ikev2.h

Go to the documentation of this file.

#ifndef IKEV2_H
#define IKEV2_H

#include "eap_common/ikev2_common.h"

struct ikev2_proposal_data {
        u8 proposal_num;
        int integ;
        int prf;
        int encr;
        int dh;
};


struct ikev2_responder_data {
        enum { SA_INIT, SA_AUTH, CHILD_SA, NOTIFY, IKEV2_DONE, IKEV2_FAILED }
                state;
        u8 i_spi[IKEV2_SPI_LEN];
        u8 r_spi[IKEV2_SPI_LEN];
        u8 i_nonce[IKEV2_NONCE_MAX_LEN];
        size_t i_nonce_len;
        u8 r_nonce[IKEV2_NONCE_MAX_LEN];
        size_t r_nonce_len;
        struct wpabuf *i_dh_public;
        struct wpabuf *r_dh_private;
        struct ikev2_proposal_data proposal;
        const struct dh_group *dh;
        struct ikev2_keys keys;
        u8 *IDi;
        size_t IDi_len;
        u8 IDi_type;
        u8 *IDr;
        size_t IDr_len;
        struct wpabuf *r_sign_msg;
        struct wpabuf *i_sign_msg;
        u8 *shared_secret;
        size_t shared_secret_len;
        enum { PEER_AUTH_CERT, PEER_AUTH_SECRET } peer_auth;
        u8 *key_pad;
        size_t key_pad_len;
        u16 error_type;
        enum { LAST_MSG_SA_INIT, LAST_MSG_SA_AUTH } last_msg;
};


void ikev2_responder_deinit(struct ikev2_responder_data *data);
int ikev2_responder_process(struct ikev2_responder_data *data,
                            const struct wpabuf *buf);
struct wpabuf * ikev2_responder_build(struct ikev2_responder_data *data);

#endif /* IKEV2_H */