18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * TLSv1 Record Protocol 31f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * Copyright (c) 2006-2011, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license. 6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details. 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef TLSV1_RECORD_H 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TLSV1_RECORD_H 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto/crypto.h" 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 141f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#define TLS_MAX_WRITE_MAC_SECRET_LEN 32 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TLS_MAX_WRITE_KEY_LEN 32 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TLS_MAX_IV_LEN 16 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TLS_MAX_KEY_BLOCK_LEN (2 * (TLS_MAX_WRITE_MAC_SECRET_LEN + \ 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_MAX_WRITE_KEY_LEN + TLS_MAX_IV_LEN)) 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TLS_SEQ_NUM_LEN 8 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define TLS_RECORD_HEADER_LEN 5 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* ContentType */ 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtenum { 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_CONTENT_TYPE_CHANGE_CIPHER_SPEC = 20, 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_CONTENT_TYPE_ALERT = 21, 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_CONTENT_TYPE_HANDSHAKE = 22, 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt TLS_CONTENT_TYPE_APPLICATION_DATA = 23 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct tlsv1_record_layer { 321f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt u16 tls_version; 331f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 write_mac_secret[TLS_MAX_WRITE_MAC_SECRET_LEN]; 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 read_mac_secret[TLS_MAX_WRITE_MAC_SECRET_LEN]; 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 write_key[TLS_MAX_WRITE_KEY_LEN]; 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 read_key[TLS_MAX_WRITE_KEY_LEN]; 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 write_iv[TLS_MAX_IV_LEN]; 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 read_iv[TLS_MAX_IV_LEN]; 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t hash_size; 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t key_material_len; 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t iv_size; /* also block_size */ 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt enum crypto_hash_alg hash_alg; 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt enum crypto_cipher_alg cipher_alg; 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 write_seq_num[TLS_SEQ_NUM_LEN]; 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 read_seq_num[TLS_SEQ_NUM_LEN]; 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 cipher_suite; 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 write_cipher_suite; 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 read_cipher_suite; 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct crypto_cipher *write_cbc; 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct crypto_cipher *read_cbc; 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tlsv1_record_set_cipher_suite(struct tlsv1_record_layer *rl, 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 cipher_suite); 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tlsv1_record_change_write_cipher(struct tlsv1_record_layer *rl); 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tlsv1_record_change_read_cipher(struct tlsv1_record_layer *rl); 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tlsv1_record_send(struct tlsv1_record_layer *rl, u8 content_type, u8 *buf, 651f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt size_t buf_size, const u8 *payload, size_t payload_len, 661f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt size_t *out_len); 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint tlsv1_record_receive(struct tlsv1_record_layer *rl, 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *in_data, size_t in_len, 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *out_data, size_t *out_len, u8 *alert); 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* TLSV1_RECORD_H */ 72