#include "includes.h"
#include "byteorder.h"
void SMBencrypt(uchar *passwd, uchar *c8, uchar *p24)
{
uchar p14[15], p21[21];
memset(p21,'\0',21);
memset(p14,'\0',14);
StrnCpy((char *)p14,(char *)passwd,14);
strupper((char *)p14);
E_P16(p14, p21);
SMBOWFencrypt(p21, c8, p24);
#ifdef DEBUG_PASSWORD
DEBUG(100,("SMBencrypt: lm#, challenge, response\n"));
dump_data(100, (char *)p21, 16);
dump_data(100, (char *)c8, 8);
dump_data(100, (char *)p24, 24);
#endif
}
void E_md4hash(uchar *passwd, uchar *p16)
{
int len;
int16 wpwd[129];
len = strlen((char *)passwd);
if(len > 128)
len = 128;
dos_struni2((char *)wpwd, (const char *)passwd, len);
len = strlen_w((const smb_ucs2_t *)wpwd) * sizeof(int16);
mdfour(p16, (unsigned char *)wpwd, len);
}
void nt_lm_owf_gen(char *pwd, uchar nt_p16[16], uchar p16[16])
{
char passwd[514];
memset(passwd,'\0',514);
safe_strcpy( passwd, pwd, sizeof(passwd)-1);
memset(nt_p16, '\0', 16);
E_md4hash((uchar *)passwd, nt_p16);
#ifdef DEBUG_PASSWORD
DEBUG(100,("nt_lm_owf_gen: pwd, nt#\n"));
dump_data(120, passwd, strlen(passwd));
dump_data(100, (char *)nt_p16, 16);
#endif
passwd[14] = '\0';
strupper(passwd);
memset(p16, '\0', 16);
E_P16((uchar *) passwd, (uchar *)p16);
#ifdef DEBUG_PASSWORD
DEBUG(100,("nt_lm_owf_gen: pwd, lm#\n"));
dump_data(120, passwd, strlen(passwd));
dump_data(100, (char *)p16, 16);
#endif
memset(passwd, '\0', sizeof(passwd));
}
void SMBOWFencrypt(uchar passwd[16], uchar *c8, uchar p24[24])
{
uchar p21[21];
memset(p21,'\0',21);
memcpy(p21, passwd, 16);
E_P24(p21, c8, p24);
}
void NTLMSSPOWFencrypt(uchar passwd[8], uchar *ntlmchalresp, uchar p24[24])
{
uchar p21[21];
memset(p21,'\0',21);
memcpy(p21, passwd, 8);
memset(p21 + 8, 0xbd, 8);
E_P24(p21, ntlmchalresp, p24);
#ifdef DEBUG_PASSWORD
DEBUG(100,("NTLMSSPOWFencrypt: p21, c8, p24\n"));
dump_data(100, (char *)p21, 21);
dump_data(100, (char *)ntlmchalresp, 8);
dump_data(100, (char *)p24, 24);
#endif
}
void SMBNTencrypt(uchar *passwd, uchar *c8, uchar *p24)
{
uchar p21[21];
memset(p21,'\0',21);
E_md4hash(passwd, p21);
SMBOWFencrypt(p21, c8, p24);
#ifdef DEBUG_PASSWORD
DEBUG(100,("SMBNTencrypt: nt#, challenge, response\n"));
dump_data(100, (char *)p21, 16);
dump_data(100, (char *)c8, 8);
dump_data(100, (char *)p24, 24);
#endif
}
BOOL make_oem_passwd_hash(char data[516], const char *passwd, uchar old_pw_hash[16], BOOL unicode)
{
int new_pw_len = strlen(passwd) * (unicode ? 2 : 1);
if (new_pw_len > 512)
{
DEBUG(0,("make_oem_passwd_hash: new password is too long.\n"));
return False;
}
generate_random_buffer((unsigned char *)data, 516, False);
if (unicode)
{
dos_struni2( &data[512 - new_pw_len], passwd, 512);
}
else
{
fstrcpy( &data[512 - new_pw_len], passwd);
}
SIVAL(data, 512, new_pw_len);
#ifdef DEBUG_PASSWORD
DEBUG(100,("make_oem_passwd_hash\n"));
dump_data(100, data, 516);
#endif
SamOEMhash( (unsigned char *)data, (unsigned char *)old_pw_hash, 516);
return True;
}
BOOL encode_pw_buffer(char buffer[516], const char *new_pass,
int new_pw_len, BOOL nt_pass_set)
{
generate_random_buffer((unsigned char *)buffer, 516, True);
if (new_pw_len < 0 || new_pw_len > 512)
return False;
if (nt_pass_set) {
new_pw_len *= 2;
dos_struni2(&buffer[512 - new_pw_len], new_pass, 256);
} else {
memcpy(&buffer[512 - new_pw_len], new_pass, new_pw_len);
}
SIVAL(buffer, 512, new_pw_len);
return True;
}
BOOL decode_pw_buffer(char in_buffer[516], char *new_pwrd,
int new_pwrd_size, uint32 *new_pw_len,
uchar nt_p16[16], uchar p16[16])
{
char *pw;
int uni_pw_len=0;
int byte_len=0;
char unicode_passwd[514];
char lm_ascii_passwd[514];
char passwd[514];
ZERO_STRUCT(unicode_passwd);
ZERO_STRUCT(lm_ascii_passwd);
ZERO_STRUCT(passwd);
memset(nt_p16, '\0', 16);
memset(p16, '\0', 16);
byte_len = IVAL(in_buffer, 512);
#ifdef DEBUG_PASSWORD
dump_data(100, in_buffer, 516);
#endif
if ( (byte_len < 0) || (byte_len > new_pwrd_size - 1)) {
DEBUG(0, ("decode_pw_buffer: incorrect password length (%d).\n", byte_len));
return False;
}
uni_pw_len = byte_len/2;
pw = dos_unistrn2((uint16 *)(&in_buffer[512 - byte_len]), byte_len);
memcpy(passwd, pw, uni_pw_len);
#ifdef DEBUG_PASSWORD
DEBUG(100,("nt_lm_owf_gen: passwd: "));
dump_data(100, (char *)passwd, uni_pw_len);
DEBUG(100,("len:%d\n", uni_pw_len));
#endif
memcpy(unicode_passwd, &in_buffer[512 - byte_len], byte_len);
mdfour(nt_p16, (unsigned char *)unicode_passwd, byte_len);
#ifdef DEBUG_PASSWORD
DEBUG(100,("nt_lm_owf_gen: nt#:"));
dump_data(100, (char *)nt_p16, 16);
DEBUG(100,("\n"));
#endif
memcpy(lm_ascii_passwd, passwd, uni_pw_len);
lm_ascii_passwd[14] = '\0';
strupper(lm_ascii_passwd);
E_P16((uchar *) lm_ascii_passwd, (uchar *)p16);
#ifdef DEBUG_PASSWORD
DEBUG(100,("nt_lm_owf_gen: lm#:"));
dump_data(100, (char *)p16, 16);
DEBUG(100,("\n"));
#endif
*new_pw_len=uni_pw_len;
memcpy(new_pwrd, passwd, uni_pw_len);
new_pwrd[uni_pw_len]='\0';
ZERO_STRUCT(unicode_passwd);
ZERO_STRUCT(lm_ascii_passwd);
ZERO_STRUCT(passwd);
return True;
}
void nt_owf_genW(const UNISTR2 *pwd, uchar nt_p16[16])
{
char buf[512];
int i;
for (i = 0; i < MIN(pwd->uni_str_len, sizeof(buf) / 2); i++)
SIVAL(buf, i * 2, pwd->buffer[i]);
mdfour(nt_p16, (unsigned char *)buf, pwd->uni_str_len * 2);
ZERO_STRUCT(buf);
}