108 lines
3.5 KiB
Go
108 lines
3.5 KiB
Go
package messages
|
|
|
|
import (
|
|
"fmt"
|
|
"time"
|
|
|
|
"github.com/jcmturner/gofork/encoding/asn1"
|
|
"github.com/jcmturner/gokrb5/v8/asn1tools"
|
|
"github.com/jcmturner/gokrb5/v8/crypto"
|
|
"github.com/jcmturner/gokrb5/v8/iana"
|
|
"github.com/jcmturner/gokrb5/v8/iana/asnAppTag"
|
|
"github.com/jcmturner/gokrb5/v8/iana/keyusage"
|
|
"github.com/jcmturner/gokrb5/v8/iana/msgtype"
|
|
"github.com/jcmturner/gokrb5/v8/krberror"
|
|
"github.com/jcmturner/gokrb5/v8/types"
|
|
)
|
|
|
|
// KRBPriv implements RFC 4120 type: https://tools.ietf.org/html/rfc4120#section-5.7.1.
|
|
type KRBPriv struct {
|
|
PVNO int `asn1:"explicit,tag:0"`
|
|
MsgType int `asn1:"explicit,tag:1"`
|
|
EncPart types.EncryptedData `asn1:"explicit,tag:3"`
|
|
DecryptedEncPart EncKrbPrivPart `asn1:"optional,omitempty"` // Not part of ASN1 bytes so marked as optional so unmarshalling works
|
|
}
|
|
|
|
// EncKrbPrivPart is the encrypted part of KRB_PRIV.
|
|
type EncKrbPrivPart struct {
|
|
UserData []byte `asn1:"explicit,tag:0"`
|
|
Timestamp time.Time `asn1:"generalized,optional,explicit,tag:1"`
|
|
Usec int `asn1:"optional,explicit,tag:2"`
|
|
SequenceNumber int64 `asn1:"optional,explicit,tag:3"`
|
|
SAddress types.HostAddress `asn1:"explicit,tag:4"`
|
|
RAddress types.HostAddress `asn1:"optional,explicit,tag:5"`
|
|
}
|
|
|
|
// NewKRBPriv returns a new KRBPriv type.
|
|
func NewKRBPriv(part EncKrbPrivPart) KRBPriv {
|
|
return KRBPriv{
|
|
PVNO: iana.PVNO,
|
|
MsgType: msgtype.KRB_PRIV,
|
|
DecryptedEncPart: part,
|
|
}
|
|
}
|
|
|
|
// Unmarshal bytes b into the KRBPriv struct.
|
|
func (k *KRBPriv) Unmarshal(b []byte) error {
|
|
_, err := asn1.UnmarshalWithParams(b, k, fmt.Sprintf("application,explicit,tag:%v", asnAppTag.KRBPriv))
|
|
if err != nil {
|
|
return processUnmarshalReplyError(b, err)
|
|
}
|
|
expectedMsgType := msgtype.KRB_PRIV
|
|
if k.MsgType != expectedMsgType {
|
|
return krberror.NewErrorf(krberror.KRBMsgError, "message ID does not indicate a KRB_PRIV. Expected: %v; Actual: %v", expectedMsgType, k.MsgType)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// Unmarshal bytes b into the EncKrbPrivPart struct.
|
|
func (k *EncKrbPrivPart) Unmarshal(b []byte) error {
|
|
_, err := asn1.UnmarshalWithParams(b, k, fmt.Sprintf("application,explicit,tag:%v", asnAppTag.EncKrbPrivPart))
|
|
if err != nil {
|
|
return krberror.Errorf(err, krberror.EncodingError, "KRB_PRIV unmarshal error")
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// Marshal the KRBPriv.
|
|
func (k *KRBPriv) Marshal() ([]byte, error) {
|
|
tk := KRBPriv{
|
|
PVNO: k.PVNO,
|
|
MsgType: k.MsgType,
|
|
EncPart: k.EncPart,
|
|
}
|
|
b, err := asn1.Marshal(tk)
|
|
if err != nil {
|
|
return []byte{}, err
|
|
}
|
|
b = asn1tools.AddASNAppTag(b, asnAppTag.KRBPriv)
|
|
return b, nil
|
|
}
|
|
|
|
// EncryptEncPart encrypts the DecryptedEncPart within the KRBPriv.
|
|
// Use to prepare for marshaling.
|
|
func (k *KRBPriv) EncryptEncPart(key types.EncryptionKey) error {
|
|
b, err := asn1.Marshal(k.DecryptedEncPart)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
b = asn1tools.AddASNAppTag(b, asnAppTag.EncKrbPrivPart)
|
|
k.EncPart, err = crypto.GetEncryptedData(b, key, keyusage.KRB_PRIV_ENCPART, 1)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// DecryptEncPart decrypts the encrypted part of the KRBPriv message.
|
|
func (k *KRBPriv) DecryptEncPart(key types.EncryptionKey) error {
|
|
b, err := crypto.DecryptEncPart(k.EncPart, key, keyusage.KRB_PRIV_ENCPART)
|
|
if err != nil {
|
|
return fmt.Errorf("error decrypting KRBPriv EncPart: %v", err)
|
|
}
|
|
err = k.DecryptedEncPart.Unmarshal(b)
|
|
if err != nil {
|
|
return fmt.Errorf("error unmarshaling encrypted part: %v", err)
|
|
}
|
|
return nil
|
|
}
|