1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
|
#include "incs.h"
/*
* MS-MPPE-{Send,Recv}-Key attribute
*/
void test25(void)
{
uint8_t ra[] = {
0x67, 0x8a, 0xe6, 0xed, 0x69, 0x6e, 0x1b, 0xd1, 0x0a, 0xe2, 0xfe, 0xa1, 0x05, 0xd4, 0x6a, 0x56,
};
uint8_t encrypted[] = {
0x80, 0x36,
0xf4, 0xab, 0xbe, 0x21, 0x17, 0xfb, 0x3e, 0x4a, 0x78, 0x74, 0xdc, 0xe9, 0x1c, 0x5b, 0x04, 0x49,
0x8e, 0xc7, 0x72, 0x0f, 0x16, 0x86, 0x88, 0x56, 0x2d, 0xbc, 0x88, 0xe2, 0x1c, 0xab, 0x62, 0x71,
};
uint8_t plainkey[] = {
0xfc, 0x6e, 0xa4, 0x18, 0x37, 0x3d, 0x8e, 0x90, 0xc1, 0x36, 0xfa, 0xe3, 0x73, 0x5e, 0x37, 0xd1,
};
uint8_t plainkey2[] = {
0x86, 0xfe, 0x22, 0x0e, 0x76, 0x24, 0xba, 0x2a, 0x10, 0x05, 0xf6, 0xbf, 0x9b, 0x55, 0xe0, 0xb2,
};
uint8_t plain[256];
size_t plen;
uint8_t cipher[256];
size_t clen;
RADIUS_PACKET *packet, *response;
plen = sizeof(plain);
CHECK(radius_decrypt_mppe_key_attr(plain, &plen, encrypted, sizeof(encrypted), ra, "hogehogefugafuga") == 0);
CHECK(plen == 16);
CHECK(memcmp(plain, plainkey, 16) == 0);
clen = sizeof(cipher);
CHECK(radius_encrypt_mppe_key_attr(cipher, &clen, plainkey, 16, ra, "hogehogefugafuga") == 0);
CHECK(clen == 34);
memset(plain, 0, sizeof(plain));
plen = sizeof(plain);
CHECK(radius_decrypt_mppe_key_attr(plain, &plen, cipher, clen, ra, "hogehogefugafuga") == 0);
CHECK(plen == 16);
CHECK(memcmp(plain, plainkey, 16) == 0);
clen = 33;
CHECK(radius_encrypt_mppe_key_attr(cipher, &clen, plainkey, 16, ra, "hogehogefugafuga") != 0);
plen = 15;
CHECK(radius_decrypt_mppe_key_attr(plain, &plen, cipher, 34, ra, "hogehogefugafuga") != 0);
plen = 16;
CHECK(radius_decrypt_mppe_key_attr(plain, &plen, cipher, 33, ra, "hogehogefugafuga") != 0);
packet = radius_new_request_packet(RADIUS_CODE_ACCESS_REQUEST);
CHECK(radius_put_mppe_send_key_attr(packet, plainkey, sizeof(plainkey), "sharedsecret") == 0);
clen = sizeof(cipher);
CHECK(radius_get_vs_raw_attr(packet, RADIUS_VENDOR_MICROSOFT, RADIUS_VTYPE_MPPE_SEND_KEY, cipher, &clen) == 0);
CHECK(clen == 34);
plen = sizeof(plain);
CHECK(radius_decrypt_mppe_key_attr(plain, &plen, cipher, clen, radius_get_authenticator_retval(packet), "sharedsecret") == 0);
CHECK(plen == 16);
CHECK(memcmp(plain, plainkey, plen) == 0);
memset(plain, 0, sizeof(plain));
plen = sizeof(plain);
CHECK(radius_get_mppe_send_key_attr(packet, plain, &plen, "sharedsecret") == 0);
CHECK(plen == 16);
CHECK(memcmp(plain, plainkey, plen) == 0);
response = radius_new_response_packet(RADIUS_CODE_ACCESS_ACCEPT, packet);
CHECK(radius_put_mppe_recv_key_attr(response, plainkey2, sizeof(plainkey2), "sharedsecret") == 0);
clen = sizeof(cipher);
CHECK(radius_get_vs_raw_attr(response, RADIUS_VENDOR_MICROSOFT, RADIUS_VTYPE_MPPE_RECV_KEY, cipher, &clen) == 0);
CHECK(clen == 34);
plen = sizeof(plain);
CHECK(radius_decrypt_mppe_key_attr(plain, &plen, cipher, clen, radius_get_authenticator_retval(packet), "sharedsecret") == 0);
CHECK(plen == 16);
CHECK(memcmp(plain, plainkey2, plen) == 0);
memset(plain, 0, sizeof(plain));
plen = sizeof(plain);
CHECK(radius_get_mppe_recv_key_attr(response, plain, &plen, "sharedsecret") == 0);
CHECK(plen == 16);
CHECK(memcmp(plain, plainkey2, plen) == 0);
}
ADD_TEST(test25)
|
