Custom Challenge-Response Authentication Package

The purpose of this project is to create a custom authentication package for Windows that supports challenge-response authentication. We’re looking for a skeleton or “sample?? authentication package that can be called with a username, returns a challenge (say, a random number), then can be called again with the username and the response (say, the random number times two) and if the response it receives from the caller matches its own pre-calculated value then authentication succeeds and it returns an access token. We’re going to use PKI for the challenge-response authentication but the coder does not need to concern himself with that part ??" we’re looking for a simple LSA authentication package and not the final code. The client code will run with SE_TCB_PRIVILEGE and register itself as a logon process using LsaRegisterLogonProcess. It will then call LsaCallAuthenticationPackage to get the challenge from the AP, and use LsaLogonUser to pass in the response and receive the token. The authentication package itself will be a DLL as specified in the LSA documentation on MSDN, and should be implemented according to those guidelines. ## Deliverables 1) Complete and fully-functional working program(s) in executable form as well as complete source code for the Client application and the LSA authentication package. 2) Instructions on how to install the authentication package (where to place the DLL, what registry entries to set, etc). 3) All deliverables will be considered "work made for hire" under U.S. Copyright law. Buyer will receive exclusive and complete copyrights to all work purchased. (No GPL, GNU, 3rd party components, etc. unless all copyright ramifications are explained AND AGREED TO by the buyer on the site per the coder's Seller Legal Agreement). ## Platform Windows 2000, Windows XP and Windows 2003. Must be pure C++ code (created with Visual Studio 2002 or 2003) and not use MFC or ATL.