1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
|
/* IKEv1 HASH payload weirdness, for Libreswan
*
* Copyright (C) 2019 Andrew Cagney
*
* This program is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License as published by the
* Free Software Foundation; either version 2 of the License, or (at your
* option) any later version. See <https://www.gnu.org/licenses/gpl2.txt>.
*
* This program is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* for more details.
*
*/
#ifndef IKEV1_HASH_H
#define IKEV1_HASH_H
#include <stdint.h>
#include <stdbool.h>
#include "chunk.h"
#include "defs.h" /* for msgid_t */
#include "impair.h"
struct state;
struct msg_digest;
/*
* RFC 2409: 5.5 Phase 2 - Quick Mode
*
* HASH(1) = prf(SKEYID_a, M-ID | SA | Ni [ | KE ] [ | IDci | IDcr )
* aka HASH(1) = prf(SKEYID_a, M-ID | payload )
*
* HASH(2) = prf(SKEYID_a, M-ID | Ni_b | SA | Nr [ | KE ] [ | IDci | IDcr )
* aka HASH(2) = prf(SKEYID_a, M-ID | Ni_b | payload )
*
* HASH(3) = prf(SKEYID_a, 0 | M-ID | Ni_b | Nr_b)
*/
enum v1_hash_type {
V1_HASH_NONE,
V1_HASH_1 = 1,
V1_HASH_2 = 2,
V1_HASH_3 = 3,
};
/*
* Emit (saving where it is) and fixup (a previously saved) v1 HASH
* payload.
*/
struct v1_hash_fixup {
chunk_t hash_data;
const uint8_t *body;
const char *what;
enum impair_emit impair;
enum v1_hash_type hash_type;
struct logger *logger;
};
bool emit_v1_HASH(enum v1_hash_type type, const char *what,
enum impair_v1_exchange exchange, struct state *st,
struct v1_hash_fixup *hash_fixup, struct pbs_out *out_pbs);
void fixup_v1_HASH(struct state *st, const struct v1_hash_fixup *data,
msgid_t msgid, const uint8_t *roof);
/*
* Check the IKEv1 HASH payload.
*/
bool check_v1_HASH(enum v1_hash_type type, const char *what,
struct state *st, struct msg_digest *md);
#endif
|
