annotate lisp/net/sasl-digest.el @ 106619:528f9cf7298f

Update dependencies in Makefile.in. (alloc.o): Depend on termhooks.h. (atimer.o): Depend on blockinput.h. (buffer.o): Depend on indent.h, keyboard.h, coding.h, keymap.h, and frame.h. (callint.o): Depend on systime.h, coding.h, and composite.h. (callproc.o): Depend on buffer.h. (casefiddle.o): Don't depend on charset.h. (casetab.o): Depend on character.h. (ccl.o): Depend on composite.h. (chartab.o): Depend on ccl.h. (cm.o): Depend on dispextern.h. (cmds.o): Depend on systime.h, coding.h, frame.h, and composite.h. (coding.o): Don't depend on $(INTERVALS_H). (composite.o): Don't depend on dispextern.h explicitly (it's in $(INTERVALS_H)). Depend on ccl.h. (data.o): Depend on systime.h, coding.h, composite.h, dispextern.h, font.h, and ccl.h. (dired.o): Depend on composite.h. (dispnew.o): Depend on coding.h. Don't depend explicitly on composite.h (it's in $(INTERVALS_H)). (doc.o): Depend on systime.h, coding.h, and composite.h. (editfns.o): Don't depend explicitly on dispextern.h. (emacs.o): Depend on frame.h and coding.h. (eval.o): Depend on coding.h, composite.h, and xterm.h. (fileio.o): Depend on frame.h and commands.h. Don't depend explicitly on dispextern.h. (filelock.o): Don't depend on epaths.h and charset.h. Depend on composite.h. (fns.o): Don't depend on termhooks.h. (font.o): Depend on buffer.h, composite.h, fontset.h, and xterm.h. (fontset.o): Depend on blockinput.h, atimer.h, systime.h, coding.h, $(INTERVALS_H), window.h, xterm.h. (frame.o): Depend on coding.h, composite.h, termhooks.h, and ccl.h. (fringe.o): Depend on blockinput.h, atimer.h, and systime.h. (ftfont.o): Depend on blockinput.h, atimer.h, systime.h, coding.h, fontset.h, ccl.h, and ftfont.h. (ftxfont.o): Depend on atimer.h, systime.h, fontset.h, and ccl.h. (gtkutil.o): Depend on dispextern.h and composite.h. (image.o): Depend on epaths.h, character.h, coding.h, composite.h, termhooks.h, and ccl.h. (indent.o): Depend on systime.h, coding.h, and $(INTERVALS_H). (intervals.o): Depend on systime.h and coding.h. (keyboard.o): Depend on composite.h and coding.h. (keymap.o): Depend on coding.h and frame.h. (lread.o): Depend on systime.h, frame.h, blockinput.h, and atimer.h. (macros.o): Depend on systime.h, coding.h, and composite.h. (menu.o): Depend on systime.h, coding.h, composite.h, window.h, and atimer.h. (minibuf.o): Depend on systime.h and coding.h. Don't depend on dispextern.h explicitly. (print.o): Depend on termhooks.h, coding.h, and ccl.h. Don't depend explicitly on dispextern.h and composite.h. (process.o): Depend on character.h, xgselect.h, and sysselect.h. (regex.o): Don't depend on charset.h. (scroll.o): Depend on systime.h, coding.h, composite.h, and window.h. (search.o): Don't depend explicitly on composite.h. (sound.o): Depend on atimer.h and systime.h. (syntax.o): Don't depend explicitly on composite.h. (sysdep.o): Depend on coding.h and composite.h. (term.o): Depend on xterm.h and buffer.h. (terminal.o): Depend on dispextern.h, composite.h, and systime.h. (textprop.o): Don't depend on dispextern.h explicitly. (undo.o): Depend on dispextern.h. (window.o): Depend on coding.h and termhooks.h. Don't depend on dispextern.h and composite.h explicitly. (xdisp.o): Depend on ccl.h. (xfaces.o): Depend on coding.h and ccl.h. (xfns.o): Depend on $(INTERVALS_H) and ccl.h. (xfont.o): Depend on atimer.h, systime.h, fontset.h, and ccl.h. (xftfont.o): Depend on atimer.h, systime.h, fontset.h, ccl.h, and ftfont.h. (xgselect.o): New dependency. (xmenu.o): Depend on composite.h, keymap.h, and sysselect.h. (xselect.o): Depend on keyboard.h, coding.h, and composite.h. (xsettings.o): Depend on dispextern.h, keyboard.h, systime.h, coding.h, composite.h, blockinput.h, atimer.h, and termopts.h. (xsmfns.o): Depend on frame.h and dispextern.h. (xterm.o): Depend on intervals.h, keymap.h, xgselect.h, and sysselect.h.

;;; sasl-digest.el --- DIGEST-MD5 module for the SASL client framework

;; Copyright (C) 2000, 2007, 2008, 2009  Free Software Foundation, Inc.

;; Author: Daiki Ueno <[e-mail]>
;;	Kenichi OKADA <[e-mail]>
;; Keywords: SASL, DIGEST-MD5

;; This file is part of GNU Emacs.

;; GNU Emacs is free software: you can redistribute it and/or modify
;; it under the terms of the GNU General Public License as published by
;; the Free Software Foundation, either version 3 of the License, or
;; (at your option) any later version.

;; GNU Emacs is distributed in the hope that it will be useful,
;; but WITHOUT ANY WARRANTY; without even the implied warranty of
;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;; GNU General Public License for more details.

;; You should have received a copy of the GNU General Public License
;; along with GNU Emacs.  If not, see <http://www.gnu.org/licenses/>.

;;; Commentary:

;; This program is implemented from draft-leach-digest-sasl-05.txt.
;;
;; It is caller's responsibility to base64-decode challenges and
;; base64-encode responses in IMAP4 AUTHENTICATE command.
;;
;; Passphrase should be longer than 16 bytes. (See RFC 2195)

;;; Commentary:

(require 'sasl)
(require 'hmac-md5)

(defvar sasl-digest-md5-nonce-count 1)
(defvar sasl-digest-md5-unique-id-function
  sasl-unique-id-function)

(defvar sasl-digest-md5-syntax-table
  (let ((table (make-syntax-table)))
    (modify-syntax-entry ?= "." table)
    (modify-syntax-entry ?, "." table)
    table)
  "A syntax table for parsing digest-challenge attributes.")

(defconst sasl-digest-md5-steps
  '(ignore				;no initial response
    sasl-digest-md5-response
    ignore))				;""

(defun sasl-digest-md5-parse-string (string)
  "Parse STRING and return a property list.
The value is a cons cell of the form \(realm nonce qop-options stale maxbuf
charset algorithm cipher-opts auth-param)."
  (with-temp-buffer
    (set-syntax-table sasl-digest-md5-syntax-table)
    (save-excursion
      (insert string)
      (goto-char (point-min))
      (insert "(")
      (while (progn (forward-sexp) (not (eobp)))
	(delete-char 1)
	(insert " "))
      (insert ")")
      (read (point-min-marker)))))

(defun sasl-digest-md5-digest-uri (serv-type host &optional serv-name)
  (concat serv-type "/" host
	  (if (and serv-name
		   (not (string= host serv-name)))
	      (concat "/" serv-name))))

(defun sasl-digest-md5-cnonce ()
  (let ((sasl-unique-id-function sasl-digest-md5-unique-id-function))
    (sasl-unique-id)))

(defun sasl-digest-md5-response-value (username
				       realm
				       nonce
				       cnonce
				       nonce-count
				       qop
				       digest-uri
				       authzid)
  (let ((passphrase
	 (sasl-read-passphrase
	  (format "DIGEST-MD5 passphrase for %s: "
		  username))))
    (unwind-protect
	(encode-hex-string
	 (md5-binary
	  (concat
	   (encode-hex-string
	    (md5-binary (concat (md5-binary 
				 (concat username ":" realm ":" passphrase))
				":" nonce ":" cnonce
				(if authzid 
				    (concat ":" authzid)))))
	   ":" nonce
	   ":" (format "%08x" nonce-count) ":" cnonce ":" qop ":"
	   (encode-hex-string
	    (md5-binary
	     (concat "AUTHENTICATE:" digest-uri
		     (if (member qop '("auth-int" "auth-conf"))
			 ":00000000000000000000000000000000")))))))
      (fillarray passphrase 0))))

(defun sasl-digest-md5-response (client step)
  (let* ((plist
	  (sasl-digest-md5-parse-string (sasl-step-data step)))
	 (realm
	  (or (sasl-client-property client 'realm)
	      (plist-get plist 'realm))) ;need to check
	 (nonce-count
	  (or (sasl-client-property client 'nonce-count)
	       sasl-digest-md5-nonce-count))
	 (qop
	  (or (sasl-client-property client 'qop)
	      "auth"))
	 (digest-uri
	  (sasl-digest-md5-digest-uri
	   (sasl-client-service client)(sasl-client-server client)))
	 (cnonce
	  (or (sasl-client-property client 'cnonce)
	      (sasl-digest-md5-cnonce))))
    (sasl-client-set-property client 'nonce-count (1+ nonce-count))
    (unless (string= qop "auth")
      (sasl-error (format "Unsupported \"qop-value\": %s" qop)))
    (concat
     "username=\"" (sasl-client-name client) "\","
     "realm=\"" realm "\","
     "nonce=\"" (plist-get plist 'nonce) "\","
     "cnonce=\"" cnonce "\","
     (format "nc=%08x," nonce-count)
     "digest-uri=\"" digest-uri "\","
     "qop=" qop ","
     "response="
     (sasl-digest-md5-response-value
      (sasl-client-name client)
      realm
      (plist-get plist 'nonce)
      cnonce
      nonce-count
      qop
      digest-uri
      (plist-get plist 'authzid)))))

(put 'sasl-digest 'sasl-mechanism
     (sasl-make-mechanism "DIGEST-MD5" sasl-digest-md5-steps))

(provide 'sasl-digest)

;; arch-tag: 786e02ed-1bc4-4b3c-bf34-96c27e31084d
;;; sasl-digest.el ends here