Annotation of embedaddon/strongswan/src/libstrongswan/crypto/diffie_hellman.h, revision 1.1
1.1 ! misho 1: /*
! 2: * Copyright (C) 2010 Tobias Brunner
! 3: * Copyright (C) 2005-2007 Martin Willi
! 4: * Copyright (C) 2005 Jan Hutter
! 5: * HSR Hochschule fuer Technik Rapperswil
! 6: *
! 7: * This program is free software; you can redistribute it and/or modify it
! 8: * under the terms of the GNU General Public License as published by the
! 9: * Free Software Foundation; either version 2 of the License, or (at your
! 10: * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
! 11: *
! 12: * This program is distributed in the hope that it will be useful, but
! 13: * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
! 14: * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
! 15: * for more details.
! 16: */
! 17:
! 18: /**
! 19: * @defgroup diffie_hellman diffie_hellman
! 20: * @{ @ingroup crypto
! 21: */
! 22:
! 23: #ifndef DIFFIE_HELLMAN_H_
! 24: #define DIFFIE_HELLMAN_H_
! 25:
! 26: typedef enum diffie_hellman_group_t diffie_hellman_group_t;
! 27: typedef struct diffie_hellman_t diffie_hellman_t;
! 28: typedef struct diffie_hellman_params_t diffie_hellman_params_t;
! 29:
! 30: #include <library.h>
! 31:
! 32: /**
! 33: * Diffie-Hellman group.
! 34: *
! 35: * The modulus (or group) to use for a Diffie-Hellman calculation.
! 36: * See IKEv2 RFC 3.3.2 and RFC 3526.
! 37: *
! 38: * ECP groups are defined in RFC 4753 and RFC 5114.
! 39: * ECC Brainpool groups are defined in RFC 6954.
! 40: * Curve25519 and Curve448 groups are defined in RFC 8031.
! 41: */
! 42: enum diffie_hellman_group_t {
! 43: MODP_NONE = 0,
! 44: MODP_768_BIT = 1,
! 45: MODP_1024_BIT = 2,
! 46: MODP_1536_BIT = 5,
! 47: MODP_2048_BIT = 14,
! 48: MODP_3072_BIT = 15,
! 49: MODP_4096_BIT = 16,
! 50: MODP_6144_BIT = 17,
! 51: MODP_8192_BIT = 18,
! 52: ECP_256_BIT = 19,
! 53: ECP_384_BIT = 20,
! 54: ECP_521_BIT = 21,
! 55: MODP_1024_160 = 22,
! 56: MODP_2048_224 = 23,
! 57: MODP_2048_256 = 24,
! 58: ECP_192_BIT = 25,
! 59: ECP_224_BIT = 26,
! 60: ECP_224_BP = 27,
! 61: ECP_256_BP = 28,
! 62: ECP_384_BP = 29,
! 63: ECP_512_BP = 30,
! 64: CURVE_25519 = 31,
! 65: CURVE_448 = 32,
! 66: /** insecure NULL diffie hellman group for testing, in PRIVATE USE */
! 67: MODP_NULL = 1024,
! 68: /** MODP group with custom generator/prime */
! 69: /** Parameters defined by IEEE 1363.1, in PRIVATE USE */
! 70: NTRU_112_BIT = 1030,
! 71: NTRU_128_BIT = 1031,
! 72: NTRU_192_BIT = 1032,
! 73: NTRU_256_BIT = 1033,
! 74: NH_128_BIT = 1040,
! 75: /** internally used DH group with additional parameters g and p, outside
! 76: * of PRIVATE USE (i.e. IKEv2 DH group range) so it can't be negotiated */
! 77: MODP_CUSTOM = 65536,
! 78: };
! 79:
! 80: /**
! 81: * enum name for diffie_hellman_group_t.
! 82: */
! 83: extern enum_name_t *diffie_hellman_group_names;
! 84:
! 85: /**
! 86: * Implementation of the Diffie-Hellman algorithm, as in RFC2631.
! 87: */
! 88: struct diffie_hellman_t {
! 89:
! 90: /**
! 91: * Returns the shared secret of this diffie hellman exchange.
! 92: *
! 93: * Space for returned secret is allocated and must be freed by the caller.
! 94: *
! 95: * @param secret shared secret will be written into this chunk
! 96: * @return TRUE if shared secret computed successfully
! 97: */
! 98: bool (*get_shared_secret)(diffie_hellman_t *this, chunk_t *secret)
! 99: __attribute__((warn_unused_result));
! 100:
! 101: /**
! 102: * Sets the public value of partner.
! 103: *
! 104: * Chunk gets cloned and can be destroyed afterwards.
! 105: *
! 106: * @param value public value of partner
! 107: * @return TRUE if other public value verified and set
! 108: */
! 109: bool (*set_other_public_value)(diffie_hellman_t *this, chunk_t value)
! 110: __attribute__((warn_unused_result));
! 111:
! 112: /**
! 113: * Gets the own public value to transmit.
! 114: *
! 115: * Space for returned chunk is allocated and must be freed by the caller.
! 116: *
! 117: * @param value public value of caller is stored at this location
! 118: * @return TRUE if public value retrieved
! 119: */
! 120: bool (*get_my_public_value) (diffie_hellman_t *this, chunk_t *value)
! 121: __attribute__((warn_unused_result));
! 122:
! 123: /**
! 124: * Set an explicit own private value to use.
! 125: *
! 126: * Calling this method is usually not required, as the DH backend generates
! 127: * an appropriate private value itself. It is optional to implement, and
! 128: * used mostly for testing purposes.
! 129: *
! 130: * @param value private value to set
! 131: */
! 132: bool (*set_private_value)(diffie_hellman_t *this, chunk_t value)
! 133: __attribute__((warn_unused_result));
! 134:
! 135: /**
! 136: * Get the DH group used.
! 137: *
! 138: * @return DH group set in construction
! 139: */
! 140: diffie_hellman_group_t (*get_dh_group) (diffie_hellman_t *this);
! 141:
! 142: /**
! 143: * Destroys a diffie_hellman_t object.
! 144: */
! 145: void (*destroy) (diffie_hellman_t *this);
! 146: };
! 147:
! 148: /**
! 149: * Parameters for a specific diffie hellman group.
! 150: */
! 151: struct diffie_hellman_params_t {
! 152:
! 153: /**
! 154: * The prime of the group
! 155: */
! 156: const chunk_t prime;
! 157:
! 158: /**
! 159: * Generator of the group
! 160: */
! 161: const chunk_t generator;
! 162:
! 163: /**
! 164: * Exponent length to use
! 165: */
! 166: size_t exp_len;
! 167:
! 168: /**
! 169: * Prime order subgroup; for MODP Groups 22-24
! 170: */
! 171: const chunk_t subgroup;
! 172: };
! 173:
! 174: /**
! 175: * Initialize diffie hellman parameters during startup.
! 176: */
! 177: void diffie_hellman_init();
! 178:
! 179: /**
! 180: * Get the parameters associated with the specified diffie hellman group.
! 181: *
! 182: * Before calling this method, use diffie_hellman_init() to initialize the
! 183: * DH group table. This is usually done by library_init().
! 184: *
! 185: * @param group DH group
! 186: * @return The parameters or NULL, if the group is not supported
! 187: */
! 188: diffie_hellman_params_t *diffie_hellman_get_params(diffie_hellman_group_t group);
! 189:
! 190: /**
! 191: * Check if a given DH group is an ECDH group
! 192: *
! 193: * @param group group to check
! 194: * @return TRUE if group is an ECP group
! 195: */
! 196: bool diffie_hellman_group_is_ec(diffie_hellman_group_t group);
! 197:
! 198: /**
! 199: * Check if a diffie hellman public value is valid for given group.
! 200: *
! 201: * @param group group the value is used in
! 202: * @param value public DH value to check
! 203: * @return TRUE if value looks valid for group
! 204: */
! 205: bool diffie_hellman_verify_value(diffie_hellman_group_t group, chunk_t value);
! 206:
! 207: #endif /** DIFFIE_HELLMAN_H_ @}*/
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>