Lines Matching refs:sav
91 int, struct secasvar *sav);
114 struct secasvar *sav;
122 /*%%%% this needs to change - no sav in ipsecrequest any more */
123 sav = isr->sav;
128 if (sav == NULL)
130 if (sav->state != SADB_SASTATE_MATURE
131 && sav->state != SADB_SASTATE_DYING)
135 algo = esp_algorithm_lookup(sav->alg_enc);
138 ivlen = sav->ivlen;
148 if (sav->flags & SADB_X_EXT_OLD) {
153 aalgo = ah_algorithm_lookup(sav->alg_auth);
154 if (aalgo && sav->replay && sav->key_auth)
155 authlen = (aalgo->sumsiz)(sav);
165 if ((sav->flags & SADB_X_EXT_NATT) != 0) hdrsiz += sizeof(struct udphdr) + 4;
206 esp_output(m, nexthdrp, md, af, sav)
211 struct secasvar *sav;
228 int udp_encapsulate = (sav->flags & SADB_X_EXT_NATT && af == AF_INET &&
231 KERNEL_DEBUG(DBG_FNC_ESPOUT | DBG_FUNC_START, sav->ivlen,0,0,0,0);
252 if ((sav->flags & SADB_X_EXT_OLD) == 0 && !sav->replay) {
261 "sav->replay is null: %x->%x, SPI=%u\n",
264 (u_int32_t)ntohl(sav->spi)));
272 "sav->replay is null: SPI=%u\n",
273 (u_int32_t)ntohl(sav->spi)));
285 algo = esp_algorithm_lookup(sav->alg_enc);
288 "SPI=%u\n", (u_int32_t)ntohl(sav->spi)));
293 spi = sav->spi;
294 ivlen = sav->ivlen;
317 if (sav->flags & SADB_X_EXT_OLD) {
322 if (sav->flags & SADB_X_EXT_DERIV)
375 if ((sav->flags & SADB_X_EXT_NATT_MULTIPLEUSERS) != 0) {
386 /* if src port not set in sav - find it */
387 if (sav->natt_encapsulated_src_port == 0)
388 if (key_natt_get_translated_port(sav) == 0) {
393 if (sav->remote_ike_port == htons(udp->uh_dport)) {
395 udp->uh_dport = sav->natt_encapsulated_src_port;
474 if ((sav->flags & SADB_X_EXT_OLD) == 0) {
477 if (sav->replay->count == ~0) {
478 if ((sav->flags & SADB_X_EXT_CYCSEQ) == 0) {
482 ipsec_logsastr(sav)));
490 sav->replay->count++;
496 nesp->esp_seq = htonl(sav->replay->count);
602 switch (sav->flags & SADB_X_EXT_PMASK) {
621 udp->uh_dport = ntohs(sav->remote_ike_port);
626 sav->natt_last_activity = natt_now;
665 error = esp_schedule(algo, sav);
679 if ((*algo->encrypt)(m, espoff, plen + extendsiz, sav, algo, ivlen)) {
692 if (!sav->replay)
694 if (!sav->key_auth)
696 if (sav->key_auth == SADB_AALG_NONE)
708 aalgo = ah_algorithm_lookup(sav->alg_auth);
711 siz = ((aalgo->sumsiz)(sav) + 3) & ~(4 - 1);
715 if (esp_auth(m, espoff, m->m_pkthdr.len - espoff, sav, authbuf)) {
790 stat->out_esphist[sav->alg_enc]++;
792 key_sa_recordxfer(sav, m);
807 esp4_output(m, sav)
809 struct secasvar *sav;
819 return esp_output(m, &ip->ip_p, m->m_next, AF_INET, sav);
825 esp6_output(m, nexthdrp, md, sav)
829 struct secasvar *sav;
836 return esp_output(m, nexthdrp, md, AF_INET6, sav);