xref: /netbsd-src/crypto/dist/ipsec-tools/src/racoon/oakley.h (revision 86811edb37e43f44504b192591c863c5d48f5e08)
1 /*	$NetBSD: oakley.h,v 1.3 2005/11/21 14:20:29 manu Exp $	*/
2 
3 /* Id: oakley.h,v 1.9 2004/10/24 17:37:00 manubsd Exp */
4 
5 /*
6  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
7  * All rights reserved.
8  *
9  * Redistribution and use in source and binary forms, with or without
10  * modification, are permitted provided that the following conditions
11  * are met:
12  * 1. Redistributions of source code must retain the above copyright
13  *    notice, this list of conditions and the following disclaimer.
14  * 2. Redistributions in binary form must reproduce the above copyright
15  *    notice, this list of conditions and the following disclaimer in the
16  *    documentation and/or other materials provided with the distribution.
17  * 3. Neither the name of the project nor the names of its contributors
18  *    may be used to endorse or promote products derived from this software
19  *    without specific prior written permission.
20  *
21  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
22  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
25  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31  * SUCH DAMAGE.
32  */
33 
34 #ifndef _OAKLEY_H
35 #define _OAKLEY_H
36 
37 #include "vmbuf.h"
38 
39 /* refer to RFC 2409 */
40 
41 /* Attribute Classes */
42 #define OAKLEY_ATTR_ENC_ALG		1 /* B */
43 #define   OAKLEY_ATTR_ENC_ALG_DES		1
44 #define   OAKLEY_ATTR_ENC_ALG_IDEA		2
45 #define   OAKLEY_ATTR_ENC_ALG_BLOWFISH		3
46 #define   OAKLEY_ATTR_ENC_ALG_RC5		4
47 #define   OAKLEY_ATTR_ENC_ALG_3DES		5
48 #define   OAKLEY_ATTR_ENC_ALG_CAST		6
49 #define   OAKLEY_ATTR_ENC_ALG_AES		7
50 					/*	65001 - 65535 Private Use */
51 #define OAKLEY_ATTR_HASH_ALG		2 /* B */
52 #define   OAKLEY_ATTR_HASH_ALG_MD5		1
53 #define   OAKLEY_ATTR_HASH_ALG_SHA		2
54 #define   OAKLEY_ATTR_HASH_ALG_TIGER		3
55 #if defined(WITH_SHA2)
56 #define   OAKLEY_ATTR_HASH_ALG_SHA2_256		4
57 #define   OAKLEY_ATTR_HASH_ALG_SHA2_384		5
58 #define   OAKLEY_ATTR_HASH_ALG_SHA2_512		6
59 #endif
60 					/*	65001 - 65535 Private Use */
61 #define OAKLEY_ATTR_AUTH_METHOD		3 /* B */
62 #define   OAKLEY_ATTR_AUTH_METHOD_PSKEY		1
63 #define   OAKLEY_ATTR_AUTH_METHOD_DSSSIG	2
64 #define   OAKLEY_ATTR_AUTH_METHOD_RSASIG	3
65 #define   OAKLEY_ATTR_AUTH_METHOD_RSAENC	4
66 #define   OAKLEY_ATTR_AUTH_METHOD_RSAREV	5
67 #define   OAKLEY_ATTR_AUTH_METHOD_EGENC		6
68 #define   OAKLEY_ATTR_AUTH_METHOD_EGREV		7
69 	/* Hybrid Auth */
70 #ifdef ENABLE_HYBRID
71 #define   OAKLEY_ATTR_AUTH_METHOD_HYBRID_RSA_I	64221
72 #define	  OAKLEY_ATTR_AUTH_METHOD_HYBRID_RSA_R	64222
73 #define   OAKLEY_ATTR_AUTH_METHOD_HYBRID_DSS_I	64223
74 #define   OAKLEY_ATTR_AUTH_METHOD_HYBRID_DSS_R	64224
75 
76 					/*	65001 - 65535 Private Use */
77 
78         /* Plain Xauth, Not implemented */
79 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_PSKEY_I	65001
80 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_PSKEY_R	65002
81 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_DSSSIG_I	65003
82 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_DSSSIG_R	65004
83 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_RSASIG_I	65005
84 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_RSASIG_R	65006
85 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_RSAENC_I	65007
86 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_RSAENC_R	65008
87 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_RSAREV_I	65009
88 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_RSAREV_R	65010
89 #endif
90 
91 	/*
92 	 * The following are valid when the Vendor ID is one of
93 	 * the following:
94 	 *
95 	 *	MD5("A GSS-API Authentication Method for IKE")
96 	 *	MD5("GSSAPI") (recognized by Windows 2000)
97 	 *	MD5("MS NT5 ISAKMPOAKLEY") (sent by Windows 2000)
98 	 */
99 #define   OAKLEY_ATTR_AUTH_METHOD_GSSAPI_KRB	65001
100 #define OAKLEY_ATTR_GRP_DESC		4 /* B */
101 #define   OAKLEY_ATTR_GRP_DESC_MODP768		1
102 #define   OAKLEY_ATTR_GRP_DESC_MODP1024		2
103 #define   OAKLEY_ATTR_GRP_DESC_EC2N155		3
104 #define   OAKLEY_ATTR_GRP_DESC_EC2N185		4
105 #define   OAKLEY_ATTR_GRP_DESC_MODP1536		5
106 #define   OAKLEY_ATTR_GRP_DESC_MODP2048		14
107 #define   OAKLEY_ATTR_GRP_DESC_MODP3072		15
108 #define   OAKLEY_ATTR_GRP_DESC_MODP4096		16
109 #define   OAKLEY_ATTR_GRP_DESC_MODP6144		17
110 #define   OAKLEY_ATTR_GRP_DESC_MODP8192		18
111 					/*	32768 - 65535 Private Use */
112 #define OAKLEY_ATTR_GRP_TYPE		5 /* B */
113 #define   OAKLEY_ATTR_GRP_TYPE_MODP		1
114 #define   OAKLEY_ATTR_GRP_TYPE_ECP		2
115 #define   OAKLEY_ATTR_GRP_TYPE_EC2N		3
116 					/*	65001 - 65535 Private Use */
117 #define OAKLEY_ATTR_GRP_PI		6 /* V */
118 #define OAKLEY_ATTR_GRP_GEN_ONE		7 /* V */
119 #define OAKLEY_ATTR_GRP_GEN_TWO		8 /* V */
120 #define OAKLEY_ATTR_GRP_CURVE_A		9 /* V */
121 #define OAKLEY_ATTR_GRP_CURVE_B		10 /* V */
122 #define OAKLEY_ATTR_SA_LD_TYPE		11 /* B */
123 #define   OAKLEY_ATTR_SA_LD_TYPE_DEFAULT	1
124 #define   OAKLEY_ATTR_SA_LD_TYPE_SEC		1
125 #define   OAKLEY_ATTR_SA_LD_TYPE_KB		2
126 #define   OAKLEY_ATTR_SA_LD_TYPE_MAX		3
127 					/*	65001 - 65535 Private Use */
128 #define OAKLEY_ATTR_SA_LD		12 /* V */
129 #define   OAKLEY_ATTR_SA_LD_SEC_DEFAULT		28800 /* 8 hours */
130 #define OAKLEY_ATTR_PRF			13 /* B */
131 #define OAKLEY_ATTR_KEY_LEN		14 /* B */
132 #define OAKLEY_ATTR_FIELD_SIZE		15 /* B */
133 #define OAKLEY_ATTR_GRP_ORDER		16 /* V */
134 #define OAKLEY_ATTR_BLOCK_SIZE		17 /* B */
135 				/*	16384 - 32767 Private Use */
136 
137 	/*
138 	 * The following are valid when the Vendor ID is one of
139 	 * the following:
140 	 *
141 	 *	MD5("A GSS-API Authentication Method for IKE")
142 	 *	MD5("GSSAPI") (recognized by Windows 2000)
143 	 *	MD5("MS NT5 ISAKMPOAKLEY") (sent by Windows 2000)
144 	 */
145 #define OAKLEY_ATTR_GSS_ID		16384
146 
147 #define MAXPADLWORD	20
148 
149 struct dhgroup {
150 	int type;
151 	vchar_t *prime;
152 	int gen1;
153 	int gen2;
154 	vchar_t *curve_a;
155 	vchar_t *curve_b;
156 	vchar_t *order;
157 };
158 
159 /* certificate holder */
160 typedef struct cert_t_tag {
161 	u_int8_t type;		/* type of CERT, must be same to pl->v[0]*/
162 	vchar_t cert;		/* pointer to the CERT */
163 	vchar_t *pl;		/* CERT payload minus isakmp general header */
164 } cert_t;
165 
166 struct ph1handle;
167 struct ph2handle;
168 struct isakmp_ivm;
169 
170 extern int oakley_get_defaultlifetime __P((void));
171 
172 extern int oakley_dhinit __P((void));
173 extern void oakley_dhgrp_free __P((struct dhgroup *));
174 extern int oakley_dh_compute __P((const struct dhgroup *,
175 	vchar_t *, vchar_t *, vchar_t *, vchar_t **));
176 extern int oakley_dh_generate __P((const struct dhgroup *,
177 	vchar_t **, vchar_t **));
178 extern int oakley_setdhgroup __P((int, struct dhgroup **));
179 
180 extern vchar_t *oakley_prf __P((vchar_t *, vchar_t *, struct ph1handle *));
181 extern vchar_t *oakley_hash __P((vchar_t *, struct ph1handle *));
182 
183 extern int oakley_compute_keymat __P((struct ph2handle *, int));
184 
185 #if notyet
186 extern vchar_t *oakley_compute_hashx __P((void));
187 #endif
188 extern vchar_t *oakley_compute_hash3 __P((struct ph1handle *,
189 	u_int32_t, vchar_t *));
190 extern vchar_t *oakley_compute_hash1 __P((struct ph1handle *,
191 	u_int32_t, vchar_t *));
192 extern vchar_t *oakley_ph1hash_common __P((struct ph1handle *, int));
193 extern vchar_t *oakley_ph1hash_base_i __P((struct ph1handle *, int));
194 extern vchar_t *oakley_ph1hash_base_r __P((struct ph1handle *, int));
195 
196 extern int oakley_validate_auth __P((struct ph1handle *));
197 extern int oakley_getmycert __P((struct ph1handle *));
198 extern int oakley_getsign __P((struct ph1handle *));
199 extern vchar_t *oakley_getcr __P((struct ph1handle *));
200 extern int oakley_checkcr __P((struct ph1handle *));
201 extern int oakley_needcr __P((int));
202 struct isakmp_gen;
203 extern int oakley_savecert __P((struct ph1handle *, struct isakmp_gen *));
204 extern int oakley_savecr __P((struct ph1handle *, struct isakmp_gen *));
205 
206 extern int oakley_skeyid __P((struct ph1handle *));
207 extern int oakley_skeyid_dae __P((struct ph1handle *));
208 
209 extern int oakley_compute_enckey __P((struct ph1handle *));
210 extern cert_t *oakley_newcert __P((void));
211 extern void oakley_delcert __P((cert_t *));
212 extern int oakley_newiv __P((struct ph1handle *));
213 extern struct isakmp_ivm *oakley_newiv2 __P((struct ph1handle *, u_int32_t));
214 extern void oakley_delivm __P((struct isakmp_ivm *));
215 extern vchar_t *oakley_do_decrypt __P((struct ph1handle *,
216 	vchar_t *, vchar_t *, vchar_t *));
217 extern vchar_t *oakley_do_encrypt __P((struct ph1handle *,
218 	vchar_t *, vchar_t *, vchar_t *));
219 
220 #endif /* _OAKLEY_H */
221