1#ifndef HEADER_VAUTH_NTLM_H
2#define HEADER_VAUTH_NTLM_H
3/***************************************************************************
4 * _ _ ____ _
5 * Project ___| | | | _ \| |
6 * / __| | | | |_) | |
7 * | (__| |_| | _ <| |___
8 * \___|\___/|_| \_\_____|
9 *
10 * Copyright (C) 1998 - 2018, Daniel Stenberg, <daniel@haxx.se>, et al.
11 *
12 * This software is licensed as described in the file COPYING, which
13 * you should have received as part of this distribution. The terms
14 * are also available at https://curl.haxx.se/docs/copyright.html.
15 *
16 * You may opt to use, copy, modify, merge, publish, distribute and/or sell
17 * copies of the Software, and permit persons to whom the Software is
18 * furnished to do so, under the terms of the COPYING file.
19 *
20 * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
21 * KIND, either express or implied.
22 *
23 ***************************************************************************/
24
25#include "curl_setup.h"
26
27#ifdef USE_NTLM
28
29/* NTLM buffer fixed size, large enough for long user + host + domain */
30#define NTLM_BUFSIZE 1024
31
32/* Stuff only required for curl_ntlm_msgs.c */
33#ifdef BUILDING_CURL_NTLM_MSGS_C
34
35/* Flag bits definitions based on https://davenport.sourceforge.io/ntlm.html */
36
37#define NTLMFLAG_NEGOTIATE_UNICODE (1<<0)
38/* Indicates that Unicode strings are supported for use in security buffer
39 data. */
40
41#define NTLMFLAG_NEGOTIATE_OEM (1<<1)
42/* Indicates that OEM strings are supported for use in security buffer data. */
43
44#define NTLMFLAG_REQUEST_TARGET (1<<2)
45/* Requests that the server's authentication realm be included in the Type 2
46 message. */
47
48/* unknown (1<<3) */
49#define NTLMFLAG_NEGOTIATE_SIGN (1<<4)
50/* Specifies that authenticated communication between the client and server
51 should carry a digital signature (message integrity). */
52
53#define NTLMFLAG_NEGOTIATE_SEAL (1<<5)
54/* Specifies that authenticated communication between the client and server
55 should be encrypted (message confidentiality). */
56
57#define NTLMFLAG_NEGOTIATE_DATAGRAM_STYLE (1<<6)
58/* Indicates that datagram authentication is being used. */
59
60#define NTLMFLAG_NEGOTIATE_LM_KEY (1<<7)
61/* Indicates that the LAN Manager session key should be used for signing and
62 sealing authenticated communications. */
63
64#define NTLMFLAG_NEGOTIATE_NETWARE (1<<8)
65/* unknown purpose */
66
67#define NTLMFLAG_NEGOTIATE_NTLM_KEY (1<<9)
68/* Indicates that NTLM authentication is being used. */
69
70/* unknown (1<<10) */
71
72#define NTLMFLAG_NEGOTIATE_ANONYMOUS (1<<11)
73/* Sent by the client in the Type 3 message to indicate that an anonymous
74 context has been established. This also affects the response fields. */
75
76#define NTLMFLAG_NEGOTIATE_DOMAIN_SUPPLIED (1<<12)
77/* Sent by the client in the Type 1 message to indicate that a desired
78 authentication realm is included in the message. */
79
80#define NTLMFLAG_NEGOTIATE_WORKSTATION_SUPPLIED (1<<13)
81/* Sent by the client in the Type 1 message to indicate that the client
82 workstation's name is included in the message. */
83
84#define NTLMFLAG_NEGOTIATE_LOCAL_CALL (1<<14)
85/* Sent by the server to indicate that the server and client are on the same
86 machine. Implies that the client may use a pre-established local security
87 context rather than responding to the challenge. */
88
89#define NTLMFLAG_NEGOTIATE_ALWAYS_SIGN (1<<15)
90/* Indicates that authenticated communication between the client and server
91 should be signed with a "dummy" signature. */
92
93#define NTLMFLAG_TARGET_TYPE_DOMAIN (1<<16)
94/* Sent by the server in the Type 2 message to indicate that the target
95 authentication realm is a domain. */
96
97#define NTLMFLAG_TARGET_TYPE_SERVER (1<<17)
98/* Sent by the server in the Type 2 message to indicate that the target
99 authentication realm is a server. */
100
101#define NTLMFLAG_TARGET_TYPE_SHARE (1<<18)
102/* Sent by the server in the Type 2 message to indicate that the target
103 authentication realm is a share. Presumably, this is for share-level
104 authentication. Usage is unclear. */
105
106#define NTLMFLAG_NEGOTIATE_NTLM2_KEY (1<<19)
107/* Indicates that the NTLM2 signing and sealing scheme should be used for
108 protecting authenticated communications. */
109
110#define NTLMFLAG_REQUEST_INIT_RESPONSE (1<<20)
111/* unknown purpose */
112
113#define NTLMFLAG_REQUEST_ACCEPT_RESPONSE (1<<21)
114/* unknown purpose */
115
116#define NTLMFLAG_REQUEST_NONNT_SESSION_KEY (1<<22)
117/* unknown purpose */
118
119#define NTLMFLAG_NEGOTIATE_TARGET_INFO (1<<23)
120/* Sent by the server in the Type 2 message to indicate that it is including a
121 Target Information block in the message. */
122
123/* unknown (1<24) */
124/* unknown (1<25) */
125/* unknown (1<26) */
126/* unknown (1<27) */
127/* unknown (1<28) */
128
129#define NTLMFLAG_NEGOTIATE_128 (1<<29)
130/* Indicates that 128-bit encryption is supported. */
131
132#define NTLMFLAG_NEGOTIATE_KEY_EXCHANGE (1<<30)
133/* Indicates that the client will provide an encrypted master key in
134 the "Session Key" field of the Type 3 message. */
135
136#define NTLMFLAG_NEGOTIATE_56 (1<<31)
137/* Indicates that 56-bit encryption is supported. */
138
139#endif /* BUILDING_CURL_NTLM_MSGS_C */
140
141#endif /* USE_NTLM */
142
143#endif /* HEADER_VAUTH_NTLM_H */
144