summaryrefslogtreecommitdiffstats
path: root/lib/libskey
diff options
context:
space:
mode:
authorpeter <peter@FreeBSD.org>1995-12-30 19:02:48 +0000
committerpeter <peter@FreeBSD.org>1995-12-30 19:02:48 +0000
commitab124e78b0271ddb904b761b31e5c9a0cf24e070 (patch)
tree0cf1447720c45721ed3d214a4eaaa6834bda155d /lib/libskey
parent15748830d0fcd29294a1969a1012655e74908c1e (diff)
downloadFreeBSD-src-ab124e78b0271ddb904b761b31e5c9a0cf24e070.zip
FreeBSD-src-ab124e78b0271ddb904b761b31e5c9a0cf24e070.tar.gz
recording cvs-1.6 file death
Diffstat (limited to 'lib/libskey')
-rw-r--r--lib/libskey/authfile.c177
-rw-r--r--lib/libskey/md4.c336
-rw-r--r--lib/libskey/md4.h47
3 files changed, 0 insertions, 560 deletions
diff --git a/lib/libskey/authfile.c b/lib/libskey/authfile.c
deleted file mode 100644
index ae7b0ac..0000000
--- a/lib/libskey/authfile.c
+++ /dev/null
@@ -1,177 +0,0 @@
- /* Portions taken from the skey distribution on Oct 21 1993 */
-
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <string.h>
-#include <netdb.h>
-#include <arpa/inet.h>
-#include <stdio.h>
-#include <pwd.h>
-#include <syslog.h>
-#include <unistd.h>
-#include <stdlib.h>
-#include <skey.h>
-
-#if (MAXHOSTNAMELEN < 64) /* AIX weirdness */
-#undef MAXHOSTNAMELEN
-#endif
-
-#ifndef MAXHOSTNAMELEN
-#define MAXHOSTNAMELEN 255
-#endif
-
-#include "pathnames.h"
-
-static int isaddr();
-static int rdnets();
-
-#define MAXADDR 16 /* how many addresses can a machine
- * have? */
-
- /*
- * Turn host into an IP address and then look it up in the authorization
- * database to determine if ordinary password logins are OK
- */
-int authfile(host)
-char *host;
-{
- char *addr[MAXADDR];
- char **ap;
- long n;
- struct hostent *hp;
- char **lp;
- struct hostent *xp;
- int addr_length;
-
- if (strlen(host) == 0) {
- /* Local login, okay */
- return 1;
- }
- if (isaddr(host)) {
- return rdnets(inet_addr(host));
- } else {
-
- /*
- * Stash away a copy of the host address list because it will be
- * clobbered by other gethostbyXXX() calls.
- */
-
- hp = gethostbyname(host);
- if (hp == NULL) {
- syslog(LOG_ERR, "unknown host: %s", host);
- return 0;
- }
- if (hp->h_addrtype != AF_INET) {
- syslog(LOG_ERR, "unknown network family: %d", hp->h_addrtype);
- return 0;
- }
- for (lp = hp->h_addr_list, ap = addr; ap < addr + MAXADDR; lp++, ap++) {
- if (*lp == NULL) {
- *ap = 0;
- break;
- } else {
- if ((*ap = malloc(hp->h_length)) == 0) {
- syslog(LOG_ERR, "out of memory");
- return 0;
- }
- memcpy(*ap, *lp, hp->h_length);
- }
- }
- addr_length = hp->h_length;
-
- /*
- * See if any of the addresses matches a pattern in the control file.
- * Report and skip the address if it does not belong to the remote
- * host. Assume localhost == localhost.domain.
- */
-
-#define NEQ(x,y) (strcasecmp((x),(y)) != 0)
-
- while (ap-- > addr) {
- memcpy((char *) &n, *ap, addr_length);
- if (rdnets(n)) {
- if ((hp = gethostbyaddr(*ap, addr_length, AF_INET)) == 0
- || (NEQ(host, hp->h_name) && NEQ(host, "localhost"))) {
- syslog(LOG_ERR, "IP address %s not registered for host %s",
- inet_ntoa(*(struct in_addr *) * ap), host);
- continue;
- }
- return 1;
- }
- }
- return 0;
- }
-}
-static int rdnets(host)
-unsigned long host;
-{
- FILE *fp;
- char buf[128],
- *cp;
- long pattern,
- mask;
- char *strtok();
- int permit_it = 0;
-
- /*
- * If auth file not found, be backwards compatible with standard login
- * and allow hard coded passwords in from anywhere. Some may consider
- * this a security hole, but backwards compatibility is more desirable
- * than others. If you don't like it, change the return value to be zero.
- */
- if ((fp = fopen(_PATH_SKEYACCESS, "r")) == NULL)
- return 1;
-
- while (fgets(buf, sizeof(buf), fp), !feof(fp)) {
- if (buf[0] == '#')
- continue; /* Comment */
- cp = strtok(buf, " \t");
- if (cp == NULL)
- continue;
- /* two choices permit or deny */
- if (strncasecmp(cp, "permit", 4) == 0) {
- permit_it = 1;
- } else {
- if (strncasecmp(cp, "deny", 4) == 0) {
- permit_it = 0;
- } else {
- continue; /* ignore this it is not
- * permit/deny */
- }
- }
- cp = strtok(NULL, " \t");
- if (cp == NULL)
- continue; /* Invalid line */
- pattern = inet_addr(cp);
- cp = strtok(NULL, " \t");
- if (cp == NULL)
- continue; /* Invalid line */
- mask = inet_addr(cp);
- if ((host & mask) == pattern) {
- fclose(fp);
- return permit_it;
- }
- }
- fclose(fp);
- return 0;
-}
-
- /*
- * Return TRUE if string appears to be an IP address in dotted decimal;
- * return FALSE otherwise (i.e., if string is a domain name)
- */
-static int isaddr(s)
-register char *s;
-{
- char c;
-
- if (s == NULL)
- return 1; /* Can't happen */
-
- while ((c = *s++) != '\0') {
- if (c != '[' && c != ']' && !isdigit(c) && c != '.')
- return 0;
- }
- return 1;
-}
diff --git a/lib/libskey/md4.c b/lib/libskey/md4.c
deleted file mode 100644
index 495f444..0000000
--- a/lib/libskey/md4.c
+++ /dev/null
@@ -1,336 +0,0 @@
-/*
- * md4.c -- Implementation of MD4 Message Digest Algorithm
- * Updated: 2/16/90 by Ronald L. Rivest
- *
- * Portability nits fixed and reformatted - 2/12/91 Phil Karn
- *
- * Copyright (C) 1991-2, RSA Data Security, Inc. Created 1991. All
- * rights reserved.
- *
- * License to copy and use this software is granted provided that it
- * is identified as the "RSA Data Security, Inc. MD5 Message-Digest
- * Algorithm" in all material mentioning or referencing this software
- * or this function.
- *
- * License is also granted to make and use derivative works provided
- * that such works are identified as "derived from the RSA Data
- * Security, Inc. MD5 Message-Digest Algorithm" in all material
- * mentioning or referencing the derived work.
- *
- * RSA Data Security, Inc. makes no representations concerning either
- * the merchantability of this software or the suitability of this
- * software for any particular purpose. It is provided "as is"
- * without express or implied warranty of any kind.
- *
- * These notices must be retained in any copies of any part of this
- * documentation and/or software.
- */
-
-/*
- * To use MD4:
- * -- Include md4.h in your program
- * -- Declare an MDstruct MD to hold the state of the digest computation.
- * -- Initialize MD using MDbegin(&MD)
- * -- For each full block (64 bytes) X you wish to process, call
- * MDupdate(&MD,X,512)
- * (512 is the number of bits in a full block.)
- * -- For the last block (less than 64 bytes) you wish to process,
- * MDupdate(&MD,X,n)
- * where n is the number of bits in the partial block. A partial
- * block terminates the computation, so every MD computation should
- * terminate by processing a partial block, even if it has n = 0.
- * -- The message digest is available in MD.buffer[0] ... MD.buffer[3].
- * (Least-significant byte of each word should be output first.)
- * -- You can print out the digest using MDprint(&MD)
- */
-
-/* Implementation notes:
- * This implementation assumes that longs are 32-bit quantities.
- * If the machine stores the least-significant byte of an long in the
- * least-addressed byte (eg., VAX and 8086), then LOWBYTEFIRST should be
- * set to TRUE. Otherwise (eg., SUNS), LOWBYTEFIRST should be set to
- * FALSE. Note that on machines with LOWBYTEFIRST FALSE the routine
- * MDupdate modifies has a side-effect on its input array (the order of bytes
- * in each word are reversed). If this is undesired a call to MDreverse(X) can
- * reverse the bytes of X back into order after each call to MDupdate.
- */
-#define TRUE 1
-#define FALSE 0
-
-#if (defined(__MSDOS__) || defined(MPU8086) || defined(MPU8080) \
- || defined(vax) || defined (MIPSEL))
-#define LOWBYTEFIRST TRUE /* Low order bytes are first in memory */
-#else /* Almost all other machines are big-endian */
-#define LOWBYTEFIRST FALSE
-#endif
-
-
-/* Compile-time includes */
-#include <stdio.h>
-#include "md4.h"
-
-/* Compile-time declarations of MD4 ``magic constants'' */
-#define I0 0x67452301 /* Initial values for MD buffer */
-#define I1 0xefcdab89
-#define I2 0x98badcfe
-#define I3 0x10325476
-#define C2 013240474631 /* round 2 constant = sqrt(2) in octal */
-#define C3 015666365641 /* round 3 constant = sqrt(3) in octal */
-/* C2 and C3 are from Knuth, The Art of Programming, Volume 2
- * (Seminumerical Algorithms), Second Edition (1981), Addison-Wesley.
- * Table 2, page 660.
- */
-#define fs1 3 /* round 1 shift amounts */
-#define fs2 7
-#define fs3 11
-#define fs4 19
-#define gs1 3 /* round 2 shift amounts */
-#define gs2 5
-#define gs3 9
-#define gs4 13
-#define hs1 3 /* round 3 shift amounts */
-#define hs2 9
-#define hs3 11
-#define hs4 15
-
-
-/* Compile-time macro declarations for MD4.
- * Note: The ``rot'' operator uses the variable ``tmp''.
- * It assumes tmp is declared as unsigned long, so that the >>
- * operator will shift in zeros rather than extending the sign bit.
- */
-#define f(X,Y,Z) ((X&Y) | ((~X)&Z))
-#define g(X,Y,Z) ((X&Y) | (X&Z) | (Y&Z))
-#define h(X,Y,Z) (X^Y^Z)
-#define rot(X,S) (tmp=X,(tmp<<S) | (tmp>>(32-S)))
-#define ff(A,B,C,D,i,s) A = rot((A + f(B,C,D) + X[i]),s)
-#define gg(A,B,C,D,i,s) A = rot((A + g(B,C,D) + X[i] + C2),s)
-#define hh(A,B,C,D,i,s) A = rot((A + h(B,C,D) + X[i] + C3),s)
-
-void MDreverse __P((unsigned long *X));
-
-/* MDprint(MDp)
- * Print message digest buffer MDp as 32 hexadecimal digits.
- * Order is from low-order byte of buffer[0] to high-order byte of buffer[3].
- * Each byte is printed with high-order hexadecimal digit first.
- * This is a user-callable routine.
- */
-void
-MDprint(MDp)
-MDptr MDp;
-{
- int i,j;
-
- for(i=0;i<4;i++)
- for(j=0;j<32;j=j+8)
- printf("%02lx",(MDp->buffer[i]>>j) & 0xFF);
-}
-
-/* MDbegin(MDp)
- * Initialize message digest buffer MDp.
- * This is a user-callable routine.
- */
-void
-MDbegin(MDp)
-MDptr MDp;
-{
- int i;
-
- MDp->buffer[0] = I0;
- MDp->buffer[1] = I1;
- MDp->buffer[2] = I2;
- MDp->buffer[3] = I3;
- for(i=0;i<8;i++)
- MDp->count[i] = 0;
- MDp->done = 0;
-}
-
-/* MDreverse(X)
- * Reverse the byte-ordering of every long in X.
- * Assumes X is an array of 16 longs.
- * The macro revx reverses the byte-ordering of the next word of X.
- */
-#define revx { t = (*X << 16) | (*X >> 16); \
- *X++ = ((t & 0xFF00FF00) >> 8) | ((t & 0x00FF00FF) << 8); }
-void
-MDreverse(X)
-unsigned long *X;
-{
- register unsigned long t;
-
- revx;
- revx;
- revx;
- revx;
- revx;
- revx;
- revx;
- revx;
- revx;
- revx;
- revx;
- revx;
- revx;
- revx;
- revx;
- revx;
-}
-
-/* MDblock(MDp,X)
- * Update message digest buffer MDp->buffer using 16-word data block X.
- * Assumes all 16 words of X are full of data.
- * Does not update MDp->count.
- * This routine is not user-callable.
- */
-static void
-MDblock(MDp,X)
-MDptr MDp;
-unsigned long *X;
-{
- register unsigned long tmp, A, B, C, D;
-
-#if LOWBYTEFIRST == FALSE
- MDreverse(X);
-#endif
- A = MDp->buffer[0];
- B = MDp->buffer[1];
- C = MDp->buffer[2];
- D = MDp->buffer[3];
- /* Update the message digest buffer */
- ff(A,B,C,D,0,fs1); /* Round 1 */
- ff(D,A,B,C,1,fs2);
- ff(C,D,A,B,2,fs3);
- ff(B,C,D,A,3,fs4);
- ff(A,B,C,D,4,fs1);
- ff(D,A,B,C,5,fs2);
- ff(C,D,A,B,6,fs3);
- ff(B,C,D,A,7,fs4);
- ff(A,B,C,D,8,fs1);
- ff(D,A,B,C,9,fs2);
- ff(C,D,A,B,10,fs3);
- ff(B,C,D,A,11,fs4);
- ff(A,B,C,D,12,fs1);
- ff(D,A,B,C,13,fs2);
- ff(C,D,A,B,14,fs3);
- ff(B,C,D,A,15,fs4);
- gg(A,B,C,D,0,gs1); /* Round 2 */
- gg(D,A,B,C,4,gs2);
- gg(C,D,A,B,8,gs3);
- gg(B,C,D,A,12,gs4);
- gg(A,B,C,D,1,gs1);
- gg(D,A,B,C,5,gs2);
- gg(C,D,A,B,9,gs3);
- gg(B,C,D,A,13,gs4);
- gg(A,B,C,D,2,gs1);
- gg(D,A,B,C,6,gs2);
- gg(C,D,A,B,10,gs3);
- gg(B,C,D,A,14,gs4);
- gg(A,B,C,D,3,gs1);
- gg(D,A,B,C,7,gs2);
- gg(C,D,A,B,11,gs3);
- gg(B,C,D,A,15,gs4);
- hh(A,B,C,D,0,hs1); /* Round 3 */
- hh(D,A,B,C,8,hs2);
- hh(C,D,A,B,4,hs3);
- hh(B,C,D,A,12,hs4);
- hh(A,B,C,D,2,hs1);
- hh(D,A,B,C,10,hs2);
- hh(C,D,A,B,6,hs3);
- hh(B,C,D,A,14,hs4);
- hh(A,B,C,D,1,hs1);
- hh(D,A,B,C,9,hs2);
- hh(C,D,A,B,5,hs3);
- hh(B,C,D,A,13,hs4);
- hh(A,B,C,D,3,hs1);
- hh(D,A,B,C,11,hs2);
- hh(C,D,A,B,7,hs3);
- hh(B,C,D,A,15,hs4);
- MDp->buffer[0] += A;
- MDp->buffer[1] += B;
- MDp->buffer[2] += C;
- MDp->buffer[3] += D;
-}
-
-/* MDupdate(MDp,X,count)
- * Input: MDp -- an MDptr
- * X -- a pointer to an array of unsigned characters.
- * count -- the number of bits of X to use.
- * (if not a multiple of 8, uses high bits of last byte.)
- * Update MDp using the number of bits of X given by count.
- * This is the basic input routine for an MD4 user.
- * The routine completes the MD computation when count < 512, so
- * every MD computation should end with one call to MDupdate with a
- * count less than 512. A call with count 0 will be ignored if the
- * MD has already been terminated (done != 0), so an extra call with count
- * 0 can be given as a ``courtesy close'' to force termination if desired.
- */
-void
-MDupdate(MDp,X,count)
-MDptr MDp;
-unsigned char *X;
-unsigned int count;
-{
- int i,bit,byte,mask;
- unsigned long tmp;
- unsigned char XX[64];
- unsigned char *p;
-
- /* return with no error if this is a courtesy close with count
- * zero and MDp->done is true.
- */
- if(count == 0 && MDp->done)
- return;
- /* check to see if MD is already done and report error */
- if(MDp->done){
- printf("\nError: MDupdate MD already done.");
- return;
- }
- /* Add count to MDp->count */
- tmp = count;
- p = MDp->count;
- while(tmp){
- tmp += *p;
- *p++ = tmp;
- tmp = tmp >> 8;
- }
- /* Process data */
- if(count == 512){
- /* Full block of data to handle */
- MDblock(MDp,(unsigned long *)X);
- } else if(count > 512){
- /* Check for count too large */
- printf("\nError: MDupdate called with illegal count value %ld.",count);
- return;
- } else {
- /* partial block -- must be last block so finish up
- * Find out how many bytes and residual bits there are
- */
- byte = count >> 3;
- bit = count & 7;
- /* Copy X into XX since we need to modify it */
- for(i=0;i<=byte;i++)
- XX[i] = X[i];
- for(i=byte+1;i<64;i++)
- XX[i] = 0;
- /* Add padding '1' bit and low-order zeros in last byte */
- mask = 1 << (7 - bit);
- XX[byte] = (XX[byte] | mask) & ~( mask - 1);
- /* If room for bit count, finish up with this block */
- if(byte <= 55){
- for(i=0;i<8;i++)
- XX[56+i] = MDp->count[i];
- MDblock(MDp,(unsigned long *)XX);
- } else {
- /* need to do two blocks to finish up */
- MDblock(MDp,(unsigned long *)XX);
- for(i=0;i<56;i++)
- XX[i] = 0;
- for(i=0;i<8;i++)
- XX[56+i] = MDp->count[i];
- MDblock(MDp,(unsigned long *)XX);
- }
- /* Set flag saying we're done with MD computation */
- MDp->done = 1;
- }
-}
-/* End of md4.c */
diff --git a/lib/libskey/md4.h b/lib/libskey/md4.h
deleted file mode 100644
index c0d3419..0000000
--- a/lib/libskey/md4.h
+++ /dev/null
@@ -1,47 +0,0 @@
-
-#include <sys/cdefs.h>
-
-/*
- *
- * md4.h -- Header file for implementation of MD4 Message Digest Algorithm
- * Updated: 2/13/90 by Ronald L. Rivest
- * (C) 1990 RSA Data Security, Inc.
- * Reformatted and de-linted - 2/12/91 Phil Karn
- */
-
-/* MDstruct is the data structure for a message digest computation. */
-typedef struct {
- unsigned long buffer[4];/* Holds 4-word result of MD computation */
- unsigned char count[8]; /* Number of bits processed so far */
- unsigned int done; /* Nonzero means MD computation finished */
-} MDstruct, *MDptr;
-
-/* MDbegin(MD)
- * Input: MD -- an MDptr
- * Initialize the MDstruct prepatory to doing a message digest computation.
- */
-extern void MDbegin __P((MDptr MDp));
-
-/* MDupdate(MD,X,count)
- * Input: MD -- an MDptr
- * X -- a pointer to an array of unsigned characters.
- * count -- the number of bits of X to use (an unsigned int).
- * Updates MD using the first ``count'' bits of X.
- * The array pointed to by X is not modified.
- * If count is not a multiple of 8, MDupdate uses high bits of last byte.
- * This is the basic input routine for a user.
- * The routine terminates the MD computation when count < 512, so
- * every MD computation should end with one call to MDupdate with a
- * count less than 512. Zero is OK for a count.
- */
-extern void MDupdate __P((MDptr MDp,unsigned char *X,unsigned int count));
-
-/* MDprint(MD)
- * Input: MD -- an MDptr
- * Prints message digest buffer MD as 32 hexadecimal digits.
- * Order is from low-order byte of buffer[0] to high-order byte of buffer[3].
- * Each byte is printed with high-order hexadecimal digit first.
- */
-extern void MDprint __P((MDptr MDp));
-
-/* End of md4.h */
OpenPOWER on IntegriCloud