eap_pax_common.h revision c5ec7f57ead87efa365800228aa0b09a12d9e6c4
1ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch/*
2ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch * EAP server/peer: EAP-PAX shared routines
3ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch * Copyright (c) 2005-2007, Jouni Malinen <j@w1.fi>
4ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch *
5ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch * This software may be distributed under the terms of the BSD license.
6ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch * See README for more details.
7ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch */
8ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch
9ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch#ifndef EAP_PAX_COMMON_H
10ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch#define EAP_PAX_COMMON_H
11ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch
12ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch#ifdef _MSC_VER
13ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch#pragma pack(push, 1)
14ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch#endif /* _MSC_VER */
15ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch
16ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdochstruct eap_pax_hdr {
17ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch	u8 op_code;
18ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch	u8 flags;
19ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch	u8 mac_id;
20ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch	u8 dh_group_id;
21ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch	u8 public_key_id;
22ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch	/* Followed by variable length payload and ICV */
23ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch} STRUCT_PACKED;
24ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch
25ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch#ifdef _MSC_VER
26ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch#pragma pack(pop)
27ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch#endif /* _MSC_VER */
28ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch
29ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch
30ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch/* op_code: */
31ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdochenum {
32ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch	EAP_PAX_OP_STD_1 = 0x01,
33ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch	EAP_PAX_OP_STD_2 = 0x02,
34ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch	EAP_PAX_OP_STD_3 = 0x03,
35ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch	EAP_PAX_OP_SEC_1 = 0x11,
36ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch	EAP_PAX_OP_SEC_2 = 0x12,
37ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch	EAP_PAX_OP_SEC_3 = 0x13,
38ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch	EAP_PAX_OP_SEC_4 = 0x14,
39ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch	EAP_PAX_OP_SEC_5 = 0x15,
40ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch	EAP_PAX_OP_ACK = 0x21
41ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch};
42ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch
43ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch/* flags: */
44ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch#define EAP_PAX_FLAGS_MF			0x01
45ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch#define EAP_PAX_FLAGS_CE			0x02
46ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch#define EAP_PAX_FLAGS_AI			0x04
47ca12bfac764ba476d6cd062bf1dde12cc64c3f40Ben Murdoch
48/* mac_id: */
49#define EAP_PAX_MAC_HMAC_SHA1_128		0x01
50#define EAP_PAX_HMAC_SHA256_128			0x02
51
52/* dh_group_id: */
53#define EAP_PAX_DH_GROUP_NONE			0x00
54#define EAP_PAX_DH_GROUP_2048_MODP		0x01
55#define EAP_PAX_DH_GROUP_3072_MODP		0x02
56#define EAP_PAX_DH_GROUP_NIST_ECC_P_256		0x03
57
58/* public_key_id: */
59#define EAP_PAX_PUBLIC_KEY_NONE			0x00
60#define EAP_PAX_PUBLIC_KEY_RSAES_OAEP		0x01
61#define EAP_PAX_PUBLIC_KEY_RSA_PKCS1_V1_5	0x02
62#define EAP_PAX_PUBLIC_KEY_EL_GAMAL_NIST_ECC	0x03
63
64/* ADE type: */
65#define EAP_PAX_ADE_VENDOR_SPECIFIC		0x01
66#define EAP_PAX_ADE_CLIENT_CHANNEL_BINDING	0x02
67#define EAP_PAX_ADE_SERVER_CHANNEL_BINDING	0x03
68
69
70#define EAP_PAX_RAND_LEN 32
71#define EAP_PAX_MAC_LEN 16
72#define EAP_PAX_ICV_LEN 16
73#define EAP_PAX_AK_LEN 16
74#define EAP_PAX_MK_LEN 16
75#define EAP_PAX_CK_LEN 16
76#define EAP_PAX_ICK_LEN 16
77
78
79int eap_pax_kdf(u8 mac_id, const u8 *key, size_t key_len,
80		const char *identifier,
81		const u8 *entropy, size_t entropy_len,
82		size_t output_len, u8 *output);
83int eap_pax_mac(u8 mac_id, const u8 *key, size_t key_len,
84		const u8 *data1, size_t data1_len,
85		const u8 *data2, size_t data2_len,
86		const u8 *data3, size_t data3_len,
87		u8 *mac);
88int eap_pax_initial_key_derivation(u8 mac_id, const u8 *ak, const u8 *e,
89				   u8 *mk, u8 *ck, u8 *ick);
90
91#endif /* EAP_PAX_COMMON_H */
92