mirror of
https://github.com/apache/nuttx-apps.git
synced 2026-08-17 18:28:31 +00:00
608f13fd4b
Migrate passwd encrypt/verify to PBKDF2 modular crypt format using kernel cryptodev (CRYPTO_PBKDF2_HMAC_SHA256 via /dev/crypto). Add passwd_pbkdf2 wrapper, base64url helpers, complexity validation, and pbkdf2_test for RFC 6070 vector coverage. FSUTILS_PASSWD selects CRYPTO, ALLOW_BSD_COMPONENTS, and CRYPTO_CRYPTODEV so existing sim defconfigs keep building. Change NSH_LOGIN_USERNAME default to root and remove fixed-login password defaults. BREAKING CHANGE: TEA-encoded /etc/passwd entries no longer verify. Regenerate each entry after upgrading. Pair with the nuttx host mkpasswd changes in apache/nuttx#19209. Boards must enable the appropriate software or hardware crypto backend for PBKDF2 at runtime. When CONFIG_NSH_LOGIN_FIXED=y, set CONFIG_NSH_LOGIN_PASSWORD in the board defconfig or menuconfig; there is no default password. Signed-off-by: Abhishek Mishra <mishra.abhishek2808@gmail.com>
161 lines
5.3 KiB
C
161 lines
5.3 KiB
C
/****************************************************************************
|
|
* apps/fsutils/passwd/passwd.h
|
|
*
|
|
* SPDX-License-Identifier: Apache-2.0
|
|
*
|
|
* Licensed to the Apache Software Foundation (ASF) under one or more
|
|
* contributor license agreements. See the NOTICE file distributed with
|
|
* this work for additional information regarding copyright ownership. The
|
|
* ASF licenses this file to you under the Apache License, Version 2.0 (the
|
|
* "License"); you may not use this file except in compliance with the
|
|
* License. You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
* License for the specific language governing permissions and limitations
|
|
* under the License.
|
|
*
|
|
****************************************************************************/
|
|
|
|
#ifndef __APPS_FSUTILS_PASSWD_PASSWD_H
|
|
#define __APPS_FSUTILS_PASSWD_PASSWD_H
|
|
|
|
/****************************************************************************
|
|
* Included Files
|
|
****************************************************************************/
|
|
|
|
#include <sys/types.h>
|
|
#include <stdint.h>
|
|
#include <stdio.h>
|
|
#include <semaphore.h>
|
|
|
|
/****************************************************************************
|
|
* Pre-processor Definitions
|
|
****************************************************************************/
|
|
|
|
/* MCF format: $pbkdf2-sha256$<iter>$<salt>$<hash> */
|
|
|
|
#define PASSWD_MCF_PREFIX "$pbkdf2-sha256$"
|
|
#define PASSWD_SALT_BYTES 16
|
|
#define PASSWD_HASH_BYTES 32
|
|
|
|
/* 15 + 6 + 1 + 22 + 1 + 43 = 88 bytes for default parameters */
|
|
|
|
#define MAX_ENCRYPTED 96
|
|
#define MAX_USERNAME 48
|
|
#define MAX_RECORD (MAX_USERNAME + MAX_ENCRYPTED + 1)
|
|
#define MAX_PASSWORD 256
|
|
|
|
/****************************************************************************
|
|
* Public Types
|
|
****************************************************************************/
|
|
|
|
struct passwd_s
|
|
{
|
|
off_t offset; /* File offset (start of record) */
|
|
char encrypted[MAX_ENCRYPTED + 1]; /* Password hash in file */
|
|
};
|
|
|
|
/****************************************************************************
|
|
* Public Function Prototypes
|
|
****************************************************************************/
|
|
|
|
/****************************************************************************
|
|
* Name: passwd_lock and passwd_unlock
|
|
*
|
|
* Description:
|
|
* Lock the /etc/passwd file. This is not a real lock at the level of the
|
|
* file system. Rather, it only prevents concurrent modification of the
|
|
* /etc/passwd file by passwd_adduser(), passwd_deluser(), and
|
|
* passwd_update(). Other accesses to /etc/passwd could still cause
|
|
* concurrency problem and file corruption.
|
|
*
|
|
* Input Parameters:
|
|
*
|
|
* Returned Value:
|
|
* Zero (OK) is returned on success; a negated errno value is returned on
|
|
* failure.
|
|
*
|
|
****************************************************************************/
|
|
|
|
#if !defined(CONFIG_FSUTILS_PASSWD_READONLY)
|
|
# define PASSWD_SEM_DECL(s) FAR sem_t *s
|
|
int passwd_lock(FAR sem_t **semp);
|
|
void passwd_unlock(FAR sem_t *sem);
|
|
#else
|
|
# define PASSWD_SEM_DECL(s)
|
|
# define passwd_lock(semp) (0)
|
|
# define passwd_unlock(sem)
|
|
#endif
|
|
|
|
/****************************************************************************
|
|
* Name: passwd_encrypt
|
|
*
|
|
* Description:
|
|
* Hash a password with PBKDF2-HMAC-SHA256 and encode the result in modular
|
|
* crypt format for storage in /etc/passwd.
|
|
*
|
|
* Input Parameters:
|
|
* password -- The password string to be hashed
|
|
*
|
|
* Returned Value:
|
|
* Zero (OK) is returned on success; a negated errno value is returned on
|
|
* failure.
|
|
*
|
|
****************************************************************************/
|
|
|
|
int passwd_encrypt(FAR const char *password,
|
|
char encrypted[MAX_ENCRYPTED + 1]);
|
|
|
|
/****************************************************************************
|
|
* Name: passwd_append
|
|
*
|
|
* Description:
|
|
* Append a new record to the end of the /etc/passwd file
|
|
*
|
|
* Input Parameters:
|
|
*
|
|
* Returned Value:
|
|
* Zero (OK) is returned on success; a negated errno value is returned on
|
|
* failure.
|
|
*
|
|
****************************************************************************/
|
|
|
|
int passwd_append(FAR const char *username, FAR const char *password);
|
|
|
|
/****************************************************************************
|
|
* Name: passwd_delete
|
|
*
|
|
* Description:
|
|
* Delete on record from the password file at offset.
|
|
*
|
|
* Input Parameters:
|
|
*
|
|
* Returned Value:
|
|
* Zero (OK) is returned on success; a negated errno value is returned on
|
|
* failure.
|
|
*
|
|
****************************************************************************/
|
|
|
|
int passwd_delete(off_t offset);
|
|
|
|
/****************************************************************************
|
|
* Name: passwd_find
|
|
*
|
|
* Description:
|
|
* Find a password in the
|
|
*
|
|
* Input Parameters:
|
|
*
|
|
* Returned Value:
|
|
* Zero (OK) is returned on success; a negated errno value is returned on
|
|
* failure.
|
|
*
|
|
****************************************************************************/
|
|
|
|
int passwd_find(FAR const char *username, FAR struct passwd_s *passwd);
|
|
|
|
#endif /* __APPS_FSUTILS_PASSWD_PASSWD_H */
|