297 lines
8.2 KiB
C
297 lines
8.2 KiB
C
/**
|
|
* WinPR: Windows Portable Runtime
|
|
* NTLM Security Package
|
|
*
|
|
* Copyright 2011-2014 Marc-Andre Moreau <marcandre.moreau@gmail.com>
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
#ifndef WINPR_SSPI_NTLM_PRIVATE_H
|
|
#define WINPR_SSPI_NTLM_PRIVATE_H
|
|
|
|
#include <winpr/sspi.h>
|
|
#include <winpr/windows.h>
|
|
|
|
#include <winpr/nt.h>
|
|
#include <winpr/crypto.h>
|
|
#include <winpr/ntlm.h>
|
|
|
|
#include "../sspi.h"
|
|
|
|
#define MESSAGE_TYPE_NEGOTIATE 1
|
|
#define MESSAGE_TYPE_CHALLENGE 2
|
|
#define MESSAGE_TYPE_AUTHENTICATE 3
|
|
|
|
#define NTLMSSP_NEGOTIATE_56 0x80000000 /* W (0) */
|
|
#define NTLMSSP_NEGOTIATE_KEY_EXCH 0x40000000 /* V (1) */
|
|
#define NTLMSSP_NEGOTIATE_128 0x20000000 /* U (2) */
|
|
#define NTLMSSP_RESERVED1 0x10000000 /* r1 (3) */
|
|
#define NTLMSSP_RESERVED2 0x08000000 /* r2 (4) */
|
|
#define NTLMSSP_RESERVED3 0x04000000 /* r3 (5) */
|
|
#define NTLMSSP_NEGOTIATE_VERSION 0x02000000 /* T (6) */
|
|
#define NTLMSSP_RESERVED4 0x01000000 /* r4 (7) */
|
|
#define NTLMSSP_NEGOTIATE_TARGET_INFO 0x00800000 /* S (8) */
|
|
#define NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0x00400000 /* R (9) */
|
|
#define NTLMSSP_RESERVED5 0x00200000 /* r5 (10) */
|
|
#define NTLMSSP_NEGOTIATE_IDENTIFY 0x00100000 /* Q (11) */
|
|
#define NTLMSSP_NEGOTIATE_EXTENDED_SESSION_SECURITY 0x00080000 /* P (12) */
|
|
#define NTLMSSP_RESERVED6 0x00040000 /* r6 (13) */
|
|
#define NTLMSSP_TARGET_TYPE_SERVER 0x00020000 /* O (14) */
|
|
#define NTLMSSP_TARGET_TYPE_DOMAIN 0x00010000 /* N (15) */
|
|
#define NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0x00008000 /* M (16) */
|
|
#define NTLMSSP_RESERVED7 0x00004000 /* r7 (17) */
|
|
#define NTLMSSP_NEGOTIATE_WORKSTATION_SUPPLIED 0x00002000 /* L (18) */
|
|
#define NTLMSSP_NEGOTIATE_DOMAIN_SUPPLIED 0x00001000 /* K (19) */
|
|
#define NTLMSSP_NEGOTIATE_ANONYMOUS 0x00000800 /* J (20) */
|
|
#define NTLMSSP_RESERVED8 0x00000400 /* r8 (21) */
|
|
#define NTLMSSP_NEGOTIATE_NTLM 0x00000200 /* H (22) */
|
|
#define NTLMSSP_RESERVED9 0x00000100 /* r9 (23) */
|
|
#define NTLMSSP_NEGOTIATE_LM_KEY 0x00000080 /* G (24) */
|
|
#define NTLMSSP_NEGOTIATE_DATAGRAM 0x00000040 /* F (25) */
|
|
#define NTLMSSP_NEGOTIATE_SEAL 0x00000020 /* E (26) */
|
|
#define NTLMSSP_NEGOTIATE_SIGN 0x00000010 /* D (27) */
|
|
#define NTLMSSP_RESERVED10 0x00000008 /* r10 (28) */
|
|
#define NTLMSSP_REQUEST_TARGET 0x00000004 /* C (29) */
|
|
#define NTLMSSP_NEGOTIATE_OEM 0x00000002 /* B (30) */
|
|
#define NTLMSSP_NEGOTIATE_UNICODE 0x00000001 /* A (31) */
|
|
|
|
typedef enum
|
|
{
|
|
NTLM_STATE_INITIAL,
|
|
NTLM_STATE_NEGOTIATE,
|
|
NTLM_STATE_CHALLENGE,
|
|
NTLM_STATE_AUTHENTICATE,
|
|
NTLM_STATE_COMPLETION,
|
|
NTLM_STATE_FINAL
|
|
} NTLM_STATE;
|
|
|
|
#ifdef __MINGW32__
|
|
typedef MSV1_0_AVID NTLM_AV_ID;
|
|
|
|
#if __MINGW64_VERSION_MAJOR < 9
|
|
enum
|
|
{
|
|
MsvAvTimestamp = MsvAvFlags + 1,
|
|
MsvAvRestrictions,
|
|
MsvAvTargetName,
|
|
MsvAvChannelBindings,
|
|
MsvAvSingleHost = MsvAvRestrictions
|
|
};
|
|
|
|
#else
|
|
#ifndef MsvAvSingleHost
|
|
#define MsvAvSingleHost MsvAvRestrictions
|
|
#endif
|
|
#endif
|
|
#else
|
|
typedef enum
|
|
{
|
|
MsvAvEOL,
|
|
MsvAvNbComputerName,
|
|
MsvAvNbDomainName,
|
|
MsvAvDnsComputerName,
|
|
MsvAvDnsDomainName,
|
|
MsvAvDnsTreeName,
|
|
MsvAvFlags,
|
|
MsvAvTimestamp,
|
|
MsvAvSingleHost,
|
|
MsvAvTargetName,
|
|
MsvAvChannelBindings
|
|
} NTLM_AV_ID;
|
|
#endif /* __MINGW32__ */
|
|
|
|
typedef struct
|
|
{
|
|
UINT16 AvId;
|
|
UINT16 AvLen;
|
|
} NTLM_AV_PAIR;
|
|
|
|
#define MSV_AV_FLAGS_AUTHENTICATION_CONSTRAINED 0x00000001
|
|
#define MSV_AV_FLAGS_MESSAGE_INTEGRITY_CHECK 0x00000002
|
|
#define MSV_AV_FLAGS_TARGET_SPN_UNTRUSTED_SOURCE 0x00000004
|
|
|
|
#define WINDOWS_MAJOR_VERSION_5 0x05
|
|
#define WINDOWS_MAJOR_VERSION_6 0x06
|
|
#define WINDOWS_MINOR_VERSION_0 0x00
|
|
#define WINDOWS_MINOR_VERSION_1 0x01
|
|
#define WINDOWS_MINOR_VERSION_2 0x02
|
|
#define NTLMSSP_REVISION_W2K3 0x0F
|
|
|
|
typedef struct
|
|
{
|
|
UINT8 ProductMajorVersion;
|
|
UINT8 ProductMinorVersion;
|
|
UINT16 ProductBuild;
|
|
BYTE Reserved[3];
|
|
UINT8 NTLMRevisionCurrent;
|
|
} NTLM_VERSION_INFO;
|
|
|
|
typedef struct
|
|
{
|
|
UINT32 Size;
|
|
UINT32 Z4;
|
|
UINT32 DataPresent;
|
|
UINT32 CustomData;
|
|
BYTE MachineID[32];
|
|
} NTLM_SINGLE_HOST_DATA;
|
|
|
|
typedef struct
|
|
{
|
|
BYTE Response[24];
|
|
} NTLM_RESPONSE;
|
|
|
|
typedef struct
|
|
{
|
|
UINT8 RespType;
|
|
UINT8 HiRespType;
|
|
UINT16 Reserved1;
|
|
UINT32 Reserved2;
|
|
BYTE Timestamp[8];
|
|
BYTE ClientChallenge[8];
|
|
UINT32 Reserved3;
|
|
NTLM_AV_PAIR* AvPairs;
|
|
UINT32 cbAvPairs;
|
|
} NTLMv2_CLIENT_CHALLENGE;
|
|
|
|
typedef struct
|
|
{
|
|
BYTE Response[16];
|
|
NTLMv2_CLIENT_CHALLENGE Challenge;
|
|
} NTLMv2_RESPONSE;
|
|
|
|
typedef struct
|
|
{
|
|
UINT16 Len;
|
|
UINT16 MaxLen;
|
|
PBYTE Buffer;
|
|
UINT32 BufferOffset;
|
|
} NTLM_MESSAGE_FIELDS;
|
|
|
|
typedef struct
|
|
{
|
|
BYTE Signature[8];
|
|
UINT32 MessageType;
|
|
} NTLM_MESSAGE_HEADER;
|
|
|
|
typedef struct
|
|
{
|
|
BYTE Signature[8];
|
|
UINT32 MessageType;
|
|
UINT32 NegotiateFlags;
|
|
NTLM_VERSION_INFO Version;
|
|
NTLM_MESSAGE_FIELDS DomainName;
|
|
NTLM_MESSAGE_FIELDS Workstation;
|
|
} NTLM_NEGOTIATE_MESSAGE;
|
|
|
|
typedef struct
|
|
{
|
|
BYTE Signature[8];
|
|
UINT32 MessageType;
|
|
UINT32 NegotiateFlags;
|
|
BYTE ServerChallenge[8];
|
|
BYTE Reserved[8];
|
|
NTLM_VERSION_INFO Version;
|
|
NTLM_MESSAGE_FIELDS TargetName;
|
|
NTLM_MESSAGE_FIELDS TargetInfo;
|
|
} NTLM_CHALLENGE_MESSAGE;
|
|
|
|
typedef struct
|
|
{
|
|
BYTE Signature[8];
|
|
UINT32 MessageType;
|
|
UINT32 NegotiateFlags;
|
|
NTLM_VERSION_INFO Version;
|
|
NTLM_MESSAGE_FIELDS DomainName;
|
|
NTLM_MESSAGE_FIELDS UserName;
|
|
NTLM_MESSAGE_FIELDS Workstation;
|
|
NTLM_MESSAGE_FIELDS LmChallengeResponse;
|
|
NTLM_MESSAGE_FIELDS NtChallengeResponse;
|
|
NTLM_MESSAGE_FIELDS EncryptedRandomSessionKey;
|
|
BYTE MessageIntegrityCheck[16];
|
|
} NTLM_AUTHENTICATE_MESSAGE;
|
|
|
|
typedef struct
|
|
{
|
|
BOOL server;
|
|
BOOL NTLMv2;
|
|
BOOL UseMIC;
|
|
NTLM_STATE state;
|
|
int SendSeqNum;
|
|
int RecvSeqNum;
|
|
char* SamFile;
|
|
BYTE NtlmHash[16];
|
|
BYTE NtlmV2Hash[16];
|
|
BYTE MachineID[32];
|
|
BOOL SendVersionInfo;
|
|
BOOL confidentiality;
|
|
WINPR_RC4_CTX* SendRc4Seal;
|
|
WINPR_RC4_CTX* RecvRc4Seal;
|
|
BYTE* SendSigningKey;
|
|
BYTE* RecvSigningKey;
|
|
BYTE* SendSealingKey;
|
|
BYTE* RecvSealingKey;
|
|
UINT32 NegotiateFlags;
|
|
BOOL UseSamFileDatabase;
|
|
int LmCompatibilityLevel;
|
|
int SuppressExtendedProtection;
|
|
BOOL SendWorkstationName;
|
|
UNICODE_STRING Workstation;
|
|
UNICODE_STRING ServicePrincipalName;
|
|
SSPI_CREDENTIALS* credentials;
|
|
BYTE* ChannelBindingToken;
|
|
BYTE ChannelBindingsHash[16];
|
|
SecPkgContext_Bindings Bindings;
|
|
BOOL SendSingleHostData;
|
|
BOOL NegotiateKeyExchange;
|
|
NTLM_SINGLE_HOST_DATA SingleHostData;
|
|
NTLM_NEGOTIATE_MESSAGE NEGOTIATE_MESSAGE;
|
|
NTLM_CHALLENGE_MESSAGE CHALLENGE_MESSAGE;
|
|
NTLM_AUTHENTICATE_MESSAGE AUTHENTICATE_MESSAGE;
|
|
UINT32 MessageIntegrityCheckOffset;
|
|
SecBuffer NegotiateMessage;
|
|
SecBuffer ChallengeMessage;
|
|
SecBuffer AuthenticateMessage;
|
|
SecBuffer ChallengeTargetInfo;
|
|
SecBuffer AuthenticateTargetInfo;
|
|
SecBuffer TargetName;
|
|
SecBuffer NtChallengeResponse;
|
|
SecBuffer LmChallengeResponse;
|
|
NTLMv2_RESPONSE NTLMv2Response;
|
|
BYTE NtProofString[16];
|
|
BYTE Timestamp[8];
|
|
BYTE ChallengeTimestamp[8];
|
|
BYTE ServerChallenge[8];
|
|
BYTE ClientChallenge[8];
|
|
BYTE SessionBaseKey[16];
|
|
BYTE KeyExchangeKey[16];
|
|
BYTE RandomSessionKey[16];
|
|
BYTE ExportedSessionKey[16];
|
|
BYTE EncryptedRandomSessionKey[16];
|
|
BYTE ClientSigningKey[16];
|
|
BYTE ClientSealingKey[16];
|
|
BYTE ServerSigningKey[16];
|
|
BYTE ServerSealingKey[16];
|
|
psPeerComputeNtlmHash HashCallback;
|
|
void* HashCallbackArg;
|
|
} NTLM_CONTEXT;
|
|
|
|
SECURITY_STATUS ntlm_computeProofValue(NTLM_CONTEXT* ntlm, SecBuffer* ntproof);
|
|
SECURITY_STATUS ntlm_computeMicValue(NTLM_CONTEXT* ntlm, SecBuffer* micvalue);
|
|
|
|
#ifdef WITH_DEBUG_NLA
|
|
#define WITH_DEBUG_NTLM
|
|
#endif
|
|
|
|
#endif /* WINPR_SSPI_NTLM_PRIVATE_H */
|