1 /* $NetBSD: oakley.h,v 1.3 2005/11/21 14:20:29 manu Exp $ */ 2 3 /* Id: oakley.h,v 1.9 2004/10/24 17:37:00 manubsd Exp */ 4 5 /* 6 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. 7 * All rights reserved. 8 * 9 * Redistribution and use in source and binary forms, with or without 10 * modification, are permitted provided that the following conditions 11 * are met: 12 * 1. Redistributions of source code must retain the above copyright 13 * notice, this list of conditions and the following disclaimer. 14 * 2. Redistributions in binary form must reproduce the above copyright 15 * notice, this list of conditions and the following disclaimer in the 16 * documentation and/or other materials provided with the distribution. 17 * 3. Neither the name of the project nor the names of its contributors 18 * may be used to endorse or promote products derived from this software 19 * without specific prior written permission. 20 * 21 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND 22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE 25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31 * SUCH DAMAGE. 32 */ 33 34 #ifndef _OAKLEY_H 35 #define _OAKLEY_H 36 37 #include "vmbuf.h" 38 39 /* refer to RFC 2409 */ 40 41 /* Attribute Classes */ 42 #define OAKLEY_ATTR_ENC_ALG 1 /* B */ 43 #define OAKLEY_ATTR_ENC_ALG_DES 1 44 #define OAKLEY_ATTR_ENC_ALG_IDEA 2 45 #define OAKLEY_ATTR_ENC_ALG_BLOWFISH 3 46 #define OAKLEY_ATTR_ENC_ALG_RC5 4 47 #define OAKLEY_ATTR_ENC_ALG_3DES 5 48 #define OAKLEY_ATTR_ENC_ALG_CAST 6 49 #define OAKLEY_ATTR_ENC_ALG_AES 7 50 /* 65001 - 65535 Private Use */ 51 #define OAKLEY_ATTR_HASH_ALG 2 /* B */ 52 #define OAKLEY_ATTR_HASH_ALG_MD5 1 53 #define OAKLEY_ATTR_HASH_ALG_SHA 2 54 #define OAKLEY_ATTR_HASH_ALG_TIGER 3 55 #if defined(WITH_SHA2) 56 #define OAKLEY_ATTR_HASH_ALG_SHA2_256 4 57 #define OAKLEY_ATTR_HASH_ALG_SHA2_384 5 58 #define OAKLEY_ATTR_HASH_ALG_SHA2_512 6 59 #endif 60 /* 65001 - 65535 Private Use */ 61 #define OAKLEY_ATTR_AUTH_METHOD 3 /* B */ 62 #define OAKLEY_ATTR_AUTH_METHOD_PSKEY 1 63 #define OAKLEY_ATTR_AUTH_METHOD_DSSSIG 2 64 #define OAKLEY_ATTR_AUTH_METHOD_RSASIG 3 65 #define OAKLEY_ATTR_AUTH_METHOD_RSAENC 4 66 #define OAKLEY_ATTR_AUTH_METHOD_RSAREV 5 67 #define OAKLEY_ATTR_AUTH_METHOD_EGENC 6 68 #define OAKLEY_ATTR_AUTH_METHOD_EGREV 7 69 /* Hybrid Auth */ 70 #ifdef ENABLE_HYBRID 71 #define OAKLEY_ATTR_AUTH_METHOD_HYBRID_RSA_I 64221 72 #define OAKLEY_ATTR_AUTH_METHOD_HYBRID_RSA_R 64222 73 #define OAKLEY_ATTR_AUTH_METHOD_HYBRID_DSS_I 64223 74 #define OAKLEY_ATTR_AUTH_METHOD_HYBRID_DSS_R 64224 75 76 /* 65001 - 65535 Private Use */ 77 78 /* Plain Xauth, Not implemented */ 79 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_PSKEY_I 65001 80 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_PSKEY_R 65002 81 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_DSSSIG_I 65003 82 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_DSSSIG_R 65004 83 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_RSASIG_I 65005 84 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_RSASIG_R 65006 85 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_RSAENC_I 65007 86 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_RSAENC_R 65008 87 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_RSAREV_I 65009 88 #define OAKLEY_ATTR_AUTH_METHOD_XAUTH_RSAREV_R 65010 89 #endif 90 91 /* 92 * The following are valid when the Vendor ID is one of 93 * the following: 94 * 95 * MD5("A GSS-API Authentication Method for IKE") 96 * MD5("GSSAPI") (recognized by Windows 2000) 97 * MD5("MS NT5 ISAKMPOAKLEY") (sent by Windows 2000) 98 */ 99 #define OAKLEY_ATTR_AUTH_METHOD_GSSAPI_KRB 65001 100 #define OAKLEY_ATTR_GRP_DESC 4 /* B */ 101 #define OAKLEY_ATTR_GRP_DESC_MODP768 1 102 #define OAKLEY_ATTR_GRP_DESC_MODP1024 2 103 #define OAKLEY_ATTR_GRP_DESC_EC2N155 3 104 #define OAKLEY_ATTR_GRP_DESC_EC2N185 4 105 #define OAKLEY_ATTR_GRP_DESC_MODP1536 5 106 #define OAKLEY_ATTR_GRP_DESC_MODP2048 14 107 #define OAKLEY_ATTR_GRP_DESC_MODP3072 15 108 #define OAKLEY_ATTR_GRP_DESC_MODP4096 16 109 #define OAKLEY_ATTR_GRP_DESC_MODP6144 17 110 #define OAKLEY_ATTR_GRP_DESC_MODP8192 18 111 /* 32768 - 65535 Private Use */ 112 #define OAKLEY_ATTR_GRP_TYPE 5 /* B */ 113 #define OAKLEY_ATTR_GRP_TYPE_MODP 1 114 #define OAKLEY_ATTR_GRP_TYPE_ECP 2 115 #define OAKLEY_ATTR_GRP_TYPE_EC2N 3 116 /* 65001 - 65535 Private Use */ 117 #define OAKLEY_ATTR_GRP_PI 6 /* V */ 118 #define OAKLEY_ATTR_GRP_GEN_ONE 7 /* V */ 119 #define OAKLEY_ATTR_GRP_GEN_TWO 8 /* V */ 120 #define OAKLEY_ATTR_GRP_CURVE_A 9 /* V */ 121 #define OAKLEY_ATTR_GRP_CURVE_B 10 /* V */ 122 #define OAKLEY_ATTR_SA_LD_TYPE 11 /* B */ 123 #define OAKLEY_ATTR_SA_LD_TYPE_DEFAULT 1 124 #define OAKLEY_ATTR_SA_LD_TYPE_SEC 1 125 #define OAKLEY_ATTR_SA_LD_TYPE_KB 2 126 #define OAKLEY_ATTR_SA_LD_TYPE_MAX 3 127 /* 65001 - 65535 Private Use */ 128 #define OAKLEY_ATTR_SA_LD 12 /* V */ 129 #define OAKLEY_ATTR_SA_LD_SEC_DEFAULT 28800 /* 8 hours */ 130 #define OAKLEY_ATTR_PRF 13 /* B */ 131 #define OAKLEY_ATTR_KEY_LEN 14 /* B */ 132 #define OAKLEY_ATTR_FIELD_SIZE 15 /* B */ 133 #define OAKLEY_ATTR_GRP_ORDER 16 /* V */ 134 #define OAKLEY_ATTR_BLOCK_SIZE 17 /* B */ 135 /* 16384 - 32767 Private Use */ 136 137 /* 138 * The following are valid when the Vendor ID is one of 139 * the following: 140 * 141 * MD5("A GSS-API Authentication Method for IKE") 142 * MD5("GSSAPI") (recognized by Windows 2000) 143 * MD5("MS NT5 ISAKMPOAKLEY") (sent by Windows 2000) 144 */ 145 #define OAKLEY_ATTR_GSS_ID 16384 146 147 #define MAXPADLWORD 20 148 149 struct dhgroup { 150 int type; 151 vchar_t *prime; 152 int gen1; 153 int gen2; 154 vchar_t *curve_a; 155 vchar_t *curve_b; 156 vchar_t *order; 157 }; 158 159 /* certificate holder */ 160 typedef struct cert_t_tag { 161 u_int8_t type; /* type of CERT, must be same to pl->v[0]*/ 162 vchar_t cert; /* pointer to the CERT */ 163 vchar_t *pl; /* CERT payload minus isakmp general header */ 164 } cert_t; 165 166 struct ph1handle; 167 struct ph2handle; 168 struct isakmp_ivm; 169 170 extern int oakley_get_defaultlifetime __P((void)); 171 172 extern int oakley_dhinit __P((void)); 173 extern void oakley_dhgrp_free __P((struct dhgroup *)); 174 extern int oakley_dh_compute __P((const struct dhgroup *, 175 vchar_t *, vchar_t *, vchar_t *, vchar_t **)); 176 extern int oakley_dh_generate __P((const struct dhgroup *, 177 vchar_t **, vchar_t **)); 178 extern int oakley_setdhgroup __P((int, struct dhgroup **)); 179 180 extern vchar_t *oakley_prf __P((vchar_t *, vchar_t *, struct ph1handle *)); 181 extern vchar_t *oakley_hash __P((vchar_t *, struct ph1handle *)); 182 183 extern int oakley_compute_keymat __P((struct ph2handle *, int)); 184 185 #if notyet 186 extern vchar_t *oakley_compute_hashx __P((void)); 187 #endif 188 extern vchar_t *oakley_compute_hash3 __P((struct ph1handle *, 189 u_int32_t, vchar_t *)); 190 extern vchar_t *oakley_compute_hash1 __P((struct ph1handle *, 191 u_int32_t, vchar_t *)); 192 extern vchar_t *oakley_ph1hash_common __P((struct ph1handle *, int)); 193 extern vchar_t *oakley_ph1hash_base_i __P((struct ph1handle *, int)); 194 extern vchar_t *oakley_ph1hash_base_r __P((struct ph1handle *, int)); 195 196 extern int oakley_validate_auth __P((struct ph1handle *)); 197 extern int oakley_getmycert __P((struct ph1handle *)); 198 extern int oakley_getsign __P((struct ph1handle *)); 199 extern vchar_t *oakley_getcr __P((struct ph1handle *)); 200 extern int oakley_checkcr __P((struct ph1handle *)); 201 extern int oakley_needcr __P((int)); 202 struct isakmp_gen; 203 extern int oakley_savecert __P((struct ph1handle *, struct isakmp_gen *)); 204 extern int oakley_savecr __P((struct ph1handle *, struct isakmp_gen *)); 205 206 extern int oakley_skeyid __P((struct ph1handle *)); 207 extern int oakley_skeyid_dae __P((struct ph1handle *)); 208 209 extern int oakley_compute_enckey __P((struct ph1handle *)); 210 extern cert_t *oakley_newcert __P((void)); 211 extern void oakley_delcert __P((cert_t *)); 212 extern int oakley_newiv __P((struct ph1handle *)); 213 extern struct isakmp_ivm *oakley_newiv2 __P((struct ph1handle *, u_int32_t)); 214 extern void oakley_delivm __P((struct isakmp_ivm *)); 215 extern vchar_t *oakley_do_decrypt __P((struct ph1handle *, 216 vchar_t *, vchar_t *, vchar_t *)); 217 extern vchar_t *oakley_do_encrypt __P((struct ph1handle *, 218 vchar_t *, vchar_t *, vchar_t *)); 219 220 #endif /* _OAKLEY_H */ 221