Skip to content

O
OpenXG-RAN
Commit e29c668b authored by Lionel Gauthier's avatar Lionel Gauthier
Browse files
Options

Licence file 

git-svn-id: http://svn.eurecom.fr/openair4G/trunk@5548 818b1a75-f10b-46b9-bf7c-635c3b92a50f
parent da6b1bb5
Expand all Hide whitespace changes
Inline Side-by-side
Showing with 10202 additions and 30 deletions
openair-cn/NAS/EURECOM-NAS/src/COPYING 0 → 100644
View file @ e29c668b
This diff is collapsed.
openair-cn/NAS/EURECOM-NAS/src/api/COPYING 0 → 100644
View file @ e29c668b
This diff is collapsed.
openair-cn/NAS/EURECOM-NAS/src/api/mme/COPYING 0 → 100644
View file @ e29c668b
This diff is collapsed.
openair-cn/NAS/EURECOM-NAS/src/api/network/COPYING 0 → 100644
View file @ e29c668b
This diff is collapsed.
openair-cn/NAS/EURECOM-NAS/src/api/network/nas_message.c
View file @ e29c668b
......@@ -254,9 +254,21 @@ int nas_message_decrypt(
SECU_DIRECTION_DOWNLINK,
#endif
emm_security_context);
/* Check NAS message integrity */
if (mac != header->message_authentication_code) {
#if defined(NAS_MME)
LOG_FUNC_RETURN (TLV_DECODE_MAC_MISMATCH);
#else
#warning "added test on integrity algorithm because of SECURITY_MODE_COMMAND not correctly handled in UE (check integrity)"
if (emm_security_context->selected_algorithms.integrity !=
NAS_SECURITY_ALGORITHMS_EIA0) {
LOG_FUNC_RETURN (TLV_DECODE_MAC_MISMATCH);
} else {
LOG_TRACE(WARNING,
"MAC failure but continue due to EIA0 selected");
}
#endif
}
/* Decrypt the security protected NAS message */
......@@ -336,6 +348,10 @@ int nas_message_decode(
/* Check NAS message integrity */
if (mac != msg->header.message_authentication_code) {
LOG_TRACE(DEBUG,
"msg->header.message_authentication_code = %04X computed = %04X",
msg->header.message_authentication_code,
mac);
LOG_FUNC_RETURN (TLV_DECODE_MAC_MISMATCH);
}
......@@ -940,6 +956,11 @@ static UInt32_t _nas_message_get_mac(
UInt32_t count;
UInt32_t *mac32;
LOG_TRACE(DEBUG,
"NAS_SECURITY_ALGORITHMS_EIA1 dir %d ul_count.seq_num %d dl_count.seq_num %d",
direction,
emm_security_context->ul_count.seq_num,
emm_security_context->dl_count.seq_num);
if (direction == SECU_DIRECTION_UPLINK) {
count = 0x00000000 ||
((emm_security_context->ul_count.overflow && 0x0000FFFF) << 8) ||
......@@ -974,6 +995,11 @@ static UInt32_t _nas_message_get_mac(
UInt32_t count;
UInt32_t *mac32;
LOG_TRACE(DEBUG,
"NAS_SECURITY_ALGORITHMS_EIA2 dir %d ul_count.seq_num %d dl_count.seq_num %d",
direction,
emm_security_context->ul_count.seq_num,
emm_security_context->dl_count.seq_num);
if (direction == SECU_DIRECTION_UPLINK) {
count = 0x00000000 ||
((emm_security_context->ul_count.overflow && 0x0000FFFF) << 8) ||
......@@ -1003,6 +1029,11 @@ static UInt32_t _nas_message_get_mac(
}break;
case NAS_SECURITY_ALGORITHMS_EIA0:
LOG_TRACE(DEBUG,
"NAS_SECURITY_ALGORITHMS_EIA0 dir %d ul_count.seq_num %d dl_count.seq_num %d",
direction,
emm_security_context->ul_count.seq_num,
emm_security_context->dl_count.seq_num);
#if defined(EPC_BUILD) || defined(UE_BUILD)
LOG_FUNC_RETURN (0);
#else
......
openair-cn/NAS/EURECOM-NAS/src/api/user/COPYING 0 → 100644
View file @ e29c668b
This diff is collapsed.
openair-cn/NAS/EURECOM-NAS/src/api/usim/COPYING 0 → 100644
View file @ e29c668b
This diff is collapsed.
openair-cn/NAS/EURECOM-NAS/src/api/usim/aka_functions.c
View file @ e29c668b
......@@ -137,7 +137,7 @@ void f2345 ( u8 k_pP[16], u8 rand_pP[16],
for (i=0; i<16; i++)
ck_pP[i] = out[i];
LOG_TRACE(DEBUG,
"USIM-API - f2345 : out f3 ik_pP[0..7]=%02X%02X%02X%02X%02X%02X%02X%02",
"USIM-API - f2345 : out f3 ck_pP[0..7]=%02X%02X%02X%02X%02X%02X%02X%02X",
ck_pP[0],ck_pP[1],ck_pP[2], ck_pP[3], ck_pP[4], ck_pP[5], ck_pP[6], ck_pP[7]);
/* To obtain output block OUT4: XOR OPc and TEMP, *
* rotate by r4=64, and XOR on the constant c4 (which *
......
openair-cn/NAS/EURECOM-NAS/src/emm/COPYING 0 → 100644
View file @ e29c668b
This diff is collapsed.
openair-cn/NAS/EURECOM-NAS/src/emm/SecurityModeControl.c
View file @ e29c668b
/*****************************************************************************
Eurecom OpenAirInterface 3
Copyright(c) 2012 Eurecom
/*******************************************************************************
OpenAirInterface
Copyright(c) 1999 - 2014 Eurecom
OpenAirInterface is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
OpenAirInterface is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with OpenAirInterface.The full GNU General Public License is
included in this distribution in the file called "COPYING". If not,
see <http://www.gnu.org/licenses/>.
Contact Information
OpenAirInterface Admin: openair_admin@eurecom.fr
OpenAirInterface Tech : openair_tech@eurecom.fr
OpenAirInterface Dev : openair4g-devel@eurecom.fr
Address : Eurecom, Compus SophiaTech 450, route des chappes, 06451 Biot, France.
*******************************************************************************/
/*****************************************************************************
Source SecurityModeControl.c
Version 0.1
......@@ -136,31 +161,31 @@ static int _security_request(security_data_t *data, int is_new);
#ifdef NAS_UE
/****************************************************************************
** **
** Name: emm_proc_security_mode_command() **
** Name: emm_proc_security_mode_command() **
** **
** Description: Performs the MME requested security mode control proce- **
** dure. **
** dure. **
** **
** 3GPP TS 24.301, section 5.4.3.3 **
** Upon receiving the SECURITY MODE COMMAND message, the UE **
** shall check whether the message can be accepted or not. **
** If accepted the UE shall send a SECURITY MODE COMPLETE **
** message integrity protected with the selected NAS inte- **
** grity algorithm and ciphered with the selected NAS ciphe- **
** ring algorithm. **
** **
** Inputs: native_ksi: TRUE if the security context is of type **
** native (for KSIASME) **
** ksi: The NAS ket sey identifier **
** seea: Selected EPS cyphering algorithm **
** seia: Selected EPS integrity algorithm **
** reea: Replayed EPS cyphering algorithm **
** reia: Replayed EPS integrity algorithm **
** Others: None **
** Upon receiving the SECURITY MODE COMMAND message, the UE **
** shall check whether the message can be accepted or not. **
** If accepted the UE shall send a SECURITY MODE COMPLETE **
** message integrity protected with the selected NAS inte- **
** grity algorithm and ciphered with the selected NAS ciphe- **
** ring algorithm. **
** **
** Inputs: native_ksi: TRUE if the security context is of type **
** native (for KSIASME) **
** ksi: The NAS ket sey identifier **
** seea: Selected EPS cyphering algorithm **
** seia: Selected EPS integrity algorithm **
** reea: Replayed EPS cyphering algorithm **
** reia: Replayed EPS integrity algorithm **
** Others: None **
** **
** Outputs: None **
** Return: RETURNok, RETURNerror **
** Others: None **
** Return: RETURNok, RETURNerror **
** Others: None **
** **
***************************************************************************/
int emm_proc_security_mode_command(int native_ksi, int ksi,
......@@ -206,6 +231,7 @@ int emm_proc_security_mode_command(int native_ksi, int ksi,
* Update the non-current EPS security context
*/
else {
LOG_TRACE(INFO, "EMM-PROC - Update the non-current EPS security context seea=%u seia=%u", seea, seia);
/* Update selected cyphering and integrity algorithms */
_emm_data.non_current->capability.encryption = seea;
_emm_data.non_current->capability.integrity = seia;
......@@ -217,6 +243,7 @@ int emm_proc_security_mode_command(int native_ksi, int ksi,
_emm_data.non_current->knas_enc.length = AUTH_KNAS_ENC_SIZE;
}
if (_emm_data.non_current->knas_enc.value != NULL) {
LOG_TRACE(INFO, "EMM-PROC - Update the non-current EPS security context knas_enc");
rc = _security_knas_enc(&_emm_data.non_current->kasme,
&_emm_data.non_current->knas_enc, seea);
}
......@@ -228,6 +255,7 @@ int emm_proc_security_mode_command(int native_ksi, int ksi,
}
if (_emm_data.non_current->knas_int.value != NULL) {
if (rc != RETURNerror) {
LOG_TRACE(INFO, "EMM-PROC - Update the non-current EPS security context knas_int");
rc = _security_knas_int(&_emm_data.non_current->kasme,
&_emm_data.non_current->knas_int, seea);
}
......@@ -239,6 +267,7 @@ int emm_proc_security_mode_command(int native_ksi, int ksi,
}
if (_security_data.kenb.value != NULL) {
if (rc != RETURNerror) {
LOG_TRACE(INFO, "EMM-PROC - Update the non-current EPS security context kenb");
rc = _security_kenb(&_security_data.kenb,
&_emm_data.security->kasme,
*(UInt32_t *)(&_emm_data.non_current->ul_count));
......@@ -249,6 +278,7 @@ int emm_proc_security_mode_command(int native_ksi, int ksi,
* NAS security mode command accepted by the UE
*/
if (rc != RETURNerror) {
LOG_TRACE(INFO, "EMM-PROC - NAS security mode command accepted by the UE");
/* Update the current EPS security context */
if ( native_ksi && (_emm_data.security->type != EMM_KSI_NATIVE) ) {
/* The type of security context flag included in the SECURITY
......@@ -852,6 +882,7 @@ static int _security_kdf(const OctetString *kasme, OctetString *key,
/* TODO !!! Compute the derived key */
// todo_hmac_256(key, input, kasme->value);
return (RETURNok);
}
#endif // NAS_UE
......
openair-cn/NAS/EURECOM-NAS/src/emm/msg/COPYING 0 → 100644
View file @ e29c668b
This diff is collapsed.
openair-cn/NAS/EURECOM-NAS/src/emm/sap/COPYING 0 → 100644
View file @ e29c668b
This diff is collapsed.
openair-cn/NAS/EURECOM-NAS/src/esm/COPYING 0 → 100644
View file @ e29c668b
This diff is collapsed.
openair-cn/NAS/EURECOM-NAS/src/esm/msg/COPYING 0 → 100644
View file @ e29c668b
This diff is collapsed.
openair-cn/NAS/EURECOM-NAS/src/esm/sap/COPYING 0 → 100644
View file @ e29c668b
This diff is collapsed.
openair-cn/NAS/EURECOM-NAS/src/ies/COPYING 0 → 100644
View file @ e29c668b
This diff is collapsed.
openair-cn/NAS/EURECOM-NAS/src/include/COPYING 0 → 100644
View file @ e29c668b
This diff is collapsed.
openair-cn/NAS/EURECOM-NAS/src/util/COPYING 0 → 100644
View file @ e29c668b
This diff is collapsed.
openair-cn/NAS/EURECOM-NAS/src/util/nas_log.h
View file @ e29c668b
......@@ -82,10 +82,10 @@ typedef enum
# define LOG_TRACE(s, x, args...) \
do { \
switch (s) { \
case ERROR: LOG_E(NAS, " " x "\n", ##args); break; \
case WARNING: LOG_W(NAS, " " x "\n", ##args); break; \
case INFO: LOG_I(NAS, " " x "\n", ##args); break; \
default: LOG_D(NAS, " " x "\n", ##args); break; \
case ERROR: LOG_E(NAS, " %s:%d " x "\n", __FILE__, __LINE__, ##args); break; \
case WARNING: LOG_W(NAS, " %s:%d " x "\n", __FILE__, __LINE__, ##args); break; \
case INFO: LOG_I(NAS, " %s:%d " x "\n", __FILE__, __LINE__, ##args); break; \
default: LOG_D(NAS, " %s:%d " x "\n", __FILE__, __LINE__, ##args); break; \
} \
} while (0)
......@@ -100,20 +100,20 @@ do {
# define LOG_FUNC_IN \
do { \
LOG_D(NAS, " %*sEntering %s()\n", nas_log_func_indent, "", __FUNCTION__); \
LOG_D(NAS, " %s:%d %*sEntering %s()\n", __FILE__, __LINE__, nas_log_func_indent, "", __FUNCTION__); \
nas_log_func_indent += 4; \
} while (0)
# define LOG_FUNC_OUT \
do { \
nas_log_func_indent -= 4; \
LOG_D(NAS, " %*sLeaving %s()\n", nas_log_func_indent, "", __FUNCTION__); \
LOG_D(NAS, " %s:%d %*sLeaving %s()\n", __FILE__, __LINE__, nas_log_func_indent, "", __FUNCTION__); \
} while (0)
# define LOG_FUNC_RETURN(rETURNcODE) \
do { \
nas_log_func_indent -= 4; \
LOG_D(NAS, " %*sLeaving %s(rc = %ld)\n", nas_log_func_indent, "", \
LOG_D(NAS, " %s:%d %*sLeaving %s(rc = %ld)\n", __FILE__, __LINE__, nas_log_func_indent, "", \
__FUNCTION__, (long) rETURNcODE); \
return (rETURNcODE); \
} while (0)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment