]> git.saurik.com Git - apple/network_cmds.git/blob - racoon.tproj/oakley.h
3b1bc292f75f5e0e969b9825c53c56d6c3b18106
[apple/network_cmds.git] / racoon.tproj / oakley.h
1 /* $KAME: oakley.h,v 1.28 2001/12/12 18:23:42 sakane Exp $ */
2
3 /*
4 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
5 * All rights reserved.
6 *
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
9 * are met:
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
15 * 3. Neither the name of the project nor the names of its contributors
16 * may be used to endorse or promote products derived from this software
17 * without specific prior written permission.
18 *
19 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
20 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
23 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29 * SUCH DAMAGE.
30 */
31
32 #ifndef __OAKLEY_H__
33 #define __OAKLEY_H__
34
35
36 /* refer to RFC 2409 */
37
38 /* Attribute Classes */
39 #define OAKLEY_ATTR_ENC_ALG 1 /* B */
40 #define OAKLEY_ATTR_ENC_ALG_DES 1
41 #define OAKLEY_ATTR_ENC_ALG_IDEA 2
42 #define OAKLEY_ATTR_ENC_ALG_BLOWFISH 3
43 #define OAKLEY_ATTR_ENC_ALG_RC5 4
44 #define OAKLEY_ATTR_ENC_ALG_3DES 5
45 #define OAKLEY_ATTR_ENC_ALG_CAST 6
46 #define OAKLEY_ATTR_ENC_ALG_RIJNDAEL 7
47 #define OAKLEY_ATTR_ENC_ALG_AES 7
48 /* 65001 - 65535 Private Use */
49 #define OAKLEY_ATTR_HASH_ALG 2 /* B */
50 #define OAKLEY_ATTR_HASH_ALG_MD5 1
51 #define OAKLEY_ATTR_HASH_ALG_SHA 2
52 #define OAKLEY_ATTR_HASH_ALG_TIGER 3
53 #define OAKLEY_ATTR_HASH_ALG_SHA2_256 4
54 #define OAKLEY_ATTR_HASH_ALG_SHA2_384 5
55 #define OAKLEY_ATTR_HASH_ALG_SHA2_512 6
56 /* 65001 - 65535 Private Use */
57 #define OAKLEY_ATTR_AUTH_METHOD 3 /* B */
58 #define OAKLEY_ATTR_AUTH_METHOD_PSKEY 1
59 #define OAKLEY_ATTR_AUTH_METHOD_DSSSIG 2
60 #define OAKLEY_ATTR_AUTH_METHOD_RSASIG 3
61 #define OAKLEY_ATTR_AUTH_METHOD_RSAENC 4
62 #define OAKLEY_ATTR_AUTH_METHOD_RSAREV 5
63 #define OAKLEY_ATTR_AUTH_METHOD_EGENC 6
64 #define OAKLEY_ATTR_AUTH_METHOD_EGREV 7
65 /* 65001 - 65535 Private Use */
66 /*
67 * The following are valid when the Vendor ID is one of
68 * the following:
69 *
70 * MD5("A GSS-API Authentication Method for IKE")
71 * MD5("GSSAPI") (recognized by Windows 2000)
72 * MD5("MS NT5 ISAKMPOAKLEY") (sent by Windows 2000)
73 */
74 #define OAKLEY_ATTR_AUTH_METHOD_GSSAPI_KRB 65001
75 #define OAKLEY_ATTR_GRP_DESC 4 /* B */
76 #define OAKLEY_ATTR_GRP_DESC_MODP768 1
77 #define OAKLEY_ATTR_GRP_DESC_MODP1024 2
78 #define OAKLEY_ATTR_GRP_DESC_EC2N155 3
79 #define OAKLEY_ATTR_GRP_DESC_EC2N185 4
80 #define OAKLEY_ATTR_GRP_DESC_MODP1536 5
81 #define OAKLEY_ATTR_GRP_DESC_MODP2048 42048 /* these value are */
82 #define OAKLEY_ATTR_GRP_DESC_MODP3072 43072 /* make consensus */
83 #define OAKLEY_ATTR_GRP_DESC_MODP4096 44096 /* at the bake off */
84 #define OAKLEY_ATTR_GRP_DESC_MODP8192 48192 /* in helsinki */
85 #define OAKLEY_ATTR_GRP_DESC_MODP6144 46144 /* XXX */
86 /* 32768 - 65535 Private Use */
87 #define OAKLEY_ATTR_GRP_TYPE 5 /* B */
88 #define OAKLEY_ATTR_GRP_TYPE_MODP 1
89 #define OAKLEY_ATTR_GRP_TYPE_ECP 2
90 #define OAKLEY_ATTR_GRP_TYPE_EC2N 3
91 /* 65001 - 65535 Private Use */
92 #define OAKLEY_ATTR_GRP_PI 6 /* V */
93 #define OAKLEY_ATTR_GRP_GEN_ONE 7 /* V */
94 #define OAKLEY_ATTR_GRP_GEN_TWO 8 /* V */
95 #define OAKLEY_ATTR_GRP_CURVE_A 9 /* V */
96 #define OAKLEY_ATTR_GRP_CURVE_B 10 /* V */
97 #define OAKLEY_ATTR_SA_LD_TYPE 11 /* B */
98 #define OAKLEY_ATTR_SA_LD_TYPE_DEFAULT 1
99 #define OAKLEY_ATTR_SA_LD_TYPE_SEC 1
100 #define OAKLEY_ATTR_SA_LD_TYPE_KB 2
101 #define OAKLEY_ATTR_SA_LD_TYPE_MAX 3
102 /* 65001 - 65535 Private Use */
103 #define OAKLEY_ATTR_SA_LD 12 /* V */
104 #define OAKLEY_ATTR_SA_LD_SEC_DEFAULT 28800 /* 8 hours */
105 #define OAKLEY_ATTR_PRF 13 /* B */
106 #define OAKLEY_ATTR_KEY_LEN 14 /* B */
107 #define OAKLEY_ATTR_FIELD_SIZE 15 /* B */
108 #define OAKLEY_ATTR_GRP_ORDER 16 /* V */
109 #define OAKLEY_ATTR_BLOCK_SIZE 17 /* B */
110 /* 16384 - 32767 Private Use */
111
112 /*
113 * The following are valid when the Vendor ID is one of
114 * the following:
115 *
116 * MD5("A GSS-API Authentication Method for IKE")
117 * MD5("GSSAPI") (recognized by Windows 2000)
118 * MD5("MS NT5 ISAKMPOAKLEY") (sent by Windows 2000)
119 */
120 #define OAKLEY_ATTR_GSS_ID 16384
121
122 #define MAXPADLWORD 20
123
124 struct dhgroup {
125 int type;
126 vchar_t *prime;
127 int gen1;
128 int gen2;
129 vchar_t *curve_a;
130 vchar_t *curve_b;
131 vchar_t *order;
132 };
133
134 /* certificate holder */
135 typedef struct cert_t_tag {
136 u_int8_t type; /* type of CERT, must be same to pl->v[0]*/
137 vchar_t cert; /* pointer to the CERT */
138 vchar_t *pl; /* CERT payload minus isakmp general header */
139 } cert_t;
140
141 struct ph1handle;
142 struct ph2handle;
143 struct isakmp_ivm;
144
145 extern int oakley_get_defaultlifetime __P((void));
146
147 extern int oakley_dhinit __P((void));
148 extern void oakley_dhgrp_free __P((struct dhgroup *));
149 extern int oakley_dh_compute __P((const struct dhgroup *,
150 vchar_t *, vchar_t *, vchar_t *, vchar_t **));
151 extern int oakley_dh_generate __P((const struct dhgroup *,
152 vchar_t **, vchar_t **));
153 extern int oakley_setdhgroup __P((int, struct dhgroup **));
154
155 extern vchar_t *oakley_prf __P((vchar_t *, vchar_t *, struct ph1handle *));
156 extern vchar_t *oakley_hash __P((vchar_t *, struct ph1handle *));
157
158 extern int oakley_compute_keymat __P((struct ph2handle *, int));
159
160 #if notyet
161 extern vchar_t *oakley_compute_hashx __P((void));
162 #endif
163 extern vchar_t *oakley_compute_hash3 __P((struct ph1handle *,
164 u_int32_t, vchar_t *));
165 extern vchar_t *oakley_compute_hash1 __P((struct ph1handle *,
166 u_int32_t, vchar_t *));
167 extern vchar_t *oakley_ph1hash_common __P((struct ph1handle *, int));
168 extern vchar_t *oakley_ph1hash_base_i __P((struct ph1handle *, int));
169 extern vchar_t *oakley_ph1hash_base_r __P((struct ph1handle *, int));
170
171 extern int oakley_validate_auth __P((struct ph1handle *));
172 #ifdef HAVE_SIGNING_C
173 extern int oakley_getmycert __P((struct ph1handle *));
174 extern int oakley_getsign __P((struct ph1handle *));
175 extern vchar_t *oakley_getcr __P((struct ph1handle *));
176 extern int oakley_checkcr __P((struct ph1handle *));
177 #endif
178 extern int oakley_needcr __P((int));
179 struct isakmp_gen;
180 extern int oakley_savecert __P((struct ph1handle *, struct isakmp_gen *));
181 extern int oakley_savecr __P((struct ph1handle *, struct isakmp_gen *));
182
183 extern int oakley_skeyid __P((struct ph1handle *));
184 extern int oakley_skeyid_dae __P((struct ph1handle *));
185
186 extern int oakley_compute_enckey __P((struct ph1handle *));
187 extern cert_t *oakley_newcert __P((void));
188 extern void oakley_delcert __P((cert_t *));
189 extern int oakley_newiv __P((struct ph1handle *));
190 extern struct isakmp_ivm *oakley_newiv2 __P((struct ph1handle *, u_int32_t));
191 extern void oakley_delivm __P((struct isakmp_ivm *));
192 extern vchar_t *oakley_do_decrypt __P((struct ph1handle *,
193 vchar_t *, vchar_t *, vchar_t *));
194 extern vchar_t *oakley_do_encrypt __P((struct ph1handle *,
195 vchar_t *, vchar_t *, vchar_t *));
196
197 #endif /* __OAKLEY_H__ */
198