1189251Ssam/*
2189251Ssam * EAP server/peer: EAP-PAX shared routines
3189251Ssam * Copyright (c) 2005-2007, Jouni Malinen <j@w1.fi>
4189251Ssam *
5189251Ssam * This program is free software; you can redistribute it and/or modify
6189251Ssam * it under the terms of the GNU General Public License version 2 as
7189251Ssam * published by the Free Software Foundation.
8189251Ssam *
9189251Ssam * Alternatively, this software may be distributed under the terms of BSD
10189251Ssam * license.
11189251Ssam *
12189251Ssam * See README and COPYING for more details.
13189251Ssam */
14189251Ssam
15189251Ssam#ifndef EAP_PAX_COMMON_H
16189251Ssam#define EAP_PAX_COMMON_H
17189251Ssam
18189251Ssam#ifdef _MSC_VER
19189251Ssam#pragma pack(push, 1)
20189251Ssam#endif /* _MSC_VER */
21189251Ssam
22189251Ssamstruct eap_pax_hdr {
23189251Ssam	u8 op_code;
24189251Ssam	u8 flags;
25189251Ssam	u8 mac_id;
26189251Ssam	u8 dh_group_id;
27189251Ssam	u8 public_key_id;
28189251Ssam	/* Followed by variable length payload and ICV */
29189251Ssam} STRUCT_PACKED;
30189251Ssam
31189251Ssam#ifdef _MSC_VER
32189251Ssam#pragma pack(pop)
33189251Ssam#endif /* _MSC_VER */
34189251Ssam
35189251Ssam
36189251Ssam/* op_code: */
37189251Ssamenum {
38189251Ssam	EAP_PAX_OP_STD_1 = 0x01,
39189251Ssam	EAP_PAX_OP_STD_2 = 0x02,
40189251Ssam	EAP_PAX_OP_STD_3 = 0x03,
41189251Ssam	EAP_PAX_OP_SEC_1 = 0x11,
42189251Ssam	EAP_PAX_OP_SEC_2 = 0x12,
43189251Ssam	EAP_PAX_OP_SEC_3 = 0x13,
44189251Ssam	EAP_PAX_OP_SEC_4 = 0x14,
45189251Ssam	EAP_PAX_OP_SEC_5 = 0x15,
46189251Ssam	EAP_PAX_OP_ACK = 0x21
47189251Ssam};
48189251Ssam
49189251Ssam/* flags: */
50189251Ssam#define EAP_PAX_FLAGS_MF			0x01
51189251Ssam#define EAP_PAX_FLAGS_CE			0x02
52189251Ssam#define EAP_PAX_FLAGS_AI			0x04
53189251Ssam
54189251Ssam/* mac_id: */
55189251Ssam#define EAP_PAX_MAC_HMAC_SHA1_128		0x01
56189251Ssam#define EAP_PAX_HMAC_SHA256_128			0x02
57189251Ssam
58189251Ssam/* dh_group_id: */
59189251Ssam#define EAP_PAX_DH_GROUP_NONE			0x00
60189251Ssam#define EAP_PAX_DH_GROUP_2048_MODP		0x01
61189251Ssam#define EAP_PAX_DH_GROUP_3072_MODP		0x02
62189251Ssam#define EAP_PAX_DH_GROUP_NIST_ECC_P_256		0x03
63189251Ssam
64189251Ssam/* public_key_id: */
65189251Ssam#define EAP_PAX_PUBLIC_KEY_NONE			0x00
66189251Ssam#define EAP_PAX_PUBLIC_KEY_RSAES_OAEP		0x01
67189251Ssam#define EAP_PAX_PUBLIC_KEY_RSA_PKCS1_V1_5	0x02
68189251Ssam#define EAP_PAX_PUBLIC_KEY_EL_GAMAL_NIST_ECC	0x03
69189251Ssam
70189251Ssam/* ADE type: */
71189251Ssam#define EAP_PAX_ADE_VENDOR_SPECIFIC		0x01
72189251Ssam#define EAP_PAX_ADE_CLIENT_CHANNEL_BINDING	0x02
73189251Ssam#define EAP_PAX_ADE_SERVER_CHANNEL_BINDING	0x03
74189251Ssam
75189251Ssam
76189251Ssam#define EAP_PAX_RAND_LEN 32
77189251Ssam#define EAP_PAX_MAC_LEN 16
78189251Ssam#define EAP_PAX_ICV_LEN 16
79189251Ssam#define EAP_PAX_AK_LEN 16
80189251Ssam#define EAP_PAX_MK_LEN 16
81189251Ssam#define EAP_PAX_CK_LEN 16
82189251Ssam#define EAP_PAX_ICK_LEN 16
83189251Ssam
84189251Ssam
85189251Ssamint eap_pax_kdf(u8 mac_id, const u8 *key, size_t key_len,
86189251Ssam		const char *identifier,
87189251Ssam		const u8 *entropy, size_t entropy_len,
88189251Ssam		size_t output_len, u8 *output);
89189251Ssamint eap_pax_mac(u8 mac_id, const u8 *key, size_t key_len,
90189251Ssam		const u8 *data1, size_t data1_len,
91189251Ssam		const u8 *data2, size_t data2_len,
92189251Ssam		const u8 *data3, size_t data3_len,
93189251Ssam		u8 *mac);
94189251Ssamint eap_pax_initial_key_derivation(u8 mac_id, const u8 *ak, const u8 *e,
95189251Ssam				   u8 *mk, u8 *ck, u8 *ick);
96189251Ssam
97189251Ssam#endif /* EAP_PAX_COMMON_H */
98