DIRECTORY DESFace USING [ Block, CBCCheckEncrypt, CorrectParity, EncryptBlock, GetRandomIV, GetRandomKey, IV, Key, nullKey ], NameDB USING [ Authenticate, IsAuthenticated ], NamesRPC, Rope USING [ Length ], RPC USING [ AuthenticateFailed, ConversationLevel, EncryptionKey, maxPrincipalLength, Principal ], RPCInternal USING [ Authenticator, AuthenticatorObject, ConversationObject, CopyPrincipal, EntryGenerate ] ; NamesGVAuthImpl: CEDAR PROGRAM IMPORTS DESFace, NameDB, Rope, RPC, RPCInternal EXPORTS NamesRPC, RPC = { Conversation: TYPE = REF ConversationObject; ConversationObject: PUBLIC TYPE = RPCInternal.ConversationObject; Authenticator: TYPE = RPCInternal.Authenticator; -- The rest is encrypted with CBC-check using a zero IV -- AuthenticatorLayout: TYPE = MACHINE DEPENDENT RECORD[ ky(0): DESFace.Key, kySpare(4): DESFace.Key, -- space for larger keys! -- ck(8): DESFace.Key, ckSpare(12): DESFace.Key, -- space for larger keys! -- time(16): LONG CARDINAL, a(18): StringBody]; StartConversation: PUBLIC PROC[ caller: RPC.Principal, key: RPC.EncryptionKey, callee: RPC.Principal, level: RPC.ConversationLevel] RETURNS[ conversation: Conversation] = TRUSTED { authenticator: Authenticator; convKey: DESFace.Key; iv: DESFace.IV; nBlks: CARDINAL =( SIZE[AuthenticatorLayout] - SIZE[StringBody[0]] + SIZE[StringBody[caller.Length[]]] + SIZE[DESFace.Block]-1 --rounding-- ) / SIZE[DESFace.Block]; IF caller.Length[] > RPC.maxPrincipalLength THEN ERROR RPC.AuthenticateFailed[badCaller]; IF callee.Length[] > RPC.maxPrincipalLength THEN ERROR RPC.AuthenticateFailed[badCallee]; SELECT NameDB.Authenticate[rName: caller, key: key] FROM $unknown => ERROR RPC.AuthenticateFailed[communications]; $nonexistent => ERROR RPC.AuthenticateFailed[badCaller]; $bogus, $perhaps => ERROR RPC.AuthenticateFailed[badKey]; $authentic => NULL; ENDCASE => ERROR; SELECT NameDB.IsAuthenticated[callee] FROM $unknown => ERROR RPC.AuthenticateFailed[communications]; $nonexistent => ERROR RPC.AuthenticateFailed[badCallee]; $bogus, $perhaps, $authentic => NULL; ENDCASE => ERROR; iv _ DESFace.GetRandomIV[]; authenticator _ NEW[RPCInternal.AuthenticatorObject[nBlks]]; BEGIN kb: DESFace.Key _ DESFace.nullKey -- !!! --; authRec: LONG POINTER TO AuthenticatorLayout = LOOPHOLE[@authenticator[0]]; authRec.ky _ DESFace.GetRandomKey[]; authRec.ck _ convKey _ DESFace.GetRandomKey[]; authRec.time _ 0; RPCInternal.CopyPrincipal[from: caller, to: @(authRec.a)]; DESFace.CorrectParity[@kb]; DESFace.EncryptBlock[key: kb, from: LOOPHOLE[@authRec.ck], to: LOOPHOLE[@authRec.ck] ]; DESFace.CBCCheckEncrypt[key: authRec.ky, nBlks: nBlks-2, from: LOOPHOLE[@authRec.ck], to: LOOPHOLE[@authRec.ck], seed: [0,0,0,0] ]; DESFace.EncryptBlock[key: kb, from: LOOPHOLE[@authRec.ky], to: LOOPHOLE[@authRec.ky] ]; END; RETURN[RPCInternal.EntryGenerate[level, iv, caller, callee, convKey, authenticator]]; }; }. „NamesGVAuthImpl.Mesa Copyright Ó 1985, 1986, 1987 by Xerox Corporation. All rights reserved. Last modified by Swinehart, April 2, 1987 4:50:39 pm PST for A talking to B using key CK, contains: {KY}KB, spare, { {CK}KB, spare, time, A }KY . The keys are single cipher blocks. Preliminaries Here's the authenticate portion Here's the linkage to the RPC data structures. Swinehart, May 9, 1986 11:41:17 am PDT Convert to new communications package changes to: DIRECTORY, NamesGVAuthImpl, StartConversation Swinehart, April 2, 1987 4:49:30 pm PST Use NameDB database instead of previous NamesGV one. changes to: DIRECTORY, StartConversation ÊŽ˜šœ™IcodešœH™HJšœ8™8—J˜šÏk ˜ JšœœSœ˜sJšœœ#˜/J˜ Jšœœ˜JšœœY˜bJšœœY˜jJ˜J˜—šœ ˜Jšœœ ˜/Jšœ˜J˜Jšœœœ˜,Jšœœ"˜A—J˜šœœ˜0Jšœ*™*Jšœ-™-Jšœ"™"JšÏc:˜:—J˜š œœœ œœ˜5Jšœ˜Jšœž˜6Jšœ˜Jšœž˜6Jšœ œœ˜Jšœ˜—J˜šÏnœœœ˜Jš œœœœœ˜cJšœ œ˜0J˜J˜Jšœœ˜™ šœœœ˜.Jšœ˜Jšœ˜#Jšœžœœ˜;—šœ*˜0Jšœ#˜(—šœ*˜0Jšœ#˜(——šœ™šœ.˜8Jšœœœ$˜9Jšœœœ˜8Jšœœœ˜9Jšœœ˜Jšœœ˜—šœ ˜*Jšœœœ$˜9Jšœœœ˜8Jšœ œ˜%Jšœœ˜—J˜Jšœœ)˜<š˜Jšœ"ž œ˜,Jš œ œœœœ˜KJšœ$˜$Jšœ.˜.Jšœ˜Jšœ:˜:Jšœ˜šœ˜Jšœœ˜Jšœœ˜—šœ(˜(Jšœ˜Jšœœ˜Jšœœ˜Jšœ˜—šœ˜Jšœœ˜Jšœœ˜—Jšœ˜——šœ.™.JšœO˜U—J˜—J˜™&K™%KšœÏr-™9—™'K™4Kšœ ™(—K™—…—bt