a k#dX;@s>dZddlmZddlmZddlZddlmZmZmZm Z m Z m Z m Z m Z mZmZmZmZmZmZmZmZmZmZddlmZmZmZddlmZmZmZm Z m!Z!ddl"m#Z#dd l$m%Z%m&Z&d d d d Z'dddddddddd Z(GdddeZ)ddddddd d!d!d"d#d$d%d&d'd(d)d*d+d,d-d.d/d0d1d2d3d4d5d6d7d8d9d:d;dd?d@dAdBdCdDdEdFdGdHdIdJdKdLdMdNdOdPdQdRdS:Z*dTdUdVdWdXdYdZZ+Gd[d\d\eZ,Gd]d^d^e,Z-Gd_d`d`e,Z.Gdadbdbe,Z/Gdcdddde,Z0Gdedfdfe,Z1Gdgdhdhe,Z2didjdkdldmdndodpdqZ3drdsdtdudvdwZ4GdxdydyeZ5Gdzd{d{eZ6Gd|d}d}eZ7Gd~ddeZ8Gddrdre6Z9Gddsdse6Z:Gddtdte6Z;Gddudue6ZGdddeZ?GdddeZ@eee)ddeee)dddeee)ddee e)ddee)e,ddee!e)ddee)e@dddS)z* Extensible Authentication Protocol (EAP) )absolute_import)print_functionN)BitField ByteField XByteField ShortFieldIntField XIntField ByteEnumField StrLenField XStrField XStrLenFieldXStrFixedLenFieldLenField FieldLenFieldFieldListField PacketFieldPacketListFieldConditionalFieldPadField)PacketPadding bind_layers)SourceMACFieldEther CookedLinuxGRESNAP)conf)orbchbz 802.1X-2001z 802.1X-2004z 802.1X-2010)z EAP-Packetz EAPOL-Startz EAPOL-Logoffz EAPOL-KeyzEAPOL-Encapsulated-ASF-Alertz EAPOL-MKAzEAPOL-Announcement (Generic)zEAPOL-Announcement (Specific)zEAPOL-Announcement-Req) rr!r"r#c@sjeZdZdZdZeddeeddeedddgZ dZ dZ d Z d Z d Zd d ZddZddZddZdS)EAPOLz& EAPOL - IEEE Std 802.1X-2010 versionr!typerlenNHr"r#r$cCs|j}|d|||dfSNr,)selfstmp_lenr3G/var/www/html/gsl.tools/lib/python3.9/site-packages/scapy/layers/eap.pyextract_paddingOszEAPOL.extract_paddingcCst|j|jSr.)r r+payloadhashretr0r3r3r4r7Ssz EAPOL.hashretcCs4t|tr0|j|jkr0|j|jkr0|j|jSdSNr) isinstancer)r+ EAP_PACKETr6answersr0otherr3r3r4r<Vs    z EAPOL.answerscCs |dS)NzEAPOL %EAPOL.type%)sprintfr8r3r3r4 mysummary]szEAPOL.mysummary)__name__ __module__ __qualname____doc__namer eapol_versions eapol_typesr fields_descr;STARTZLOGOFFZKEYZASFr5r7r<r@r3r3r3r4r)=s   r)ReservedZIdentityZ Notificationz Legacy Nakz MD5-ChallengezOne-Time Password (OTP)zGeneric Token Card (GTC)zAllocated - RFC3748zRSA Public Key AuthenticationzDSS UnilateralZKEAz KEA-VALIDATEEAP-TLSzDefender Token (AXENT)zRSA Security SecurID EAPzArcot Systems EAPzEAP-Cisco Wirelessz)GSM Subscriber Identity Modules (EAP-SIM)zSRP-SHA1Z UnassignedEAP-TTLSzRemote Access ServicezEAP-AKA AuthenticationzEAP-3Com WirelessPEAPzMS-EAP-Authenticationz+Mutual Authentication w/Key Exchange (MAKE)Z CRYPTOCardz EAP-MSCHAP-V2ZDynamIDzRob EAPzProtected One-Time PasswordzMS-Authentication-TLVZ SentriNETzEAP-Actiontec Wirelessz,Cogent Systems Biometrics Authentication EAPzAirFortress EAPzEAP-HTTP DigestzSecureSuite EAPzDeviceConnect EAPz EAP-SPEKEz EAP-MOBACEAP-FASTzZoneLabs EAP (ZLXEAP)zEAP-LinkzEAP-PAXzEAP-PSKzEAP-SAKEz EAP-IKEv2zEAP-AKAzEAP-GPSKzEAP-pwdzEAP-EKE Version 1zEAP Method Type for PT-EAPZTEAPzReserved for the Expanded TypeZ Experimental):rr!r"r#r$r%r&r'r(  !"#$%&'()*+,-./01234567RequestResponseZSuccessZFailureZInitiateZFinish)r!r"r#r$r%r&c @seZdZdZdZeddeeddedde edde d d e e d ged de d d ddd e e dddd ddd e e dddd ddd gZ dZdZdZdZdZdZiZeddZed(ddZd d!Zd"d#Zd$d%Zd&d'ZdS))EAPz= RFC 3748 - Extensible Authentication Protocol (EAP) coder$idrr,Nr+cCs|jtjtjfvSr.)rrSUCCESSFAILUREpktr3r3r4sz EAP.Zdesired_auth_typesZ auth_typecCs |jdS)Nr$r/rr3r3r4rZ length_fromcCs|jtjko|jdkS)Nr#)rrRESPONSEr+rr3r3r4rridentitycCs |jdSNr%r/rr3r3r4rrcCs |jtjkot|do|jdkSNr+r!)rrrhasattrr+rr3r3r4rrmessagecCs |jdSrr/rr3r3r4rrcCs |jtjkot|do|jdkSr)rrREQUESTrr+rr3r3r4rrr!r"r#r%r&cCs||j|jj<dSr.)registered_methodsr+default)clsr3r3r4register_variantszEAP.register_variantcOsB|r>t|d}|dvr>t|dkr>t|d}|j||S|S)Nr)r!r"r%r$)rr,rget)r_pktargskargsctr3r3r4 dispatch_hooks   zEAP.dispatch_hookcCsXt|trT|j|jkrdS|j|jkrD|j|jkrT|j|jkrTdSn|j|jkrTdSdS)Nrr!)r:rrrrr+r=r3r3r4r<s      z EAP.answerscCsDdj|jjd}|jdkr:|jtjkr:|dj|jjd7}||S)Nz)EAP %{eap_class}.code% %{eap_class}.type%)Z eap_classr!z %{eap_class}.identity%)format __class__rAr+rrrr?)r0Z summary_strr3r3r4r@sz EAP.mysummarycCsZ|jdurRt|t|}|ddt|d?d@t|d@}||dd}||S)Nr"r(rr$)r,r )r0pZpayr2Ztmp_pr3r3r4 post_build s  (zEAP.post_buildcCstSr.)r)r0_r3r3r4guess_payload_classszEAP.guess_payload_class)N)rArBrCrDrEr eap_codesrrr eap_typesrr rHrrrrZINITIATEZFINISHr classmethodrrr<r@rrr3r3r3r4rsN       rc @szeZdZdZdZdZeddeedde dd d d d d dedde e dd ddde dddd de d ddd dgZ d S)EAP_MD5z? RFC 3748 - "Extensible Authentication Protocol (EAP)" zEAP-MD5Trr!rrr,Nr-Z optional_namecCs|d|jpdS)Nr&r value_sizerxr3r3r4rrzEAP_MD5.fmt length_ofadjustr+r$rBvalue)rrrcCs|jSr.rrr3r3r4r"rrcCs(|jdus|jdurdS|j|jdS)Nrr&)r,rrr3r3r4r#r) rArBrCrDrEmatch_subclassr rrrrr rHr3r3r3r4rs   rc@seZdZdZdZdZeddeedde dd d d d d dedde e ddde ddde ddde ddde e dddd ed ddd dg Zd S)EAP_TLSz: RFC 5216 - "The EAP-TLS Authentication Protocol" rKTrr!rrr,Nr-tls_datacCs|jdkr|dS|dSNr!rPr&Lrr3r3r4r2rzEAP_TLS.rr+rSrMSreservedr%tls_message_lencCs |jdkSNr!rrr3r3r4r8rrcCs"|jdurdS|jdd|jSNrr&r$r,rrr3r3r4r9rrrArBrCrDrErr rrrrrrrr rHr3r3r3r4r's        rc@seZdZdZdZdZeddeedde dd d d d d dedde e ddde ddde ddde ddde ddde e dddd ed ddd dg Zd S)EAP_TTLSz RFC 5281 - "Extensible Authentication Protocol Tunneled Transport Layer Security Authenticated Protocol Version 0 (EAP-TTLSv0)" rLTrr!rrr,Nr-datacCs|jdkr|dS|dSrrrr3r3r4rIrzEAP_TTLS.rr+r[rrrrr"r*r# message_lencCs |jdkSrrrr3r3r4rPrrcCs"|jdurdS|jdd|jSrrrr3r3r4rQrrrr3r3r3r4r=s"        rc@seZdZdZdZdZeddeedde dd d d d d dedde e ddde ddde ddde ddde ddde e dddd ed ddd dg Zd S)EAP_PEAPzU draft-josefsson-pppext-eap-tls-eap-05.txt - "Protected EAP Protocol (PEAP)" rMTrr!rrr,Nr-rcCs|jdkr|dS|dSrrrr3r3r4r`rzEAP_PEAP.rr+r_rrrrr#r*r"rcCs |jdkSrrrr3r3r4rgrrcCs"|jdurdS|jdd|jSrrrr3r3r4rhrrrr3r3r3r4rUs"        rc@seZdZdZdZdZeddeedde dd d d d d dedde e ddde ddde ddde ddde ddde e dddd ed ddd dg Zd S)EAP_FASTz RFC 4851 - "The Flexible Authentication via Secure Tunneling Extensible Authentication Protocol Method (EAP-FAST)" rNTrr!rrr,Nr-rcCs|jdkr|dS|dSrrrr3r3r4rxrzEAP_FAST.rr+rqrrrrr"r*r#rcCs |jdkSrrrr3r3r4rrrcCs"|jdurdS|jdd|jSrrrr3r3r4rrrrr3r3r3r4rls"        rc @seZdZdZdZdZeddeedde dd ed d e ed de d de dd ddddde dddddedddddg Zd S)LEAPzN Cisco LEAP (Lightweight EAP) https://freeradius.org/rfc/leap.txt z Cisco LEAPTrr!rrr,Nr+rWr*unusedcountchallenge_responsercCs t|jSr.)r,rrr3r3r4rrz LEAP.)rrcCs dp|jSr9)rrr3r3r4rrrusernamecCs|jddp|jS)Nr(r)r,rrr3r3r4rr)rArBrCrDrErr rrrrrrr r rHr3r3r3r4rs  rzLive Peer ListzPotential Peer ListzMACsec SAK UsezDistributed SAKzDistributed CAKZKMDZ Announcementz ICV Indicator)r!r"r#r$r%r&r'rMKALivePeerListParamSetMKAPotentialPeerListParamSetMKASAKUseParamSetMKADistributedSAKParamSet MKAICVSet)r!r"r#r$rc@s.eZdZdZdZededdgZddZdS) MACsecSCIz$ Secure Channel Identifier. SCIZsystem_identifierZport_identifierrcCsd|fSNrr3r0r1r3r3r4r5szMACsecSCI.extract_paddingN) rArBrCrDrErrrHr5r3r3r3r4rs  rc@s&eZdZdZdZdZedddZdS) MKAParamSetz Class from which every parameter set class inherits (except MKABasicParamSet, which has no "Parameter set type" field, and must come first in the list of parameter sets). rVr^NcOs4tj}|dur0t|d}tt|tjS|S)z8 Returns the right parameter set class. Nr)rZ raw_layerrglobalsr_param_set_cls)rrrrptyper3r3r4rs  zMKAParamSet.dispatch_hook)N)rArBrCrDMACSEC_DEFAULT_ICV_LENEAPOL_MKA_DEFAULT_KEY_WRAP_LENrrr3r3r3r4rs rc@seZdZdZdZeddeddedddeddded dd ed dd ed eee ddd de dde dde e ddddddddg Z ddZdS)MKABasicParamSetz; Basic Parameter Set (802.1X-2010, section 11.11). zBasic Parameter SetZmka_version_idrZkey_server_priorityZ key_serverr!Zmacsec_desiredZmacsec_capabilityr"param_set_body_lenrRrZactor_member_idrlengthZactor_message_numberZalgorithm_agilityZcak_namecCs |jdSNrbrrr3r3r4rrzMKABasicParamSet.rr$ZpadwithcCsd|fSrr3rr3r3r4r5 sz MKABasicParamSet.extract_paddingN)rArBrCrDrErrrrrr rr rHr5r3r3r3r4rs.       rc@s0eZdZdZdZeddddeddddgZd S) MKAPeerListTuplezf Live / Potential Peer List parameter sets tuples (802.1X-2010, section 11.11). # noqa: E501 zPeer List TupleZ member_idrrRrZmessage_numberr$N)rArBrCrDrErrHr3r3r3r4rs   rc@s>eZdZdZdZeeddedddedd e d ge gZ d S) rzE Live Peer List parameter sets (802.1X-2010, section 11.11). zLive Peer List Parameter Setparam_set_typer!r"rrrrmember_id_message_numN rArBrCrDrErr _parameter_set_typesrrrrHr3r3r3r4rs   c@s>eZdZdZdZeeddedddedde d ge gZ d S) rzJ Potential Peer List parameter sets (802.1X-2010, section 11.11). z!Potential Peer List Parameter Setrr"rrrrrNrr3r3r3r4r7s   c@seZdZdZdZeddeedddeddd ed dd ed dded dd ed dd eddd eddd eddd eddd edddeddddeddddeddddeddddeddddeddddgZ dS)rz= SAK Use Parameter Set (802.1X-2010, section 11.11). zSAK Use Parameter Setrr#Z latest_key_anrr"Z latest_key_txr!Z latest_key_rxZ old_key_anZ old_key_txZ old_key_rxZplain_txZplain_rxXZ delay_protectrrRZlatest_key_key_server_member_idrrZlatest_key_key_numberr$Zlatest_key_lowest_acceptable_pnZold_key_key_server_member_idZold_key_key_numberZold_key_lowest_acceptable_pnN) rArBrCrDrEr rrrrHr3r3r3r4rSs*                   c @sxeZdZdZdZeddeedddeddded dded de d d dd e e dd dd dde dd e j d gZ dS)rzE Distributed SAK parameter set (802.1X-2010, section 11.11). zDistributed SAK parameter setrr$Zdistributed_anrr"Zconfidentiality_offsetrrZ key_numberrrZmacsec_cipher_suiter(cCs |jdkSrrrr3r3r4rrz"MKADistributedSAKParamSet.Zsak_aes_key_wrapN)rArBrCrDrEr rrrrrrrrHr3r3r3r4rvs$       c@sJeZdZdZdZeeddedddedd e d d e j d e d d gZ dS)MKADistributedCAKParamSetzE Distributed CAK Parameter Set (802.1X-2010, section 11.11). zDistributed CAK parameter setrr%r"rrrrZcak_aes_key_wraprrZ cak_key_nameN)rArBrCrDrErr rrrrrr rHr3r3r3r4rs&  rc@sBeZdZdZdZeeddedddedd e d d e j d gZ d S)rz+ ICV (802.1X-2010, section 11.11). ZICVrrr"rrrrZicvrrN) rArBrCrDrErr rrrrrrHr3r3r3r4rs  c@s$eZdZdZdZddZddZdS)MKAParamSetPacketListFieldz: PacketListField that handles the parameter sets. icCst|Sr.)r)r0rmr3r3r4m2iszMKAParamSetPacketListField.m2ic Cspg}|}|rhtd|ddd}|jj|@}|dd|}|d|d}|||}||q||fS)Nz!Hr"r$r)structunpackrPARAM_SET_LEN_MASKrappend) r0rr1lstZremainZ len_bytesZ param_set_lencurrentZcurrent_packetr3r3r4getfields   z#MKAParamSetPacketListField.getfieldN)rArBrCrDrrrr3r3r3r4rsrc@s4eZdZdZdZeddeedgegZ ddZ dS) MKAPDUz2 MACsec Key Agreement Protocol Data Unit. ZMKPDUZbasic_param_setrZparameter_setscCsd|fSrr3rr3r3r4r5szMKAPDU.extract_paddingN) rArBrCrDrErrrrrHr5r3r3r3r4rs    ri)r+z01:80:c2:00:00:03)dstr+)proto)rr%)ArD __future__rrrZ scapy.fieldsrrrrrr r r r r rrrrrrrrZ scapy.packetrrrZscapy.layers.l2rrrrrZ scapy.configrZ scapy.compatrr rFrGr)rrrrrrrrrrrrrrrrrrrrrrrr3r3r3r4s  P  1F X! ' # !