/*

* Copyright (c) 2001-2006 Nokia Corporation and/or its subsidiary(-ies).

* All rights reserved.

* This component and the accompanying materials are made available

* under the terms of the License "Eclipse Public License v1.0"

* which accompanies this distribution, and is available

* at the URL "http://www.eclipse.org/legal/epl-v10.html".

*

* Initial Contributors:

* Nokia Corporation - initial contribution.

*

* Contributors:

*

* Description:  EAP and WLAN authentication protocols.

*

*/

/*

*/

// This is enumeration of EAPOL source code.

#if defined(USE_EAP_MINIMUM_RELEASE_TRACES)

	#undef EAP_FILE_NUMBER_ENUM

	#define EAP_FILE_NUMBER_ENUM 94 

	#undef EAP_FILE_NUMBER_DATE 

	#define EAP_FILE_NUMBER_DATE 1127594498 

#endif //#if defined(USE_EAP_MINIMUM_RELEASE_TRACES)

#include "eap_am_memory.h"

#include "eap_base_type.h"

#include "eap_state_notification.h"

#include "eap_type_mschapv2.h"

#include "eap_am_type_mschapv2.h"

#include "eap_buffer.h"

#include "eap_master_session_key.h"

#include "eap_network_id_selector.h"

#include "eap_tlv_message_data.h"

#include "eap_config.h"

eap_status_e eap_type_mschapv2_c::client_packet_process(

	eap_header_wr_c * const received_eap,

	const u32_t eap_packet_length)

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	EAP_TRACE_DEBUG(

		m_am_tools, 

		TRACE_FLAGS_DEFAULT, 

		(EAPL("eap_type_mschapv2_c::client_packet_process(): this = 0x%08x, m_session.get_state()=%d\n"),

		this,

		m_session.get_state()));

	eap_status_e status = eap_status_drop_packet_quietly;

	m_identifier = received_eap->get_identifier();

	if (received_eap->get_type() == eap_type_identity)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_drop_packet_quietly);

	}

	if (received_eap->get_code() == eap_code_failure)

	{

		if (m_session.is_valid_state(eap_type_mschapv2_state_failure) == false)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, eap_status_drop_packet_quietly);

		}

		status = finish_unsuccessful_authentication(false);

		m_session.set_state(eap_type_mschapv2_state_failure);

	}

	else if (received_eap->get_code() == eap_code_success)

	{

		if (m_session.is_valid_state(eap_type_mschapv2_state_success) == false)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, eap_status_drop_packet_quietly);

		}

		eap_master_session_key_c key(

			m_am_tools,

			eap_type_mschapv2);

		if (key.get_is_valid() == false)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

		}

		status = generate_session_key(&key);

		if (status != eap_status_ok)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

		status = get_type_partner()->packet_data_crypto_keys(&m_send_network_id, &key);

		if (status != eap_status_ok)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

		// Check wait for eap success

		status = finish_successful_authentication();

		m_session.set_state(eap_type_mschapv2_state_success);

	}

	else if (received_eap->get_code() == eap_code_request) // Request

	{

		// MsChapV2

		if (received_eap->get_type() == eap_type_mschapv2)

		{

			status = client_mschapv2_packet_process(

				received_eap,

				eap_packet_length);			    

		}

	}

	EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

	return EAP_STATUS_RETURN(m_am_tools, status);

}

eap_status_e eap_type_mschapv2_c::client_mschapv2_packet_process(

	eap_header_wr_c * const received_eap,

	const u32_t eap_packet_length)

{	

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	EAP_TRACE_DEBUG(

		m_am_tools, 

		TRACE_FLAGS_DEFAULT, 

		(EAPL("eap_type_mschapv2_c::client_mschapv2_packet_process(): this = 0x%08x\n"),

		this));

	eap_status_e status = eap_status_drop_packet_quietly;

	if (eap_packet_length <= eap_header_base_c::get_header_length())

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_drop_packet_quietly);

	}

	else if (eap_packet_length == received_eap->get_data_length())

	{

		// MsChapV2 packet without any data, unspecified packet?

		// lets finish unsuccesfully?

		if (m_session.is_valid_state(eap_type_mschapv2_state_failure) == true)

		{

			status = finish_unsuccessful_authentication(false);

		}

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	const u32_t type_data_length = received_eap->get_type_data_length();

	if (received_eap->get_type_data_offset(0, type_data_length) == 0)

	{

		// Not enough data.

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_drop_packet_quietly);

	}

	mschapv2_header_c mschapv2_header(

		m_am_tools,

		received_eap->get_type_data_offset(0, type_data_length),

		type_data_length);

	if (mschapv2_header.check_header() != eap_status_ok)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_drop_packet_quietly);

	}

	switch (mschapv2_header.get_opcode())

	{

	case mschapv2_opcode_challenge:

		if (m_session.is_valid_state(eap_type_mschapv2_state_challenge_request) == false)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, eap_status_drop_packet_quietly);

		}

		status = client_handle_challenge_request(mschapv2_header);

		break;

	case mschapv2_opcode_success:

		if (m_session.is_valid_state(eap_type_mschapv2_state_success_request) == false)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, eap_status_drop_packet_quietly);

		}

		status = client_handle_success_request(mschapv2_header);

		break;

	case mschapv2_opcode_failure:

		if (m_session.is_valid_state(eap_type_mschapv2_state_failure_request) == false)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, eap_status_drop_packet_quietly);

		}

		status = client_handle_failure_request(mschapv2_header);

		break;

	default:

		break;

	}

	EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

	return EAP_STATUS_RETURN(m_am_tools, status);

}

eap_status_e eap_type_mschapv2_c::client_handle_challenge_request(mschapv2_header_c &challenge_request)

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	EAP_TRACE_DEBUG(

		m_am_tools, 

		TRACE_FLAGS_DEFAULT, 

		(EAPL("eap_type_mschapv2_c::client_handle_challenge_request(): this = 0x%08x\n"),

		this));

	eap_status_e status = eap_status_drop_packet_quietly;

	if (challenge_request.get_data_length() < mschapv2_challenge_c::get_header_minimum_size())

	{ 

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	m_mschapv2id = challenge_request.get_mschapv2_id();

	mschapv2_challenge_c challenge_payload(

		m_am_tools,

		challenge_request.get_data(),

		challenge_request.get_data_length());

	if (challenge_payload.check_header() != eap_status_ok)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_drop_packet_quietly);

	}

	EAP_TRACE_DATA_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("client_handle_challenge_request(): mschapv2id"),

		 &m_mschapv2id,

		 sizeof(m_mschapv2id)));

	EAP_TRACE_DATA_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("client_handle_challenge_request(): m_authenticator_challenge"),

		 challenge_payload.get_challenge(),

		 EAP_MSCHAPV2_AUTHENTICATOR_CHALLENGE_SIZE));

	m_am_tools->memmove(

		m_authenticator_challenge,

		challenge_payload.get_challenge(),

		EAP_MSCHAPV2_AUTHENTICATOR_CHALLENGE_SIZE);

#if defined(USE_FAST_EAP_TYPE)

	if (m_use_EAP_FAST_challenge == true)

	{

		// Note the received authenticator challenge is zero bytes in EAP-FAST.

		if (m_server_EAP_FAST_challenge.get_is_valid_data() == false

			|| m_server_EAP_FAST_challenge.get_data_length() != EAP_MSCHAPV2_AUTHENTICATOR_CHALLENGE_SIZE)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, eap_status_authentication_failure);

		}

		m_am_tools->memmove(

			m_authenticator_challenge,

			m_server_EAP_FAST_challenge.get_data(),

			EAP_MSCHAPV2_AUTHENTICATOR_CHALLENGE_SIZE);

		EAP_TRACE_DATA_DEBUG(

			m_am_tools,

			TRACE_FLAGS_DEFAULT,

			(EAPL("client_handle_challenge_request(): EAP-FAST m_authenticator_challenge"),

			 m_authenticator_challenge,

			 EAP_MSCHAPV2_AUTHENTICATOR_CHALLENGE_SIZE));

	}

#endif //#if defined(USE_FAST_EAP_TYPE)

	// If no identity, ask it

	if (!m_identity_asked

		&& (m_password_prompt_enabled

			|| m_username_utf8.get_is_valid_data() == false))

	{

		// Prefill username with identity if it is possible

		if (m_username_utf8.get_is_valid_data() == false)

		{

			status = get_type_partner()->get_saved_eap_identity(&m_username_utf8);

		}

		// Open username/password dialog

		status = m_am_type_mschapv2->show_username_password_dialog(

			m_username_utf8,

			m_password_utf8,

			m_password_prompt_enabled,

			false);

	}

	else

	{

		status = client_send_challenge_response();

	}

	EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

	return EAP_STATUS_RETURN(m_am_tools, status);

}

eap_status_e eap_type_mschapv2_c::client_send_challenge_response()

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	EAP_TRACE_DEBUG(

		m_am_tools, 

		TRACE_FLAGS_DEFAULT, 

		(EAPL("eap_type_mschapv2_c::client_send_challenge_response(): this = 0x%08x\n"),

		this));

	eap_status_e status = m_rand.add_rand_seed_hw_ticks();

	if (status != eap_status_ok)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

#if defined(USE_FAST_EAP_TYPE)

	if (m_use_EAP_FAST_challenge == true

		&& m_client_EAP_FAST_challenge.get_is_valid_data() == true

		&& m_client_EAP_FAST_challenge.get_data_length() == EAP_MSCHAPV2_PEER_CHALLENGE_SIZE)

	{

		m_am_tools->memmove(

			m_peer_challenge,

			m_client_EAP_FAST_challenge.get_data(),

			EAP_MSCHAPV2_PEER_CHALLENGE_SIZE);

	}

	else

#endif //#if defined(USE_FAST_EAP_TYPE)

	{

		status = m_rand.get_rand_bytes(m_peer_challenge, EAP_MSCHAPV2_PEER_CHALLENGE_SIZE);

		if (status != eap_status_ok)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

	}

	crypto_nt_hash_c nt_hash(m_am_tools);

	if (nt_hash.get_is_valid() == false)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

	}

	if (m_do_wrong_password_tests == true)

	{

		u8_t crap_from_stack;

		status = m_password_utf8.add_data(&crap_from_stack, sizeof(crap_from_stack));

		if (status != eap_status_ok)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

	}

	status = nt_hash.nt_password_hash(

		&m_password_utf8,

		&m_password_hash,

		EAP_MSCHAPV2_MD4_DIGEST_SIZE);

	if (status != eap_status_ok)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	status = nt_hash.hash_nt_password_hash(

		&m_password_hash,

		&m_password_hash_hash,

		EAP_MSCHAPV2_MD4_DIGEST_SIZE);

	if (status != eap_status_ok)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	EAP_TRACE_DATA_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("EAP_type_MSCHAPV2: client_send_challenge_response(), m_password_utf8"),

		m_password_utf8.get_data(),

		m_password_utf8.get_data_length()));

	EAP_TRACE_DATA_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("EAP_type_MSCHAPV2: client_send_challenge_response(), m_authenticator_challenge"),

		m_authenticator_challenge,

		EAP_MSCHAPV2_AUTHENTICATOR_CHALLENGE_SIZE));

	EAP_TRACE_DATA_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("EAP_type_MSCHAPV2: client_send_challenge_response(), m_peer_challenge"),

		m_peer_challenge,

		EAP_MSCHAPV2_PEER_CHALLENGE_SIZE));

	EAP_TRACE_DATA_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("EAP_type_MSCHAPV2: client_send_challenge_response(), m_password_hash"),

		m_password_hash.get_data(),

		m_password_hash.get_data_length()));

	EAP_TRACE_DATA_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("EAP_type_MSCHAPV2: client_send_challenge_response(), m_username_utf8"),

		m_username_utf8.get_data(),

		m_username_utf8.get_data_length()));

	EAP_TRACE_DATA_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("EAP_type_MSCHAPV2: client_send_challenge_response(): m_authenticator_challenge"),

		 m_authenticator_challenge,

		 EAP_MSCHAPV2_AUTHENTICATOR_CHALLENGE_SIZE));

	status = generate_nt_response(

		m_authenticator_challenge,

		m_peer_challenge,

		m_username_utf8.get_data(),

		m_username_utf8.get_data_length(),

		&m_password_hash,

		m_nt_response);

	if (status != eap_status_ok)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	EAP_TRACE_DATA_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("EAP_type_MSCHAPV2: client_send_challenge_response(), m_nt_response:"),

		m_nt_response,

		EAP_MSCHAPV2_NT_RESPONSE_SIZE));

	// Send response

	const u32_t type_data_length = EAP_MSCHAPV2_HEADER_SIZE // OpCode, MS-CHAPv2-ID and MS-Length

		+ mschapv2_response_c::get_header_minimum_size()

		+ m_username_utf8.get_data_length();

	const u32_t packet_length

		= eap_header_base_c::get_type_data_start_offset(m_use_eap_expanded_type)

		+ type_data_length;

	eap_buf_chain_wr_c * packet = create_send_packet(packet_length);

	if (!packet)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

	}

	eap_header_base_c eap_header(

		m_am_tools,

		packet->get_data_offset(m_offset, packet_length),

		packet_length);

	if (eap_header.get_is_valid() == false)

	{

		delete packet;

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_illegal_parameter);

	}

	eap_header.set_code(eap_code_response);

	eap_header.set_identifier(m_identifier);

	eap_header.set_length(

		static_cast<u16_t>(packet_length),

		m_use_eap_expanded_type);

	eap_header.set_type(

		eap_type_mschapv2,

		m_use_eap_expanded_type);

	mschapv2_header_c mschapv2_header(

		m_am_tools,

		eap_header.get_type_data_offset(0, eap_header.get_type_data_length()),

		eap_header.get_type_data_length());

	mschapv2_header.set_opcode(mschapv2_opcode_response);

	mschapv2_header.set_mschapv2_id(m_mschapv2id);

	mschapv2_header.set_ms_length(static_cast<u16_t>(type_data_length));

	mschapv2_response_c response(

		m_am_tools,

		mschapv2_header.get_data(),

		mschapv2_header.get_data_length());

	if (response.get_is_valid() == false)

	{

		delete packet;

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

	}

	status = response.set_constants();

	if (status != eap_status_ok)

	{

		delete packet;

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

#if defined(USE_FAST_EAP_TYPE)

	if (m_use_EAP_FAST_challenge == true)

	{

		// EAP-FAST sends peer challenge containing only zeroes.