]>
Commit | Line | Data |
---|---|---|
d02b48c6 RE |
1 | /* NOCW */ |
2 | #include <stdio.h> | |
a53955d8 | 3 | #ifdef _OSD_POSIX |
0f113f3e MC |
4 | # ifndef CHARSET_EBCDIC |
5 | # define CHARSET_EBCDIC 1 | |
6 | # endif | |
a53955d8 UM |
7 | #endif |
8 | #ifdef CHARSET_EBCDIC | |
0f113f3e | 9 | # include <openssl/ebcdic.h> |
a53955d8 | 10 | #endif |
d02b48c6 | 11 | |
0f113f3e MC |
12 | /* |
13 | * This version of crypt has been developed from my MIT compatible DES | |
14 | * library. Eric Young (eay@cryptsoft.com) | |
d02b48c6 RE |
15 | */ |
16 | ||
0f113f3e MC |
17 | /* |
18 | * Modification by Jens Kupferschmidt (Cu) I have included directive PARA for | |
19 | * shared memory computers. I have included a directive LONGCRYPT to using | |
20 | * this routine to cipher passwords with more then 8 bytes like HP-UX 10.x it | |
21 | * used. The MAXPLEN definition is the maximum of length of password and can | |
22 | * changed. I have defined 24. | |
d02b48c6 RE |
23 | */ |
24 | ||
71fa4513 | 25 | #include <openssl/crypto.h> |
d02b48c6 RE |
26 | #include "des_locl.h" |
27 | ||
0f113f3e MC |
28 | /* |
29 | * Added more values to handle illegal salt values the way normal crypt() | |
30 | * implementations do. The patch was sent by Bjorn Gronvall <bg@sics.se> | |
d02b48c6 | 31 | */ |
0f113f3e MC |
32 | static unsigned const char con_salt[128] = { |
33 | 0xD2, 0xD3, 0xD4, 0xD5, 0xD6, 0xD7, 0xD8, 0xD9, | |
34 | 0xDA, 0xDB, 0xDC, 0xDD, 0xDE, 0xDF, 0xE0, 0xE1, | |
35 | 0xE2, 0xE3, 0xE4, 0xE5, 0xE6, 0xE7, 0xE8, 0xE9, | |
36 | 0xEA, 0xEB, 0xEC, 0xED, 0xEE, 0xEF, 0xF0, 0xF1, | |
37 | 0xF2, 0xF3, 0xF4, 0xF5, 0xF6, 0xF7, 0xF8, 0xF9, | |
38 | 0xFA, 0xFB, 0xFC, 0xFD, 0xFE, 0xFF, 0x00, 0x01, | |
39 | 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, | |
40 | 0x0A, 0x0B, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0A, | |
41 | 0x0B, 0x0C, 0x0D, 0x0E, 0x0F, 0x10, 0x11, 0x12, | |
42 | 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, 0x1A, | |
43 | 0x1B, 0x1C, 0x1D, 0x1E, 0x1F, 0x20, 0x21, 0x22, | |
44 | 0x23, 0x24, 0x25, 0x20, 0x21, 0x22, 0x23, 0x24, | |
45 | 0x25, 0x26, 0x27, 0x28, 0x29, 0x2A, 0x2B, 0x2C, | |
46 | 0x2D, 0x2E, 0x2F, 0x30, 0x31, 0x32, 0x33, 0x34, | |
47 | 0x35, 0x36, 0x37, 0x38, 0x39, 0x3A, 0x3B, 0x3C, | |
48 | 0x3D, 0x3E, 0x3F, 0x40, 0x41, 0x42, 0x43, 0x44, | |
d02b48c6 RE |
49 | }; |
50 | ||
0f113f3e MC |
51 | static unsigned const char cov_2char[64] = { |
52 | 0x2E, 0x2F, 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, | |
53 | 0x36, 0x37, 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, | |
54 | 0x45, 0x46, 0x47, 0x48, 0x49, 0x4A, 0x4B, 0x4C, | |
55 | 0x4D, 0x4E, 0x4F, 0x50, 0x51, 0x52, 0x53, 0x54, | |
56 | 0x55, 0x56, 0x57, 0x58, 0x59, 0x5A, 0x61, 0x62, | |
57 | 0x63, 0x64, 0x65, 0x66, 0x67, 0x68, 0x69, 0x6A, | |
58 | 0x6B, 0x6C, 0x6D, 0x6E, 0x6F, 0x70, 0x71, 0x72, | |
59 | 0x73, 0x74, 0x75, 0x76, 0x77, 0x78, 0x79, 0x7A | |
d02b48c6 RE |
60 | }; |
61 | ||
c2e4f17c | 62 | char *DES_crypt(const char *buf, const char *salt) |
0f113f3e MC |
63 | { |
64 | static char buff[14]; | |
d02b48c6 | 65 | |
a53955d8 | 66 | #ifndef CHARSET_EBCDIC |
0f113f3e | 67 | return (DES_fcrypt(buf, salt, buff)); |
a53955d8 | 68 | #else |
0f113f3e MC |
69 | char e_salt[2 + 1]; |
70 | char e_buf[32 + 1]; /* replace 32 by 8 ? */ | |
71 | char *ret; | |
a53955d8 | 72 | |
0f113f3e MC |
73 | /* Copy at most 2 chars of salt */ |
74 | if ((e_salt[0] = salt[0]) != '\0') | |
75 | e_salt[1] = salt[1]; | |
a53955d8 | 76 | |
0f113f3e MC |
77 | /* Copy at most 32 chars of password */ |
78 | strncpy(e_buf, buf, sizeof(e_buf)); | |
a53955d8 | 79 | |
0f113f3e MC |
80 | /* Make sure we have a delimiter */ |
81 | e_salt[sizeof(e_salt) - 1] = e_buf[sizeof(e_buf) - 1] = '\0'; | |
a53955d8 | 82 | |
0f113f3e MC |
83 | /* Convert the e_salt to ASCII, as that's what DES_fcrypt works on */ |
84 | ebcdic2ascii(e_salt, e_salt, sizeof e_salt); | |
a53955d8 | 85 | |
0f113f3e MC |
86 | /* Convert the cleartext password to ASCII */ |
87 | ebcdic2ascii(e_buf, e_buf, sizeof e_buf); | |
a53955d8 | 88 | |
0f113f3e MC |
89 | /* Encrypt it (from/to ASCII) */ |
90 | ret = DES_fcrypt(e_buf, e_salt, buff); | |
a53955d8 | 91 | |
0f113f3e MC |
92 | /* Convert the result back to EBCDIC */ |
93 | ascii2ebcdic(ret, ret, strlen(ret)); | |
d02b48c6 | 94 | |
0f113f3e MC |
95 | return ret; |
96 | #endif | |
97 | } | |
d02b48c6 | 98 | |
c2e4f17c | 99 | char *DES_fcrypt(const char *buf, const char *salt, char *ret) |
0f113f3e MC |
100 | { |
101 | unsigned int i, j, x, y; | |
102 | DES_LONG Eswap0, Eswap1; | |
103 | DES_LONG out[2], ll; | |
104 | DES_cblock key; | |
105 | DES_key_schedule ks; | |
106 | unsigned char bb[9]; | |
107 | unsigned char *b = bb; | |
108 | unsigned char c, u; | |
109 | ||
110 | /* | |
111 | * eay 25/08/92 If you call crypt("pwd","*") as often happens when you | |
112 | * have * as the pwd field in /etc/passwd, the function returns | |
113 | * *\0XXXXXXXXX The \0 makes the string look like * so the pwd "*" would | |
114 | * crypt to "*". This was found when replacing the crypt in our shared | |
115 | * libraries. People found that the disabled accounts effectively had no | |
116 | * passwd :-(. | |
117 | */ | |
a53955d8 | 118 | #ifndef CHARSET_EBCDIC |
0f113f3e MC |
119 | x = ret[0] = ((salt[0] == '\0') ? 'A' : salt[0]); |
120 | Eswap0 = con_salt[x] << 2; | |
121 | x = ret[1] = ((salt[1] == '\0') ? 'A' : salt[1]); | |
122 | Eswap1 = con_salt[x] << 6; | |
a53955d8 | 123 | #else |
0f113f3e MC |
124 | x = ret[0] = ((salt[0] == '\0') ? os_toascii['A'] : salt[0]); |
125 | Eswap0 = con_salt[x] << 2; | |
126 | x = ret[1] = ((salt[1] == '\0') ? os_toascii['A'] : salt[1]); | |
127 | Eswap1 = con_salt[x] << 6; | |
a53955d8 | 128 | #endif |
d02b48c6 | 129 | |
0f113f3e MC |
130 | /* |
131 | * EAY r=strlen(buf); r=(r+7)/8; | |
132 | */ | |
133 | for (i = 0; i < 8; i++) { | |
134 | c = *(buf++); | |
135 | if (!c) | |
136 | break; | |
137 | key[i] = (c << 1); | |
138 | } | |
139 | for (; i < 8; i++) | |
140 | key[i] = 0; | |
141 | ||
142 | DES_set_key_unchecked(&key, &ks); | |
143 | fcrypt_body(&(out[0]), &ks, Eswap0, Eswap1); | |
144 | ||
145 | ll = out[0]; | |
146 | l2c(ll, b); | |
147 | ll = out[1]; | |
148 | l2c(ll, b); | |
149 | y = 0; | |
150 | u = 0x80; | |
151 | bb[8] = 0; | |
152 | for (i = 2; i < 13; i++) { | |
153 | c = 0; | |
154 | for (j = 0; j < 6; j++) { | |
155 | c <<= 1; | |
156 | if (bb[y] & u) | |
157 | c |= 1; | |
158 | u >>= 1; | |
159 | if (!u) { | |
160 | y++; | |
161 | u = 0x80; | |
162 | } | |
163 | } | |
164 | ret[i] = cov_2char[c]; | |
165 | } | |
166 | ret[13] = '\0'; | |
167 | return (ret); | |
168 | } |