denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

eap-aka-3gpp2: Log potentially sensitive material on level 4

Browse Source 
Leave stuff that's exchanged publicly (e.g. RAND, AUTN) at level 3.
This commit is contained in:
Tobias Brunner
2026-07-24 08:47:36 +02:00
parent b31ce69722
commit 7a215e568e
3 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/eap_aka_3gpp2/eap_aka_3gpp2_card.c
+2 -2
View File
@@ -68,7 +68,7 @@ METHOD(simaka_card_t, get_quintuplet, status_t,
/* AUTN = SQN xor AK | AMF | MAC */ /* AUTN = SQN xor AK | AMF | MAC */
DBG3(DBG_IKE, "received autn %b", autn, AKA_AUTN_LEN); DBG3(DBG_IKE, "received autn %b", autn, AKA_AUTN_LEN);
DBG3(DBG_IKE, "using K %b", k, AKA_K_LEN); DBG4(DBG_IKE, "using K %b", k, AKA_K_LEN);
DBG3(DBG_IKE, "using rand %b", rand, AKA_RAND_LEN); DBG3(DBG_IKE, "using rand %b", rand, AKA_RAND_LEN);
memcpy(sqn, autn, AKA_SQN_LEN); memcpy(sqn, autn, AKA_SQN_LEN);
amf = autn + AKA_SQN_LEN; amf = autn + AKA_SQN_LEN;
@@ -79,7 +79,7 @@ METHOD(simaka_card_t, get_quintuplet, status_t,
{ {
return FAILED; return FAILED;
} }
DBG3(DBG_IKE, "using ak %b", ak, AKA_AK_LEN); DBG4(DBG_IKE, "using ak %b", ak, AKA_AK_LEN);
memxor(sqn, ak, AKA_SQN_LEN); memxor(sqn, ak, AKA_SQN_LEN);
DBG3(DBG_IKE, "using sqn %b", sqn, AKA_SQN_LEN); DBG3(DBG_IKE, "using sqn %b", sqn, AKA_SQN_LEN);
src/libcharon/plugins/eap_aka_3gpp2/eap_aka_3gpp2_functions.c
+7 -7
View File
@@ -304,7 +304,7 @@ METHOD(eap_aka_3gpp2_functions_t, f1, bool,
{ {
if (f1x(this->prf, F1, k, rand, sqn, amf, mac)) if (f1x(this->prf, F1, k, rand, sqn, amf, mac))
{ {
DBG3(DBG_IKE, "MAC %b", mac, AKA_MAC_LEN); DBG4(DBG_IKE, "MAC %b", mac, AKA_MAC_LEN);
return TRUE; return TRUE;
} }
return FALSE; return FALSE;
@@ -320,7 +320,7 @@ METHOD(eap_aka_3gpp2_functions_t, f1star, bool,
{ {
if (f1x(this->prf, F1STAR, k, rand, sqn, amf, macs)) if (f1x(this->prf, F1STAR, k, rand, sqn, amf, macs))
{ {
DBG3(DBG_IKE, "MACS %b", macs, AKA_MAC_LEN); DBG4(DBG_IKE, "MACS %b", macs, AKA_MAC_LEN);
return TRUE; return TRUE;
} }
return FALSE; return FALSE;
@@ -335,7 +335,7 @@ METHOD(eap_aka_3gpp2_functions_t, f2, bool,
{ {
if (fx(this->prf, F2, k, rand, res)) if (fx(this->prf, F2, k, rand, res))
{ {
DBG3(DBG_IKE, "RES %b", res, AKA_RES_MAX); DBG4(DBG_IKE, "RES %b", res, AKA_RES_MAX);
return TRUE; return TRUE;
} }
return FALSE; return FALSE;
@@ -350,7 +350,7 @@ METHOD(eap_aka_3gpp2_functions_t, f3, bool,
{ {
if (fx(this->prf, F3, k, rand, ck)) if (fx(this->prf, F3, k, rand, ck))
{ {
DBG3(DBG_IKE, "CK %b", ck, AKA_CK_LEN); DBG4(DBG_IKE, "CK %b", ck, AKA_CK_LEN);
return TRUE; return TRUE;
} }
return FALSE; return FALSE;
@@ -365,7 +365,7 @@ METHOD(eap_aka_3gpp2_functions_t, f4, bool,
{ {
if (fx(this->prf, F4, k, rand, ik)) if (fx(this->prf, F4, k, rand, ik))
{ {
DBG3(DBG_IKE, "IK %b", ik, AKA_IK_LEN); DBG4(DBG_IKE, "IK %b", ik, AKA_IK_LEN);
return TRUE; return TRUE;
} }
return FALSE; return FALSE;
@@ -380,7 +380,7 @@ METHOD(eap_aka_3gpp2_functions_t, f5, bool,
{ {
if (f5x(this->prf, F5, k, rand, ak)) if (f5x(this->prf, F5, k, rand, ak))
{ {
DBG3(DBG_IKE, "AK %b", ak, AKA_AK_LEN); DBG4(DBG_IKE, "AK %b", ak, AKA_AK_LEN);
return TRUE; return TRUE;
} }
return FALSE; return FALSE;
@@ -395,7 +395,7 @@ METHOD(eap_aka_3gpp2_functions_t, f5star, bool,
{ {
if (f5x(this->prf, F5STAR, k, rand, aks)) if (f5x(this->prf, F5STAR, k, rand, aks))
{ {
DBG3(DBG_IKE, "AKS %b", aks, AKA_AK_LEN); DBG4(DBG_IKE, "AKS %b", aks, AKA_AK_LEN);
return TRUE; return TRUE;
} }
return FALSE; return FALSE;
src/libcharon/plugins/eap_aka_3gpp2/eap_aka_3gpp2_provider.c
+1 -1
View File
@@ -107,7 +107,7 @@ METHOD(simaka_provider_t, get_quintuplet, bool,
} }
DBG3(DBG_IKE, "generated rand %b", rand, AKA_RAND_LEN); DBG3(DBG_IKE, "generated rand %b", rand, AKA_RAND_LEN);
DBG3(DBG_IKE, "using K %b", k, AKA_K_LEN); DBG4(DBG_IKE, "using K %b", k, AKA_K_LEN);
/* MAC, AK, XRES as expected from client */ /* MAC, AK, XRES as expected from client */
if (!this->f->f1(this->f, k, rand, this->sqn, amf_def, mac) || if (!this->f->f1(this->f, k, rand, this->sqn, amf_def, mac) ||