denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

more debugging output for PSK authentication

Browse Source
This commit is contained in:
Martin Willi
2006-09-18 11:38:11 +00:00
parent a2cf2812c4
commit 5fded5139e
1 changed files with 11 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/sa/authenticator.c
+11 -3
View File
@@ -151,7 +151,6 @@ static chunk_t build_tbs_octets(private_authenticator_t *this,
current_pos += other_nonce.len; current_pos += other_nonce.len;
prf->get_bytes(prf, id_with_header_chunk, current_pos); prf->get_bytes(prf, id_with_header_chunk, current_pos);
this->logger->log_chunk(this->logger,RAW | LEVEL2, "octets (message + nonce + prf(Sk_px,Idx)",octets);
return octets; return octets;
} }
@@ -169,7 +168,7 @@ static chunk_t build_shared_key_signature(private_authenticator_t *this,
u_int8_t key_buffer[this->prf->get_block_size(this->prf)]; u_int8_t key_buffer[this->prf->get_block_size(this->prf)];
chunk_t key = {ptr: key_buffer, len: sizeof(key_buffer)}; chunk_t key = {ptr: key_buffer, len: sizeof(key_buffer)};
chunk_t auth_data; chunk_t auth_data;
chunk_t octets = this->build_tbs_octets(this, last_message, nonce, id, initiator); chunk_t octets = this->build_tbs_octets(this, last_message, nonce, id, initiator);
/* AUTH = prf(prf(Shared Secret,"Key Pad for IKEv2"), <msg octets>) */ /* AUTH = prf(prf(Shared Secret,"Key Pad for IKEv2"), <msg octets>) */
@@ -177,8 +176,17 @@ static chunk_t build_shared_key_signature(private_authenticator_t *this,
this->prf->get_bytes(this->prf, key_pad, key_buffer); this->prf->get_bytes(this->prf, key_pad, key_buffer);
this->prf->set_key(this->prf, key); this->prf->set_key(this->prf, key);
this->prf->allocate_bytes(this->prf, octets, &auth_data); this->prf->allocate_bytes(this->prf, octets, &auth_data);
this->logger->log_chunk(this->logger, RAW|LEVEL2,
"octets = message + nonce + prf(Sk_px, IDx')", octets);
this->logger->log_chunk(this->logger, PRIVATE|LEVEL2,
"secret", secret);
this->logger->log_chunk(this->logger, RAW|LEVEL2,
"keypad", key_pad);
this->logger->log_chunk(this->logger, RAW|LEVEL2,
"prf(secret, keypad)", key);
this->logger->log_chunk(this->logger,RAW | LEVEL2,
"AUTH = prf(prf(secret, keypad), octets)", auth_data);
chunk_free(&octets); chunk_free(&octets);
this->logger->log_chunk(this->logger,RAW | LEVEL2, "authenticated data", auth_data);
return auth_data; return auth_data;
} }