1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
|
/** BEGIN COPYRIGHT BLOCK
* Copyright (C) 2001 Sun Microsystems, Inc. Used by permission.
* Copyright (C) 2005 Red Hat, Inc.
* All rights reserved.
*
* License: GPL (version 3 or any later version).
* See LICENSE for details.
* END COPYRIGHT BLOCK **/
#ifdef HAVE_CONFIG_H
#include <config.h>
#endif
/*
* slapd hashed password routines
*
*/
#include <stdio.h>
#include <string.h>
#include <sys/types.h>
#include "pwdstorage.h"
#include "md5.h" /* JCM - This is a core server header... These functions could be made part of the slapi API. */
/*
* Netscape Mail Server MD5 support (compare-only; no support for encoding)
*/
static char *ns_mta_hextab = "0123456789abcdef";
static void
ns_mta_hexify(char *buffer, char *str, int len)
{
char *pch = str;
char ch;
int i;
for (i = 0; i < len; i++) {
ch = pch[i];
buffer[2 * i] = ns_mta_hextab[(ch >> 4) & 15];
buffer[2 * i + 1] = ns_mta_hextab[ch & 15];
}
return;
}
static char *
ns_mta_hash_alg(char *buffer, char *salt, const char *passwd)
{
mta_MD5_CTX context;
char *saltstr;
unsigned char digest[16];
if ((saltstr = slapi_ch_malloc(strlen(salt) * 2 + strlen(passwd) + 3)) == NULL) {
return (NULL);
}
sprintf(saltstr, "%s%c%s%c%s", salt, 89, passwd, 247, salt);
mta_MD5Init(&context);
mta_MD5Update(&context, (unsigned char *)saltstr, strlen(saltstr));
mta_MD5Final(digest, &context);
ns_mta_hexify(buffer, (char *)digest, 16);
buffer[32] = '\0';
slapi_ch_free((void **)&saltstr);
return (buffer);
}
int
ns_mta_md5_pw_cmp(const char *clear, const char *mangled)
{
char mta_hash[33];
char mta_salt[33];
char buffer[65];
strncpy(mta_hash, mangled, 32);
strncpy(mta_salt, &mangled[32], 32);
mta_hash[32] = mta_salt[32] = 0;
/* This is salted, so we don't need to change it for constant time */
return (strcmp(mta_hash, ns_mta_hash_alg(buffer, mta_salt, clear)));
}
|
