1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
|
/*
SSSD - auth utils helpers
Copyright (C) Sumit Bose <simo@redhat.com> 2015
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
#ifndef __AUTHTOK_UTILS_H__
#define __AUTHTOK_UTILS_H__
#include <talloc.h>
#include "sss_client/sss_cli.h"
/**
* @brief Fill memory buffer with Smartcard authentication blob
*
* @param[in] pin PIN, null terminated
* @param[in] pin_len Length of the PIN, if 0
* strlen() will be called internally
* @param[in] token_name Token name, null terminated
* @param[in] token_name_len Length of the token name, if 0
* strlen() will be called internally
* @param[in] module_name Name of PKCS#11 module, null terminated
* @param[in] module_name_len Length of the module name, if 0
* strlen() will be called internally
* @param[in] key_id Key ID of the certificate
* @param[in] key_id_len Length of the key id of the certificate, if 0
* strlen() will be called internally
* @param[in] buf memory buffer of size buf_len, may be NULL
* @param[in] buf_len size of memory buffer buf
*
* @param[out] _sc_blob len size of the Smartcard authentication blob
*
* @return EOK on success
* EINVAL if input data is not consistent
* EAGAIN if provided buffer is too small, _sc_blob_len
* contains the size needed to store the SC blob
*/
errno_t sss_auth_pack_sc_blob(const char *pin, size_t pin_len,
const char *token_name, size_t token_name_len,
const char *module_name, size_t module_name_len,
const char *key_id, size_t key_id_len,
uint8_t *buf, size_t buf_len,
size_t *_sc_blob_len);
/**
* @brief Fill memory buffer with 2FA blob
*
* @param[in] fa1 First authentication factor, null terminated
* @param[in] fa1_len Length of the first authentication factor, if 0
* strlen() will be called internally
* @param[in] fa2 Second authentication factor, null terminated
* @param[in] fa2_len Length of the second authentication factor, if 0
* strlen() will be called internally
* @param[in] buf memory buffer of size buf_len
* @param[in] buf_len size of memory buffer buf
*
* @param[out] _2fa_blob_len size of the 2FA blob
*
* @return EOK on success
* EINVAL if input data is not consistent
* EAGAIN if provided buffer is too small, _2fa_blob_len
* contains the size needed to store the 2FA blob
*/
errno_t sss_auth_pack_2fa_blob(const char *fa1, size_t fa1_len,
const char *fa2, size_t fa2_len,
uint8_t *buf, size_t buf_len,
size_t *_2fa_blob_len);
/**
* @brief Extract 2FA data from memory buffer
*
* @param[in] mem_ctx Talloc memory context to allocate the 2FA data on
* @param[in] blob Memory buffer containing the 2FA data
* @param[in] blob_len Size of the memory buffer
* @param[out] _fa1 First authentication factor, null terminated
* @param[out] _fa1_len Length of the first authentication factor
* @param[out] _fa2 Second authentication factor, null terminated
* @param[out] _fa2_len Length of the second authentication factor
*
* @return EOK on success
* EINVAL if input data is not consistent
* EINVAL if no memory can be allocated
*/
errno_t sss_auth_unpack_2fa_blob(TALLOC_CTX *mem_ctx,
const uint8_t *blob, size_t blob_len,
char **fa1, size_t *_fa1_len,
char **fa2, size_t *_fa2_len);
/**
* @brief Extract SC data from memory buffer
*
* @param[in] mem_ctx Talloc memory context to allocate the 2FA
* data on
* @param[in] blob Memory buffer containing the 2FA data
* @param[in] blob_len Size of the memory buffer
* @param[out] _pin PIN, null terminated
* @param[out] _pin_len Length of the PIN
* @param[out] _token_name Token name, null terminated
* @param[out] _token_name_len Length of the token name
* @param[out] _module_name Name of PKCS#11 module, null terminated
* @param[out] _module_name_len Length of the module name
*
* @return EOK on success
* EINVAL if input data is not consistent
* EINVAL if no memory can be allocated
*/
errno_t sss_auth_unpack_sc_blob(TALLOC_CTX *mem_ctx,
const uint8_t *blob, size_t blob_len,
char **pin, size_t *_pin_len,
char **token_name, size_t *_token_name_len,
char **module_name, size_t *_module_name_len,
char **key_id, size_t *_key_id_len);
#endif /* __AUTHTOK_UTILS_H__ */
|
