Annotation of embedaddon/strongswan/src/libcharon/plugins/eap_aka_3gpp2/eap_aka_3gpp2_plugin.h, revision 1.1.1.1
1.1 misho 1: /*
2: * Copyright (C) 2008-2009 Martin Willi
3: * HSR Hochschule fuer Technik Rapperswil
4: *
5: * This program is free software; you can redistribute it and/or modify it
6: * under the terms of the GNU General Public License as published by the
7: * Free Software Foundation; either version 2 of the License, or (at your
8: * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
9: *
10: * This program is distributed in the hope that it will be useful, but
11: * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
12: * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
13: * for more details.
14: */
15:
16: /**
17: * @defgroup eap_aka_3gpp2 eap_aka_3gpp2
18: * @ingroup cplugins
19: *
20: * @defgroup eap_aka_3gpp2_plugin eap_aka_3gpp2_plugin
21: * @{ @ingroup eap_aka_3gpp2
22: */
23:
24: #ifndef EAP_AKA_3GPP2_PLUGIN_H_
25: #define EAP_AKA_3GPP2_PLUGIN_H_
26:
27: #include <plugins/plugin.h>
28:
29: typedef struct eap_aka_3gpp2_plugin_t eap_aka_3gpp2_plugin_t;
30:
31: /**
32: * Plugin to provide a SIM card/provider using the 3GPP2 (S.S0055) standard.
33: *
34: * This plugin implements the standard of the 3GPP2 (S.S0055) and not the one
35: * of 3GGP, completely in software using the libgmp library..
36: * The shared key used for authentication is from ipsec.secrets. The
37: * peers ID is used to query it.
38: * The AKA mechanism uses sequence numbers to detect replay attacks. The
39: * peer stores the sequence number normally in a USIM and accepts
40: * incremental sequence numbers (incremental for lifetime of the USIM). To
41: * prevent a complex sequence number management, this implementation uses
42: * a sequence number derived from time. It is initialized to the startup
43: * time of the daemon.
44: * To enable time based SEQs, define SEQ_CHECK as 1. Default is to accept
45: * any SEQ numbers. This allows an attacker to do replay attacks. But since
46: * the server has proven his identity via IKE, such an attack is only
47: * possible between server and AAA (if any).
48: */
49: struct eap_aka_3gpp2_plugin_t {
50:
51: /**
52: * implements plugin interface
53: */
54: plugin_t plugin;
55: };
56:
57: #endif /** EAP_AKA_3GPP2_PLUGIN_H_ @}*/
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>