[apple/xnu.git] / bsd / netkey / key.h

/*	$KAME: key.h,v 1.11 2000/03/25 07:24:12 sumikawa Exp $	*/

/*
 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. Neither the name of the project nor the names of its contributors
 *    may be used to endorse or promote products derived from this software
 *    without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 */

#ifndef _NETKEY_KEY_H_
#define _NETKEY_KEY_H_
#include <sys/appleapiopts.h>

#ifdef BSD_KERNEL_PRIVATE

#define KEY_SADB_UNLOCKED	0
#define KEY_SADB_LOCKED		1

extern struct key_cb key_cb;

struct secpolicy;
struct secpolicyindex;
struct ipsecrequest;
struct secasvar;
struct sockaddr;
struct socket;
struct sadb_msg;
struct sadb_x_policy;
struct secasindex;
struct secashead;
struct sadb_key;
struct sadb_lifetime;

extern struct secpolicy *key_allocsp(struct secpolicyindex *, u_int);
extern struct secasvar *key_allocsa_policy(struct secasindex *);
extern struct secpolicy *key_gettunnel(struct sockaddr *,
	struct sockaddr *, struct sockaddr *, struct sockaddr *);
extern struct secasvar *key_alloc_outbound_sav_for_interface(ifnet_t interface, int family,
															 struct sockaddr *src,
															 struct sockaddr *dst);
extern int key_checkrequest(struct ipsecrequest *isr, struct secasindex *,
	struct secasvar **sav);
extern struct secasvar *key_allocsa(u_int, caddr_t, caddr_t,
					u_int, u_int32_t);
struct secasvar *
key_allocsa_extended(u_int family, caddr_t src, caddr_t dst,
					 u_int proto, u_int32_t spi, ifnet_t interface);
extern u_int16_t key_natt_get_translated_port(struct secasvar *);
extern void key_freesp(struct secpolicy *, int);
extern void key_freesav(struct secasvar *, int);
extern struct secpolicy *key_newsp(void);
extern struct secpolicy *key_msg2sp(struct sadb_x_policy *, size_t, int *);
extern struct mbuf *key_sp2msg(struct secpolicy *);
extern int key_ismyaddr(struct sockaddr *);
extern int key_spdacquire(struct secpolicy *);
extern void key_timehandler(void);
extern u_int32_t key_random(void);
extern void key_randomfill(void *, size_t);
extern void key_freereg(struct socket *);
extern int key_parse(struct mbuf *, struct socket *);
extern int key_checktunnelsanity(struct secasvar *, u_int, caddr_t, caddr_t);
extern void key_sa_recordxfer(struct secasvar *, struct mbuf *);
extern void key_sa_routechange(struct sockaddr *);
extern void key_sa_chgstate(struct secasvar *, u_int8_t);
extern void key_sa_stir_iv(struct secasvar *);
extern void key_delsah(struct secashead *sah);
extern struct secashead *key_newsah2 (struct secasindex *saidx, u_int8_t dir);
extern u_int32_t key_getspi2(struct sockaddr      *src,
			     struct sockaddr      *dst,
			     u_int8_t              proto,
			     u_int8_t              mode,
			     u_int32_t             reqid,
			     struct sadb_spirange *spirange);
extern struct secasvar * key_newsav2(struct secashead     *sah,
				     u_int8_t              satype,
				     u_int8_t              alg_auth,
				     u_int8_t              alg_enc,
				     u_int32_t             flags,
				     u_int8_t              replay,
				     struct sadb_key      *key_auth,
				     u_int16_t             key_auth_len,
				     struct sadb_key      *key_enc,
				     u_int16_t             key_enc_len,
				     u_int16_t             natt_port,
				     u_int32_t             seq,
				     u_int32_t             spi,
				     u_int32_t             pid,
				     struct sadb_lifetime *lifetime_hard,
				     struct sadb_lifetime *lifetime_soft);
extern void key_delsav(struct secasvar *sav);
extern struct secpolicy *key_getspbyid(u_int32_t);
extern void key_delsp_for_ipsec_if(ifnet_t ipsec_if);

struct ifnet;
struct ifnet_keepalive_offload_frame;
extern u_int32_t key_fill_offload_frames_for_savs(struct ifnet *,
    struct ifnet_keepalive_offload_frame *frames_array, u_int32_t, size_t);


#endif /* BSD_KERNEL_PRIVATE */
#endif /* _NETKEY_KEY_H_ */
Commit	Line	Data
1c79356b A	1	/* $KAME: key.h,v 1.11 2000/03/25 07:24:12 sumikawa Exp $ */
	2
	3	/*
	4	* Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
	5	* All rights reserved.
	6	*
	7	* Redistribution and use in source and binary forms, with or without
	8	* modification, are permitted provided that the following conditions
	9	* are met:
	10	* 1. Redistributions of source code must retain the above copyright
	11	* notice, this list of conditions and the following disclaimer.
	12	* 2. Redistributions in binary form must reproduce the above copyright
	13	* notice, this list of conditions and the following disclaimer in the
	14	* documentation and/or other materials provided with the distribution.
	15	* 3. Neither the name of the project nor the names of its contributors
	16	* may be used to endorse or promote products derived from this software
	17	* without specific prior written permission.
	18	*
	19	* THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
	20	* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	21	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
	22	* ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
	23	* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	24	* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
	25	* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	26	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
	27	* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
	28	* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	29	* SUCH DAMAGE.
	30	*/
	31
	32	#ifndef _NETKEY_KEY_H_
	33	#define _NETKEY_KEY_H_
9bccf70c	34	#include <sys/appleapiopts.h>
1c79356b	35
39236c6e	36	#ifdef BSD_KERNEL_PRIVATE
1c79356b	37
2d21ac55 A	38	#define KEY_SADB_UNLOCKED 0
	39	#define KEY_SADB_LOCKED 1
	40
1c79356b A	41	extern struct key_cb key_cb;
	42
	43	struct secpolicy;
	44	struct secpolicyindex;
	45	struct ipsecrequest;
	46	struct secasvar;
	47	struct sockaddr;
	48	struct socket;
	49	struct sadb_msg;
	50	struct sadb_x_policy;
316670eb A	51	struct secasindex;
	52	struct secashead;
	53	struct sadb_key;
	54	struct sadb_lifetime;
1c79356b	55
91447636	56	extern struct secpolicy key_allocsp(struct secpolicyindex , u_int);
2d21ac55	57	extern struct secasvar key_allocsa_policy(struct secasindex );
91447636 A	58	extern struct secpolicy key_gettunnel(struct sockaddr ,
91447636 A	59	struct sockaddr , struct sockaddr , struct sockaddr *);
d9a64523 A	60	extern struct secasvar *key_alloc_outbound_sav_for_interface(ifnet_t interface, int family,
	61	struct sockaddr *src,
	62	struct sockaddr *dst);
2d21ac55 A	63	extern int key_checkrequest(struct ipsecrequest isr, struct secasindex ,
2d21ac55 A	64	struct secasvar **sav);
91447636 A	65	extern struct secasvar *key_allocsa(u_int, caddr_t, caddr_t,
91447636 A	66	u_int, u_int32_t);
5ba3f43e A	67	struct secasvar *
	68	key_allocsa_extended(u_int family, caddr_t src, caddr_t dst,
	69	u_int proto, u_int32_t spi, ifnet_t interface);
2d21ac55 A	70	extern u_int16_t key_natt_get_translated_port(struct secasvar *);
2d21ac55 A	71	extern void key_freesp(struct secpolicy *, int);
2d21ac55	72	extern void key_freesav(struct secasvar *, int);
91447636 A	73	extern struct secpolicy *key_newsp(void);
	74	extern struct secpolicy key_msg2sp(struct sadb_x_policy , size_t, int *);
	75	extern struct mbuf key_sp2msg(struct secpolicy );
	76	extern int key_ismyaddr(struct sockaddr *);
	77	extern int key_spdacquire(struct secpolicy *);
	78	extern void key_timehandler(void);
b0d623f7	79	extern u_int32_t key_random(void);
91447636 A	80	extern void key_randomfill(void *, size_t);
	81	extern void key_freereg(struct socket *);
	82	extern int key_parse(struct mbuf , struct socket );
91447636 A	83	extern int key_checktunnelsanity(struct secasvar *, u_int, caddr_t, caddr_t);
	84	extern void key_sa_recordxfer(struct secasvar , struct mbuf );
	85	extern void key_sa_routechange(struct sockaddr *);
316670eb	86	extern void key_sa_chgstate(struct secasvar *, u_int8_t);
91447636	87	extern void key_sa_stir_iv(struct secasvar *);
316670eb A	88	extern void key_delsah(struct secashead *sah);
	89	extern struct secashead key_newsah2 (struct secasindex saidx, u_int8_t dir);
	90	extern u_int32_t key_getspi2(struct sockaddr *src,
	91	struct sockaddr *dst,
	92	u_int8_t proto,
	93	u_int8_t mode,
	94	u_int32_t reqid,
	95	struct sadb_spirange *spirange);
	96	extern struct secasvar * key_newsav2(struct secashead *sah,
	97	u_int8_t satype,
	98	u_int8_t alg_auth,
	99	u_int8_t alg_enc,
	100	u_int32_t flags,
	101	u_int8_t replay,
	102	struct sadb_key *key_auth,
	103	u_int16_t key_auth_len,
	104	struct sadb_key *key_enc,
	105	u_int16_t key_enc_len,
	106	u_int16_t natt_port,
	107	u_int32_t seq,
	108	u_int32_t spi,
	109	u_int32_t pid,
	110	struct sadb_lifetime *lifetime_hard,
	111	struct sadb_lifetime *lifetime_soft);
	112	extern void key_delsav(struct secasvar *sav);
39236c6e A	113	extern struct secpolicy *key_getspbyid(u_int32_t);
39236c6e A	114	extern void key_delsp_for_ipsec_if(ifnet_t ipsec_if);
316670eb	115
39037602 A	116	struct ifnet;
	117	struct ifnet_keepalive_offload_frame;
	118	extern u_int32_t key_fill_offload_frames_for_savs(struct ifnet *,
	119	struct ifnet_keepalive_offload_frame *frames_array, u_int32_t, size_t);
	120
	121
1c79356b	122
39236c6e	123	#endif /* BSD_KERNEL_PRIVATE */
1c79356b	124	#endif /* _NETKEY_KEY_H_ */