X-Git-Url: http://www.average.org/gitweb/?p=pam_pcsc_cr.git;a=blobdiff_plain;f=test_auth.c;h=af9e885259cbce53b95fca1bc2cb33360db0f712;hp=177fb5f26abf6639034148e2e942d5a1f6c822c6;hb=7b6aa201f4bd4aaf7f7a83677f7fd6f316dde07e;hpb=f5144b94c8221f81c6d7520990a7602c3ce2a5a4 diff --git a/test_auth.c b/test_auth.c index 177fb5f..af9e885 100644 --- a/test_auth.c +++ b/test_auth.c @@ -3,29 +3,67 @@ #include #include "authobj.h" #include "crypto.h" +#include "pcsc_cr.h" + +unsigned char secret[] = { + 0xb4, 0x62, 0xf2, 0x60, 0x87, 0x78, 0x16, 0x87, 0xde, 0xce, + 0x80, 0x09, 0x24, 0x0b, 0x93, 0xfc, 0xa0, 0xfc, 0x56, 0x56 +}; + +static struct _auth_chunk +conjure_key(const unsigned char *challenge, const int challengesize) +{ + struct _auth_chunk ho = {0}; + long rc; + int keysize = sizeof(ho.data); + + if ((rc = hmac(secret, sizeof(secret), challenge, challengesize, + &ho.data, &keysize))) { + ho.err = crypto_errstr(rc); + } else if (keysize != sizeof(ho.data)) { + ho.err = "make_key: hash size is wrong"; + } + return ho; +} + +static struct _auth_chunk +token_key(const unsigned char *challenge, const int challengesize) +{ + struct _auth_chunk ho = {0}; + long rc; + int keysize = sizeof(ho.data); + + if ((rc = pcsc_cr(challenge, challengesize, ho.data, &keysize))) { + ho.err = pcsc_errstr(rc); + } + return ho; +} int main(int argc, char *argv[]) { const char *id = "testuser"; const char *pass = "testpassword"; const char *nonce = "1"; - unsigned char secret[] = {0xb4, 0x62, 0xf2, 0x60, 0x87, - 0x78, 0x16, 0x87, 0xde, 0xce, - 0x80, 0x09, 0x24, 0x0b, 0x93, - 0xfc, 0xa0, 0xfc, 0x56, 0x56}; const unsigned char *payload = (unsigned char *) "To authorize or not to authorize?"; int i; struct _auth_obj ao; struct _auth_obj nao; + struct _auth_chunk (*fetch_key)(const unsigned char *challenge, + const int challengesize); if (argc == 2 && strlen(argv[1]) == 40 && strspn(argv[1], "0123456789abcdefABCDEF") == 40) { for (i = 0; i < sizeof(secret); i++) sscanf(&argv[1][i*2], "%2hhx", &secret[i]); + fetch_key = token_key; + } else { + fetch_key = conjure_key; } - ao = new_authobj(id, pass, nonce, secret, sizeof(secret), - payload, strlen((char *)payload)); + + ao = authobj(id, pass, NULL, nonce, secret, sizeof(secret), + payload, strlen((char *)payload), + NULL, 0, NULL); printf("new_authobj err=%s\n", ao.err?ao.err:""); printf("data(%d):", ao.datasize); for (i = 0; i < ao.datasize; i++) printf(" %02x", ao.data[i]); @@ -36,7 +74,8 @@ int main(int argc, char *argv[]) return 1; } - nao = verify_authobj(id, pass, nonce, nonce, ao.data, ao.datasize); + nao = authobj(id, pass, nonce, nonce, NULL, 0, NULL, 0, + ao.data, ao.datasize, fetch_key); printf("verify_authobj err=%s\n", nao.err?nao.err:""); printf("data(%d):", nao.datasize); for (i = 0; i < nao.datasize; i++) printf(" %02x", nao.data[i]);