Navid Nikaein
95774e5b71
* update the ciphering and integrity handling at the eNB * add SECU complication directive to lte-softmodem makefile * update the config files, revert the log.c (modif by LG) * pre-ci tests passed except for eMBMS git-svn-id: http://svn.eurecom.fr/openair4G/trunk@5287 818b1a75-f10b-46b9-bf7c-635c3b92a50f
117 lines
3.1 KiB
C
117 lines
3.1 KiB
C
#include <stdlib.h>
|
|
#include <stdio.h>
|
|
#include <stdint.h>
|
|
#include <string.h>
|
|
|
|
#include "assertions.h"
|
|
|
|
#include <openssl/aes.h>
|
|
#include <openssl/cmac.h>
|
|
#include <openssl/evp.h>
|
|
|
|
#include "UTIL/LOG/log.h"
|
|
|
|
#include "osa_defs.h"
|
|
#include "osa_internal.h"
|
|
|
|
/*!
|
|
* @brief Create integrity cmac t for a given message.
|
|
* @param[in] stream_cipher Structure containing various variables to setup encoding
|
|
* @param[out] out For EIA2 the output string is 32 bits long
|
|
*/
|
|
int stream_compute_integrity_eia2(stream_cipher_t *stream_cipher, uint8_t out[4])
|
|
{
|
|
uint8_t *m;
|
|
uint32_t local_count;
|
|
size_t size = 4;
|
|
|
|
uint8_t data[16];
|
|
|
|
CMAC_CTX *cmac_ctx;
|
|
|
|
uint32_t zero_bit = 0;
|
|
uint32_t m_length;
|
|
|
|
DevAssert(stream_cipher != NULL);
|
|
DevAssert(stream_cipher->key != NULL);
|
|
|
|
memset(data, 0, 16);
|
|
|
|
zero_bit = stream_cipher->blength & 0x7;
|
|
|
|
m_length = stream_cipher->blength >> 3;
|
|
if (zero_bit > 0)
|
|
m_length += 1;
|
|
|
|
local_count = hton_int32(stream_cipher->count);
|
|
|
|
m = calloc(m_length + 8, sizeof(uint8_t));
|
|
|
|
memcpy(&m[0], &local_count, 4);
|
|
m[4] = ((stream_cipher->bearer & 0x1F) << 3) | ((stream_cipher->direction & 0x01) << 2);
|
|
|
|
memcpy(&m[8], stream_cipher->message, m_length);
|
|
|
|
#if defined(SECU_DEBUG)
|
|
{
|
|
int i;
|
|
char payload[6 * sizeof(m) + 1];
|
|
int index = 0;
|
|
LOG_T(OSA, "Blength: %u, Zero bits: %u\n",
|
|
stream_cipher->blength, zero_bit);
|
|
for (i = 0; i < sizeof(m); i++)
|
|
index += sprintf(&payload[index], "0x%02x ", m[i]);
|
|
LOG_D(OSA, "Payload: %s\n", payload);
|
|
}
|
|
#endif
|
|
|
|
cmac_ctx = CMAC_CTX_new();
|
|
|
|
CMAC_Init(cmac_ctx, stream_cipher->key, stream_cipher->key_length, EVP_aes_128_cbc(), NULL);
|
|
CMAC_Update(cmac_ctx, m, m_length + 8);
|
|
|
|
CMAC_Final(cmac_ctx, data, &size);
|
|
|
|
CMAC_CTX_free(cmac_ctx);
|
|
|
|
memcpy(out, data, 4);
|
|
free(m);
|
|
|
|
return 0;
|
|
}
|
|
|
|
int stream_compute_integrity(uint8_t algorithm, stream_cipher_t *stream_cipher, uint8_t out[4])
|
|
{
|
|
if (algorithm == EIA1_128_ALG_ID) {
|
|
LOG_E(OSA, "SNOW-3G algorithms are currently not implemented for integrity\n");
|
|
return -1;
|
|
} else if (algorithm == EIA2_128_ALG_ID) {
|
|
LOG_D(OSA, "EIA2 algorithm applied for integrity\n");
|
|
return stream_compute_integrity_eia2(stream_cipher, out);
|
|
}
|
|
LOG_E(OSA, "Provided integrity algorithm is currently not supported = %u\n", algorithm);
|
|
return -1;
|
|
}
|
|
|
|
int stream_check_integrity(uint8_t algorithm, stream_cipher_t *stream_cipher, uint8_t *expected)
|
|
{
|
|
uint8_t result[4];
|
|
|
|
if (algorithm != EIA0_ALG_ID) {
|
|
if (stream_compute_integrity(algorithm, stream_cipher, result) != 0) {
|
|
return -1;
|
|
}
|
|
|
|
if (memcmp(result, expected, 4) != 0) {
|
|
LOG_E(OSA, "Mismatch found in integrity for algorithm %u,\n"
|
|
"\tgot %02x.%02x.%02x.%02x, expecting %02x.%02x.%02x.%02x\n",
|
|
algorithm, result[0], result[1], result[2], result[3], expected[0],
|
|
expected[1], expected[2], expected[3]);
|
|
return -1;
|
|
}
|
|
}
|
|
|
|
/* Integrity verification succeeded */
|
|
return 0;
|
|
}
|