2 /* $KAME: esp.h,v 1.19 2001/09/04 08:43:19 itojun Exp $ */
5 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
11 * 1. Redistributions of source code must retain the above copyright
12 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
16 * 3. Neither the name of the project nor the names of its contributors
17 * may be used to endorse or promote products derived from this software
18 * without specific prior written permission.
20 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 * RFC1827/2406 Encapsulated Security Payload.
37 #ifndef _NETINET6_ESP_H_
38 #define _NETINET6_ESP_H_
40 #if defined(_KERNEL) && !defined(_LKM)
45 u_int32_t esp_spi; /* ESP */
46 /* variable size, 32bit bound */ /* Initialization Vector */
47 /* variable size */ /* Payload data */
48 /* variable size */ /* padding */
49 /* 8bit */ /* pad size */
50 /* 8bit */ /* next header */
51 /* 8bit */ /* next header */
52 /* variable size, 32bit bound */ /* Authentication data (new IPsec) */
56 u_int32_t esp_spi; /* ESP */
57 u_int32_t esp_seq; /* Sequence number */
58 /* variable size */ /* (IV and) Payload data */
59 /* variable size */ /* padding */
60 /* 8bit */ /* pad size */
61 /* 8bit */ /* next header */
62 /* 8bit */ /* next header */
63 /* variable size, 32bit bound *//* Authentication data */
67 u_int8_t esp_padlen; /* pad length */
68 u_int8_t esp_nxt; /* Next header */
69 /* variable size, 32bit bound *//* Authentication data (new IPsec)*/
75 struct esp_algorithm {
76 size_t padbound; /* pad boundary, in byte */
77 int ivlenval; /* iv length, in byte */
78 int (*mature) __P((struct secasvar *));
79 int keymin; /* in bits */
80 int keymax; /* in bits */
81 size_t (*schedlen) __P((const struct esp_algorithm *));
83 int (*ivlen) __P((const struct esp_algorithm *, struct secasvar *));
84 int (*decrypt) __P((struct mbuf *, size_t,
85 struct secasvar *, const struct esp_algorithm *, int));
86 int (*encrypt) __P((struct mbuf *, size_t, size_t,
87 struct secasvar *, const struct esp_algorithm *, int));
88 /* not supposed to be called directly */
89 int (*schedule) __P((const struct esp_algorithm *, struct secasvar *));
90 int (*blockdecrypt) __P((const struct esp_algorithm *,
91 struct secasvar *, u_int8_t *, u_int8_t *));
92 int (*blockencrypt) __P((const struct esp_algorithm *,
93 struct secasvar *, u_int8_t *, u_int8_t *));
96 extern const struct esp_algorithm *esp_algorithm_lookup __P((int));
97 extern int esp_max_ivlen __P((void));
100 extern int esp4_output __P((struct mbuf *, struct ipsecrequest *));
101 extern void esp4_input __P((struct mbuf *, int));
102 extern size_t esp_hdrsiz __P((struct ipsecrequest *));
104 extern int esp_schedule __P((const struct esp_algorithm *, struct secasvar *));
105 extern int esp_auth __P((struct mbuf *, size_t, size_t,
106 struct secasvar *, u_char *));
109 #endif /* _NETINET6_ESP_H_ */