1 /* $FreeBSD: src/sys/netinet6/esp.h,v 1.2.2.3 2002/04/28 05:40:26 suz Exp $ */
2 /* $DragonFly: src/sys/netinet6/esp.h,v 1.4 2003/08/23 11:02:45 rob Exp $ */
3 /* $KAME: esp.h,v 1.19 2001/09/04 08:43:19 itojun Exp $ */
6 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
9 * Redistribution and use in source and binary forms, with or without
10 * modification, are permitted provided that the following conditions
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
14 * 2. Redistributions in binary form must reproduce the above copyright
15 * notice, this list of conditions and the following disclaimer in the
16 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the project nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
35 * RFC1827/2406 Encapsulated Security Payload.
38 #ifndef _NETINET6_ESP_H_
39 #define _NETINET6_ESP_H_
41 #if defined(_KERNEL) && !defined(_LKM)
46 u_int32_t esp_spi; /* ESP */
47 /* variable size, 32bit bound */ /* Initialization Vector */
48 /* variable size */ /* Payload data */
49 /* variable size */ /* padding */
50 /* 8bit */ /* pad size */
51 /* 8bit */ /* next header */
52 /* 8bit */ /* next header */
53 /* variable size, 32bit bound */ /* Authentication data (new IPsec) */
57 u_int32_t esp_spi; /* ESP */
58 u_int32_t esp_seq; /* Sequence number */
59 /* variable size */ /* (IV and) Payload data */
60 /* variable size */ /* padding */
61 /* 8bit */ /* pad size */
62 /* 8bit */ /* next header */
63 /* 8bit */ /* next header */
64 /* variable size, 32bit bound *//* Authentication data */
68 u_int8_t esp_padlen; /* pad length */
69 u_int8_t esp_nxt; /* Next header */
70 /* variable size, 32bit bound *//* Authentication data (new IPsec)*/
76 struct esp_algorithm {
77 size_t padbound; /* pad boundary, in byte */
78 int ivlenval; /* iv length, in byte */
79 int (*mature) (struct secasvar *);
80 int keymin; /* in bits */
81 int keymax; /* in bits */
82 int (*schedlen) (const struct esp_algorithm *);
84 int (*ivlen) (const struct esp_algorithm *, struct secasvar *);
85 int (*decrypt) (struct mbuf *, size_t,
86 struct secasvar *, const struct esp_algorithm *, int);
87 int (*encrypt) (struct mbuf *, size_t, size_t,
88 struct secasvar *, const struct esp_algorithm *, int);
89 /* not supposed to be called directly */
90 int (*schedule) (const struct esp_algorithm *, struct secasvar *);
91 int (*blockdecrypt) (const struct esp_algorithm *,
92 struct secasvar *, u_int8_t *, u_int8_t *);
93 int (*blockencrypt) (const struct esp_algorithm *,
94 struct secasvar *, u_int8_t *, u_int8_t *);
97 extern const struct esp_algorithm *esp_algorithm_lookup (int);
98 extern int esp_max_ivlen (void);
101 extern int esp4_output (struct mbuf *, struct ipsecrequest *);
102 extern void esp4_input (struct mbuf *, int off, int proto);
103 extern size_t esp_hdrsiz (struct ipsecrequest *);
105 extern int esp_schedule (const struct esp_algorithm *, struct secasvar *);
106 extern int esp_auth (struct mbuf *, size_t, size_t,
107 struct secasvar *, u_char *);
110 #endif /* _NETINET6_ESP_H_ */