18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/*
28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * TLSv1 Record Protocol
31f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * Copyright (c) 2006-2011, Jouni Malinen <j@w1.fi>
48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *
5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license.
6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details.
78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */
88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef TLSV1_RECORD_H
108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TLSV1_RECORD_H
118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/crypto.h"
138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
141f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#define TLS_MAX_WRITE_MAC_SECRET_LEN 32
158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TLS_MAX_WRITE_KEY_LEN 32
168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TLS_MAX_IV_LEN 16
178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TLS_MAX_KEY_BLOCK_LEN (2 * (TLS_MAX_WRITE_MAC_SECRET_LEN + \
188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt				    TLS_MAX_WRITE_KEY_LEN + TLS_MAX_IV_LEN))
198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TLS_SEQ_NUM_LEN 8
218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TLS_RECORD_HEADER_LEN 5
228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* ContentType */
248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtenum {
258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	TLS_CONTENT_TYPE_CHANGE_CIPHER_SPEC = 20,
268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	TLS_CONTENT_TYPE_ALERT = 21,
278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	TLS_CONTENT_TYPE_HANDSHAKE = 22,
288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	TLS_CONTENT_TYPE_APPLICATION_DATA = 23
298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt};
308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct tlsv1_record_layer {
321f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt	u16 tls_version;
331f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt
348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	u8 write_mac_secret[TLS_MAX_WRITE_MAC_SECRET_LEN];
358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	u8 read_mac_secret[TLS_MAX_WRITE_MAC_SECRET_LEN];
368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	u8 write_key[TLS_MAX_WRITE_KEY_LEN];
378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	u8 read_key[TLS_MAX_WRITE_KEY_LEN];
388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	u8 write_iv[TLS_MAX_IV_LEN];
398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	u8 read_iv[TLS_MAX_IV_LEN];
408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	size_t hash_size;
428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	size_t key_material_len;
438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	size_t iv_size; /* also block_size */
448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	enum crypto_hash_alg hash_alg;
468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	enum crypto_cipher_alg cipher_alg;
478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	u8 write_seq_num[TLS_SEQ_NUM_LEN];
498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	u8 read_seq_num[TLS_SEQ_NUM_LEN];
508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	u16 cipher_suite;
528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	u16 write_cipher_suite;
538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	u16 read_cipher_suite;
548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	struct crypto_cipher *write_cbc;
568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt	struct crypto_cipher *read_cbc;
578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt};
588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tlsv1_record_set_cipher_suite(struct tlsv1_record_layer *rl,
618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt				  u16 cipher_suite);
628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tlsv1_record_change_write_cipher(struct tlsv1_record_layer *rl);
638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tlsv1_record_change_read_cipher(struct tlsv1_record_layer *rl);
648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tlsv1_record_send(struct tlsv1_record_layer *rl, u8 content_type, u8 *buf,
651f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt		      size_t buf_size, const u8 *payload, size_t payload_len,
661f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt		      size_t *out_len);
678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tlsv1_record_receive(struct tlsv1_record_layer *rl,
688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			 const u8 *in_data, size_t in_len,
698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt			 u8 *out_data, size_t *out_len, u8 *alert);
708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt
718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* TLSV1_RECORD_H */
72