1/*
2 * EAP server/peer: EAP-PAX shared routines
3 * Copyright (c) 2005-2006, Jouni Malinen <j@w1.fi>
4 *
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
8 *
9 * Alternatively, this software may be distributed under the terms of BSD
10 * license.
11 *
12 * See README and COPYING for more details.
13 */
14
15#ifndef EAP_PAX_COMMON_H
16#define EAP_PAX_COMMON_H
17
18#ifdef _MSC_VER
19#pragma pack(push, 1)
20#endif /* _MSC_VER */
21
22struct eap_pax_hdr {
23	u8 code;
24	u8 identifier;
25	u16 length; /* including code, identifier, and length */
26	u8 type; /* EAP_TYPE_PAX */
27	u8 op_code;
28	u8 flags;
29	u8 mac_id;
30	u8 dh_group_id;
31	u8 public_key_id;
32	/* Followed by variable length payload and ICV */
33} STRUCT_PACKED;
34
35#ifdef _MSC_VER
36#pragma pack(pop)
37#endif /* _MSC_VER */
38
39
40/* op_code: */
41enum {
42	EAP_PAX_OP_STD_1 = 0x01,
43	EAP_PAX_OP_STD_2 = 0x02,
44	EAP_PAX_OP_STD_3 = 0x03,
45	EAP_PAX_OP_SEC_1 = 0x11,
46	EAP_PAX_OP_SEC_2 = 0x12,
47	EAP_PAX_OP_SEC_3 = 0x13,
48	EAP_PAX_OP_SEC_4 = 0x14,
49	EAP_PAX_OP_SEC_5 = 0x15,
50	EAP_PAX_OP_ACK = 0x21
51};
52
53/* flags: */
54#define EAP_PAX_FLAGS_MF			0x01
55#define EAP_PAX_FLAGS_CE			0x02
56#define EAP_PAX_FLAGS_AI			0x04
57
58/* mac_id: */
59#define EAP_PAX_MAC_HMAC_SHA1_128		0x01
60#define EAP_PAX_HMAC_SHA256_128			0x02
61
62/* dh_group_id: */
63#define EAP_PAX_DH_GROUP_NONE			0x00
64#define EAP_PAX_DH_GROUP_2048_MODP		0x01
65#define EAP_PAX_DH_GROUP_3072_MODP		0x02
66#define EAP_PAX_DH_GROUP_NIST_ECC_P_256		0x03
67
68/* public_key_id: */
69#define EAP_PAX_PUBLIC_KEY_NONE			0x00
70#define EAP_PAX_PUBLIC_KEY_RSAES_OAEP		0x01
71#define EAP_PAX_PUBLIC_KEY_RSA_PKCS1_V1_5	0x02
72#define EAP_PAX_PUBLIC_KEY_EL_GAMAL_NIST_ECC	0x03
73
74/* ADE type: */
75#define EAP_PAX_ADE_VENDOR_SPECIFIC		0x01
76#define EAP_PAX_ADE_CLIENT_CHANNEL_BINDING	0x02
77#define EAP_PAX_ADE_SERVER_CHANNEL_BINDING	0x03
78
79
80#define EAP_PAX_RAND_LEN 32
81#define EAP_PAX_MAC_LEN 16
82#define EAP_PAX_ICV_LEN 16
83#define EAP_PAX_AK_LEN 16
84#define EAP_PAX_MK_LEN 16
85#define EAP_PAX_CK_LEN 16
86#define EAP_PAX_ICK_LEN 16
87
88
89int eap_pax_kdf(u8 mac_id, const u8 *key, size_t key_len,
90		const char *identifier,
91		const u8 *entropy, size_t entropy_len,
92		size_t output_len, u8 *output);
93int eap_pax_mac(u8 mac_id, const u8 *key, size_t key_len,
94		const u8 *data1, size_t data1_len,
95		const u8 *data2, size_t data2_len,
96		const u8 *data3, size_t data3_len,
97		u8 *mac);
98int eap_pax_initial_key_derivation(u8 mac_id, const u8 *ak, const u8 *e,
99				   u8 *mk, u8 *ck, u8 *ick);
100
101#endif /* EAP_PAX_COMMON_H */
102