keyDerivation.h

   1 /*
   2  *  anytun
   3  *
   4  *  The secure anycast tunneling protocol (satp) defines a protocol used
   5  *  for communication between any combination of unicast and anycast
   6  *  tunnel endpoints.  It has less protocol overhead than IPSec in Tunnel
   7  *  mode and allows tunneling of every ETHER TYPE protocol (e.g.
   8  *  ethernet, ip, arp ...). satp directly includes cryptography and
   9  *  message authentication based on the methodes used by SRTP.  It is
  10  *  intended to deliver a generic, scaleable and secure solution for
  11  *  tunneling and relaying of packets of any protocol.
  12  *
  13  *
  14  *  Copyright (C) 2007 anytun.org <satp@wirdorange.org>
  15  *
  16  *  This program is free software; you can redistribute it and/or modify
  17  *  it under the terms of the GNU General Public License version 2
  18  *  as published by the Free Software Foundation.
  19  *
  20  *  This program is distributed in the hope that it will be useful,
  21  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  22  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  23  *  GNU General Public License for more details.
  24  *
  25  *  You should have received a copy of the GNU General Public License
  26  *  along with this program (see the file COPYING included with this
  27  *  distribution); if not, write to the Free Software Foundation, Inc.,
  28  *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  29  */
  30
  31 #ifndef _KEYDERIVATION_H_
  32 #define _KEYDERIVATION_H_
  33
  34 #include "datatypes.h"
  35 #include "buffer.h"
  36 #include "threadUtils.hpp"
  37 #include "syncBuffer.h"
  38
  39 #include <gcrypt.h>
  40 #include <boost/archive/text_oarchive.hpp>
  41 #include <boost/archive/text_iarchive.hpp>
  42
  43
  44 typedef enum {
  45   LABEL_SATP_ENCRYPTION  = 0x00,
  46   LABEL_SATP_MSG_AUTH    = 0x01,
  47   LABEL_SATP_SALT        = 0x02,
  48 } satp_prf_label;
  49
  50
  51 class KeyDerivation
  52 {
  53 public:
  54   KeyDerivation() : ld_kdr_(0), master_salt_(0), master_key_(0) {};
  55   virtual ~KeyDerivation() {};
  56
  57   void setLogKDRate(const u_int8_t ld_rate);
  58
  59   virtual void init(Buffer key, Buffer salt) = 0;
  60   virtual void generate(satp_prf_label label, seq_nr_t seq_nr, Buffer& key) = 0;
  61
  62   virtual std::string printType() { return "KeyDerivation"; };
  63
  64 protected:
  65   virtual void updateMasterKey() = 0;
  66
  67         KeyDerivation(const KeyDerivation & src);
  68         friend class boost::serialization::access;
  69         template<class Archive>
  70         void serialize(Archive & ar, const unsigned int version)
  71         {
  72                 Lock lock(mutex_);
  73     ar & ld_kdr_;
  74     ar & master_salt_;
  75     ar & master_key_;
  76     updateMasterKey();
  77         }
  78
  79   int8_t ld_kdr_;             // ld(key_derivation_rate)
  80   SyncBuffer master_salt_;
  81   SyncBuffer master_key_;
  82
  83   Mutex mutex_;
  84 };
  85
  86 BOOST_IS_ABSTRACT(KeyDerivation)
  87
  88 //****** NullKeyDerivation ******
  89
  90 class NullKeyDerivation : public KeyDerivation
  91 {
  92 public:
  93   NullKeyDerivation() {};
  94   ~NullKeyDerivation() {};
  95
  96   void init(Buffer key, Buffer salt) {};
  97   void generate(satp_prf_label label, seq_nr_t seq_nr, Buffer& key);
  98
  99   std::string printType() { return "NullKeyDerivation"; };
 100
 101 private:
 102   void updateMasterKey() {};
 103
 104         friend class boost::serialization::access;
 105         template<class Archive>
 106         void serialize(Archive & ar, const unsigned int version)
 107         {
 108     ar & boost::serialization::base_object<KeyDerivation>(*this);
 109         }
 110
 111 };
 112
 113 //****** AesIcmKeyDerivation ******
 114
 115 class AesIcmKeyDerivation : public KeyDerivation
 116 {
 117 public:
 118   AesIcmKeyDerivation() : cipher_(NULL) {};
 119   ~AesIcmKeyDerivation();
 120
 121   void init(Buffer key, Buffer salt);
 122   void generate(satp_prf_label label, seq_nr_t seq_nr, Buffer& key);
 123
 124   std::string printType() { return "AesIcmKeyDerivation"; };
 125
 126 private:
 127   void updateMasterKey();
 128
 129         friend class boost::serialization::access;
 130         template<class Archive>
 131         void serialize(Archive & ar, const unsigned int version)
 132         {
 133     ar & boost::serialization::base_object<KeyDerivation>(*this);
 134         }
 135
 136   gcry_cipher_hd_t cipher_;
 137 };
 138
 139 #endif
 140