1790 lines
46 KiB
C++
1790 lines
46 KiB
C++
/*++
|
|
|
|
Copyright (c) 1996, 1997 Microsoft Corporation
|
|
|
|
Module Name:
|
|
|
|
crypt32.cpp
|
|
|
|
Abstract:
|
|
|
|
This module contains routines associated with server side Crypt32
|
|
operations.
|
|
|
|
Author:
|
|
|
|
Scott Field (sfield) 14-Aug-97
|
|
|
|
--*/
|
|
|
|
#include <pch.cpp>
|
|
#pragma hdrstop
|
|
#include <msaudite.h>
|
|
|
|
|
|
|
|
#define SECURITY_WIN32
|
|
#include <security.h>
|
|
|
|
#define CRYPTPROTECT_SVR_VERSION_1 0x01
|
|
|
|
DWORD
|
|
CPSCreateServerContext(
|
|
PCRYPT_SERVER_CONTEXT pServerContext,
|
|
handle_t hBinding
|
|
);
|
|
|
|
DWORD
|
|
CPSDeleteServerContext(
|
|
PCRYPT_SERVER_CONTEXT pServerContext
|
|
);
|
|
|
|
|
|
|
|
|
|
GUID g_guidDefaultProvider = CRYPTPROTECT_DEFAULT_PROVIDER;
|
|
|
|
|
|
|
|
//
|
|
// routines to initialize and destroy server state associated with
|
|
// server callbacks and performance improvements.
|
|
//
|
|
|
|
DWORD
|
|
CPSCreateServerContext(
|
|
PCRYPT_SERVER_CONTEXT pServerContext,
|
|
handle_t hBinding
|
|
)
|
|
{
|
|
DWORD dwLastError = ERROR_SUCCESS;
|
|
|
|
__try {
|
|
|
|
|
|
ZeroMemory( pServerContext, sizeof(CRYPT_SERVER_CONTEXT) );
|
|
|
|
pServerContext->cbSize = sizeof(CRYPT_SERVER_CONTEXT);
|
|
pServerContext->hBinding = hBinding;
|
|
|
|
pServerContext->fImpersonating = FALSE;
|
|
|
|
if(NULL != hBinding)
|
|
{
|
|
dwLastError = RpcImpersonateClient( hBinding );
|
|
if(ERROR_SUCCESS != dwLastError)
|
|
{
|
|
return dwLastError;
|
|
}
|
|
}
|
|
|
|
//
|
|
// Grab the thread token.
|
|
//
|
|
if(OpenThreadToken(
|
|
GetCurrentThread(),
|
|
TOKEN_QUERY | TOKEN_IMPERSONATE | TOKEN_DUPLICATE,
|
|
TRUE,
|
|
&pServerContext->hToken
|
|
))
|
|
{
|
|
pServerContext->fImpersonating = (NULL == hBinding);
|
|
}
|
|
else
|
|
{
|
|
HANDLE hProcessToken = NULL;
|
|
if(OpenProcessToken(GetCurrentProcess(),
|
|
TOKEN_QUERY | TOKEN_IMPERSONATE | TOKEN_DUPLICATE,
|
|
&hProcessToken))
|
|
{
|
|
if(!DuplicateTokenEx(hProcessToken,
|
|
0,
|
|
NULL,
|
|
SecurityImpersonation,
|
|
TokenImpersonation,
|
|
&pServerContext->hToken))
|
|
{
|
|
dwLastError = GetLastError();
|
|
}
|
|
|
|
CloseHandle(hProcessToken);
|
|
}
|
|
else
|
|
{
|
|
dwLastError = GetLastError();
|
|
}
|
|
}
|
|
if(hBinding)
|
|
{
|
|
RpcRevertToSelfEx( hBinding );
|
|
}
|
|
|
|
|
|
} __except(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
dwLastError = GetExceptionCode();
|
|
// TODO: for NT, convert exception code to winerror.
|
|
// for 95, just override to access violation.
|
|
}
|
|
|
|
return dwLastError;
|
|
}
|
|
|
|
DWORD
|
|
CPSDeleteServerContext(
|
|
PCRYPT_SERVER_CONTEXT pServerContext
|
|
)
|
|
{
|
|
if(pServerContext->szUserStorageArea)
|
|
{
|
|
SSFree(pServerContext->szUserStorageArea);
|
|
pServerContext->szUserStorageArea = NULL;
|
|
}
|
|
if(pServerContext->hToken)
|
|
{
|
|
CloseHandle(pServerContext->hToken);
|
|
}
|
|
|
|
|
|
if(pServerContext->cbSize == sizeof(CRYPT_SERVER_CONTEXT))
|
|
ZeroMemory( pServerContext, sizeof(CRYPT_SERVER_CONTEXT) );
|
|
|
|
|
|
return ERROR_SUCCESS;
|
|
}
|
|
|
|
DWORD
|
|
WINAPI
|
|
CPSDuplicateContext(
|
|
IN PVOID pvContext,
|
|
IN OUT PVOID *ppvDuplicateContext
|
|
)
|
|
/*++
|
|
|
|
Duplicate an outstanding server context so that a provider may defer
|
|
processing associated with the outstanding context until a later time.
|
|
|
|
This is used to support asynchronous operations on behalf of the caller
|
|
to the Data Protection API.
|
|
|
|
The caller MUST be impersonating the security context of the client user
|
|
prior to making this call.
|
|
|
|
--*/
|
|
{
|
|
PCRYPT_SERVER_CONTEXT pServerContext = (PCRYPT_SERVER_CONTEXT)pvContext;
|
|
PCRYPT_SERVER_CONTEXT pNewContext = NULL;
|
|
|
|
HANDLE hToken = NULL;
|
|
HANDLE hDuplicateToken;
|
|
BOOL fSuccess = FALSE;
|
|
DWORD dwLastError = ERROR_SUCCESS;
|
|
|
|
if( pServerContext == NULL ||
|
|
pServerContext->cbSize != sizeof(CRYPT_SERVER_CONTEXT) ||
|
|
ppvDuplicateContext == NULL
|
|
) {
|
|
return ERROR_INVALID_PARAMETER;
|
|
}
|
|
|
|
pNewContext = (PCRYPT_SERVER_CONTEXT)SSAlloc( sizeof( CRYPT_SERVER_CONTEXT ) );
|
|
if( pNewContext == NULL )
|
|
return ERROR_NOT_ENOUGH_SERVER_MEMORY;
|
|
|
|
CopyMemory( pNewContext, pServerContext, sizeof(CRYPT_SERVER_CONTEXT) );
|
|
pNewContext->hBinding = NULL;
|
|
|
|
if(pServerContext->szUserStorageArea)
|
|
{
|
|
pNewContext->szUserStorageArea = (LPWSTR)SSAlloc((wcslen(pServerContext->szUserStorageArea)+1)*
|
|
sizeof(WCHAR));
|
|
if(NULL != pNewContext->szUserStorageArea)
|
|
{
|
|
wcscpy(pNewContext->szUserStorageArea, pServerContext->szUserStorageArea);
|
|
}
|
|
}
|
|
|
|
fSuccess = DuplicateTokenEx(pServerContext->hToken,
|
|
0,
|
|
NULL,
|
|
SecurityImpersonation,
|
|
TokenImpersonation,
|
|
&pNewContext->hToken);
|
|
|
|
if( !fSuccess )
|
|
{
|
|
dwLastError = GetLastError();
|
|
pNewContext->hToken = NULL;
|
|
|
|
CPSFreeContext( pNewContext );
|
|
} else {
|
|
*ppvDuplicateContext = pNewContext;
|
|
}
|
|
|
|
return dwLastError;
|
|
}
|
|
|
|
DWORD
|
|
WINAPI
|
|
CPSFreeContext(
|
|
IN PVOID pvDuplicateContext
|
|
)
|
|
{
|
|
PCRYPT_SERVER_CONTEXT pServerContext = (PCRYPT_SERVER_CONTEXT)pvDuplicateContext;
|
|
|
|
if( pServerContext == NULL ||
|
|
pServerContext->cbSize != sizeof(CRYPT_SERVER_CONTEXT)
|
|
) {
|
|
return ERROR_INVALID_PARAMETER;
|
|
}
|
|
|
|
if( pServerContext->hToken )
|
|
CloseHandle( pServerContext->hToken );
|
|
|
|
if(pServerContext->szUserStorageArea)
|
|
{
|
|
SSFree(pServerContext->szUserStorageArea);
|
|
pServerContext->szUserStorageArea = NULL;
|
|
}
|
|
|
|
ZeroMemory( pServerContext, sizeof(CRYPT_SERVER_CONTEXT) );
|
|
SSFree( pServerContext );
|
|
|
|
return ERROR_SUCCESS;
|
|
}
|
|
|
|
DWORD
|
|
WINAPI
|
|
CPSImpersonateClient(
|
|
IN PVOID pvContext
|
|
)
|
|
{
|
|
PCRYPT_SERVER_CONTEXT pServerContext = (PCRYPT_SERVER_CONTEXT)pvContext;
|
|
DWORD dwLastError = ERROR_INVALID_PARAMETER;
|
|
|
|
if( pvContext == NULL )
|
|
return ERROR_SUCCESS;
|
|
|
|
if( pServerContext->cbSize == sizeof(CRYPT_SERVER_CONTEXT) ) {
|
|
|
|
if(!FIsWinNT())
|
|
return ERROR_SUCCESS;
|
|
|
|
if( pServerContext->fOverrideToLocalSystem ) {
|
|
if(ImpersonateSelf(SecurityImpersonation)) {
|
|
dwLastError = ERROR_SUCCESS;
|
|
} else {
|
|
dwLastError = GetLastError();
|
|
D_DebugLog((DEB_WARN, "Failed ImpersonateSelf call: 0x%x\n", dwLastError));
|
|
}
|
|
|
|
} else {
|
|
|
|
//
|
|
// duplicated server context has access token included; use it directly
|
|
//
|
|
|
|
if( pServerContext->hToken ) {
|
|
if(!SetThreadToken( NULL, pServerContext->hToken ))
|
|
{
|
|
dwLastError = GetLastError();
|
|
D_DebugLog((DEB_WARN, "Failed SetThreadToken call: 0x%x\n", dwLastError));
|
|
}
|
|
|
|
dwLastError = ERROR_SUCCESS;
|
|
goto cleanup;
|
|
}
|
|
if(pServerContext->hBinding)
|
|
{
|
|
dwLastError = RpcImpersonateClient( pServerContext->hBinding );
|
|
}
|
|
else
|
|
{
|
|
dwLastError = ERROR_INVALID_PARAMETER;
|
|
}
|
|
}
|
|
}
|
|
|
|
cleanup:
|
|
|
|
#if DBG
|
|
if(NT_SUCCESS(dwLastError) && (DPAPIInfoLevel & DEB_TRACE))
|
|
{
|
|
BYTE rgbTemp[256];
|
|
PTOKEN_USER pUser = (PTOKEN_USER)rgbTemp;
|
|
DWORD cbRetInfo;
|
|
UNICODE_STRING ucsSid;
|
|
HANDLE hToken;
|
|
NTSTATUS Status;
|
|
|
|
Status = NtOpenThreadToken(NtCurrentThread(), TOKEN_QUERY, TRUE, &hToken);
|
|
if(NT_SUCCESS(Status))
|
|
{
|
|
Status = NtQueryInformationToken(hToken,
|
|
TokenUser,
|
|
pUser,
|
|
256,
|
|
&cbRetInfo);
|
|
if(NT_SUCCESS(Status))
|
|
{
|
|
if(NT_SUCCESS(RtlConvertSidToUnicodeString(&ucsSid, pUser->User.Sid, TRUE)))
|
|
{
|
|
D_DebugLog((DEB_TRACE, "Impersonating user:%ls\n", ucsSid.Buffer));
|
|
RtlFreeUnicodeString(&ucsSid);
|
|
}
|
|
}
|
|
else
|
|
{
|
|
D_DebugLog((DEB_ERROR, "Unable read user info: 0x%x\n", Status));
|
|
}
|
|
}
|
|
else
|
|
{
|
|
D_DebugLog((DEB_ERROR, "Unable to open thread token: 0x%x\n", Status));
|
|
}
|
|
}
|
|
#endif
|
|
|
|
if(!NT_SUCCESS(dwLastError))
|
|
{
|
|
D_DebugLog((DEB_WARN, "CPSImpersonateClient returned 0x%x\n", dwLastError));
|
|
}
|
|
|
|
return dwLastError;
|
|
}
|
|
|
|
DWORD
|
|
WINAPI
|
|
CPSRevertToSelf(
|
|
IN PVOID pvContext
|
|
)
|
|
{
|
|
PCRYPT_SERVER_CONTEXT pServerContext = (PCRYPT_SERVER_CONTEXT)pvContext;
|
|
DWORD dwLastError = ERROR_INVALID_PARAMETER;
|
|
|
|
if( pvContext == NULL )
|
|
return ERROR_SUCCESS;
|
|
|
|
if( pServerContext->cbSize == sizeof(CRYPT_SERVER_CONTEXT) ) {
|
|
|
|
if(!FIsWinNT())
|
|
return ERROR_SUCCESS;
|
|
|
|
if( pServerContext->fOverrideToLocalSystem || pServerContext->hToken ) {
|
|
|
|
if(RevertToSelf()) {
|
|
dwLastError = ERROR_SUCCESS;
|
|
} else {
|
|
dwLastError = GetLastError();
|
|
}
|
|
|
|
} else {
|
|
if(pServerContext->hBinding)
|
|
{
|
|
dwLastError = RpcRevertToSelfEx( pServerContext->hBinding );
|
|
}
|
|
else
|
|
{
|
|
dwLastError = ERROR_INVALID_PARAMETER;
|
|
}
|
|
}
|
|
}
|
|
|
|
return dwLastError;
|
|
}
|
|
|
|
|
|
DWORD
|
|
WINAPI
|
|
CPSOverrideToLocalSystem(
|
|
IN PVOID pvContext,
|
|
IN BOOL *pfLocalSystem, // if non-null, new over ride BOOL
|
|
IN OUT BOOL *pfCurrentlyLocalSystem // if non-null, prior over ride BOOL
|
|
)
|
|
{
|
|
PCRYPT_SERVER_CONTEXT pServerContext = (PCRYPT_SERVER_CONTEXT)pvContext;
|
|
|
|
if( pServerContext == NULL ||
|
|
pServerContext->cbSize != sizeof(CRYPT_SERVER_CONTEXT)
|
|
) {
|
|
return ERROR_INVALID_PARAMETER;
|
|
}
|
|
|
|
if( pfCurrentlyLocalSystem )
|
|
*pfCurrentlyLocalSystem = pServerContext->fOverrideToLocalSystem;
|
|
|
|
if( pfLocalSystem )
|
|
pServerContext->fOverrideToLocalSystem = *pfLocalSystem;
|
|
|
|
return ERROR_SUCCESS;
|
|
}
|
|
|
|
|
|
DWORD
|
|
CPSDuplicateClientAccessToken(
|
|
IN PVOID pvContext, // server context
|
|
IN OUT HANDLE *phToken
|
|
)
|
|
{
|
|
HANDLE hToken = NULL;
|
|
HANDLE hDuplicateToken;
|
|
DWORD dwLastError = ERROR_SUCCESS;
|
|
BOOL fSuccess;
|
|
|
|
*phToken = NULL;
|
|
|
|
//
|
|
// make a duplicate of the client access token.
|
|
//
|
|
PCRYPT_SERVER_CONTEXT pServerContext = (PCRYPT_SERVER_CONTEXT)pvContext;
|
|
|
|
if(!DuplicateTokenEx(pServerContext->hToken,
|
|
0,
|
|
NULL,
|
|
SecurityImpersonation,
|
|
TokenImpersonation,
|
|
&hDuplicateToken ))
|
|
{
|
|
dwLastError = GetLastError();
|
|
}
|
|
else
|
|
*phToken = hDuplicateToken;
|
|
|
|
return dwLastError;
|
|
|
|
}
|
|
|
|
DWORD
|
|
WINAPI
|
|
CPSGetUserName(
|
|
IN PVOID pvContext,
|
|
OUT LPWSTR *ppszUserName,
|
|
OUT DWORD *pcchUserName
|
|
)
|
|
{
|
|
WCHAR szBuf[MAX_PATH+1];
|
|
DWORD cchBuf = MAX_PATH;
|
|
DWORD dwLastError = ERROR_INVALID_PARAMETER;
|
|
BOOL fLocalMachine = FALSE;
|
|
BOOL fSuccess = FALSE;
|
|
|
|
|
|
//
|
|
// if we are currently over-riding to Local System, we know the values
|
|
// that need to be returned.
|
|
//
|
|
|
|
CPSOverrideToLocalSystem(
|
|
pvContext,
|
|
NULL, // don't change current over-ride BOOL
|
|
&fLocalMachine
|
|
);
|
|
|
|
|
|
if( fLocalMachine ) {
|
|
LPCWSTR szLocalMachine;
|
|
DWORD cbLocalMachine;
|
|
|
|
if(FIsWinNT()) {
|
|
static const WCHAR szName1[] = TEXTUAL_SID_LOCAL_SYSTEM;
|
|
|
|
szLocalMachine = szName1;
|
|
cbLocalMachine = sizeof(szName1);
|
|
|
|
} else {
|
|
static const WCHAR szName2[] = L"LOCAL_MACHINE_USER";
|
|
|
|
szLocalMachine = szName2;
|
|
cbLocalMachine = sizeof(szName2);
|
|
}
|
|
|
|
CopyMemory( szBuf, szLocalMachine, cbLocalMachine );
|
|
cchBuf = cbLocalMachine / sizeof(WCHAR);
|
|
|
|
fSuccess = TRUE;
|
|
|
|
} else {
|
|
|
|
if(FIsWinNT()) {
|
|
|
|
dwLastError = CPSImpersonateClient( pvContext );
|
|
if(dwLastError != ERROR_SUCCESS)
|
|
return dwLastError;
|
|
|
|
fSuccess = GetUserTextualSid(
|
|
NULL,
|
|
szBuf,
|
|
&cchBuf
|
|
);
|
|
|
|
CPSRevertToSelf( pvContext );
|
|
|
|
} else {
|
|
fSuccess = GetUserNameU(
|
|
szBuf,
|
|
&cchBuf
|
|
);
|
|
|
|
if(!fSuccess) {
|
|
|
|
//
|
|
// for Win95, if nobody is logged on, empty user name
|
|
// TODO: should probably be *DEFAULT*
|
|
//
|
|
|
|
if(GetLastError() == ERROR_NOT_LOGGED_ON) {
|
|
szBuf[ 0 ] = L'\0';
|
|
cchBuf = 1;
|
|
fSuccess = TRUE;
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
}
|
|
|
|
if( fSuccess ) {
|
|
|
|
*ppszUserName = (LPWSTR)SSAlloc( cchBuf * sizeof(WCHAR));
|
|
|
|
if(*ppszUserName) {
|
|
CopyMemory( *ppszUserName, szBuf, cchBuf * sizeof(WCHAR));
|
|
|
|
if(pcchUserName)
|
|
*pcchUserName = cchBuf;
|
|
|
|
dwLastError = ERROR_SUCCESS;
|
|
}
|
|
}
|
|
|
|
return dwLastError;
|
|
}
|
|
|
|
|
|
|
|
DWORD
|
|
WINAPI
|
|
CPSGetDerivedCredential(
|
|
IN PVOID pvContext,
|
|
IN GUID *pCredentialID,
|
|
IN DWORD dwFlags,
|
|
IN PBYTE pbMixingBytes,
|
|
IN DWORD cbMixingBytes,
|
|
IN OUT BYTE rgbDerivedCredential[A_SHA_DIGEST_LEN]
|
|
)
|
|
{
|
|
LUID LogonId;
|
|
PCRYPT_SERVER_CONTEXT pServerContext = (PCRYPT_SERVER_CONTEXT)pvContext;
|
|
DWORD dwLastError = ERROR_SUCCESS;
|
|
|
|
|
|
if( pServerContext != NULL && pServerContext->cbSize != sizeof(CRYPT_SERVER_CONTEXT) )
|
|
return ERROR_INVALID_PARAMETER;
|
|
|
|
if( cbMixingBytes == 0 || pbMixingBytes == NULL )
|
|
return ERROR_INVALID_PARAMETER;
|
|
|
|
|
|
if( !FIsWinNT5() ) {
|
|
|
|
DWORD FixedCred[] = {
|
|
0x414188aa, 0xfa8a0011, 0x66666666, 0x77777777, 0x88888888 };
|
|
A_SHA_CTX shaContext;
|
|
|
|
A_SHAInit( &shaContext );
|
|
A_SHAUpdate( &shaContext, (PBYTE)FixedCred, sizeof(FixedCred) );
|
|
A_SHAUpdate( &shaContext, pbMixingBytes, cbMixingBytes );
|
|
|
|
A_SHAFinal( &shaContext, rgbDerivedCredential );
|
|
ZeroMemory( &shaContext, sizeof(shaContext) );
|
|
|
|
return ERROR_SUCCESS;
|
|
}
|
|
|
|
//
|
|
// impersonate the client and get the LogonId associated with the client.
|
|
//
|
|
|
|
dwLastError = CPSImpersonateClient( pvContext );
|
|
|
|
if( dwLastError != ERROR_SUCCESS )
|
|
return dwLastError;
|
|
|
|
if(!GetThreadAuthenticationId( GetCurrentThread(), &LogonId ))
|
|
{
|
|
CPSRevertToSelf( pvContext );
|
|
return GetLastError();
|
|
}
|
|
|
|
|
|
|
|
|
|
dwLastError = QueryDerivedCredential( pCredentialID,
|
|
&LogonId,
|
|
dwFlags,
|
|
pbMixingBytes,
|
|
cbMixingBytes,
|
|
rgbDerivedCredential );
|
|
|
|
|
|
CPSRevertToSelf( pvContext );
|
|
|
|
|
|
return dwLastError;
|
|
}
|
|
|
|
DWORD
|
|
WINAPI
|
|
CPSGetSystemCredential(
|
|
IN PVOID pvContext,
|
|
IN BOOL fLocalMachine,
|
|
IN OUT BYTE rgbSystemCredential[A_SHA_DIGEST_LEN]
|
|
)
|
|
{
|
|
PCRYPT_SERVER_CONTEXT pServerContext = (PCRYPT_SERVER_CONTEXT)pvContext;
|
|
|
|
if( pServerContext != NULL && pServerContext->cbSize != sizeof(CRYPT_SERVER_CONTEXT) )
|
|
return ERROR_INVALID_PARAMETER;
|
|
|
|
if( !FIsWinNT() ) {
|
|
DWORD FixedCred[] = {
|
|
0x414188aa, 0xfa8a0011, 0x66666666, 0x77777777, 0x88888888 };
|
|
DWORD dw = 0xa123ff00;
|
|
A_SHA_CTX shaContext;
|
|
|
|
A_SHAInit( &shaContext );
|
|
A_SHAUpdate( &shaContext, (PBYTE)FixedCred, sizeof(FixedCred) );
|
|
if( fLocalMachine )
|
|
A_SHAUpdate( &shaContext, (PBYTE)&dw, sizeof(dw) );
|
|
|
|
A_SHAFinal( &shaContext, rgbSystemCredential );
|
|
ZeroMemory( &shaContext, sizeof(shaContext) );
|
|
|
|
return ERROR_SUCCESS;
|
|
}
|
|
|
|
return GetSystemCredential( fLocalMachine, rgbSystemCredential);
|
|
}
|
|
|
|
|
|
DWORD
|
|
WINAPI
|
|
CPSCreateWorkerThread(
|
|
IN PVOID pThreadFunc,
|
|
IN PVOID pThreadArg
|
|
)
|
|
{
|
|
|
|
if( !QueueUserWorkItem(
|
|
(PTHREAD_START_ROUTINE)pThreadFunc,
|
|
pThreadArg,
|
|
WT_EXECUTELONGFUNCTION
|
|
)) {
|
|
|
|
return GetLastError();
|
|
}
|
|
|
|
return ERROR_SUCCESS;
|
|
}
|
|
|
|
DWORD CPSAudit(
|
|
IN HANDLE hToken,
|
|
IN DWORD dwAuditID,
|
|
IN LPCWSTR wszMasterKeyID,
|
|
IN LPCWSTR wszRecoveryServer,
|
|
IN DWORD dwReason,
|
|
IN LPCWSTR wszRecoveryKeyID,
|
|
IN DWORD dwFailure)
|
|
{
|
|
|
|
NTSTATUS Status = STATUS_SUCCESS;
|
|
|
|
UNICODE_STRING MasterKeyID;
|
|
UNICODE_STRING RecoveryServer;
|
|
UNICODE_STRING RecoveryKeyID;
|
|
|
|
BOOL fReasonField = FALSE;
|
|
PSID UserSid = NULL;
|
|
|
|
|
|
fReasonField = ((SE_AUDITID_DPAPI_PROTECT == dwAuditID) ||
|
|
(SE_AUDITID_DPAPI_UNPROTECT == dwAuditID) ||
|
|
(SE_AUDITID_DPAPI_RECOVERY == dwAuditID));
|
|
|
|
GetTokenUserSid(hToken, &UserSid);
|
|
|
|
|
|
if(wszMasterKeyID)
|
|
{
|
|
RtlInitUnicodeString(&MasterKeyID, wszMasterKeyID);
|
|
}
|
|
else
|
|
{
|
|
RtlInitUnicodeString(&MasterKeyID, L"");
|
|
}
|
|
|
|
if(wszRecoveryServer)
|
|
{
|
|
RtlInitUnicodeString(&RecoveryServer, wszRecoveryServer);
|
|
}
|
|
else
|
|
{
|
|
RtlInitUnicodeString(&RecoveryServer, L"");
|
|
}
|
|
|
|
if(wszRecoveryKeyID)
|
|
{
|
|
RtlInitUnicodeString(&RecoveryKeyID, wszRecoveryKeyID);
|
|
}
|
|
else
|
|
{
|
|
RtlInitUnicodeString(&RecoveryKeyID, L"");
|
|
}
|
|
|
|
|
|
Status = LsaIAuditDPAPIEvent(
|
|
dwAuditID,
|
|
UserSid,
|
|
&MasterKeyID,
|
|
&RecoveryServer,
|
|
fReasonField ? &dwReason : NULL,
|
|
&RecoveryKeyID,
|
|
&dwFailure
|
|
);
|
|
if(UserSid)
|
|
{
|
|
SSFree(UserSid);
|
|
}
|
|
return (DWORD)Status;
|
|
}
|
|
|
|
|
|
DWORD
|
|
CPSGetUserStorageArea(
|
|
IN PVOID pvContext,
|
|
IN PSID pSid, // optional
|
|
IN BOOL fCreate, // Create the storage area if it doesn't exist
|
|
IN OUT LPWSTR *ppszUserStorageArea
|
|
)
|
|
{
|
|
|
|
PCRYPT_SERVER_CONTEXT pServerContext = (PCRYPT_SERVER_CONTEXT)pvContext;
|
|
|
|
LPCWSTR szLocalSystem;
|
|
DWORD cbLocalSystem;
|
|
|
|
WCHAR szUserStorageRoot[MAX_PATH+1];
|
|
DWORD cbUserStorageRoot;
|
|
|
|
const WCHAR szProductString[] = L"\\Microsoft\\Protect\\";
|
|
DWORD cbProductString = sizeof(szProductString) - sizeof(WCHAR);
|
|
|
|
LPWSTR szUser = NULL;
|
|
DWORD cbUser;
|
|
DWORD cchUser;
|
|
|
|
LPCWSTR szOptionalTrailing;
|
|
DWORD cbOptionalTrailing = 0;
|
|
|
|
BOOL fLocalMachine = FALSE;
|
|
|
|
HANDLE hFile = INVALID_HANDLE_VALUE;
|
|
PBYTE pbCurrent;
|
|
|
|
BOOL fImpersonated = FALSE;
|
|
|
|
DWORD dwLastError = ERROR_CANTOPEN;
|
|
|
|
*ppszUserStorageArea = NULL;
|
|
|
|
|
|
if(NULL == pServerContext)
|
|
{
|
|
return ERROR_INVALID_PARAMETER;
|
|
}
|
|
|
|
if(NULL == pSid)
|
|
{
|
|
|
|
//
|
|
// If this is the current users sid, check to see if we've already
|
|
// calculated this string.
|
|
|
|
if(NULL != pServerContext->szUserStorageArea)
|
|
{
|
|
*ppszUserStorageArea = (LPWSTR)SSAlloc((wcslen(pServerContext->szUserStorageArea)+1)*sizeof(WCHAR));
|
|
if(NULL == *ppszUserStorageArea)
|
|
{
|
|
return ERROR_NOT_ENOUGH_MEMORY;
|
|
}
|
|
wcscpy(*ppszUserStorageArea, pServerContext->szUserStorageArea);
|
|
return ERROR_SUCCESS;
|
|
}
|
|
|
|
|
|
//
|
|
// get the user name associated with the call.
|
|
// Note: this is the textual Sid on NT, and the user name on Win95.
|
|
//
|
|
|
|
|
|
|
|
dwLastError = CPSGetUserName( pvContext, &szUser, &cchUser );
|
|
if(dwLastError != ERROR_SUCCESS)
|
|
goto cleanup;
|
|
|
|
cbUser = (cchUser-1) * sizeof(WCHAR);
|
|
}
|
|
else
|
|
{
|
|
WCHAR wszTextualSid[MAX_PATH+1];
|
|
cchUser = MAX_PATH;
|
|
|
|
if(!GetTextualSid(pSid, wszTextualSid, &cchUser))
|
|
{
|
|
dwLastError = ERROR_INVALID_PARAMETER;
|
|
goto cleanup;
|
|
}
|
|
cbUser = (cchUser-1) * sizeof(WCHAR);
|
|
szUser = (LPWSTR)SSAlloc(cchUser*sizeof(WCHAR));
|
|
if(NULL == szUser)
|
|
{
|
|
dwLastError = ERROR_NOT_ENOUGH_MEMORY;
|
|
goto cleanup;
|
|
}
|
|
wcscpy(szUser, wszTextualSid);
|
|
}
|
|
|
|
|
|
//
|
|
// impersonate the client user to test and create storage area if necessary
|
|
//
|
|
|
|
dwLastError = CPSImpersonateClient( pvContext );
|
|
|
|
if( dwLastError != ERROR_SUCCESS )
|
|
goto cleanup;
|
|
|
|
fImpersonated = TRUE;
|
|
|
|
|
|
//
|
|
// see if the call is for shared, CRYPT_PROTECT_LOCAL_MACHINE
|
|
// disposition.
|
|
//
|
|
|
|
CPSOverrideToLocalSystem(
|
|
pvContext,
|
|
NULL, // don't change current over-ride BOOL
|
|
&fLocalMachine
|
|
);
|
|
|
|
//
|
|
// determine path to per-user storage area, based on whether this
|
|
// is a local machine disposition call or a per-user disposition call.
|
|
//
|
|
|
|
if(FIsWinNT()) {
|
|
const WCHAR szSidSystem[] = TEXTUAL_SID_LOCAL_SYSTEM;
|
|
szLocalSystem = szSidSystem;
|
|
cbLocalSystem = sizeof(szSidSystem);
|
|
} else {
|
|
// TODO: Win95 case.
|
|
cbLocalSystem = 0xffffffff;
|
|
}
|
|
|
|
if( fLocalMachine ||
|
|
((cchUser*sizeof(WCHAR)) == cbLocalSystem) && (memcmp(szUser, szLocalSystem, cbLocalSystem) == 0)
|
|
) {
|
|
|
|
cbUserStorageRoot = GetSystemDirectoryW(
|
|
szUserStorageRoot,
|
|
sizeof(szUserStorageRoot) / sizeof(WCHAR)
|
|
);
|
|
|
|
cbUserStorageRoot *= sizeof(WCHAR);
|
|
|
|
//
|
|
// when the Sid is the SYSTEM sid, and this isn't a Local Machine
|
|
// disposition call, add a trailing component to the storage path.
|
|
//
|
|
|
|
if( !fLocalMachine ) {
|
|
const static WCHAR szUserStorageForSystem[] = L"\\User";
|
|
|
|
cbOptionalTrailing = sizeof(szUserStorageForSystem) - sizeof(WCHAR);
|
|
szOptionalTrailing = szUserStorageForSystem;
|
|
}
|
|
|
|
} else {
|
|
|
|
dwLastError = PRGetProfilePath(NULL,
|
|
NULL,
|
|
szUserStorageRoot );
|
|
|
|
if( dwLastError != ERROR_SUCCESS )
|
|
{
|
|
goto cleanup;
|
|
}
|
|
|
|
cbUserStorageRoot = lstrlenW( szUserStorageRoot ) * sizeof(WCHAR);
|
|
}
|
|
|
|
//
|
|
// an empty string is not legal as the root component of the per-user
|
|
// storage area.
|
|
//
|
|
|
|
if( cbUserStorageRoot == 0 ) {
|
|
dwLastError = ERROR_CANTOPEN;
|
|
goto cleanup;
|
|
}
|
|
|
|
//
|
|
// insure returned string does not have trailing \
|
|
//
|
|
|
|
if( szUserStorageRoot[ (cbUserStorageRoot / sizeof(WCHAR)) - 1 ] == L'\\' ) {
|
|
|
|
szUserStorageRoot[ (cbUserStorageRoot / sizeof(WCHAR)) - 1 ] = L'\0';
|
|
cbUserStorageRoot -= sizeof(WCHAR);
|
|
}
|
|
|
|
|
|
*ppszUserStorageArea = (LPWSTR)SSAlloc(
|
|
cbUserStorageRoot +
|
|
cbProductString +
|
|
cbUser +
|
|
cbOptionalTrailing +
|
|
(2 * sizeof(WCHAR)) // trailing slash and NULL
|
|
);
|
|
|
|
if( *ppszUserStorageArea == NULL ) {
|
|
dwLastError = ERROR_NOT_ENOUGH_SERVER_MEMORY;
|
|
goto cleanup;
|
|
}
|
|
|
|
|
|
pbCurrent = (PBYTE)*ppszUserStorageArea;
|
|
|
|
CopyMemory(pbCurrent, szUserStorageRoot, cbUserStorageRoot);
|
|
pbCurrent += cbUserStorageRoot;
|
|
|
|
CopyMemory(pbCurrent, szProductString, cbProductString);
|
|
pbCurrent += cbProductString;
|
|
|
|
CopyMemory(pbCurrent, szUser, cbUser);
|
|
pbCurrent += cbUser; // note: cbUser does not include terminal NULL
|
|
|
|
if(cbOptionalTrailing) {
|
|
CopyMemory(pbCurrent, szOptionalTrailing, cbOptionalTrailing);
|
|
pbCurrent += cbOptionalTrailing;
|
|
}
|
|
|
|
if( *((LPWSTR)pbCurrent - 1) != L'\\' ) {
|
|
*(LPWSTR)pbCurrent = L'\\';
|
|
pbCurrent += sizeof(WCHAR);
|
|
}
|
|
|
|
*(LPWSTR)pbCurrent = L'\0';
|
|
|
|
|
|
//
|
|
// test for well-known file in the storage area. if it exists,
|
|
// don't bother trying to create directory structure.
|
|
//
|
|
|
|
dwLastError = OpenFileInStorageArea(
|
|
NULL, // NULL == already impersonating the client
|
|
GENERIC_READ,
|
|
*ppszUserStorageArea,
|
|
REGVAL_PREFERRED_MK,
|
|
&hFile
|
|
);
|
|
|
|
if( dwLastError == ERROR_SUCCESS) {
|
|
CloseHandle( hFile );
|
|
} else {
|
|
if(fCreate)
|
|
{
|
|
dwLastError = DPAPICreateNestedDirectories(
|
|
*ppszUserStorageArea,
|
|
(LPWSTR)((LPBYTE)*ppszUserStorageArea + cbUserStorageRoot + sizeof(WCHAR))
|
|
);
|
|
}
|
|
}
|
|
if((ERROR_SUCCESS == dwLastError) &&
|
|
(NULL == pSid))
|
|
{
|
|
pServerContext->szUserStorageArea = (LPWSTR)SSAlloc((wcslen(*ppszUserStorageArea)+1)*sizeof(WCHAR));
|
|
if(NULL == pServerContext->szUserStorageArea)
|
|
{
|
|
dwLastError = ERROR_NOT_ENOUGH_MEMORY;
|
|
}
|
|
else
|
|
{
|
|
wcscpy(pServerContext->szUserStorageArea, *ppszUserStorageArea);
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
cleanup:
|
|
|
|
if( fImpersonated )
|
|
CPSRevertToSelf( pvContext );
|
|
|
|
if(szUser)
|
|
SSFree(szUser);
|
|
|
|
if( dwLastError != ERROR_SUCCESS && *ppszUserStorageArea ) {
|
|
SSFree( *ppszUserStorageArea );
|
|
*ppszUserStorageArea = NULL;
|
|
}
|
|
|
|
return dwLastError;
|
|
}
|
|
|
|
|
|
|
|
HKEY GetLMRegistryProviderKey()
|
|
{
|
|
HKEY hBaseKey = NULL;
|
|
DWORD dwCreate;
|
|
DWORD dwDesiredAccess = KEY_READ | KEY_WRITE;
|
|
|
|
static const WCHAR szKeyName[] = REG_CRYPTPROTECT_LOC L"\\" REG_CRYPTPROTECT_PROVIDERS_SUBKEYLOC;
|
|
|
|
|
|
// Open Key //
|
|
if (ERROR_SUCCESS !=
|
|
RegCreateKeyExU(
|
|
HKEY_LOCAL_MACHINE,
|
|
szKeyName,
|
|
0,
|
|
NULL, // address of class string
|
|
0,
|
|
dwDesiredAccess,
|
|
NULL,
|
|
&hBaseKey,
|
|
&dwCreate))
|
|
goto Ret;
|
|
|
|
Ret:
|
|
return hBaseKey;
|
|
}
|
|
|
|
|
|
|
|
|
|
DWORD GetPolicyBits()
|
|
{
|
|
return 0;
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
///////////////////////////////////////////////////////////////////////
|
|
// RPC-exposed functions
|
|
//
|
|
// these functions return a DWORD equivalent to GetLastError().
|
|
// the client side stub code will check if the return code is not
|
|
// ERROR_SUCCESS, and if this is the case, the client stub will return
|
|
// FALSE and SetLastError() to this DWORD.
|
|
//
|
|
|
|
DWORD
|
|
s_SSCryptProtectData(
|
|
handle_t h,
|
|
BYTE __RPC_FAR *__RPC_FAR *ppbOut,
|
|
DWORD __RPC_FAR *pcbOut,
|
|
BYTE __RPC_FAR *pbIn,
|
|
DWORD cbIn,
|
|
LPCWSTR szDataDescr,
|
|
BYTE* pbOptionalEntropy,
|
|
DWORD cbOptionalEntropy,
|
|
GUID* pProvider,
|
|
PSSCRYPTPROTECTDATA_PROMPTSTRUCT pPromptStruct,
|
|
DWORD dwFlags,
|
|
BYTE* pbOptionalPassword,
|
|
DWORD cbOptionalPassword
|
|
)
|
|
{
|
|
DWORD dwRet;
|
|
|
|
|
|
DWORD dwHeaderSize = sizeof(GUID)+sizeof(DWORD);
|
|
PBYTE pbWritePtr;
|
|
|
|
CRYPT_SERVER_CONTEXT ServerContext;
|
|
DWORD dwTempLastError = CPSCreateServerContext(&ServerContext, h);
|
|
if(dwTempLastError != ERROR_SUCCESS)
|
|
return dwTempLastError;
|
|
|
|
|
|
//
|
|
// User mode cannot request encryption of system blobs
|
|
if(dwFlags & CRYPTPROTECT_SYSTEM)
|
|
{
|
|
return ERROR_INVALID_PARAMETER;
|
|
}
|
|
|
|
__try {
|
|
|
|
// don't validate flags parameter
|
|
|
|
|
|
// get policy for this level
|
|
|
|
// UNDONE: what do policy bits allow an admin to set?
|
|
// maybe a recovery agent, other defaults?
|
|
GetPolicyBits();
|
|
|
|
|
|
dwRet = SPCryptProtect(
|
|
&ServerContext,
|
|
ppbOut,
|
|
pcbOut,
|
|
pbIn,
|
|
cbIn,
|
|
szDataDescr,
|
|
pbOptionalEntropy,
|
|
cbOptionalEntropy,
|
|
pPromptStruct,
|
|
dwFlags,
|
|
pbOptionalPassword, // following 2 fields considered temporary
|
|
cbOptionalPassword // until SAS UI supported
|
|
);
|
|
|
|
ZeroMemory( pbIn, cbIn );
|
|
if ( dwRet != ERROR_SUCCESS || *ppbOut == NULL )
|
|
goto Ret;
|
|
|
|
// move entire block down, sneak header in
|
|
*ppbOut = (PBYTE)SSReAlloc(*ppbOut, *pcbOut + dwHeaderSize);
|
|
if(NULL == *ppbOut)
|
|
{
|
|
dwRet = ERROR_NOT_ENOUGH_MEMORY;
|
|
goto Ret;
|
|
}
|
|
MoveMemory(*ppbOut + dwHeaderSize, *ppbOut, *pcbOut);
|
|
*pcbOut += dwHeaderSize;
|
|
|
|
pbWritePtr = *ppbOut;
|
|
*(DWORD*)pbWritePtr = CRYPTPROTECT_SVR_VERSION_1;
|
|
pbWritePtr += sizeof(DWORD);
|
|
|
|
CopyMemory(pbWritePtr, &g_guidDefaultProvider, sizeof(GUID));
|
|
pbWritePtr += sizeof(GUID);
|
|
|
|
dwRet = ERROR_SUCCESS;
|
|
|
|
} __except( EXCEPTION_EXECUTE_HANDLER ) {
|
|
dwRet = GetExceptionCode();
|
|
// TODO: for NT, convert exception code to winerror.
|
|
// for 95, just override to access violation.
|
|
}
|
|
|
|
Ret:
|
|
CPSDeleteServerContext( &ServerContext );
|
|
return dwRet;
|
|
}
|
|
|
|
DWORD
|
|
s_SSCryptUnprotectData(
|
|
handle_t h,
|
|
BYTE __RPC_FAR *__RPC_FAR *ppbOut,
|
|
DWORD __RPC_FAR *pcbOut,
|
|
BYTE __RPC_FAR *pbIn,
|
|
DWORD cbIn,
|
|
LPWSTR* ppszDataDescr,
|
|
BYTE* pbOptionalEntropy,
|
|
DWORD cbOptionalEntropy,
|
|
GUID* pProvider,
|
|
PSSCRYPTPROTECTDATA_PROMPTSTRUCT pPromptStruct,
|
|
DWORD dwFlags,
|
|
BYTE* pbOptionalPassword,
|
|
DWORD cbOptionalPassword
|
|
)
|
|
{
|
|
DWORD dwRet;
|
|
PBYTE pbReadPtr = pbIn;
|
|
GUID guidProvider;
|
|
CRYPT_SERVER_CONTEXT ServerContext;
|
|
|
|
// User mode cannot request decryption of system blobs
|
|
if(dwFlags & CRYPTPROTECT_SYSTEM)
|
|
{
|
|
return ERROR_INVALID_PARAMETER;
|
|
}
|
|
|
|
// Error out if input buffer is smaller than the minumum size.
|
|
if(cbIn < sizeof(DWORD) + sizeof(GUID))
|
|
{
|
|
return ERROR_INVALID_DATA;
|
|
}
|
|
|
|
// Create a server context.
|
|
dwRet = CPSCreateServerContext(&ServerContext, h);
|
|
if(dwRet != ERROR_SUCCESS)
|
|
{
|
|
return dwRet;
|
|
}
|
|
|
|
__try {
|
|
|
|
// get policy for this level
|
|
|
|
// UNDONE: what do policy bits allow an admin to set?
|
|
// maybe a recovery agent, other defaults?
|
|
GetPolicyBits();
|
|
|
|
if (*(DWORD*)pbReadPtr != CRYPTPROTECT_SVR_VERSION_1)
|
|
{
|
|
dwRet = ERROR_INVALID_DATA;
|
|
goto Ret;
|
|
}
|
|
pbReadPtr += sizeof(DWORD);
|
|
|
|
// next field in Data is provider GUID
|
|
CopyMemory(&guidProvider, pbReadPtr, sizeof(GUID));
|
|
pbReadPtr += sizeof(GUID);
|
|
|
|
// echo out if requested
|
|
if (pProvider)
|
|
CopyMemory(pProvider, &guidProvider, sizeof(GUID));
|
|
|
|
|
|
dwRet = SPCryptUnprotect(
|
|
&ServerContext,
|
|
ppbOut,
|
|
pcbOut,
|
|
pbReadPtr,
|
|
(cbIn - (LONG)(pbReadPtr - pbIn)) , // eg (200 - (0x00340020 - 0x00340000))
|
|
ppszDataDescr,
|
|
pbOptionalEntropy,
|
|
cbOptionalEntropy,
|
|
pPromptStruct,
|
|
dwFlags,
|
|
pbOptionalPassword, // following 2 fields considered temporary
|
|
cbOptionalPassword // until SAS UI supported
|
|
);
|
|
|
|
ZeroMemory( pbIn, cbIn );
|
|
|
|
if (dwRet != ERROR_SUCCESS)
|
|
goto Ret;
|
|
|
|
dwRet = ERROR_SUCCESS; // it's already this at this point in time for now.
|
|
|
|
} __except( EXCEPTION_EXECUTE_HANDLER ) {
|
|
dwRet = GetExceptionCode();
|
|
// TODO: for NT, convert exception code to winerror.
|
|
// for 95, just override to access violation.
|
|
}
|
|
|
|
Ret:
|
|
|
|
CPSDeleteServerContext( &ServerContext );
|
|
return dwRet;
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
BOOLEAN
|
|
LsaICryptProtectData(
|
|
IN PVOID DataIn,
|
|
IN ULONG DataInLength,
|
|
IN PUNICODE_STRING DataDescr,
|
|
IN PVOID OptionalEntropy,
|
|
IN ULONG OptionalEntropyLength,
|
|
IN PVOID Reserved,
|
|
IN PVOID Reserved2,
|
|
IN ULONG Flags,
|
|
OUT PVOID * DataOut,
|
|
OUT PULONG DataOutLength)
|
|
{
|
|
DWORD dwRetVal = ERROR_SUCCESS;
|
|
CRYPT_SERVER_CONTEXT ServerContext;;
|
|
|
|
DWORD dwHeaderSize = sizeof(GUID)+sizeof(DWORD);
|
|
PBYTE pbWritePtr;
|
|
|
|
|
|
|
|
dwRetVal = CPSCreateServerContext(&ServerContext, NULL);
|
|
if(dwRetVal != ERROR_SUCCESS)
|
|
{
|
|
SetLastError(dwRetVal);
|
|
return FALSE;
|
|
}
|
|
|
|
|
|
// check params
|
|
if ((DataOut == NULL) ||
|
|
(DataIn == NULL) ||
|
|
(NULL == DataDescr))
|
|
{
|
|
dwRetVal = ERROR_INVALID_PARAMETER;
|
|
goto error;
|
|
}
|
|
|
|
__try {
|
|
|
|
if(ServerContext.fImpersonating)
|
|
{
|
|
CPSRevertToSelf(&ServerContext);
|
|
}
|
|
|
|
|
|
// don't validate flags parameter
|
|
|
|
|
|
// get policy for this level
|
|
|
|
// UNDONE: what do policy bits allow an admin to set?
|
|
// maybe a recovery agent, other defaults?
|
|
GetPolicyBits();
|
|
|
|
*DataOut = NULL;
|
|
*DataOutLength = 0;
|
|
|
|
dwRetVal = SPCryptProtect(
|
|
&ServerContext,
|
|
(PBYTE *)DataOut,
|
|
DataOutLength,
|
|
(PBYTE)DataIn,
|
|
DataInLength,
|
|
DataDescr?DataDescr->Buffer:NULL,
|
|
(PBYTE)OptionalEntropy,
|
|
OptionalEntropyLength,
|
|
NULL,
|
|
Flags,
|
|
NULL, // following 2 fields considered temporary
|
|
0 // until SAS UI supported
|
|
);
|
|
|
|
if ( dwRetVal != ERROR_SUCCESS || *DataOut == NULL )
|
|
goto error;
|
|
|
|
// move entire block down, sneak header in
|
|
*DataOut =SSReAlloc(*DataOut, *DataOutLength + dwHeaderSize);
|
|
if(NULL == *DataOut)
|
|
{
|
|
dwRetVal = ERROR_NOT_ENOUGH_MEMORY;
|
|
goto error;
|
|
}
|
|
MoveMemory((PBYTE)*DataOut + dwHeaderSize, *DataOut, *DataOutLength);
|
|
*DataOutLength += dwHeaderSize;
|
|
|
|
pbWritePtr = (PBYTE)*DataOut;
|
|
*(DWORD*)pbWritePtr = CRYPTPROTECT_SVR_VERSION_1;
|
|
pbWritePtr += sizeof(DWORD);
|
|
|
|
CopyMemory(pbWritePtr, &g_guidDefaultProvider, sizeof(GUID));
|
|
pbWritePtr += sizeof(GUID);
|
|
|
|
} __except(EXCEPTION_EXECUTE_HANDLER) {
|
|
dwRetVal = GetExceptionCode();
|
|
}
|
|
|
|
|
|
error:
|
|
if(ServerContext.fImpersonating)
|
|
{
|
|
CPSImpersonateClient(&ServerContext);
|
|
}
|
|
|
|
CPSDeleteServerContext( &ServerContext );
|
|
|
|
|
|
if(dwRetVal != ERROR_SUCCESS) {
|
|
SetLastError(dwRetVal);
|
|
return FALSE;
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
|
|
|
|
|
|
BOOLEAN
|
|
LsaICryptUnprotectData(
|
|
IN PVOID DataIn,
|
|
IN ULONG DataInLength,
|
|
IN PVOID OptionalEntropy,
|
|
IN ULONG OptionalEntropyLength,
|
|
IN PVOID Reserved,
|
|
IN PVOID Reserved2,
|
|
IN ULONG Flags,
|
|
OUT PUNICODE_STRING DataDescr,
|
|
OUT PVOID * DataOut,
|
|
OUT PULONG DataOutLength)
|
|
{
|
|
DWORD dwRetVal = ERROR_SUCCESS;
|
|
CRYPT_SERVER_CONTEXT ServerContext;;
|
|
|
|
DWORD dwHeaderSize = sizeof(GUID)+sizeof(DWORD);
|
|
PBYTE pbWritePtr;
|
|
LPWSTR wszDataDescr = NULL;
|
|
|
|
|
|
|
|
dwRetVal = CPSCreateServerContext(&ServerContext, NULL);
|
|
if(dwRetVal != ERROR_SUCCESS)
|
|
{
|
|
SetLastError(dwRetVal);
|
|
return FALSE;
|
|
}
|
|
|
|
// check params
|
|
if ((DataOut == NULL) ||
|
|
(DataIn == NULL))
|
|
{
|
|
dwRetVal = ERROR_INVALID_PARAMETER;
|
|
goto error;
|
|
}
|
|
|
|
__try {
|
|
|
|
if(ServerContext.fImpersonating)
|
|
{
|
|
CPSRevertToSelf(&ServerContext);
|
|
}
|
|
|
|
|
|
// don't validate flags parameter
|
|
|
|
|
|
// get policy for this level
|
|
|
|
// UNDONE: what do policy bits allow an admin to set?
|
|
// maybe a recovery agent, other defaults?
|
|
GetPolicyBits();
|
|
|
|
|
|
//
|
|
// define outer+inner wrapper for security blob.
|
|
// this won't be necessary once SAS support is provided by the OS.
|
|
//
|
|
|
|
typedef struct {
|
|
DWORD dwOuterVersion;
|
|
GUID guidProvider;
|
|
|
|
DWORD dwVersion;
|
|
GUID guidMK;
|
|
DWORD dwPromptFlags;
|
|
DWORD cbDataDescr;
|
|
WCHAR szDataDescr[1];
|
|
} sec_blob, *psec_blob;
|
|
|
|
sec_blob *SecurityBlob = (sec_blob*)(DataIn);
|
|
|
|
|
|
//
|
|
// zero so client stub allocates
|
|
//
|
|
|
|
*DataOut = NULL;
|
|
*DataOutLength = 0;
|
|
|
|
|
|
//
|
|
// only call UI function if prompt flags dictate, because we don't
|
|
// want to bring in cryptui.dll unless necessary.
|
|
//
|
|
|
|
if( ((SecurityBlob->dwPromptFlags & CRYPTPROTECT_PROMPT_ON_UNPROTECT) ||
|
|
(SecurityBlob->dwPromptFlags & CRYPTPROTECT_PROMPT_ON_PROTECT))
|
|
)
|
|
{
|
|
|
|
dwRetVal = ERROR_INVALID_PARAMETER;
|
|
goto error;
|
|
|
|
} else {
|
|
if(SecurityBlob->dwPromptFlags & CRYPTPROTECT_PROMPT_STRONG )
|
|
{
|
|
dwRetVal = ERROR_INVALID_PARAMETER;
|
|
goto error;
|
|
}
|
|
}
|
|
|
|
|
|
if (SecurityBlob->dwOuterVersion != CRYPTPROTECT_SVR_VERSION_1)
|
|
{
|
|
dwRetVal = ERROR_INVALID_DATA;
|
|
goto error;
|
|
}
|
|
|
|
if(0 != memcmp(&SecurityBlob->guidProvider, &g_guidDefaultProvider, sizeof(GUID)))
|
|
{
|
|
dwRetVal = ERROR_INVALID_DATA;
|
|
goto error;
|
|
}
|
|
|
|
Flags |= CRYPTPROTECT_IN_PROCESS;
|
|
|
|
dwRetVal = SPCryptUnprotect(
|
|
&ServerContext,
|
|
(PBYTE *)DataOut,
|
|
DataOutLength,
|
|
(PBYTE)DataIn + sizeof(DWORD) + sizeof(GUID),
|
|
(DataInLength - (LONG)(sizeof(DWORD) + sizeof(GUID))) ,
|
|
DataDescr?&wszDataDescr:NULL,
|
|
(PBYTE)OptionalEntropy,
|
|
OptionalEntropyLength,
|
|
NULL,
|
|
Flags,
|
|
NULL, // following 2 fields considered temporary
|
|
0 // until SAS UI supported
|
|
);
|
|
|
|
if (dwRetVal != ERROR_SUCCESS)
|
|
{
|
|
goto error;
|
|
}
|
|
|
|
if(NULL != DataDescr)
|
|
{
|
|
RtlInitUnicodeString(DataDescr, wszDataDescr);
|
|
}
|
|
|
|
|
|
|
|
|
|
} __except(EXCEPTION_EXECUTE_HANDLER) {
|
|
dwRetVal = GetExceptionCode();
|
|
}
|
|
|
|
error:
|
|
if(ServerContext.fImpersonating)
|
|
{
|
|
// Impersonate back to the impersonation context
|
|
CPSImpersonateClient(&ServerContext);
|
|
}
|
|
CPSDeleteServerContext( &ServerContext );
|
|
|
|
|
|
SetLastError(dwRetVal);
|
|
if(dwRetVal != ERROR_SUCCESS && dwRetVal != CRYPT_I_NEW_PROTECTION_REQUIRED ) {
|
|
return FALSE;
|
|
}
|
|
return TRUE;
|
|
}
|
|
|
|
|
|
DWORD
|
|
WINAPI
|
|
CPSGetSidHistory(
|
|
IN PVOID pvContext,
|
|
OUT PSID **papsidHistory,
|
|
OUT DWORD *cpsidHistory
|
|
)
|
|
{
|
|
DWORD dwLastError = ERROR_SUCCESS;
|
|
BYTE FastBuffer[256];
|
|
BYTE GroupsFastBuffer[256];
|
|
LPBYTE SlowBuffer = NULL;
|
|
PTOKEN_USER ptgUser;
|
|
PTOKEN_GROUPS ptgGroups = NULL;
|
|
DWORD cbBuffer;
|
|
DWORD cbSid;
|
|
DWORD cSids = 0;
|
|
PBYTE pbCurrentSid = NULL;
|
|
DWORD i;
|
|
|
|
|
|
PCRYPT_SERVER_CONTEXT pServerContext = (PCRYPT_SERVER_CONTEXT)pvContext;
|
|
|
|
|
|
//
|
|
// try querying based on a fast stack based buffer first.
|
|
//
|
|
|
|
ptgUser = (PTOKEN_USER)FastBuffer;
|
|
cbBuffer = sizeof(FastBuffer);
|
|
|
|
if(!GetTokenInformation(
|
|
pServerContext->hToken, // identifies access token
|
|
TokenUser, // TokenUser info type
|
|
ptgUser, // retrieved info buffer
|
|
cbBuffer, // size of buffer passed-in
|
|
&cbBuffer // required buffer size
|
|
))
|
|
{
|
|
dwLastError = GetLastError();
|
|
|
|
if(dwLastError != ERROR_INSUFFICIENT_BUFFER)
|
|
{
|
|
goto error;
|
|
}
|
|
|
|
//
|
|
// try again with the specified buffer size
|
|
//
|
|
|
|
ptgUser = (PTOKEN_USER)SSAlloc(cbBuffer);
|
|
if(NULL == ptgUser)
|
|
{
|
|
dwLastError = ERROR_NOT_ENOUGH_MEMORY;
|
|
goto error;
|
|
}
|
|
|
|
|
|
|
|
if(!GetTokenInformation(
|
|
pServerContext->hToken, // identifies access token
|
|
TokenUser, // TokenUser info type
|
|
ptgUser, // retrieved info buffer
|
|
cbBuffer, // size of buffer passed-in
|
|
&cbBuffer // required buffer size
|
|
))
|
|
{
|
|
dwLastError = GetLastError();
|
|
goto error;
|
|
}
|
|
|
|
}
|
|
|
|
|
|
//
|
|
// try querying based on a fast stack based buffer first.
|
|
//
|
|
|
|
ptgGroups = (PTOKEN_GROUPS)GroupsFastBuffer;
|
|
cbBuffer = sizeof(GroupsFastBuffer);
|
|
|
|
if(!GetTokenInformation(
|
|
pServerContext->hToken, // identifies access token
|
|
TokenGroups, // TokenUser info type
|
|
ptgGroups, // retrieved info buffer
|
|
cbBuffer, // size of buffer passed-in
|
|
&cbBuffer // required buffer size
|
|
))
|
|
{
|
|
dwLastError = GetLastError();
|
|
|
|
if(dwLastError != ERROR_INSUFFICIENT_BUFFER)
|
|
{
|
|
goto error;
|
|
}
|
|
dwLastError = ERROR_SUCCESS;
|
|
|
|
//
|
|
// try again with the specified buffer size
|
|
//
|
|
|
|
ptgGroups = (PTOKEN_GROUPS)SSAlloc(cbBuffer);
|
|
if(NULL == ptgGroups)
|
|
{
|
|
dwLastError = ERROR_NOT_ENOUGH_MEMORY;
|
|
goto error;
|
|
}
|
|
|
|
|
|
|
|
if(!GetTokenInformation(
|
|
pServerContext->hToken, // identifies access token
|
|
TokenGroups, // TokenUser info type
|
|
ptgGroups, // retrieved info buffer
|
|
cbBuffer, // size of buffer passed-in
|
|
&cbBuffer // required buffer size
|
|
))
|
|
{
|
|
dwLastError = GetLastError();
|
|
goto error;
|
|
}
|
|
|
|
}
|
|
|
|
|
|
//
|
|
// if we got the token info successfully, copy the
|
|
// relevant element for the caller.
|
|
//
|
|
|
|
cbSid = GetLengthSid(ptgUser->User.Sid);
|
|
cSids = 1;
|
|
|
|
for(i=0; i < ptgGroups->GroupCount; i++)
|
|
{
|
|
if(0 == (SE_GROUP_ENABLED & ptgGroups->Groups[i].Attributes))
|
|
{
|
|
continue;
|
|
}
|
|
if(0 == ((SE_GROUP_OWNER | SE_GROUP_USE_FOR_DENY_ONLY) & ptgGroups->Groups[i].Attributes))
|
|
{
|
|
continue;
|
|
}
|
|
cbSid += GetLengthSid(ptgGroups->Groups[i].Sid);
|
|
cSids ++;
|
|
|
|
}
|
|
|
|
|
|
*cpsidHistory = cSids;
|
|
*papsidHistory = (PSID *)SSAlloc(cSids*sizeof(PSID) + cbSid );
|
|
|
|
if(*papsidHistory == NULL)
|
|
{
|
|
dwLastError = ERROR_NOT_ENOUGH_MEMORY;
|
|
goto error;
|
|
}
|
|
else
|
|
{
|
|
pbCurrentSid = (PBYTE)((*papsidHistory)+cSids);
|
|
|
|
// Fill in the primary user SID
|
|
(*papsidHistory)[0] = (PSID)pbCurrentSid;
|
|
cbSid = GetLengthSid(ptgUser->User.Sid);
|
|
CopySid(cbSid, pbCurrentSid, ptgUser->User.Sid);
|
|
pbCurrentSid += cbSid;
|
|
|
|
cSids = 1;
|
|
|
|
// Fill in the rest of the SIDs
|
|
for(i=0; i < ptgGroups->GroupCount; i++)
|
|
{
|
|
if(0 == (SE_GROUP_ENABLED & ptgGroups->Groups[i].Attributes))
|
|
{
|
|
continue;
|
|
}
|
|
if(0 == ((SE_GROUP_OWNER | SE_GROUP_USE_FOR_DENY_ONLY) & ptgGroups->Groups[i].Attributes))
|
|
{
|
|
continue;
|
|
}
|
|
(*papsidHistory)[cSids++] = pbCurrentSid;
|
|
cbSid = GetLengthSid(ptgGroups->Groups[i].Sid);
|
|
CopySid(cbSid, pbCurrentSid,ptgGroups->Groups[i].Sid);
|
|
pbCurrentSid += cbSid;
|
|
}
|
|
}
|
|
|
|
|
|
error:
|
|
|
|
if(FastBuffer != (PBYTE)ptgUser)
|
|
{
|
|
SSFree(ptgUser);
|
|
}
|
|
|
|
if(GroupsFastBuffer != (PBYTE)ptgGroups)
|
|
{
|
|
SSFree(ptgGroups);
|
|
}
|
|
|
|
|
|
return dwLastError;
|
|
}
|
|
|
|
|