235 lines
5.7 KiB
C
235 lines
5.7 KiB
C
|
/*
|
|||
|
zip_source_pkware.c -- Traditional PKWARE de/encryption routines
|
|||
|
Copyright (C) 2009 Dieter Baron and Thomas Klausner
|
|||
|
|
|||
|
This file is part of libzip, a library to manipulate ZIP archives.
|
|||
|
The authors can be contacted at <libzip@nih.at>
|
|||
|
|
|||
|
Redistribution and use in source and binary forms, with or without
|
|||
|
modification, are permitted provided that the following conditions
|
|||
|
are met:
|
|||
|
1. Redistributions of source code must retain the above copyright
|
|||
|
notice, this list of conditions and the following disclaimer.
|
|||
|
2. Redistributions in binary form must reproduce the above copyright
|
|||
|
notice, this list of conditions and the following disclaimer in
|
|||
|
the documentation and/or other materials provided with the
|
|||
|
distribution.
|
|||
|
3. The names of the authors may not be used to endorse or promote
|
|||
|
products derived from this software without specific prior
|
|||
|
written permission.
|
|||
|
|
|||
|
THIS SOFTWARE IS PROVIDED BY THE AUTHORS ``AS IS'' AND ANY EXPRESS
|
|||
|
OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
|
|||
|
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|||
|
ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY
|
|||
|
DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|||
|
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE
|
|||
|
GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
|||
|
INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER
|
|||
|
IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
|
|||
|
OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
|||
|
IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|||
|
*/
|
|||
|
|
|||
|
|
|||
|
|
|||
|
#include <stdlib.h>
|
|||
|
#include <string.h>
|
|||
|
|
|||
|
#include "zipint.h"
|
|||
|
|
|||
|
struct trad_pkware {
|
|||
|
int e[2];
|
|||
|
|
|||
|
zip_uint32_t key[3];
|
|||
|
};
|
|||
|
|
|||
|
#define HEADERLEN 12
|
|||
|
#define KEY0 305419896
|
|||
|
#define KEY1 591751049
|
|||
|
#define KEY2 878082192
|
|||
|
|
|||
|
|
|||
|
|
|||
|
static void decrypt(struct trad_pkware *, zip_uint8_t *,
|
|||
|
const zip_uint8_t *, zip_uint64_t, int);
|
|||
|
static int decrypt_header(struct zip_source *, struct trad_pkware *);
|
|||
|
static zip_int64_t pkware_decrypt(struct zip_source *, void *, void *,
|
|||
|
zip_uint64_t, enum zip_source_cmd);
|
|||
|
static void pkware_free(struct trad_pkware *);
|
|||
|
|
|||
|
|
|||
|
|
|||
|
struct zip_source *
|
|||
|
zip_source_pkware(struct zip *za, struct zip_source *src,
|
|||
|
zip_uint16_t em, int flags, const char *password)
|
|||
|
{
|
|||
|
struct trad_pkware *ctx;
|
|||
|
struct zip_source *s2;
|
|||
|
|
|||
|
if (password == NULL || src == NULL || em != ZIP_EM_TRAD_PKWARE) {
|
|||
|
_zip_error_set(&za->error, ZIP_ER_INVAL, 0);
|
|||
|
return NULL;
|
|||
|
}
|
|||
|
if (flags & ZIP_CODEC_ENCODE) {
|
|||
|
_zip_error_set(&za->error, ZIP_ER_ENCRNOTSUPP, 0);
|
|||
|
return NULL;
|
|||
|
}
|
|||
|
|
|||
|
if ((ctx=(struct trad_pkware *)malloc(sizeof(*ctx))) == NULL) {
|
|||
|
_zip_error_set(&za->error, ZIP_ER_MEMORY, 0);
|
|||
|
return NULL;
|
|||
|
}
|
|||
|
|
|||
|
ctx->e[0] = ctx->e[1] = 0;
|
|||
|
|
|||
|
ctx->key[0] = KEY0;
|
|||
|
ctx->key[1] = KEY1;
|
|||
|
ctx->key[2] = KEY2;
|
|||
|
decrypt(ctx, NULL, (const zip_uint8_t *)password, strlen(password), 1);
|
|||
|
|
|||
|
if ((s2=zip_source_layered(za, src, pkware_decrypt, ctx)) == NULL) {
|
|||
|
pkware_free(ctx);
|
|||
|
return NULL;
|
|||
|
}
|
|||
|
|
|||
|
return s2;
|
|||
|
}
|
|||
|
|
|||
|
|
|||
|
|
|||
|
static void
|
|||
|
decrypt(struct trad_pkware *ctx, zip_uint8_t *out, const zip_uint8_t *in,
|
|||
|
zip_uint64_t len, int update_only)
|
|||
|
{
|
|||
|
zip_uint16_t tmp;
|
|||
|
zip_uint64_t i;
|
|||
|
Bytef b;
|
|||
|
|
|||
|
for (i=0; i<len; i++) {
|
|||
|
b = in[i];
|
|||
|
|
|||
|
if (!update_only) {
|
|||
|
/* decrypt next byte */
|
|||
|
tmp = (zip_uint16_t)(ctx->key[2] | 2);
|
|||
|
tmp = (tmp * (tmp ^ 1)) >> 8;
|
|||
|
b ^= tmp;
|
|||
|
}
|
|||
|
|
|||
|
/* store cleartext */
|
|||
|
if (out)
|
|||
|
out[i] = b;
|
|||
|
|
|||
|
/* update keys */
|
|||
|
ctx->key[0] = (zip_uint32_t)crc32(ctx->key[0] ^ 0xffffffffUL, &b, 1) ^ 0xffffffffUL;
|
|||
|
ctx->key[1] = (ctx->key[1] + (ctx->key[0] & 0xff)) * 134775813 + 1;
|
|||
|
b = ctx->key[1] >> 24;
|
|||
|
ctx->key[2] = (zip_uint32_t)crc32(ctx->key[2] ^ 0xffffffffUL, &b, 1) ^ 0xffffffffUL;
|
|||
|
}
|
|||
|
}
|
|||
|
|
|||
|
|
|||
|
|
|||
|
static int
|
|||
|
decrypt_header(struct zip_source *src, struct trad_pkware *ctx)
|
|||
|
{
|
|||
|
zip_uint8_t header[HEADERLEN];
|
|||
|
struct zip_stat st;
|
|||
|
zip_int64_t n;
|
|||
|
unsigned short dostime, dosdate;
|
|||
|
|
|||
|
if ((n=zip_source_read(src, header, HEADERLEN)) < 0) {
|
|||
|
zip_source_error(src, ctx->e, ctx->e+1);
|
|||
|
return -1;
|
|||
|
}
|
|||
|
|
|||
|
if (n != HEADERLEN) {
|
|||
|
ctx->e[0] = ZIP_ER_EOF;
|
|||
|
ctx->e[1] = 0;
|
|||
|
return -1;
|
|||
|
}
|
|||
|
|
|||
|
decrypt(ctx, header, header, HEADERLEN, 0);
|
|||
|
|
|||
|
if (zip_source_stat(src, &st) < 0) {
|
|||
|
/* stat failed, skip password validation */
|
|||
|
return 0;
|
|||
|
}
|
|||
|
|
|||
|
_zip_u2d_time(st.mtime, &dostime, &dosdate);
|
|||
|
|
|||
|
if (header[HEADERLEN-1] != st.crc>>24
|
|||
|
&& header[HEADERLEN-1] != dostime>>8) {
|
|||
|
ctx->e[0] = ZIP_ER_WRONGPASSWD;
|
|||
|
ctx->e[1] = 0;
|
|||
|
return -1;
|
|||
|
}
|
|||
|
|
|||
|
return 0;
|
|||
|
}
|
|||
|
|
|||
|
|
|||
|
|
|||
|
static zip_int64_t
|
|||
|
pkware_decrypt(struct zip_source *src, void *ud, void *data,
|
|||
|
zip_uint64_t len, enum zip_source_cmd cmd)
|
|||
|
{
|
|||
|
struct trad_pkware *ctx;
|
|||
|
zip_int64_t n;
|
|||
|
|
|||
|
ctx = (struct trad_pkware *)ud;
|
|||
|
|
|||
|
switch (cmd) {
|
|||
|
case ZIP_SOURCE_OPEN:
|
|||
|
if (decrypt_header(src, ctx) < 0)
|
|||
|
return -1;
|
|||
|
return 0;
|
|||
|
|
|||
|
case ZIP_SOURCE_READ:
|
|||
|
if ((n=zip_source_read(src, data, len)) < 0)
|
|||
|
return ZIP_SOURCE_ERR_LOWER;
|
|||
|
|
|||
|
decrypt((struct trad_pkware *)ud, (zip_uint8_t *)data, (zip_uint8_t *)data, (zip_uint64_t)n,
|
|||
|
0);
|
|||
|
return n;
|
|||
|
|
|||
|
case ZIP_SOURCE_CLOSE:
|
|||
|
return 0;
|
|||
|
|
|||
|
case ZIP_SOURCE_STAT:
|
|||
|
{
|
|||
|
struct zip_stat *st;
|
|||
|
|
|||
|
st = (struct zip_stat *)data;
|
|||
|
|
|||
|
st->encryption_method = ZIP_EM_NONE;
|
|||
|
st->valid |= ZIP_STAT_ENCRYPTION_METHOD;
|
|||
|
/* TODO: deduce HEADERLEN from size for uncompressed */
|
|||
|
if (st->valid & ZIP_STAT_COMP_SIZE)
|
|||
|
st->comp_size -= HEADERLEN;
|
|||
|
}
|
|||
|
return 0;
|
|||
|
|
|||
|
case ZIP_SOURCE_ERROR:
|
|||
|
memcpy(data, ctx->e, sizeof(int)*2);
|
|||
|
return sizeof(int)*2;
|
|||
|
|
|||
|
case ZIP_SOURCE_FREE:
|
|||
|
pkware_free(ctx);
|
|||
|
return 0;
|
|||
|
|
|||
|
default:
|
|||
|
ctx->e[0] = ZIP_ER_INVAL;
|
|||
|
ctx->e[1] = 0;
|
|||
|
return -1;
|
|||
|
}
|
|||
|
}
|
|||
|
|
|||
|
|
|||
|
|
|||
|
static void
|
|||
|
pkware_free(struct trad_pkware *ctx)
|
|||
|
{
|
|||
|
free(ctx);
|
|||
|
}
|