default config for client1 with crypto
[anytun.git] / keyDerivation.h
blob9057a6a8711921379df4391f018c4c11b88363ea
1 /*
2 * anytun
4 * The secure anycast tunneling protocol (satp) defines a protocol used
5 * for communication between any combination of unicast and anycast
6 * tunnel endpoints. It has less protocol overhead than IPSec in Tunnel
7 * mode and allows tunneling of every ETHER TYPE protocol (e.g.
8 * ethernet, ip, arp ...). satp directly includes cryptography and
9 * message authentication based on the methodes used by SRTP. It is
10 * intended to deliver a generic, scaleable and secure solution for
11 * tunneling and relaying of packets of any protocol.
14 * Copyright (C) 2007 anytun.org <satp@wirdorange.org>
16 * This program is free software; you can redistribute it and/or modify
17 * it under the terms of the GNU General Public License version 2
18 * as published by the Free Software Foundation.
20 * This program is distributed in the hope that it will be useful,
21 * but WITHOUT ANY WARRANTY; without even the implied warranty of
22 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
23 * GNU General Public License for more details.
25 * You should have received a copy of the GNU General Public License
26 * along with this program (see the file COPYING included with this
27 * distribution); if not, write to the Free Software Foundation, Inc.,
28 * 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
31 #ifndef _KEYDERIVATION_H_
32 #define _KEYDERIVATION_H_
34 #include "datatypes.h"
35 #include "buffer.h"
36 #include "threadUtils.hpp"
37 #include "syncBuffer.h"
39 #include <gcrypt.h>
40 #include <boost/archive/text_oarchive.hpp>
41 #include <boost/archive/text_iarchive.hpp>
44 typedef enum {
45 LABEL_SATP_ENCRYPTION = 0x00,
46 LABEL_SATP_MSG_AUTH = 0x01,
47 LABEL_SATP_SALT = 0x02,
48 } satp_prf_label;
51 class KeyDerivation
53 public:
54 KeyDerivation() : ld_kdr_(0), master_salt_(0), master_key_(0) {};
55 virtual ~KeyDerivation() {};
57 void setLogKDRate(const u_int8_t ld_rate);
59 virtual void init(Buffer key, Buffer salt) = 0;
60 virtual void generate(satp_prf_label label, seq_nr_t seq_nr, Buffer& key) = 0;
62 virtual std::string printType() { return "KeyDerivation"; };
64 protected:
65 virtual void updateMasterKey() = 0;
67 KeyDerivation(const KeyDerivation & src);
68 friend class boost::serialization::access;
69 template<class Archive>
70 void serialize(Archive & ar, const unsigned int version)
72 Lock lock(mutex_);
73 ar & ld_kdr_;
74 ar & master_salt_;
75 ar & master_key_;
76 updateMasterKey();
79 int8_t ld_kdr_; // ld(key_derivation_rate)
80 SyncBuffer master_salt_;
81 SyncBuffer master_key_;
83 Mutex mutex_;
86 BOOST_IS_ABSTRACT(KeyDerivation)
88 //****** NullKeyDerivation ******
90 class NullKeyDerivation : public KeyDerivation
92 public:
93 NullKeyDerivation() {};
94 ~NullKeyDerivation() {};
96 void init(Buffer key, Buffer salt) {};
97 void generate(satp_prf_label label, seq_nr_t seq_nr, Buffer& key);
99 std::string printType() { return "NullKeyDerivation"; };
101 private:
102 void updateMasterKey() {};
104 friend class boost::serialization::access;
105 template<class Archive>
106 void serialize(Archive & ar, const unsigned int version)
108 ar & boost::serialization::base_object<KeyDerivation>(*this);
113 //****** AesIcmKeyDerivation ******
115 class AesIcmKeyDerivation : public KeyDerivation
117 public:
118 AesIcmKeyDerivation() : cipher_(NULL) {};
119 ~AesIcmKeyDerivation();
121 void init(Buffer key, Buffer salt);
122 void generate(satp_prf_label label, seq_nr_t seq_nr, Buffer& key);
124 std::string printType() { return "AesIcmKeyDerivation"; };
126 private:
127 void updateMasterKey();
129 friend class boost::serialization::access;
130 template<class Archive>
131 void serialize(Archive & ar, const unsigned int version)
133 ar & boost::serialization::base_object<KeyDerivation>(*this);
136 gcry_cipher_hd_t cipher_;
139 #endif