1 /*!\file netinet6/esp.h
5 /* $FreeBSD: src/sys/netinet6/esp.h,v 1.6 2002/04/19 04:46:22 suz Exp $ */
6 /* $KAME: esp.h,v 1.19 2001/09/04 08:43:19 itojun Exp $ */
9 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
10 * All rights reserved.
12 * Redistribution and use in source and binary forms, with or without
13 * modification, are permitted provided that the following conditions
15 * 1. Redistributions of source code must retain the above copyright
16 * notice, this list of conditions and the following disclaimer.
17 * 2. Redistributions in binary form must reproduce the above copyright
18 * notice, this list of conditions and the following disclaimer in the
19 * documentation and/or other materials provided with the distribution.
20 * 3. Neither the name of the project nor the names of its contributors
21 * may be used to endorse or promote products derived from this software
22 * without specific prior written permission.
24 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
25 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
26 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
27 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
28 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
29 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
30 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
31 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
32 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
33 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
38 * RFC1827/2406 Encapsulated Security Payload.
41 #ifndef _NETINET6_ESP_H_
42 #define _NETINET6_ESP_H_
44 #if defined(_KERNEL) && !defined(_LKM)
49 u_int32_t esp_spi; /* ESP */
50 /* variable size, 32bit bound *//* Initialization Vector */
51 /* variable size */ /* Payload data */
52 /* variable size */ /* padding */
53 /* 8bit */ /* pad size */
54 /* 8bit */ /* next header */
55 /* 8bit */ /* next header */
56 /* variable size, 32bit bound */ /* Authentication data (new IPsec) */
60 u_int32_t esp_spi; /* ESP */
61 u_int32_t esp_seq; /* Sequence number */
62 /* variable size */ /* (IV and) Payload data */
63 /* variable size */ /* padding */
64 /* 8bit */ /* pad size */
65 /* 8bit */ /* next header */
66 /* 8bit */ /* next header */
67 /* variable size, 32bit bound *//* Authentication data */
71 u_int8_t esp_padlen; /* pad length */
72 u_int8_t esp_nxt; /* Next header */
73 /* variable size, 32bit bound *//* Authentication data (new IPsec)*/
79 struct esp_algorithm {
80 size_t padbound; /* pad boundary, in byte */
81 int ivlenval; /* iv length, in byte */
82 int (*mature) (struct secasvar *);
83 int keymin; /* in bits */
84 int keymax; /* in bits */
85 int (*schedlen) (const struct esp_algorithm *);
87 int (*ivlen) (const struct esp_algorithm *, struct secasvar *);
88 int (*decrypt) (struct mbuf *, size_t,
89 struct secasvar *, const struct esp_algorithm *, int);
90 int (*encrypt) (struct mbuf *, size_t, size_t,
91 struct secasvar *, const struct esp_algorithm *, int);
92 /* not supposed to be called directly */
93 int (*schedule) (const struct esp_algorithm *, struct secasvar *);
94 int (*blockdecrypt) (const struct esp_algorithm *,
95 struct secasvar *, u_int8_t *, u_int8_t *);
96 int (*blockencrypt) (const struct esp_algorithm *,
97 struct secasvar *, u_int8_t *, u_int8_t *);
100 extern const struct esp_algorithm *esp_algorithm_lookup (int);
101 extern int esp_max_ivlen (void);
104 extern int esp4_output (struct mbuf *, struct ipsecrequest *);
105 extern void esp4_input (struct mbuf *, int);
106 extern size_t esp_hdrsiz (struct ipsecrequest *);
108 extern int esp_schedule (const struct esp_algorithm *, struct secasvar *);
109 extern int esp_auth (struct mbuf *, size_t, size_t,
110 struct secasvar *, u_char *);
113 #endif /* _NETINET6_ESP_H_ */