libexec/pppd/chap.h

/*
 * chap.h - Cryptographic Handshake Authentication Protocol definitions.
 *          based on November 1991 draft of PPP Authentication RFC
 *
 * Copyright (c) 1991 Gregory M. Christy
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms are permitted
 * provided that the above copyright notice and this paragraph are
 * duplicated in all such forms and that any documentation,
 * advertising materials, and other materials related to such
 * distribution and use acknowledge that the software was developed
 * by the author.
 *
 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
 * IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
 * WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
 */

#ifndef __CHAP_INCLUDE__

/* Code + ID + length */
#define CHAP_HEADERLEN  (sizeof (u_char) + sizeof (u_char) + sizeof (u_short))

/*
 * CHAP codes.
 */

#define CHAP_DIGEST_MD5 5       /* use MD5 algorithm */

#define MD5_SIGNATURE_SIZE 16   /* 16 bytes in a MD5 message digest */

#define CHAP_NOCALLBACK 0       /* don't call back after successful auth */
#define CHAP_CALLBACK 1         /* do call back */

#define CHAP_CHALLENGE  1
#define CHAP_RESPONSE   2
#define CHAP_SUCCESS    3
#define CHAP_FAILURE    4

/*
 *  Challenge lengths
 */

#define MIN_CHALLENGE_LENGTH 64
#define MAX_CHALLENGE_LENGTH 128

#define MAX_SECRET_LEN 128
/*
 * Each interface is described by chap structure.
 */

typedef struct chap_state {
    int unit;           /* Interface unit number */
    u_char chal_str[MAX_CHALLENGE_LENGTH + 1]; /* challenge string */
    u_char chal_len;            /* challenge length */
    int clientstate;            /* Client state */
    int serverstate;            /* Server state */
    int flags;          /* Flags */
    unsigned char id;           /* Current id */
    int timeouttime;            /* Timeout time in milliseconds */
    int retransmits;            /* Number of retransmissions */
} chap_state;


/*
 * Client states.
 */
#define CHAPCS_CLOSED   1       /* Connection down */
#define CHAPCS_CHALLENGE_SENT   2       /* We've sent a challenge */
#define CHAPCS_OPEN     3       /* We've received an Ack */

/*
 * Server states.
 */
#define CHAPSS_CLOSED   1       /* Connection down */
#define CHAPSS_LISTEN   2       /* Listening for a challenge */
#define CHAPSS_OPEN     3       /* We've sent an Ack */

/*
 * Flags.
 */
#define CHAPF_LOWERUP    0x01   /* The lower level is UP */
#define CHAPF_AWPPENDING 0x02   /* Auth with peer pending */
#define CHAPF_APPENDING  0x04   /* Auth peer pending */
#define CHAPF_UPVALID    0x08   /* values valid */
#define CHAPF_UPPENDING  0x10   /* values pending */


/*
 * Timeouts.
 */
#define CHAP_DEFTIMEOUT 3       /* Timeout time in seconds */

extern chap_state chap[];

void ChapInit __ARGS((int));
void ChapAuthWithPeer __ARGS((int));
void ChapAuthPeer __ARGS((int));
void ChapLowerUp __ARGS((int));
void ChapLowerDown __ARGS((int));
void ChapInput __ARGS((int, u_char *, int));
void ChapProtocolReject __ARGS((int));

#define __CHAP_INCLUDE__
#endif /* __CHAP_INCLUDE__ */