summaryrefslogtreecommitdiffstats
path: root/bin
diff options
context:
space:
mode:
Diffstat (limited to 'bin')
-rw-r--r--bin/ykfde.c86
1 files changed, 49 insertions, 37 deletions
diff --git a/bin/ykfde.c b/bin/ykfde.c
index 8dda1d9..b01b3a1 100644
--- a/bin/ykfde.c
+++ b/bin/ykfde.c
@@ -59,6 +59,42 @@ const static struct option options_long[] = {
{ 0, 0, 0, 0 }
};
+char * ask_factor(const char * text) {
+ struct termios tp, tp_save;
+ char * factor = NULL;
+ size_t len;
+ ssize_t readlen;
+
+ /* get terminal properties */
+ if (tcgetattr(STDIN_FILENO, &tp) < 0) {
+ fprintf(stderr, "Failed reading terminal attributes. Not on terminal?\n");
+ return NULL;
+ }
+
+ tp_save = tp;
+
+ /* disable echo on terminal */
+ tp.c_lflag &= ~ECHO;
+ if (tcsetattr(STDIN_FILENO, TCSAFLUSH, &tp) < 0) {
+ fprintf(stderr, "Failed setting terminal attributes.\n");
+ return NULL;
+ }
+
+ printf("Please give %s:", text);
+ readlen = getline(&factor, &len, stdin);
+ factor[readlen - 1] = '\0';
+ putchar('\n');
+
+ /* restore terminal */
+ if (tcsetattr(STDIN_FILENO, TCSANOW, &tp_save) < 0) {
+ fprintf(stderr, "Failed setting terminal attributes.\n");
+ free(factor);
+ return NULL;
+ }
+
+ return factor;
+}
+
int main(int argc, char **argv) {
unsigned int version = 0, help = 0;
char challenge_old[CHALLENGELEN + 1],
@@ -72,11 +108,8 @@ int main(int argc, char **argv) {
challengefiletmpname[sizeof(CHALLENGEDIR) + 11 /* "/challenge-" */ + 10 /* unsigned int in char */ + 7 /* -XXXXXX */ + 1];
int challengefile = 0, challengefiletmp = 0;
struct timeval tv;
- struct termios tp, tp_save;
- uint8_t have_term = 1;
int i;
size_t len;
- ssize_t readlen;
int8_t rc = EXIT_FAILURE;
/* cryptsetup */
const char * device_name;
@@ -87,7 +120,7 @@ int main(int argc, char **argv) {
/* keyutils */
key_serial_t key;
void * payload = NULL;
- char * second_factor = NULL, * new_2nd_factor = NULL;
+ char * second_factor = NULL, * new_2nd_factor = NULL, * new_2nd_factor_verify = NULL;
/* yubikey */
YK_KEY * yk;
uint8_t yk_slot = SLOT_CHAL_HMAC2;
@@ -97,19 +130,6 @@ int main(int argc, char **argv) {
char section_ykslot[10 /* unsigned int in char */ + 1 + sizeof(CONFYKSLOT) + 1];
char section_luksslot[10 + 1 + sizeof(CONFLUKSSLOT) + 1];
- /* get terminal properties */
- if (tcgetattr(STDIN_FILENO, &tp) < 0)
- have_term = 0;
- tp_save = tp;
-
- /* disable echo on terminal */
- tp.c_lflag &= ~ECHO;
- if (have_term)
- if (tcsetattr(STDIN_FILENO, TCSAFLUSH, &tp) < 0) {
- fprintf(stderr, "Failed setting terminal attributes.\n");
- goto out0;
- }
-
/* get command line options */
while ((i = getopt_long(argc, argv, optstring, options_long, NULL)) != -1)
switch (i) {
@@ -124,12 +144,16 @@ int main(int argc, char **argv) {
}
if (optarg == NULL) { /* N */
- if (have_term == 0)
- fprintf(stderr, "Warning: Could not disable echo, input will be visible!\n");
- printf("Please give new second factor:");
- readlen = getline(&new_2nd_factor, &len, stdin);
- new_2nd_factor[readlen - 1] = '\0';
- putchar('\n');
+ if ((new_2nd_factor = ask_factor("new second factor")) == NULL)
+ goto out10;
+
+ if ((new_2nd_factor_verify = ask_factor("new second factor for verification")) == NULL)
+ goto out10;
+
+ if (strcmp(new_2nd_factor, new_2nd_factor_verify) != 0) {
+ fprintf(stderr, "Verification failed, given strings do not match.\n");
+ goto out10;
+ }
} else { /* n */
new_2nd_factor = strdup(optarg);
memset(optarg, '*', strlen(optarg));
@@ -144,12 +168,7 @@ int main(int argc, char **argv) {
}
if (optarg == NULL) { /* S */
- if (have_term == 0)
- fprintf(stderr, "Warning: Could not disable echo, input will be visible!\n");
- printf("Please give second factor:");
- readlen = getline(&second_factor, &len, stdin);
- second_factor[readlen - 1] = '\0';
- putchar('\n');
+ second_factor = ask_factor("second factor");
} else { /* s */
second_factor = strdup(optarg);
memset(optarg, '*', strlen(optarg));
@@ -161,13 +180,6 @@ int main(int argc, char **argv) {
break;
}
- /* restore terminal */
- if (have_term)
- if (tcsetattr(STDIN_FILENO, TCSANOW, &tp_save) < 0) {
- fprintf(stderr, "Failed setting terminal attributes.\n");
- goto out10;
- }
-
if (version > 0)
printf("%s: %s v%s (compiled: " __DATE__ ", " __TIME__ ")\n", argv[0], PROGNAME, VERSION);
@@ -412,10 +424,10 @@ out10:
memset(passphrase_old, 0, PASSPHRASELEN + 1);
memset(passphrase_new, 0, PASSPHRASELEN + 1);
+ free(new_2nd_factor_verify);
free(new_2nd_factor);
free(second_factor);
-out0:
return rc;
}