/*

* Copyright (c) 2001-2006 Nokia Corporation and/or its subsidiary(-ies).

* All rights reserved.

* This component and the accompanying materials are made available

* under the terms of the License "Eclipse Public License v1.0"

* which accompanies this distribution, and is available

* at the URL "http://www.eclipse.org/legal/epl-v10.html".

*

* Initial Contributors:

* Nokia Corporation - initial contribution.

*

* Contributors:

*

* Description:  EAP and WLAN authentication protocols.

*

*/

/*

*/

// This is enumeration of EAPOL source code.

#if defined(USE_EAP_MINIMUM_RELEASE_TRACES)

	#undef EAP_FILE_NUMBER_ENUM

	#define EAP_FILE_NUMBER_ENUM 82 

	#undef EAP_FILE_NUMBER_DATE 

	#define EAP_FILE_NUMBER_DATE 1127594498 

#endif //#if defined(USE_EAP_MINIMUM_RELEASE_TRACES)

#if defined(USE_EAP_TYPE_SERVER_GSMSIM)

#include "eap_am_memory.h"

#include "eap_tools.h"

#include "eap_type_gsmsim.h"

#include "eap_type_gsmsim_header.h"

#include "eap_type_gsmsim_payloads.h"

#include "eap_type_gsmsim_mac_attributes.h"

#include "abs_eap_am_type_gsmsim.h"

#include "eap_crypto_api.h"

#include "eap_state_notification.h"

#include "eap_automatic_variable.h"

#include "eap_am_type_gsmsim.h"

//--------------------------------------------------

/** @file */

//--------------------------------------------------

//

EAP_FUNC_EXPORT eap_status_e eap_type_gsmsim_c::add_n_rand_payload(

	gsmsim_header_c * const gsmsim,

	const u32_t gsmsim_buffer_length,

	const u32_t eap_header_size,

	u32_t * const gsmsim_data_offset,

	u32_t * const gsmsim_data_free,

	u32_t * const packet_buffer_free,

	u32_t * const packet_buffer_offset,

	eap_type_sim_triplet_array_c * const triplets)

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	eap_status_e status = eap_status_process_general_error;

	gsmsim_payload_AT_header_c gp_n_rands(

		m_am_tools,

		gsmsim->get_data_offset(*gsmsim_data_offset, *gsmsim_data_free),

		*gsmsim_data_free);

	if (gp_n_rands.get_is_valid() == false)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_header_corrupted);

	}

	u32_t rand_data_length = triplets->get_triplet_count() * SIM_RAND_LENGTH;

	gp_n_rands.reset_header(static_cast<u16_t>(rand_data_length));

	gp_n_rands.set_current_payload(gsmsim_payload_AT_RAND);

	u8_t *n_rands = gp_n_rands.get_data(rand_data_length);

	if (n_rands == 0)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_process_general_error);

	}

	for (u32_t ind = 0u; ind < triplets->get_triplet_count(); ind++)

	{

		eap_type_saesim_triplet_c *triplet = triplets->get_triplet(m_am_tools, ind);

		u8_t * const source = triplet->get_rand()->get_data();

		if (source == 0)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

		}

		m_am_tools->memmove(

			n_rands+(ind*SIM_RAND_LENGTH),

			source,

			triplet->get_rand()->get_data_length());

	}

	status = eap_status_ok;

	update_payload_indexes(

		gsmsim_buffer_length,

		eap_header_size,

		gp_n_rands.get_header_length()+gp_n_rands.get_data_length(),

		gsmsim_data_offset,

		gsmsim_data_free,

		packet_buffer_offset,

		packet_buffer_free);

	EAP_GSMSIM_TRACE_PAYLOAD("Payload added", &gp_n_rands);

	EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

	return EAP_STATUS_RETURN(m_am_tools, status);

}

//--------------------------------------------------

//

EAP_FUNC_EXPORT eap_status_e eap_type_gsmsim_c::send_reauthentication_request_message(

	const eap_variable_data_c * const username,

	const bool pseudonym_decode_failed,

	const u8_t eap_identifier)

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	EAP_UNREFERENCED_PARAMETER(pseudonym_decode_failed);

	EAP_TRACE_DEBUG(

		m_am_tools, 

		TRACE_FLAGS_DEFAULT, 

		(EAPL("    send: GSMSIM-subtype %10s, %s, state %2d=%s\n"),

		 EAPL("gsmsim_subtype_Re_authentication"),

		 EAPL("server"),

		 m_state,

		 get_state_string()

		 ));

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("eap_type_gsmsim_c::send_reauthentication_request_message(): %s, m_identity_type %d=%s, requested identity payload is %d=%s.\n"),

		 (m_is_client == true ? "client": "server"),

		 m_identity_type,

		 get_identity_string(m_identity_type),

		 m_start_response_includes_identity,

		 gsmsim_payload_AT_header_c::get_payload_AT_string(m_start_response_includes_identity)));

	eap_status_e status = eap_status_process_general_error;

	eap_buf_chain_wr_c request_packet(

		eap_write_buffer, 

		m_am_tools, 

		EAP_MAX_LOCAL_PACKET_BUFFER_LENGTH);

	if (request_packet.get_is_valid() == false)

	{

		EAP_TRACE_ERROR(m_am_tools, TRACE_FLAGS_DEFAULT, (EAPL("packet buffer corrupted.\n")));

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

	}

#if defined(USE_EAP_TYPE_GSMSIM_OWN_RE_TRANSMISSION)

	if (m_is_client == true

		&& m_client_responds_retransmitted_packets == true)

	{

		// We do not wan't lower layers do re-transmissions behalf of us.

		// This means GSMSIM does process every re-transmitted EAP-Request.

		request_packet.set_do_packet_retransmission(false);

	}

#endif //#if defined(USE_EAP_TYPE_GSMSIM_OWN_RE_TRANSMISSION)

	EAP_ASSERT_ALWAYS(EAP_TYPE_GSMSIM_LOCAL_PACKET_BUFFER_LENGTH >= (m_gsmsim_header_offset+m_trailer_length));

	u32_t packet_buffer_free = EAP_TYPE_GSMSIM_LOCAL_PACKET_BUFFER_LENGTH-m_trailer_length;

	u32_t packet_buffer_offset = 0u;

	if (m_gsmsim_header_offset+m_MTU < packet_buffer_free)

	{

		packet_buffer_free = m_gsmsim_header_offset+m_MTU;

	}

	gsmsim_header_c gsmsim_response(

		m_am_tools,

		request_packet.get_data_offset(

			m_gsmsim_header_offset,

			(packet_buffer_free-m_gsmsim_header_offset)),

		(packet_buffer_free-m_gsmsim_header_offset));

	if (gsmsim_response.get_is_valid() == false)

	{

		EAP_TRACE_ERROR(

			m_am_tools,

			TRACE_FLAGS_DEFAULT,

			(EAPL("send_reauthentication_request_message: packet buffer corrupted.\n")));

		return EAP_STATUS_RETURN(m_am_tools, eap_status_process_general_error);

	}

	gsmsim_response.reset_header(

		packet_buffer_free-m_gsmsim_header_offset,

		m_use_eap_expanded_type);

	gsmsim_response.set_length(

		static_cast<u16_t>(packet_buffer_free-m_gsmsim_header_offset),

		m_use_eap_expanded_type);

	gsmsim_response.set_code(eap_code_request);

	gsmsim_response.set_identifier(eap_identifier);

	gsmsim_response.set_type(

		eap_type_gsmsim,

		m_use_eap_expanded_type);

	gsmsim_response.set_subtype(gsmsim_subtype_Re_authentication);

	update_buffer_indexes(

		EAP_TYPE_GSMSIM_LOCAL_PACKET_BUFFER_LENGTH,

		m_gsmsim_header_offset+gsmsim_response.get_header_length(),

		&packet_buffer_offset,

		&packet_buffer_free);

	// - - - - - - - - - - - - - - - - - - - - - - - -

	EAP_TRACE_DEBUG(

		m_am_tools, 

		TRACE_FLAGS_DEFAULT, 

		(EAPL("eap_type_gsmsim_c::send_reauthentication_request_message(0x%08x).\n"),

		this));

	// - - - - - - - - - - - - - - - - - - - - - - - -

	u32_t gsmsim_data_free = packet_buffer_free;

	u32_t gsmsim_data_offset = 0u;

	eap_variable_data_c orig_XKEY(m_am_tools);

	eap_variable_data_c orig_K_aut(m_am_tools);

	eap_variable_data_c orig_K_encr(m_am_tools);

	u32_t reauth_counter = 0u;

	eap_variable_data_c reauth_nonce_s(m_am_tools);

	// In order to use re-authentication, the client and the server need to

	// store the following values: original XKEY, K_aut, K_encr, latest

	// counter value and the next re-authentication identity.

	status = m_am_type_gsmsim->query_reauth_parameters(

		&orig_XKEY,

		&orig_K_aut,

		&orig_K_encr,

		&reauth_counter);

	if (status != eap_status_ok)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("eap_type_gsmsim_c::send_reauthentication_request_message(): %s, m_saved_reauth_counter %d.\n"),

		 (m_is_client == true ? "client": "server"),

		 reauth_counter));

	status = generate_nonce(EAP_TYPE_GSMSIM_NONCE_MT_SIZE, &reauth_nonce_s);

	if (status != eap_status_ok)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	status = m_nonce_s.set_copy_of_buffer(&reauth_nonce_s);

	if (status != eap_status_ok)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	eap_variable_data_c master_session_key(m_am_tools);

	status = generate_reauth_shared_secred_keys(

		EAP_TYPE_GSMSIM_KEYMAT_SIZE,

		&orig_XKEY,

		reauth_counter,

		username,

		&reauth_nonce_s,

		&master_session_key);

	if (status != eap_status_ok)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	// -   -   -   -   -   -   -   -   -   -   -   -

	m_use_result_indication = m_allow_use_result_indication;

	if (m_use_result_indication == true)

	{

		// We support use of protected success indications.

		status = add_simple_payload(

			&gsmsim_response,

			EAP_TYPE_GSMSIM_LOCAL_PACKET_BUFFER_LENGTH,

			gsmsim_response.get_header_length(),

			&gsmsim_data_offset,

			&gsmsim_data_free,

			&packet_buffer_free,

			&packet_buffer_offset,

			gsmsim_payload_AT_RESULT_IND);

		if (status != eap_status_ok)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

	}

	// -   -   -   -   -   -   -   -   -   -   -   -

	crypto_aes_c aes(m_am_tools);

	if (aes.get_is_valid() == false)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

	}

	status = m_am_type_gsmsim->generate_encryption_IV(

		m_IV.get_payload_buffer(),

		aes.get_block_size());

	if (status != eap_status_ok)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	// -   -   -   -   -   -   -   -   -   -   -   -

	status = add_variable_payload(

		&gsmsim_response,

		EAP_TYPE_GSMSIM_LOCAL_PACKET_BUFFER_LENGTH,

		gsmsim_response.get_header_length(),

		&gsmsim_data_offset,

		&gsmsim_data_free,

		&packet_buffer_free,

		&packet_buffer_offset,

		m_IV.get_payload_buffer(),

		gsmsim_payload_AT_IV);

	if (status != eap_status_ok)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	u8_t *MAC_data = 0;

	u32_t MAC_data_length = 0u;

	eap_type_gsmsim_MAC_attributes_c MAC_attributes;

	// Encrypted data.

	{

		gsmsim_payload_AT_header_c gp_encrypted_data(

			m_am_tools,

			gsmsim_response.get_data_offset(

				gsmsim_data_offset, 

				gsmsim_data_free),

			gsmsim_data_free);

		if (gsmsim_response.get_is_valid() == false)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, eap_status_illegal_parameter);

		}

		// Initialize the length of encrypted data to maximum length.

		// Later this will be set to correct length.

		gp_encrypted_data.reset_header(gsmsim_payload_AT_header_c::get_max_payload_data_length());

		gp_encrypted_data.set_current_payload(gsmsim_payload_AT_ENCR_DATA);

		update_payload_indexes(

			EAP_TYPE_GSMSIM_LOCAL_PACKET_BUFFER_LENGTH,

			gsmsim_response.get_header_length(),

			gp_encrypted_data.get_header_length(),

			&gsmsim_data_offset,

			&gsmsim_data_free,

			&packet_buffer_offset,

			&packet_buffer_free);

		u32_t encrypted_data_offset_begin = packet_buffer_offset;

		// -   -   -   -   -   -   -   -   -   -   -   -

		status = add_counter_payload(

			&gsmsim_response,

			EAP_TYPE_GSMSIM_LOCAL_PACKET_BUFFER_LENGTH,

			gsmsim_response.get_header_length(),

			&gsmsim_data_offset,

			&gsmsim_data_free,

			&packet_buffer_free,

			&packet_buffer_offset,

			static_cast<u16_t>(reauth_counter));

		if (status != eap_status_ok)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

		// -   -   -   -   -   -   -   -   -   -   -   -

		status = add_variable_payload(

			&gsmsim_response,

			EAP_TYPE_GSMSIM_LOCAL_PACKET_BUFFER_LENGTH,

			gsmsim_response.get_header_length(),

			&gsmsim_data_offset,

			&gsmsim_data_free,

			&packet_buffer_free,

			&packet_buffer_offset,

			&reauth_nonce_s,

			gsmsim_payload_AT_NONCE_S);

		if (status != eap_status_ok)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

		// -   -   -   -   -   -   -   -   -   -   -   -

		status = m_am_type_gsmsim->generate_reauthentication_id(

			&m_send_network_id,

			&m_IMSI,

			&m_reauthentication_identity,

			EAP_TYPE_GSMSIM_MAX_NAI_LENGTH);

		if (status == eap_status_ok)

		{

			status = add_pseudonym_or_imsi_payload(

				&gsmsim_response,

				EAP_TYPE_GSMSIM_LOCAL_PACKET_BUFFER_LENGTH,

				gsmsim_response.get_header_length(),

				&gsmsim_data_offset,

				&gsmsim_data_free,

				&packet_buffer_free,

				&packet_buffer_offset,

				&m_reauthentication_identity,

				gsmsim_payload_AT_NEXT_REAUTH_ID);

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

		}

		// -   -   -   -   -   -   -   -   -   -   -   -

		status = add_padding_payload(

			&gsmsim_response,

			EAP_TYPE_GSMSIM_LOCAL_PACKET_BUFFER_LENGTH,

			gsmsim_response.get_header_length(),

			&gsmsim_data_offset,

			&gsmsim_data_free,

			&packet_buffer_free,

			&packet_buffer_offset,

			(packet_buffer_offset - encrypted_data_offset_begin) // Length of the plain text.

			);

		if (status != eap_status_ok)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

		gp_encrypted_data.set_data_length(

			static_cast<u16_t>(packet_buffer_offset - encrypted_data_offset_begin));

		// -   -   -   -   -   -   -   -   -   -   -   -

		status = encrypt_DATA_payload(

			gp_encrypted_data.get_data(gp_encrypted_data.get_data_length()),

			gp_encrypted_data.get_data_length(),

			m_IV.get_payload_buffer(),

			&orig_K_encr);

		if (status != eap_status_ok)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

		EAP_GSMSIM_TRACE_PAYLOAD("Payload added", &gp_encrypted_data);

	}

	// -   -   -   -   -   -   -   -   -   -   -   -

	status = add_mac_payload(

		&gsmsim_response,

		EAP_TYPE_GSMSIM_LOCAL_PACKET_BUFFER_LENGTH,

		gsmsim_response.get_header_length(),

		&gsmsim_data_offset,

		&gsmsim_data_free,

		&packet_buffer_free,

		&packet_buffer_offset,

		&MAC_data,

		&MAC_data_length);

	if (status != eap_status_ok)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	// -   -   -   -   -   -   -   -   -   -   -   -

	gsmsim_response.set_data_length(

		gsmsim_data_offset,

		m_use_eap_expanded_type);

	request_packet.set_data_length(packet_buffer_offset);

	EAP_ASSERT_ALWAYS(

		m_gsmsim_header_offset+gsmsim_response.get_header_length()+gsmsim_response.get_data_length()

		== packet_buffer_offset);

	// -   -   -   -   -   -   -   -   -   -   -   -

	MAC_attributes.init(

		MAC_data,

		MAC_data_length,

		gsmsim_response.get_header_buffer(gsmsim_response.get_length()),

		gsmsim_response.get_length());

	status = create_message_authentication_code(

		&MAC_attributes,

		gsmsim_response.get_subtype(),