1 /* $KAME: keydb.h,v 1.9 2000/02/22 14:06:41 itojun Exp $ */
4 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
15 * 3. Neither the name of the project nor the names of its contributors
16 * may be used to endorse or promote products derived from this software
17 * without specific prior written permission.
19 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
20 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
23 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
32 #ifndef _NETKEY_KEYDB_H_
33 #define _NETKEY_KEYDB_H_
34 #include <sys/appleapiopts.h>
37 #ifdef __APPLE_API_PRIVATE
39 #include <netkey/key_var.h>
41 /* Security Assocciation Index */
42 /* NOTE: Ensure to be same address family */
44 struct sockaddr_storage src
; /* srouce address for SA */
45 struct sockaddr_storage dst
; /* destination address for SA */
46 u_int16_t proto
; /* IPPROTO_ESP or IPPROTO_AH */
47 u_int8_t mode
; /* mode of protocol, see ipsec.h */
48 u_int32_t reqid
; /* reqid id who owned this SA */
49 /* see IPSEC_MANUAL_REQID_MAX. */
52 /* Security Association Data Base */
54 LIST_ENTRY(secashead
) chain
;
56 struct secasindex saidx
;
58 struct sadb_ident
*idents
; /* source identity */
59 struct sadb_ident
*identd
; /* destination identity */
60 /* XXX I don't know how to use them. */
62 u_int8_t state
; /* MATURE or DEAD. */
63 LIST_HEAD(_satree
, secasvar
) savtree
[SADB_SASTATE_MAX
+1];
65 /* The first of this list is newer SA */
67 struct route sa_route
; /* route cache */
70 /* Security Association */
72 LIST_ENTRY(secasvar
) chain
;
74 int refcnt
; /* reference count */
75 u_int8_t state
; /* Status of this Association */
77 u_int8_t alg_auth
; /* Authentication Algorithm Identifier*/
78 u_int8_t alg_enc
; /* Cipher Algorithm Identifier */
79 u_int32_t spi
; /* SPI Value, network byte order */
80 u_int32_t flags
; /* holder for SADB_KEY_FLAGS */
82 struct sadb_key
*key_auth
; /* Key for Authentication */
83 struct sadb_key
*key_enc
; /* Key for Encryption */
84 caddr_t iv
; /* Initilization Vector */
85 u_int ivlen
; /* length of IV */
86 void *sched
; /* intermediate encryption key */
89 struct secreplay
*replay
; /* replay prevention */
90 long created
; /* for lifetime */
92 struct sadb_lifetime
*lft_c
; /* CURRENT lifetime, it's constant. */
93 struct sadb_lifetime
*lft_h
; /* HARD lifetime */
94 struct sadb_lifetime
*lft_s
; /* SOFT lifetime */
96 u_int32_t seq
; /* sequence number */
97 pid_t pid
; /* message's pid */
99 struct secashead
*sah
; /* back pointer to the secashead */
101 /* Nat Traversal related bits */
102 u_int32_t natt_last_activity
;
103 u_int16_t remote_ike_port
;
106 /* replay prevention */
109 u_int wsize
; /* window size, i.g. 4 bytes */
110 u_int32_t seq
; /* used by sender */
111 u_int32_t lastseq
; /* used by receiver */
112 caddr_t bitmap
; /* used by receiver */
113 int overflow
; /* overflow flag */
116 /* socket table due to send PF_KEY messages. */
118 LIST_ENTRY(secreg
) chain
;
123 #ifndef IPSEC_NONBLOCK_ACQUIRE
124 /* acquiring list table. */
126 LIST_ENTRY(secacq
) chain
;
128 struct secasindex saidx
;
130 u_int32_t seq
; /* sequence number */
131 long created
; /* for lifetime */
132 int count
; /* for lifetime */
136 /* Sensitivity Level Specification */
139 #define SADB_KILL_INTERVAL 600 /* six seconds */
147 extern struct secpolicy
*keydb_newsecpolicy
__P((void));
148 extern void keydb_delsecpolicy
__P((struct secpolicy
*));
150 extern struct secashead
*keydb_newsecashead
__P((void));
151 extern void keydb_delsecashead
__P((struct secashead
*));
153 extern struct secasvar
*keydb_newsecasvar
__P((void));
154 extern void keydb_refsecasvar
__P((struct secasvar
*));
155 extern void keydb_freesecasvar
__P((struct secasvar
*));
157 extern struct secreplay
*keydb_newsecreplay
__P((size_t));
158 extern void keydb_delsecreplay
__P((struct secreplay
*));
160 extern struct secreg
*keydb_newsecreg
__P((void));
161 extern void keydb_delsecreg
__P((struct secreg
*));
163 #endif /* __APPLE_API_PRIVATE */
166 #endif /* _NETKEY_KEYDB_H_ */