[apple/network_cmds.git] / racoon.tproj / oakley.h

/*	$KAME: oakley.h,v 1.28 2001/12/12 18:23:42 sakane Exp $	*/

/*
 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
 * All rights reserved.
 * 
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. Neither the name of the project nor the names of its contributors
 *    may be used to endorse or promote products derived from this software
 *    without specific prior written permission.
 * 
 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 */

#ifndef __OAKLEY_H__
#define __OAKLEY_H__


/* refer to RFC 2409 */

/* Attribute Classes */
#define OAKLEY_ATTR_ENC_ALG		1 /* B */
#define   OAKLEY_ATTR_ENC_ALG_DES		1
#define   OAKLEY_ATTR_ENC_ALG_IDEA		2
#define   OAKLEY_ATTR_ENC_ALG_BLOWFISH		3
#define   OAKLEY_ATTR_ENC_ALG_RC5		4
#define   OAKLEY_ATTR_ENC_ALG_3DES		5
#define   OAKLEY_ATTR_ENC_ALG_CAST		6
#define   OAKLEY_ATTR_ENC_ALG_RIJNDAEL		7
#define   OAKLEY_ATTR_ENC_ALG_AES		7
					/*	65001 - 65535 Private Use */
#define OAKLEY_ATTR_HASH_ALG		2 /* B */
#define   OAKLEY_ATTR_HASH_ALG_MD5		1
#define   OAKLEY_ATTR_HASH_ALG_SHA		2
#define   OAKLEY_ATTR_HASH_ALG_TIGER		3
#define   OAKLEY_ATTR_HASH_ALG_SHA2_256		4
#define   OAKLEY_ATTR_HASH_ALG_SHA2_384		5
#define   OAKLEY_ATTR_HASH_ALG_SHA2_512		6
					/*	65001 - 65535 Private Use */
#define OAKLEY_ATTR_AUTH_METHOD		3 /* B */
#define   OAKLEY_ATTR_AUTH_METHOD_PSKEY		1
#define   OAKLEY_ATTR_AUTH_METHOD_DSSSIG	2
#define   OAKLEY_ATTR_AUTH_METHOD_RSASIG	3
#define   OAKLEY_ATTR_AUTH_METHOD_RSAENC	4
#define   OAKLEY_ATTR_AUTH_METHOD_RSAREV	5
#define   OAKLEY_ATTR_AUTH_METHOD_EGENC		6
#define   OAKLEY_ATTR_AUTH_METHOD_EGREV		7
					/*	65001 - 65535 Private Use */
	/*
	 * The following are valid when the Vendor ID is one of
	 * the following:
	 *
	 *	MD5("A GSS-API Authentication Method for IKE")
	 *	MD5("GSSAPI") (recognized by Windows 2000)
	 *	MD5("MS NT5 ISAKMPOAKLEY") (sent by Windows 2000)
	 */
#define   OAKLEY_ATTR_AUTH_METHOD_GSSAPI_KRB	65001
#define OAKLEY_ATTR_GRP_DESC		4 /* B */
#define   OAKLEY_ATTR_GRP_DESC_MODP768		1
#define   OAKLEY_ATTR_GRP_DESC_MODP1024		2
#define   OAKLEY_ATTR_GRP_DESC_EC2N155		3
#define   OAKLEY_ATTR_GRP_DESC_EC2N185		4
#define   OAKLEY_ATTR_GRP_DESC_MODP1536		5
#define   OAKLEY_ATTR_GRP_DESC_MODP2048		42048	/* these value are */
#define   OAKLEY_ATTR_GRP_DESC_MODP3072		43072	/* make consensus  */
#define   OAKLEY_ATTR_GRP_DESC_MODP4096		44096	/* at the bake off */
#define   OAKLEY_ATTR_GRP_DESC_MODP8192		48192	/* in helsinki     */
#define   OAKLEY_ATTR_GRP_DESC_MODP6144		46144	/* XXX */
					/*	32768 - 65535 Private Use */
#define OAKLEY_ATTR_GRP_TYPE		5 /* B */
#define   OAKLEY_ATTR_GRP_TYPE_MODP		1
#define   OAKLEY_ATTR_GRP_TYPE_ECP		2
#define   OAKLEY_ATTR_GRP_TYPE_EC2N		3
					/*	65001 - 65535 Private Use */
#define OAKLEY_ATTR_GRP_PI		6 /* V */
#define OAKLEY_ATTR_GRP_GEN_ONE		7 /* V */
#define OAKLEY_ATTR_GRP_GEN_TWO		8 /* V */
#define OAKLEY_ATTR_GRP_CURVE_A		9 /* V */
#define OAKLEY_ATTR_GRP_CURVE_B		10 /* V */
#define OAKLEY_ATTR_SA_LD_TYPE		11 /* B */
#define   OAKLEY_ATTR_SA_LD_TYPE_DEFAULT	1
#define   OAKLEY_ATTR_SA_LD_TYPE_SEC		1
#define   OAKLEY_ATTR_SA_LD_TYPE_KB		2
#define   OAKLEY_ATTR_SA_LD_TYPE_MAX		3
					/*	65001 - 65535 Private Use */
#define OAKLEY_ATTR_SA_LD		12 /* V */
#define   OAKLEY_ATTR_SA_LD_SEC_DEFAULT		28800 /* 8 hours */
#define OAKLEY_ATTR_PRF			13 /* B */
#define OAKLEY_ATTR_KEY_LEN		14 /* B */
#define OAKLEY_ATTR_FIELD_SIZE		15 /* B */
#define OAKLEY_ATTR_GRP_ORDER		16 /* V */
#define OAKLEY_ATTR_BLOCK_SIZE		17 /* B */
				/*	16384 - 32767 Private Use */

	/*
	 * The following are valid when the Vendor ID is one of
	 * the following:
	 *
	 *	MD5("A GSS-API Authentication Method for IKE")
	 *	MD5("GSSAPI") (recognized by Windows 2000)
	 *	MD5("MS NT5 ISAKMPOAKLEY") (sent by Windows 2000)
	 */
#define OAKLEY_ATTR_GSS_ID		16384

#define MAXPADLWORD	20

struct dhgroup {
	int type;
	vchar_t *prime;
	int gen1;
	int gen2;
	vchar_t *curve_a;
	vchar_t *curve_b;
	vchar_t *order;
};

/* certificate holder */
typedef struct cert_t_tag {
	u_int8_t type;		/* type of CERT, must be same to pl->v[0]*/
	vchar_t cert;		/* pointer to the CERT */
	vchar_t *pl;		/* CERT payload minus isakmp general header */
} cert_t;

struct ph1handle;
struct ph2handle;
struct isakmp_ivm;

extern int oakley_get_defaultlifetime __P((void));

extern int oakley_dhinit __P((void));
extern void oakley_dhgrp_free __P((struct dhgroup *));
extern int oakley_dh_compute __P((const struct dhgroup *,
	vchar_t *, vchar_t *, vchar_t *, vchar_t **));
extern int oakley_dh_generate __P((const struct dhgroup *,
	vchar_t **, vchar_t **));
extern int oakley_setdhgroup __P((int, struct dhgroup **));

extern vchar_t *oakley_prf __P((vchar_t *, vchar_t *, struct ph1handle *));
extern vchar_t *oakley_hash __P((vchar_t *, struct ph1handle *));

extern int oakley_compute_keymat __P((struct ph2handle *, int));

#if notyet
extern vchar_t *oakley_compute_hashx __P((void));
#endif
extern vchar_t *oakley_compute_hash3 __P((struct ph1handle *,
	u_int32_t, vchar_t *));
extern vchar_t *oakley_compute_hash1 __P((struct ph1handle *,
	u_int32_t, vchar_t *));
extern vchar_t *oakley_ph1hash_common __P((struct ph1handle *, int));
extern vchar_t *oakley_ph1hash_base_i __P((struct ph1handle *, int));
extern vchar_t *oakley_ph1hash_base_r __P((struct ph1handle *, int));

extern int oakley_validate_auth __P((struct ph1handle *));
#ifdef HAVE_SIGNING_C
extern int oakley_getmycert __P((struct ph1handle *));
extern int oakley_getsign __P((struct ph1handle *));
extern vchar_t *oakley_getcr __P((struct ph1handle *));
extern int oakley_checkcr __P((struct ph1handle *));
#endif
extern int oakley_needcr __P((int));
struct isakmp_gen;
extern int oakley_savecert __P((struct ph1handle *, struct isakmp_gen *));
extern int oakley_savecr __P((struct ph1handle *, struct isakmp_gen *));

extern int oakley_skeyid __P((struct ph1handle *));
extern int oakley_skeyid_dae __P((struct ph1handle *));

extern int oakley_compute_enckey __P((struct ph1handle *));
extern cert_t *oakley_newcert __P((void));
extern void oakley_delcert __P((cert_t *));
extern int oakley_newiv __P((struct ph1handle *));
extern struct isakmp_ivm *oakley_newiv2 __P((struct ph1handle *, u_int32_t));
extern void oakley_delivm __P((struct isakmp_ivm *));
extern vchar_t *oakley_do_decrypt __P((struct ph1handle *,
	vchar_t *, vchar_t *, vchar_t *));
extern vchar_t *oakley_do_encrypt __P((struct ph1handle *,
	vchar_t *, vchar_t *, vchar_t *));

#endif /* __OAKLEY_H__ */
Commit	Line	Data
ac2f15b3	1	/* $KAME: oakley.h,v 1.28 2001/12/12 18:23:42 sakane Exp $ */
7ba0088d A	2
	3	/*
	4	* Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
	5	* All rights reserved.
	6	*
	7	* Redistribution and use in source and binary forms, with or without
	8	* modification, are permitted provided that the following conditions
	9	* are met:
	10	* 1. Redistributions of source code must retain the above copyright
	11	* notice, this list of conditions and the following disclaimer.
	12	* 2. Redistributions in binary form must reproduce the above copyright
	13	* notice, this list of conditions and the following disclaimer in the
	14	* documentation and/or other materials provided with the distribution.
	15	* 3. Neither the name of the project nor the names of its contributors
	16	* may be used to endorse or promote products derived from this software
	17	* without specific prior written permission.
	18	*
	19	* THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
	20	* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	21	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
	22	* ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
	23	* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	24	* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
	25	* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	26	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
	27	* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
	28	* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	29	* SUCH DAMAGE.
	30	*/
	31
2b484d24 A	32	#ifndef __OAKLEY_H__
	33	#define __OAKLEY_H__
	34
	35
7ba0088d A	36	/* refer to RFC 2409 */
	37
	38	/* Attribute Classes */
	39	#define OAKLEY_ATTR_ENC_ALG 1 /* B */
	40	#define OAKLEY_ATTR_ENC_ALG_DES 1
	41	#define OAKLEY_ATTR_ENC_ALG_IDEA 2
	42	#define OAKLEY_ATTR_ENC_ALG_BLOWFISH 3
	43	#define OAKLEY_ATTR_ENC_ALG_RC5 4
	44	#define OAKLEY_ATTR_ENC_ALG_3DES 5
	45	#define OAKLEY_ATTR_ENC_ALG_CAST 6
	46	#define OAKLEY_ATTR_ENC_ALG_RIJNDAEL 7
	47	#define OAKLEY_ATTR_ENC_ALG_AES 7
	48	/* 65001 - 65535 Private Use */
	49	#define OAKLEY_ATTR_HASH_ALG 2 /* B */
	50	#define OAKLEY_ATTR_HASH_ALG_MD5 1
	51	#define OAKLEY_ATTR_HASH_ALG_SHA 2
	52	#define OAKLEY_ATTR_HASH_ALG_TIGER 3
	53	#define OAKLEY_ATTR_HASH_ALG_SHA2_256 4
	54	#define OAKLEY_ATTR_HASH_ALG_SHA2_384 5
	55	#define OAKLEY_ATTR_HASH_ALG_SHA2_512 6
	56	/* 65001 - 65535 Private Use */
	57	#define OAKLEY_ATTR_AUTH_METHOD 3 /* B */
	58	#define OAKLEY_ATTR_AUTH_METHOD_PSKEY 1
	59	#define OAKLEY_ATTR_AUTH_METHOD_DSSSIG 2
	60	#define OAKLEY_ATTR_AUTH_METHOD_RSASIG 3
	61	#define OAKLEY_ATTR_AUTH_METHOD_RSAENC 4
	62	#define OAKLEY_ATTR_AUTH_METHOD_RSAREV 5
	63	#define OAKLEY_ATTR_AUTH_METHOD_EGENC 6
	64	#define OAKLEY_ATTR_AUTH_METHOD_EGREV 7
	65	/* 65001 - 65535 Private Use */
	66	/*
	67	* The following are valid when the Vendor ID is one of
	68	* the following:
	69	*
	70	* MD5("A GSS-API Authentication Method for IKE")
	71	* MD5("GSSAPI") (recognized by Windows 2000)
	72	* MD5("MS NT5 ISAKMPOAKLEY") (sent by Windows 2000)
	73	*/
	74	#define OAKLEY_ATTR_AUTH_METHOD_GSSAPI_KRB 65001
	75	#define OAKLEY_ATTR_GRP_DESC 4 /* B */
	76	#define OAKLEY_ATTR_GRP_DESC_MODP768 1
	77	#define OAKLEY_ATTR_GRP_DESC_MODP1024 2
	78	#define OAKLEY_ATTR_GRP_DESC_EC2N155 3
	79	#define OAKLEY_ATTR_GRP_DESC_EC2N185 4
	80	#define OAKLEY_ATTR_GRP_DESC_MODP1536 5
	81	#define OAKLEY_ATTR_GRP_DESC_MODP2048 42048 /* these value are */
	82	#define OAKLEY_ATTR_GRP_DESC_MODP3072 43072 /* make consensus */
	83	#define OAKLEY_ATTR_GRP_DESC_MODP4096 44096 /* at the bake off */
	84	#define OAKLEY_ATTR_GRP_DESC_MODP8192 48192 /* in helsinki */
	85	#define OAKLEY_ATTR_GRP_DESC_MODP6144 46144 /* XXX */
	86	/* 32768 - 65535 Private Use */
	87	#define OAKLEY_ATTR_GRP_TYPE 5 /* B */
	88	#define OAKLEY_ATTR_GRP_TYPE_MODP 1
	89	#define OAKLEY_ATTR_GRP_TYPE_ECP 2
	90	#define OAKLEY_ATTR_GRP_TYPE_EC2N 3
	91	/* 65001 - 65535 Private Use */
	92	#define OAKLEY_ATTR_GRP_PI 6 /* V */
	93	#define OAKLEY_ATTR_GRP_GEN_ONE 7 /* V */
	94	#define OAKLEY_ATTR_GRP_GEN_TWO 8 /* V */
	95	#define OAKLEY_ATTR_GRP_CURVE_A 9 /* V */
	96	#define OAKLEY_ATTR_GRP_CURVE_B 10 /* V */
	97	#define OAKLEY_ATTR_SA_LD_TYPE 11 /* B */
	98	#define OAKLEY_ATTR_SA_LD_TYPE_DEFAULT 1
	99	#define OAKLEY_ATTR_SA_LD_TYPE_SEC 1
100	#define OAKLEY_ATTR_SA_LD_TYPE_KB 2
101	#define OAKLEY_ATTR_SA_LD_TYPE_MAX 3
102	/* 65001 - 65535 Private Use */
103	#define OAKLEY_ATTR_SA_LD 12 /* V */
104	#define OAKLEY_ATTR_SA_LD_SEC_DEFAULT 28800 /* 8 hours */
105	#define OAKLEY_ATTR_PRF 13 /* B */
106	#define OAKLEY_ATTR_KEY_LEN 14 /* B */
107	#define OAKLEY_ATTR_FIELD_SIZE 15 /* B */
108	#define OAKLEY_ATTR_GRP_ORDER 16 /* V */
109	#define OAKLEY_ATTR_BLOCK_SIZE 17 /* B */
110	/* 16384 - 32767 Private Use */
111
112	/*
113	* The following are valid when the Vendor ID is one of
114	* the following:
115	*
116	* MD5("A GSS-API Authentication Method for IKE")
117	* MD5("GSSAPI") (recognized by Windows 2000)
118	* MD5("MS NT5 ISAKMPOAKLEY") (sent by Windows 2000)
119	*/
120	#define OAKLEY_ATTR_GSS_ID 16384
121
122	#define MAXPADLWORD 20
123
124	struct dhgroup {
125	int type;
126	vchar_t *prime;
127	int gen1;
128	int gen2;
129	vchar_t *curve_a;
130	vchar_t *curve_b;
131	vchar_t *order;
132	};
133
134	/* certificate holder */
135	typedef struct cert_t_tag {
136	u_int8_t type; /* type of CERT, must be same to pl->v[0]*/
137	vchar_t cert; /* pointer to the CERT */
138	vchar_t pl; / CERT payload minus isakmp general header */
139	} cert_t;
140
141	struct ph1handle;
142	struct ph2handle;
143	struct isakmp_ivm;
144
145	extern int oakley_get_defaultlifetime __P((void));
146
147	extern int oakley_dhinit __P((void));
148	extern void oakley_dhgrp_free __P((struct dhgroup *));
149	extern int oakley_dh_compute __P((const struct dhgroup *,
150	vchar_t , vchar_t , vchar_t , vchar_t *));
151	extern int oakley_dh_generate __P((const struct dhgroup *,
152	vchar_t , vchar_t ));
153	extern int oakley_setdhgroup __P((int, struct dhgroup **));
154
155	extern vchar_t oakley_prf __P((vchar_t , vchar_t , struct ph1handle ));
156	extern vchar_t oakley_hash __P((vchar_t , struct ph1handle *));
157
158	extern int oakley_compute_keymat __P((struct ph2handle *, int));
159
160	#if notyet
161	extern vchar_t *oakley_compute_hashx __P((void));
162	#endif
163	extern vchar_t oakley_compute_hash3 __P((struct ph1handle ,
164	u_int32_t, vchar_t *));
165	extern vchar_t oakley_compute_hash1 __P((struct ph1handle ,
166	u_int32_t, vchar_t *));
167	extern vchar_t oakley_ph1hash_common __P((struct ph1handle , int));
168	extern vchar_t oakley_ph1hash_base_i __P((struct ph1handle , int));
169	extern vchar_t oakley_ph1hash_base_r __P((struct ph1handle , int));
170
171	extern int oakley_validate_auth __P((struct ph1handle *));
172	#ifdef HAVE_SIGNING_C
173	extern int oakley_getmycert __P((struct ph1handle *));
174	extern int oakley_getsign __P((struct ph1handle *));
175	extern vchar_t oakley_getcr __P((struct ph1handle ));
176	extern int oakley_checkcr __P((struct ph1handle *));
177	#endif
178	extern int oakley_needcr __P((int));
179	struct isakmp_gen;
180	extern int oakley_savecert __P((struct ph1handle , struct isakmp_gen ));
181	extern int oakley_savecr __P((struct ph1handle , struct isakmp_gen ));
182
183	extern int oakley_skeyid __P((struct ph1handle *));
184	extern int oakley_skeyid_dae __P((struct ph1handle *));
185
186	extern int oakley_compute_enckey __P((struct ph1handle *));
187	extern cert_t *oakley_newcert __P((void));
188	extern void oakley_delcert __P((cert_t *));
189	extern int oakley_newiv __P((struct ph1handle *));
190	extern struct isakmp_ivm oakley_newiv2 __P((struct ph1handle , u_int32_t));
191	extern void oakley_delivm __P((struct isakmp_ivm *));
192	extern vchar_t oakley_do_decrypt __P((struct ph1handle ,
193	vchar_t , vchar_t , vchar_t *));
194	extern vchar_t oakley_do_encrypt __P((struct ph1handle ,
195	vchar_t , vchar_t , vchar_t *));
2b484d24 A	196
	197	#endif /* __OAKLEY_H__ */
	198