1 /* $FreeBSD: src/sys/netinet6/esp.h,v 1.2.2.3 2002/04/28 05:40:26 suz Exp $ */
2 /* $DragonFly: src/sys/netinet6/esp.h,v 1.6 2004/10/16 23:24:24 hsu Exp $ */
3 /* $KAME: esp.h,v 1.19 2001/09/04 08:43:19 itojun Exp $ */
6 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
9 * Redistribution and use in source and binary forms, with or without
10 * modification, are permitted provided that the following conditions
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
14 * 2. Redistributions in binary form must reproduce the above copyright
15 * notice, this list of conditions and the following disclaimer in the
16 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the project nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
35 * RFC1827/2406 Encapsulated Security Payload.
38 #ifndef _NETINET6_ESP_H_
39 #define _NETINET6_ESP_H_
41 #if defined(_KERNEL) && !defined(_LKM)
46 u_int32_t esp_spi
; /* ESP */
47 /* variable size, 32bit bound */ /* Initialization Vector */
48 /* variable size */ /* Payload data */
49 /* variable size */ /* padding */
50 /* 8bit */ /* pad size */
51 /* 8bit */ /* next header */
52 /* variable size, 32bit bound */ /* Authentication data (new IPsec) */
56 u_int32_t esp_spi
; /* ESP */
57 u_int32_t esp_seq
; /* Sequence number */
58 /* variable size */ /* (IV and) Payload data */
59 /* variable size */ /* padding */
60 /* 8bit */ /* pad size */
61 /* 8bit */ /* next header */
62 /* variable size, 32bit bound *//* Authentication data */
66 u_int8_t esp_padlen
; /* pad length */
67 u_int8_t esp_nxt
; /* Next header */
68 /* variable size, 32bit bound *//* Authentication data (new IPsec)*/
74 struct esp_algorithm
{
75 size_t padbound
; /* pad boundary, in byte */
76 int ivlenval
; /* iv length, in byte */
77 int (*mature
) (struct secasvar
*);
78 int keymin
; /* in bits */
79 int keymax
; /* in bits */
80 int (*schedlen
) (const struct esp_algorithm
*);
82 int (*ivlen
) (const struct esp_algorithm
*, struct secasvar
*);
83 int (*decrypt
) (struct mbuf
*, size_t,
84 struct secasvar
*, const struct esp_algorithm
*, int);
85 int (*encrypt
) (struct mbuf
*, size_t, size_t,
86 struct secasvar
*, const struct esp_algorithm
*, int);
87 /* not supposed to be called directly */
88 int (*schedule
) (const struct esp_algorithm
*, struct secasvar
*);
89 int (*blockdecrypt
) (const struct esp_algorithm
*,
90 struct secasvar
*, u_int8_t
*, u_int8_t
*);
91 int (*blockencrypt
) (const struct esp_algorithm
*,
92 struct secasvar
*, u_int8_t
*, u_int8_t
*);
95 extern const struct esp_algorithm
*esp_algorithm_lookup (int);
96 extern int esp_max_ivlen (void);
99 extern int esp4_output (struct mbuf
*, struct ipsecrequest
*);
100 extern void esp4_input(struct mbuf
*, ...);
101 extern size_t esp_hdrsiz (struct ipsecrequest
*);
103 extern int esp_schedule (const struct esp_algorithm
*, struct secasvar
*);
104 extern int esp_auth (struct mbuf
*, size_t, size_t,
105 struct secasvar
*, u_char
*);
108 #endif /* _NETINET6_ESP_H_ */