eap_archie_fsm.hxx

/* BEGIN_COPYRIGHT                                                        */
/*                                                                        */
/* Open Diameter: Open-source software for the Diameter and               */
/*                Diameter related protocols                              */
/*                                                                        */
/* Copyright (C) 2002-2004 Open Diameter Project                          */
/*                                                                        */
/* This library is free software; you can redistribute it and/or modify   */
/* it under the terms of the GNU Lesser General Public License as         */
/* published by the Free Software Foundation; either version 2.1 of the   */
/* License, or (at your option) any later version.                        */
/*                                                                        */
/* This library is distributed in the hope that it will be useful,        */
/* but WITHOUT ANY WARRANTY; without even the implied warranty of         */
/* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU      */
/* Lesser General Public License for more details.                        */
/*                                                                        */
/* You should have received a copy of the GNU Lesser General Public       */
/* License along with this library; if not, write to the Free Software    */
/* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307    */
/* USA.                                                                   */
/*                                                                        */
/* In addition, when you copy and redistribute some or the entire part of */
/* the source code of this software with or without modification, you     */
/* MUST include this copyright notice in each copy.                       */
/*                                                                        */
/* If you make any changes that are appeared to be useful, please send    */
/* sources that include the changed part to                               */
/* diameter-developers@lists.sourceforge.net so that we can reflect your  */
/* changes to one unified version of this software.                       */
/*                                                                        */
/* END_COPYRIGHT                                                          */
// $Id: eap_archie_fsm.hxx,v 1.6 2004/06/17 21:13:36 yohba Exp $

// EAP-Archie state machines.
// Written by Yoshihiro Ohba (yohba@tari.toshiba.com)

#ifndef __EAP_ARCHIE_FSM_HXX__
#define __EAP_ARCHIE_FSM_HXX__

#include <ace/Reactor.h>
#include <iostream>
#include "eap_archie.hxx"
#include "eap_peerfsm.hxx"
#include "eap_authfsm.hxx"
#include "eap_method_registrar.hxx"
#include "eap_archie_crypto.hxx"

class EAP_ARCHIE_EXPORTS EapPeerArchieStateMachine 
  :  public EapMethodStateMachine,
     public EapStateMachine<EapPeerArchieStateMachine>
{
  friend class EapMethodStateMachineCreator<EapPeerArchieStateMachine>;
  friend class EapPeerArchieStateTable_S;
public:

  void Start() throw(AAA_Error)
  {
    isDone=false;
    keyData.resize(0);
    masterKey.resize(0);
    history.resize(0);
    keyConfirmationKey.resize(0);
    keyEncryptionKey.resize(0);
    keyDerivationKey.resize(0);

    EapStateMachine<EapPeerArchieStateMachine>::Start();
  }

  inline void Notify(AAA_Event ev)
  {
    EapStateMachine<EapPeerArchieStateMachine>::Notify(ev);
  }

  virtual std::string& InputSharedSecret()=0;

  virtual std::string& InputIdentity()=0;

  std::string& SharedSecret() { return sharedSecret; }

  std::string& KCK() 
  { 
    if (keyConfirmationKey.size() != 16)
      keyConfirmationKey.assign(sharedSecret, 0, 16);
    return keyConfirmationKey; 
  }

  std::string& KEK() { 
    if (keyEncryptionKey.size() != 16)
      keyEncryptionKey.assign(sharedSecret, 16, 16);
    return keyEncryptionKey; 
  }

  std::string& KDK() { 
    if (keyDerivationKey.size() != 32)
      keyDerivationKey.assign(sharedSecret, 32, 32);
    return keyDerivationKey; 
  }

  std::string& MK() { 
    if (masterKey.size() != 32 && 
        this->PeerSwitchStateMachine().MethodState() 
        == EapPeerSwitchStateMachine::DONE)
      {
        // Compute the master key.
        std::string tmp(nonceA);
        tmp.append(nonceP);
        tmp.append("Archie session key");
        EapCryptoArchiePRF prf;
        prf(tmp, masterKey, KDK(), 32);
      }
    return masterKey; 
  }

  std::string& SessionID() { return sessionID; }

  std::string& PeerID() { return peerID; }

  std::string& AuthID() { return authID; }

  ArchieBinding& Binding() { return binding; }

  std::string& NonceA() { return nonceA; }

  std::string& NonceP() { return nonceP; }

  std::string& History() { return history; }

protected:
  EapPeerArchieStateMachine(EapSwitchStateMachine &s);

  ~EapPeerArchieStateMachine() {} 

  std::string sharedSecret;

  std::string keyConfirmationKey;

  std::string keyEncryptionKey;

  std::string keyDerivationKey;

  std::string masterKey;

  std::string sessionID;

  std::string peerID, authID;

  std::string nonceP, nonceA;

  ArchieBinding binding;

  std::string history;
};

class EAP_ARCHIE_EXPORTS EapAuthArchieStateMachine 
  :  public EapMethodStateMachine,
     public EapStateMachine<EapAuthArchieStateMachine>
{
  friend class EapMethodStateMachineCreator<EapAuthArchieStateMachine>;
  friend class EapAuthArchieStateTable_S;
public:

  void Start() throw(AAA_Error)
  {
    keyData.resize(0);
    masterKey.resize(0);
    history.resize(0);
    keyConfirmationKey.resize(0);
    keyEncryptionKey.resize(0);
    keyDerivationKey.resize(0);
    EapStateMachine<EapAuthArchieStateMachine>::Start();
  }

  inline void Notify(AAA_Event ev)
  {
    EapStateMachine<EapAuthArchieStateMachine>::Notify(ev);
  }

  virtual std::string& InputSharedSecret()=0;

  virtual std::string& InputIdentity()=0;

  std::string& SharedSecret() { return sharedSecret; }

  std::string& KCK() 
  { 
    if (keyConfirmationKey.size() != 16)
      keyConfirmationKey.assign(sharedSecret, 0, 16);
    return keyConfirmationKey; 
  }

  std::string& KEK() { 
    if (keyEncryptionKey.size() != 16)
      keyEncryptionKey.assign(sharedSecret, 16, 16);
    return keyEncryptionKey; 
  }

  std::string& KDK() { 
    if (keyDerivationKey.size() != 32)
      keyDerivationKey.assign(sharedSecret, 32, 32);
    return keyDerivationKey; 
  }

  std::string& MK() { 
    if (masterKey.size() != 32 && IsDone())
      {
        // Compute the master key.
        std::string tmp(nonceA);
        tmp.append(nonceP);
        tmp.append("Archie session key");
        EapCryptoArchiePRF prf;
        prf(tmp, masterKey, KDK(), 32);
      }
    return masterKey; 
  }

  std::string& SessionID() { return sessionID; }

  std::string& PeerID() { return peerID; }

  std::string& AuthID() { return authID; }

  ArchieBinding& Binding() { return binding; }

  std::string& NonceA() { return nonceA; }

  std::string& NonceP() { return nonceP; }

  std::string& History() { return history; }

protected:
  EapAuthArchieStateMachine(EapSwitchStateMachine &s);

  ~EapAuthArchieStateMachine() {} 

  std::string sharedSecret;

  std::string keyConfirmationKey;

  std::string keyEncryptionKey;

  std::string keyDerivationKey;

  std::string masterKey;

  std::string sessionID;

  std::string peerID, authID;

  std::string nonceP, nonceA;

  ArchieBinding binding;

  std::string history;
};

#endif //__EAP_ARCHIE_FSM_HXX__

---