Home | History | Annotate | Line # | Download | only in libsa
checkpasswd.c revision 1.2 
      1 /*	$NetBSD: checkpasswd.c,v 1.2 1999/11/11 20:23:16 thorpej Exp $	*/
      2 
      3 /*-
      4  * Copyright (c) 1993
      5  *	The Regents of the University of California.  All rights reserved.
      6  *
      7  * Redistribution and use in source and binary forms, with or without
      8  * modification, are permitted provided that the following conditions
      9  * are met:
     10  * 1. Redistributions of source code must retain the above copyright
     11  *    notice, this list of conditions and the following disclaimer.
     12  * 2. Redistributions in binary form must reproduce the above copyright
     13  *    notice, this list of conditions and the following disclaimer in the
     14  *    documentation and/or other materials provided with the distribution.
     15  *
     16  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     17  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     18  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     19  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     20  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     21  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     22  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     23  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     24  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     25  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     26  * SUCH DAMAGE.
     27  *
     28  *	@(#)gets.c	8.1 (Berkeley) 6/11/93
     29  */
     30 
     31 #include "stand.h"
     32 
     33 char *
     34 getpass(prompt)
     35 	const char *prompt;
     36 {
     37 	register int c;
     38 	register char *lp;
     39 	static char buf[128]; /* == _PASSWORD_LEN */
     40 
     41 	printf(prompt);
     42 
     43 	for (lp = buf;;)
     44 		switch (c = getchar() & 0177) {
     45 		case '\n':
     46 		case '\r':
     47 			*lp = '\0';
     48 			putchar('\n');
     49 			return (buf);
     50 		case '\b':
     51 		case '\177':
     52 			if (lp > buf) {
     53 				lp--;
     54 				putchar('\b');
     55 				putchar(' ');
     56 				putchar('\b');
     57 			}
     58 			break;
     59 #if HASH_ERASE
     60 		case '#':
     61 			if (lp > buf)
     62 				--lp;
     63 			break;
     64 #endif
     65 		case 'r'&037: {
     66 			register char *p;
     67 
     68 			putchar('\n');
     69 			for (p = buf; p < lp; ++p)
     70 				putchar('*');
     71 			break;
     72 		}
     73 #if AT_ERASE
     74 		case '@':
     75 #endif
     76 		case 'u'&037:
     77 		case 'w'&037:
     78 			lp = buf;
     79 			putchar('\n');
     80 			break;
     81 		default:
     82 			*lp++ = c;
     83 			putchar('*');
     84 		}
     85 	/*NOTREACHED*/
     86 }
     87 
     88 #include <sys/md5.h>
     89 
     90 char bootpasswd[16] = {'\0'}; /* into data segment! */
     91 
     92 int
     93 checkpasswd()
     94 {
     95 	int i;
     96 	char *passwd;
     97 	MD5_CTX md5ctx;
     98 	char pwdigest[16];
     99 
    100 	for (i = 0; i < 16; i++)
    101 		if (bootpasswd[i])
    102 			break;
    103 	if (i == 16)
    104 		return (1); /* no password set */
    105 
    106 	for (i = 0; i < 3; i++) {
    107 		passwd = getpass("Password: ");
    108 		MD5Init(&md5ctx);
    109 		MD5Update(&md5ctx, passwd, strlen(passwd));
    110 		MD5Final(pwdigest, &md5ctx);
    111 		if (bcmp(pwdigest, bootpasswd, 16) == 0)
    112 			return (1);
    113 	}
    114 
    115 	/* failed */
    116 	return (0);
    117 }
    118 
    119