Annotation of embedaddon/ipsec-tools/src/racoon/oakley.h, revision 1.1
1.1 ! misho 1: /* $NetBSD: oakley.h,v 1.7 2009/03/12 10:57:26 tteras Exp $ */
! 2:
! 3: /* Id: oakley.h,v 1.13 2005/05/30 20:12:43 fredsen Exp */
! 4:
! 5: /*
! 6: * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
! 7: * All rights reserved.
! 8: *
! 9: * Redistribution and use in source and binary forms, with or without
! 10: * modification, are permitted provided that the following conditions
! 11: * are met:
! 12: * 1. Redistributions of source code must retain the above copyright
! 13: * notice, this list of conditions and the following disclaimer.
! 14: * 2. Redistributions in binary form must reproduce the above copyright
! 15: * notice, this list of conditions and the following disclaimer in the
! 16: * documentation and/or other materials provided with the distribution.
! 17: * 3. Neither the name of the project nor the names of its contributors
! 18: * may be used to endorse or promote products derived from this software
! 19: * without specific prior written permission.
! 20: *
! 21: * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
! 22: * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
! 23: * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
! 24: * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
! 25: * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
! 26: * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
! 27: * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
! 28: * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
! 29: * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
! 30: * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
! 31: * SUCH DAMAGE.
! 32: */
! 33:
! 34: #ifndef _OAKLEY_H
! 35: #define _OAKLEY_H
! 36:
! 37: #include "vmbuf.h"
! 38:
! 39: /* refer to RFC 2409 */
! 40:
! 41: /* Attribute Classes */
! 42: #define OAKLEY_ATTR_ENC_ALG 1 /* B */
! 43: #define OAKLEY_ATTR_ENC_ALG_DES 1
! 44: #define OAKLEY_ATTR_ENC_ALG_IDEA 2
! 45: #define OAKLEY_ATTR_ENC_ALG_BLOWFISH 3
! 46: #define OAKLEY_ATTR_ENC_ALG_RC5 4
! 47: #define OAKLEY_ATTR_ENC_ALG_3DES 5
! 48: #define OAKLEY_ATTR_ENC_ALG_CAST 6
! 49: #define OAKLEY_ATTR_ENC_ALG_AES 7
! 50: #define OAKLEY_ATTR_ENC_ALG_CAMELLIA 8
! 51: /* 65001 - 65535 Private Use */
! 52: #define OAKLEY_ATTR_HASH_ALG 2 /* B */
! 53: #define OAKLEY_ATTR_HASH_ALG_MD5 1
! 54: #define OAKLEY_ATTR_HASH_ALG_SHA 2
! 55: #define OAKLEY_ATTR_HASH_ALG_TIGER 3
! 56: #if defined(WITH_SHA2)
! 57: #define OAKLEY_ATTR_HASH_ALG_SHA2_256 4
! 58: #define OAKLEY_ATTR_HASH_ALG_SHA2_384 5
! 59: #define OAKLEY_ATTR_HASH_ALG_SHA2_512 6
! 60: #endif
! 61: /* 65001 - 65535 Private Use */
! 62: #define OAKLEY_ATTR_AUTH_METHOD 3 /* B */
! 63: #define OAKLEY_ATTR_AUTH_METHOD_PSKEY 1
! 64: #define OAKLEY_ATTR_AUTH_METHOD_DSSSIG 2
! 65: #define OAKLEY_ATTR_AUTH_METHOD_RSASIG 3
! 66: #define OAKLEY_ATTR_AUTH_METHOD_RSAENC 4
! 67: #define OAKLEY_ATTR_AUTH_METHOD_RSAREV 5
! 68: #define OAKLEY_ATTR_AUTH_METHOD_EGENC 6
! 69: #define OAKLEY_ATTR_AUTH_METHOD_EGREV 7
! 70: /* Hybrid Auth */
! 71: #ifdef ENABLE_HYBRID
! 72: #define OAKLEY_ATTR_AUTH_METHOD_HYBRID_RSA_I 64221
! 73: #define OAKLEY_ATTR_AUTH_METHOD_HYBRID_RSA_R 64222
! 74: #define OAKLEY_ATTR_AUTH_METHOD_HYBRID_DSS_I 64223
! 75: #define OAKLEY_ATTR_AUTH_METHOD_HYBRID_DSS_R 64224
! 76:
! 77: /* 65001 - 65535 Private Use */
! 78:
! 79: /* Plain Xauth */
! 80: #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_PSKEY_I 65001
! 81: #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_PSKEY_R 65002
! 82: #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_DSSSIG_I 65003
! 83: #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_DSSSIG_R 65004
! 84: #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_RSASIG_I 65005
! 85: #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_RSASIG_R 65006
! 86: #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_RSAENC_I 65007
! 87: #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_RSAENC_R 65008
! 88: #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_RSAREV_I 65009
! 89: #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_RSAREV_R 65010
! 90: #endif
! 91:
! 92: /*
! 93: * The following are valid when the Vendor ID is one of
! 94: * the following:
! 95: *
! 96: * MD5("A GSS-API Authentication Method for IKE")
! 97: * MD5("GSSAPI") (recognized by Windows 2000)
! 98: * MD5("MS NT5 ISAKMPOAKLEY") (sent by Windows 2000)
! 99: */
! 100:
! 101: #define OAKLEY_ATTR_AUTH_METHOD_GSSAPI_KRB (65001 + 0x10000)
! 102: #define OAKLEY_ATTR_AUTH_METHOD_GSSAPI_KRB_REAL 65001
! 103:
! 104: #define OAKLEY_ATTR_GRP_DESC 4 /* B */
! 105: #define OAKLEY_ATTR_GRP_DESC_MODP768 1
! 106: #define OAKLEY_ATTR_GRP_DESC_MODP1024 2
! 107: #define OAKLEY_ATTR_GRP_DESC_EC2N155 3
! 108: #define OAKLEY_ATTR_GRP_DESC_EC2N185 4
! 109: #define OAKLEY_ATTR_GRP_DESC_MODP1536 5
! 110: #define OAKLEY_ATTR_GRP_DESC_MODP2048 14
! 111: #define OAKLEY_ATTR_GRP_DESC_MODP3072 15
! 112: #define OAKLEY_ATTR_GRP_DESC_MODP4096 16
! 113: #define OAKLEY_ATTR_GRP_DESC_MODP6144 17
! 114: #define OAKLEY_ATTR_GRP_DESC_MODP8192 18
! 115: /* 32768 - 65535 Private Use */
! 116: #define OAKLEY_ATTR_GRP_TYPE 5 /* B */
! 117: #define OAKLEY_ATTR_GRP_TYPE_MODP 1
! 118: #define OAKLEY_ATTR_GRP_TYPE_ECP 2
! 119: #define OAKLEY_ATTR_GRP_TYPE_EC2N 3
! 120: /* 65001 - 65535 Private Use */
! 121: #define OAKLEY_ATTR_GRP_PI 6 /* V */
! 122: #define OAKLEY_ATTR_GRP_GEN_ONE 7 /* V */
! 123: #define OAKLEY_ATTR_GRP_GEN_TWO 8 /* V */
! 124: #define OAKLEY_ATTR_GRP_CURVE_A 9 /* V */
! 125: #define OAKLEY_ATTR_GRP_CURVE_B 10 /* V */
! 126: #define OAKLEY_ATTR_SA_LD_TYPE 11 /* B */
! 127: #define OAKLEY_ATTR_SA_LD_TYPE_DEFAULT 1
! 128: #define OAKLEY_ATTR_SA_LD_TYPE_SEC 1
! 129: #define OAKLEY_ATTR_SA_LD_TYPE_KB 2
! 130: #define OAKLEY_ATTR_SA_LD_TYPE_MAX 3
! 131: /* 65001 - 65535 Private Use */
! 132: #define OAKLEY_ATTR_SA_LD 12 /* V */
! 133: #define OAKLEY_ATTR_SA_LD_SEC_DEFAULT 28800 /* 8 hours */
! 134: #define OAKLEY_ATTR_PRF 13 /* B */
! 135: #define OAKLEY_ATTR_KEY_LEN 14 /* B */
! 136: #define OAKLEY_ATTR_FIELD_SIZE 15 /* B */
! 137: #define OAKLEY_ATTR_GRP_ORDER 16 /* V */
! 138: #define OAKLEY_ATTR_BLOCK_SIZE 17 /* B */
! 139: /* 16384 - 32767 Private Use */
! 140:
! 141: /*
! 142: * The following are valid when the Vendor ID is one of
! 143: * the following:
! 144: *
! 145: * MD5("A GSS-API Authentication Method for IKE")
! 146: * MD5("GSSAPI") (recognized by Windows 2000)
! 147: * MD5("MS NT5 ISAKMPOAKLEY") (sent by Windows 2000)
! 148: */
! 149: #define OAKLEY_ATTR_GSS_ID 16384
! 150:
! 151: #define MAXPADLWORD 20
! 152:
! 153: struct dhgroup {
! 154: int type;
! 155: vchar_t *prime;
! 156: int gen1;
! 157: int gen2;
! 158: vchar_t *curve_a;
! 159: vchar_t *curve_b;
! 160: vchar_t *order;
! 161: };
! 162:
! 163: struct ph1handle;
! 164: struct ph2handle;
! 165: struct isakmp_ivm;
! 166:
! 167: extern int oakley_get_defaultlifetime __P((void));
! 168:
! 169: extern int oakley_dhinit __P((void));
! 170: extern void oakley_dhgrp_free __P((struct dhgroup *));
! 171: extern int oakley_dh_compute __P((const struct dhgroup *,
! 172: vchar_t *, vchar_t *, vchar_t *, vchar_t **));
! 173: extern int oakley_dh_generate __P((const struct dhgroup *,
! 174: vchar_t **, vchar_t **));
! 175: extern int oakley_setdhgroup __P((int, struct dhgroup **));
! 176:
! 177: extern vchar_t *oakley_prf __P((vchar_t *, vchar_t *, struct ph1handle *));
! 178: extern vchar_t *oakley_hash __P((vchar_t *, struct ph1handle *));
! 179:
! 180: extern int oakley_compute_keymat __P((struct ph2handle *, int));
! 181:
! 182: #if notyet
! 183: extern vchar_t *oakley_compute_hashx __P((void));
! 184: #endif
! 185: extern vchar_t *oakley_compute_hash3 __P((struct ph1handle *,
! 186: u_int32_t, vchar_t *));
! 187: extern vchar_t *oakley_compute_hash1 __P((struct ph1handle *,
! 188: u_int32_t, vchar_t *));
! 189: extern vchar_t *oakley_ph1hash_common __P((struct ph1handle *, int));
! 190: extern vchar_t *oakley_ph1hash_base_i __P((struct ph1handle *, int));
! 191: extern vchar_t *oakley_ph1hash_base_r __P((struct ph1handle *, int));
! 192:
! 193: extern int oakley_get_certtype __P((vchar_t *));
! 194: extern int oakley_validate_auth __P((struct ph1handle *));
! 195: extern int oakley_getmycert __P((struct ph1handle *));
! 196: extern int oakley_getsign __P((struct ph1handle *));
! 197: extern vchar_t *oakley_getcr __P((struct ph1handle *));
! 198: extern struct payload_list *oakley_append_cr __P((struct payload_list *,
! 199: struct ph1handle *));
! 200: extern int oakley_checkcr __P((struct ph1handle *));
! 201: extern int oakley_needcr __P((int));
! 202: struct isakmp_gen;
! 203: extern int oakley_savecert __P((struct ph1handle *, struct isakmp_gen *));
! 204: extern int oakley_savecr __P((struct ph1handle *, struct isakmp_gen *));
! 205:
! 206: extern int oakley_skeyid __P((struct ph1handle *));
! 207: extern int oakley_skeyid_dae __P((struct ph1handle *));
! 208:
! 209: extern int oakley_compute_enckey __P((struct ph1handle *));
! 210: extern int oakley_newiv __P((struct ph1handle *));
! 211: extern struct isakmp_ivm *oakley_newiv2 __P((struct ph1handle *, u_int32_t));
! 212: extern void oakley_delivm __P((struct isakmp_ivm *));
! 213: extern vchar_t *oakley_do_decrypt __P((struct ph1handle *,
! 214: vchar_t *, vchar_t *, vchar_t *));
! 215: extern vchar_t *oakley_do_encrypt __P((struct ph1handle *,
! 216: vchar_t *, vchar_t *, vchar_t *));
! 217:
! 218: #endif /* _OAKLEY_H */
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
![[BACK]](/icons/cvsweb/back.gif){kind=icon}
Return to oakley.h CVS log ![[TXT]](/icons/cvsweb/text.gif){kind=icon}
![[DIR]](/icons/cvsweb/dir.gif){kind=icon}
Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / ipsec-tools / src / racoon