4 * The secure anycast tunneling protocol (satp) defines a protocol used
5 * for communication between any combination of unicast and anycast
6 * tunnel endpoints. It has less protocol overhead than IPSec in Tunnel
7 * mode and allows tunneling of every ETHER TYPE protocol (e.g.
8 * ethernet, ip, arp ...). satp directly includes cryptography and
9 * message authentication based on the methodes used by SRTP. It is
10 * intended to deliver a generic, scaleable and secure solution for
11 * tunneling and relaying of packets of any protocol.
14 * Copyright (C) 2007 anytun.org <satp@wirdorange.org>
16 * This program is free software; you can redistribute it and/or modify
17 * it under the terms of the GNU General Public License version 2
18 * as published by the Free Software Foundation.
20 * This program is distributed in the hope that it will be useful,
21 * but WITHOUT ANY WARRANTY; without even the implied warranty of
22 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
23 * GNU General Public License for more details.
25 * You should have received a copy of the GNU General Public License
26 * along with this program (see the file COPYING included with this
27 * distribution); if not, write to the Free Software Foundation, Inc.,
28 * 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
31 #ifndef _KEYDERIVATION_H_
32 #define _KEYDERIVATION_H_
34 #include "datatypes.h"
36 #include "threadUtils.hpp"
37 #include "syncBuffer.h"
40 #include <boost/archive/text_oarchive.hpp>
41 #include <boost/archive/text_iarchive.hpp>
45 LABEL_SATP_ENCRYPTION
= 0x00,
46 LABEL_SATP_MSG_AUTH
= 0x01,
47 LABEL_SATP_SALT
= 0x02,
54 KeyDerivation() : ld_kdr_(0), master_salt_(0), master_key_(0) {};
55 virtual ~KeyDerivation() {};
57 void setLogKDRate(const u_int8_t ld_rate
);
59 virtual void init(Buffer key
, Buffer salt
) = 0;
60 virtual void generate(satp_prf_label label
, seq_nr_t seq_nr
, Buffer
& key
) = 0;
62 virtual std::string
printType() { return "KeyDerivation"; };
65 virtual void updateMasterKey() = 0;
67 KeyDerivation(const KeyDerivation
& src
);
68 friend class boost::serialization::access
;
69 template<class Archive
>
70 void serialize(Archive
& ar
, const unsigned int version
)
79 int8_t ld_kdr_
; // ld(key_derivation_rate)
80 SyncBuffer master_salt_
;
81 SyncBuffer master_key_
;
86 BOOST_IS_ABSTRACT(KeyDerivation
)
88 //****** NullKeyDerivation ******
90 class NullKeyDerivation
: public KeyDerivation
93 NullKeyDerivation() {};
94 ~NullKeyDerivation() {};
96 void init(Buffer key
, Buffer salt
) {};
97 void generate(satp_prf_label label
, seq_nr_t seq_nr
, Buffer
& key
);
99 std::string
printType() { return "NullKeyDerivation"; };
102 void updateMasterKey() {};
104 friend class boost::serialization::access
;
105 template<class Archive
>
106 void serialize(Archive
& ar
, const unsigned int version
)
108 ar
& boost::serialization::base_object
<KeyDerivation
>(*this);
113 //****** AesIcmKeyDerivation ******
115 class AesIcmKeyDerivation
: public KeyDerivation
118 AesIcmKeyDerivation() : cipher_(NULL
) {};
119 ~AesIcmKeyDerivation();
121 void init(Buffer key
, Buffer salt
);
122 void generate(satp_prf_label label
, seq_nr_t seq_nr
, Buffer
& key
);
124 std::string
printType() { return "AesIcmKeyDerivation"; };
127 void updateMasterKey();
129 friend class boost::serialization::access
;
130 template<class Archive
>
131 void serialize(Archive
& ar
, const unsigned int version
)
133 ar
& boost::serialization::base_object
<KeyDerivation
>(*this);
136 gcry_cipher_hd_t cipher_
;