FreeBSD/Linux Kernel Cross Reference
sys/netinet6/esp.h
1 /* $NetBSD: esp.h,v 1.21 2003/07/20 03:24:03 itojun Exp $ */
2 /* $KAME: esp.h,v 1.19 2001/09/04 08:43:19 itojun Exp $ */
3
4 /*
5 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
6 * All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 * 1. Redistributions of source code must retain the above copyright
12 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
16 * 3. Neither the name of the project nor the names of its contributors
17 * may be used to endorse or promote products derived from this software
18 * without specific prior written permission.
19 *
20 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 * SUCH DAMAGE.
31 */
32
33 /*
34 * RFC1827/2406 Encapsulated Security Payload.
35 */
36
37 #ifndef _NETINET6_ESP_H_
38 #define _NETINET6_ESP_H_
39
40 #if defined(_KERNEL_OPT)
41 #include "opt_inet.h"
42 #endif
43
44 struct esp {
45 u_int32_t esp_spi; /* ESP */
46 /* variable size, 32bit bound */ /* Initialization Vector */
47 /* variable size */ /* Payload data */
48 /* variable size */ /* padding */
49 /* 8bit */ /* pad size */
50 /* 8bit */ /* next header */
51 /* variable size, 32bit bound */ /* Authentication data (new IPsec) */
52 };
53
54 struct newesp {
55 u_int32_t esp_spi; /* ESP */
56 u_int32_t esp_seq; /* Sequence number */
57 /* variable size */ /* (IV and) Payload data */
58 /* variable size */ /* padding */
59 /* 8bit */ /* pad size */
60 /* 8bit */ /* next header */
61 /* variable size, 32bit bound *//* Authentication data */
62 };
63
64 struct esptail {
65 u_int8_t esp_padlen; /* pad length */
66 u_int8_t esp_nxt; /* Next header */
67 /* variable size, 32bit bound *//* Authentication data (new IPsec)*/
68 };
69
70 #ifdef _KERNEL
71 struct secasvar;
72
73 struct esp_algorithm {
74 size_t padbound; /* pad boundary, in byte */
75 int ivlenval; /* iv length, in byte */
76 int (*mature) __P((struct secasvar *));
77 int keymin; /* in bits */
78 int keymax; /* in bits */
79 size_t (*schedlen) __P((const struct esp_algorithm *));
80 const char *name;
81 int (*ivlen) __P((const struct esp_algorithm *, struct secasvar *));
82 int (*decrypt) __P((struct mbuf *, size_t,
83 struct secasvar *, const struct esp_algorithm *, int));
84 int (*encrypt) __P((struct mbuf *, size_t, size_t,
85 struct secasvar *, const struct esp_algorithm *, int));
86 /* not supposed to be called directly */
87 int (*schedule) __P((const struct esp_algorithm *, struct secasvar *));
88 int (*blockdecrypt) __P((const struct esp_algorithm *,
89 struct secasvar *, u_int8_t *, u_int8_t *));
90 int (*blockencrypt) __P((const struct esp_algorithm *,
91 struct secasvar *, u_int8_t *, u_int8_t *));
92 };
93
94 extern const struct esp_algorithm *esp_algorithm_lookup __P((int));
95 extern int esp_max_padbound __P((void));
96 extern int esp_max_ivlen __P((void));
97
98 /* crypt routines */
99 extern int esp4_output __P((struct mbuf *, struct ipsecrequest *));
100 extern void esp4_input __P((struct mbuf *, ...));
101 extern size_t esp_hdrsiz __P((struct ipsecrequest *));
102
103 extern void *esp4_ctlinput __P((int, struct sockaddr *, void *));
104
105 #ifdef INET6
106 extern int esp6_output __P((struct mbuf *, u_char *, struct mbuf *,
107 struct ipsecrequest *));
108 extern int esp6_input __P((struct mbuf **, int *, int));
109
110 extern void esp6_ctlinput __P((int, struct sockaddr *, void *));
111 #endif /* INET6 */
112
113 extern int esp_schedule __P((const struct esp_algorithm *, struct secasvar *));
114 extern int esp_auth __P((struct mbuf *, size_t, size_t,
115 struct secasvar *, u_char *));
116 #endif /* _KERNEL */
117
118 #endif /* _NETINET6_ESP_H_ */
Cache object: 467d9703cb91c111f84e5d9e5bc800fa
|