_mka) {
3243 l2_packet_deinit(kay->l2_mka);
3244 kay->l2_mka = NULL;
3245 }
3246
3247 os_free(kay->ctx);
3248 os_free(kay);
3249 }
3250
3251
3252 /**
3253 * ieee802_1x_kay_create_mka -
3254 */
3255 struct ieee802_1x_mka_participant *
ieee802_1x_kay_create_mka(struct ieee802_1x_kay * kay,struct mka_key_name * ckn,struct mka_key * cak,u32 life,enum mka_created_mode mode,Boolean is_authenticator)3256 ieee802_1x_kay_create_mka(struct ieee802_1x_kay *kay, struct mka_key_name *ckn,
3257 struct mka_key *cak, u32 life,
3258 enum mka_created_mode mode, Boolean is_authenticator)
3259 {
3260 struct ieee802_1x_mka_participant *participant;
3261 unsigned int usecs;
3262
3263 if (!kay || !ckn || !cak) {
3264 wpa_printf(MSG_ERROR, "KaY: ckn or cak is null");
3265 return NULL;
3266 }
3267
3268 if (cak->len != mka_alg_tbl[kay->mka_algindex].cak_len) {
3269 wpa_printf(MSG_ERROR, "KaY: CAK length not follow key schema");
3270 return NULL;
3271 }
3272 if (ckn->len > MAX_CKN_LEN) {
3273 wpa_printf(MSG_ERROR, "KaY: CKN is out of range(<=32 bytes)");
3274 return NULL;
3275 }
3276 if (!kay->enable) {
3277 wpa_printf(MSG_ERROR, "KaY: Now is at disable state");
3278 return NULL;
3279 }
3280
3281 participant = os_zalloc(sizeof(*participant));
3282 if (!participant) {
3283 wpa_printf(MSG_ERROR, "KaY-%s: out of memory", __func__);
3284 return NULL;
3285 }
3286
3287 participant->ckn.len = ckn->len;
3288 os_memcpy(participant->ckn.name, ckn->name, ckn->len);
3289 participant->cak.len = cak->len;
3290 os_memcpy(participant->cak.key, cak->key, cak->len);
3291 if (life)
3292 participant->cak_life = life + time(NULL);
3293
3294 switch (mode) {
3295 case EAP_EXCHANGE:
3296 if (is_authenticator) {
3297 participant->is_obliged_key_server = TRUE;
3298 participant->can_be_key_server = TRUE;
3299 participant->is_key_server = TRUE;
3300 participant->principal = TRUE;
3301
3302 os_memcpy(&kay->key_server_sci, &kay->actor_sci,
3303 sizeof(kay->key_server_sci));
3304 kay->key_server_priority = kay->actor_priority;
3305 participant->is_elected = TRUE;
3306 } else {
3307 participant->is_obliged_key_server = FALSE;
3308 participant->can_be_key_server = FALSE;
3309 participant->is_key_server = FALSE;
3310 participant->is_elected = TRUE;
3311 }
3312 break;
3313
3314 default:
3315 participant->is_obliged_key_server = FALSE;
3316 participant->can_be_key_server = TRUE;
3317 participant->is_key_server = FALSE;
3318 participant->is_elected = FALSE;
3319 break;
3320 }
3321
3322 participant->cached = FALSE;
3323
3324 participant->active = FALSE;
3325 participant->participant = FALSE;
3326 participant->retain = FALSE;
3327 participant->activate = DEFAULT;
3328
3329 if (participant->is_key_server)
3330 participant->principal = TRUE;
3331
3332 dl_list_init(&participant->live_peers);
3333 dl_list_init(&participant->potential_peers);
3334
3335 participant->retry_count = 0;
3336 participant->kay = kay;
3337
3338 if (os_get_random(participant->mi, sizeof(participant->mi)) < 0)
3339 goto fail;
3340 participant->mn = 0;
3341
3342 participant->lrx = FALSE;
3343 participant->ltx = FALSE;
3344 participant->orx = FALSE;
3345 participant->otx = FALSE;
3346 participant->to_dist_sak = FALSE;
3347 participant->to_use_sak = FALSE;
3348 participant->new_sak = FALSE;
3349 dl_list_init(&participant->sak_list);
3350 participant->new_key = NULL;
3351 dl_list_init(&participant->rxsc_list);
3352 participant->txsc = ieee802_1x_kay_init_transmit_sc(&kay->actor_sci,
3353 kay->sc_ch);
3354 secy_cp_control_protect_frames(kay, kay->macsec_protect);
3355 secy_cp_control_replay(kay, kay->macsec_replay_protect,
3356 kay->macsec_replay_window);
3357 secy_create_transmit_sc(kay, participant->txsc);
3358
3359 /* to derive KEK from CAK and CKN */
3360 participant->kek.len = mka_alg_tbl[kay->mka_algindex].kek_len;
3361 if (mka_alg_tbl[kay->mka_algindex].kek_trfm(participant->cak.key,
3362 participant->ckn.name,
3363 participant->ckn.len,
3364 participant->kek.key)) {
3365 wpa_printf(MSG_ERROR, "KaY: Derived KEK failed");
3366 goto fail;
3367 }
3368 wpa_hexdump_key(MSG_DEBUG, "KaY: Derived KEK",
3369 participant->kek.key, participant->kek.len);
3370
3371 /* to derive ICK from CAK and CKN */
3372 participant->ick.len = mka_alg_tbl[kay->mka_algindex].ick_len;
3373 if (mka_alg_tbl[kay->mka_algindex].ick_trfm(participant->cak.key,
3374 participant->ckn.name,
3375 participant->ckn.len,
3376 participant->ick.key)) {
3377 wpa_printf(MSG_ERROR, "KaY: Derived ICK failed");
3378 goto fail;
3379 }
3380 wpa_hexdump_key(MSG_DEBUG, "KaY: Derived ICK",
3381 participant->ick.key, participant->ick.len);
3382
3383 dl_list_add(&kay->participant_list, &participant->list);
3384 wpa_hexdump(MSG_DEBUG, "KaY: Participant created:",
3385 ckn->name, ckn->len);
3386
3387 usecs = os_random() % (MKA_HELLO_TIME * 1000);
3388 eloop_register_timeout(0, usecs, ieee802_1x_participant_timer,
3389 participant, NULL);
3390 participant->mka_life = MKA_LIFE_TIME / 1000 + time(NULL) +
3391 usecs / 1000000;
3392
3393 return participant;
3394
3395 fail:
3396 os_free(participant);
3397 return NULL;
3398 }
3399
3400
3401 /**
3402 * ieee802_1x_kay_delete_mka -
3403 */
3404 void
ieee802_1x_kay_delete_mka(struct ieee802_1x_kay * kay,struct mka_key_name * ckn)3405 ieee802_1x_kay_delete_mka(struct ieee802_1x_kay *kay, struct mka_key_name *ckn)
3406 {
3407 struct ieee802_1x_mka_participant *participant;
3408 struct ieee802_1x_kay_peer *peer;
3409 struct data_key *sak;
3410 struct receive_sc *rxsc;
3411
3412 if (!kay || !ckn)
3413 return;
3414
3415 wpa_printf(MSG_DEBUG, "KaY: participant removed");
3416
3417 /* get the participant */
3418 participant = ieee802_1x_kay_get_participant(kay, ckn->name);
3419 if (!participant) {
3420 wpa_hexdump(MSG_DEBUG, "KaY: participant is not found",
3421 ckn->name, ckn->len);
3422 return;
3423 }
3424
3425 dl_list_del(&participant->list);
3426
3427 /* remove live peer */
3428 while (!dl_list_empty(&participant->live_peers)) {
3429 peer = dl_list_entry(participant->live_peers.next,
3430 struct ieee802_1x_kay_peer, list);
3431 dl_list_del(&peer->list);
3432 os_free(peer);
3433 }
3434
3435 /* remove potential peer */
3436 while (!dl_list_empty(&participant->potential_peers)) {
3437 peer = dl_list_entry(participant->potential_peers.next,
3438 struct ieee802_1x_kay_peer, list);
3439 dl_list_del(&peer->list);
3440 os_free(peer);
3441 }
3442
3443 /* remove sak */
3444 while (!dl_list_empty(&participant->sak_list)) {
3445 sak = dl_list_entry(participant->sak_list.next,
3446 struct data_key, list);
3447 dl_list_del(&sak->list);
3448 os_free(sak->key);
3449 os_free(sak);
3450 }
3451 while (!dl_list_empty(&participant->rxsc_list)) {
3452 rxsc = dl_list_entry(participant->rxsc_list.next,
3453 struct receive_sc, list);
3454 secy_delete_receive_sc(kay, rxsc);
3455 ieee802_1x_kay_deinit_receive_sc(participant, rxsc);
3456 }
3457 secy_delete_transmit_sc(kay, participant->txsc);
3458 ieee802_1x_kay_deinit_transmit_sc(participant, participant->txsc);
3459
3460 os_memset(&participant->cak, 0, sizeof(participant->cak));
3461 os_memset(&participant->kek, 0, sizeof(participant->kek));
3462 os_memset(&participant->ick, 0, sizeof(participant->ick));
3463 os_free(participant);
3464 }
3465
3466
3467 /**
3468 * ieee802_1x_kay_mka_participate -
3469 */
ieee802_1x_kay_mka_participate(struct ieee802_1x_kay * kay,struct mka_key_name * ckn,Boolean status)3470 void ieee802_1x_kay_mka_participate(struct ieee802_1x_kay *kay,
3471 struct mka_key_name *ckn,
3472 Boolean status)
3473 {
3474 struct ieee802_1x_mka_participant *participant;
3475
3476 if (!kay || !ckn)
3477 return;
3478
3479 participant = ieee802_1x_kay_get_participant(kay, ckn->name);
3480 if (!participant)
3481 return;
3482
3483 participant->active = status;
3484 }
3485
3486
3487 /**
3488 * ieee802_1x_kay_new_sak -
3489 */
3490 int
ieee802_1x_kay_new_sak(struct ieee802_1x_kay * kay)3491 ieee802_1x_kay_new_sak(struct ieee802_1x_kay *kay)
3492 {
3493 struct ieee802_1x_mka_participant *participant;
3494
3495 if (!kay)
3496 return -1;
3497
3498 participant = ieee802_1x_kay_get_principal_participant(kay);
3499 if (!participant)
3500 return -1;
3501
3502 participant->new_sak = TRUE;
3503 wpa_printf(MSG_DEBUG, "KaY: new SAK signal");
3504
3505 return 0;
3506 }
3507
3508
3509 /**
3510 * ieee802_1x_kay_change_cipher_suite -
3511 */
3512 int
ieee802_1x_kay_change_cipher_suite(struct ieee802_1x_kay * kay,int cs_index)3513 ieee802_1x_kay_change_cipher_suite(struct ieee802_1x_kay *kay, int cs_index)
3514 {
3515 struct ieee802_1x_mka_participant *participant;
3516
3517 if (!kay)
3518 return -1;
3519
3520 if ((unsigned int) cs_index >= CS_TABLE_SIZE) {
3521 wpa_printf(MSG_ERROR,
3522 "KaY: Configured cipher suite index is out of range");
3523 return -1;
3524 }
3525 if (kay->macsec_csindex == cs_index)
3526 return -2;
3527
3528 if (cs_index == 0)
3529 kay->macsec_desired = FALSE;
3530
3531 kay->macsec_csindex = cs_index;
3532 kay->macsec_capable = cipher_suite_tbl[kay->macsec_csindex].capable;
3533
3534 participant = ieee802_1x_kay_get_principal_participant(kay);
3535 if (participant) {
3536 wpa_printf(MSG_INFO, "KaY: Cipher Suite changed");
3537 participant->new_sak = TRUE;
3538 }
3539
3540 return 0;
3541 }
3542