skey.c revision 1.10 1 1.10 mjl /* $NetBSD: skey.c,v 1.10 2000/07/07 15:18:14 mjl Exp $ */
2 1.4 thorpej
3 1.1 deraadt /*
4 1.1 deraadt * S/KEY v1.1b (skey.c)
5 1.1 deraadt *
6 1.1 deraadt * Authors:
7 1.1 deraadt * Neil M. Haller <nmh (at) thumper.bellcore.com>
8 1.1 deraadt * Philip R. Karn <karn (at) chicago.qualcomm.com>
9 1.1 deraadt * John S. Walden <jsw (at) thumper.bellcore.com>
10 1.1 deraadt * Scott Chasin <chasin (at) crimelab.com>
11 1.1 deraadt *
12 1.1 deraadt *
13 1.1 deraadt * Stand-alone program for computing responses to S/Key challenges.
14 1.1 deraadt * Takes the iteration count and seed as command line args, prompts
15 1.1 deraadt * for the user's key, and produces both word and hex format responses.
16 1.1 deraadt *
17 1.1 deraadt * Usage example:
18 1.1 deraadt * >skey 88 ka9q2
19 1.1 deraadt * Enter password:
20 1.1 deraadt * OMEN US HORN OMIT BACK AHOY
21 1.1 deraadt * >
22 1.1 deraadt */
23 1.1 deraadt
24 1.3 pk #include <sys/cdefs.h>
25 1.6 lukem #ifndef lint
26 1.10 mjl __RCSID("$NetBSD: skey.c,v 1.10 2000/07/07 15:18:14 mjl Exp $");
27 1.6 lukem #endif
28 1.6 lukem
29 1.10 mjl #include <err.h>
30 1.7 perry #include <fcntl.h>
31 1.1 deraadt #include <stdio.h>
32 1.7 perry #include <skey.h>
33 1.1 deraadt #include <stdlib.h>
34 1.1 deraadt #include <string.h>
35 1.7 perry #include <unistd.h>
36 1.1 deraadt
37 1.6 lukem int main __P((int, char **));
38 1.3 pk void usage __P((char *));
39 1.1 deraadt
40 1.3 pk int
41 1.10 mjl main(int argc, char **argv)
42 1.1 deraadt {
43 1.10 mjl int n, cnt, i, pass = 0, hexmode = 0;
44 1.10 mjl char passwd[SKEY_MAX_PW_LEN+1], key[SKEY_BINKEY_SIZE];
45 1.10 mjl char buf[33], *seed, *slash;
46 1.1 deraadt
47 1.1 deraadt cnt = 1;
48 1.1 deraadt
49 1.10 mjl while ((i = getopt(argc, argv, "n:p:t:x")) != -1) {
50 1.1 deraadt switch (i) {
51 1.1 deraadt case 'n':
52 1.1 deraadt cnt = atoi(optarg);
53 1.1 deraadt break;
54 1.1 deraadt case 'p':
55 1.10 mjl if (strlcpy(passwd, argv[++i], sizeof(passwd)) >=
56 1.10 mjl sizeof(passwd))
57 1.10 mjl errx(1, "Password too long");
58 1.1 deraadt pass = 1;
59 1.1 deraadt break;
60 1.10 mjl case 't':
61 1.10 mjl if (skey_set_algorithm(optarg) == NULL) {
62 1.10 mjl errx(1, "Unknown hash algorithm %s", optarg);
63 1.10 mjl }
64 1.10 mjl break;
65 1.10 mjl case 'x':
66 1.10 mjl hexmode = 1;
67 1.10 mjl break;
68 1.10 mjl default:
69 1.10 mjl usage(argv[0]);
70 1.10 mjl break;
71 1.1 deraadt }
72 1.1 deraadt }
73 1.1 deraadt
74 1.1 deraadt /* could be in the form <number>/<seed> */
75 1.1 deraadt if (argc <= optind + 1) {
76 1.1 deraadt /* look for / in it */
77 1.2 cgd if (argc <= optind)
78 1.1 deraadt usage(argv[0]);
79 1.1 deraadt slash = strchr(argv[optind], '/');
80 1.2 cgd if (slash == NULL)
81 1.1 deraadt usage(argv[0]);
82 1.1 deraadt *slash++ = '\0';
83 1.1 deraadt seed = slash;
84 1.1 deraadt
85 1.1 deraadt if ((n = atoi(argv[optind])) < 0) {
86 1.2 cgd fprintf(stderr, "%s not positive\n", argv[optind]);
87 1.1 deraadt usage(argv[0]);
88 1.10 mjl } else if (n > SKEY_MAX_SEQ) {
89 1.10 mjl warnx("%d is larger than max (%d)", n, SKEY_MAX_SEQ);
90 1.10 mjl usage(argv[0]);
91 1.1 deraadt }
92 1.1 deraadt } else {
93 1.1 deraadt
94 1.1 deraadt if ((n = atoi(argv[optind])) < 0) {
95 1.2 cgd fprintf(stderr, "%s not positive\n", argv[optind]);
96 1.1 deraadt usage(argv[0]);
97 1.10 mjl } else if (n > SKEY_MAX_SEQ) {
98 1.10 mjl warnx("%d is larger than max (%d)", n, SKEY_MAX_SEQ);
99 1.10 mjl usage(argv[0]);
100 1.1 deraadt }
101 1.1 deraadt seed = argv[++optind];
102 1.1 deraadt }
103 1.1 deraadt
104 1.1 deraadt /* Get user's secret password */
105 1.1 deraadt if (!pass) {
106 1.10 mjl (void)fputs("Reminder - Do not use this program while "
107 1.10 mjl "logged in via telnet or rlogin.\n", stderr);
108 1.2 cgd fprintf(stderr, "Enter secret password: ");
109 1.1 deraadt readpass(passwd, sizeof(passwd));
110 1.10 mjl if (passwd[0] == '\0')
111 1.10 mjl exit(1);
112 1.1 deraadt }
113 1.1 deraadt
114 1.1 deraadt /* Crunch seed and password into starting key */
115 1.10 mjl if (keycrunch(key, seed, passwd) != 0)
116 1.10 mjl errx(1, "key crunch failed");
117 1.10 mjl
118 1.1 deraadt if (cnt == 1) {
119 1.1 deraadt while (n-- != 0)
120 1.1 deraadt f(key);
121 1.10 mjl (void)puts(hexmode ? put8(buf, key) : btoe(buf, key));
122 1.1 deraadt } else {
123 1.1 deraadt for (i = 0; i <= n - cnt; i++)
124 1.1 deraadt f(key);
125 1.1 deraadt for (; i <= n; i++) {
126 1.10 mjl (void)printf("%3d: %-29s", i, btoe(buf, key));
127 1.10 mjl if (hexmode)
128 1.10 mjl (void)printf("\t%s", put8(buf, key));
129 1.10 mjl puts("");
130 1.1 deraadt f(key);
131 1.1 deraadt }
132 1.1 deraadt }
133 1.1 deraadt exit(0);
134 1.1 deraadt }
135 1.1 deraadt
136 1.1 deraadt void
137 1.10 mjl usage(char *s)
138 1.1 deraadt {
139 1.2 cgd
140 1.2 cgd fprintf(stderr,
141 1.10 mjl "Usage: %s [-n count] [-p password ] [-t hash] [-x] sequence#"
142 1.10 mjl "[/] key\n", s);
143 1.2 cgd exit(1);
144 1.1 deraadt }
145