1189251Ssam/* 2189251Ssam * EAP server/peer: EAP-PAX shared routines 3189251Ssam * Copyright (c) 2005-2007, Jouni Malinen <j@w1.fi> 4189251Ssam * 5189251Ssam * This program is free software; you can redistribute it and/or modify 6189251Ssam * it under the terms of the GNU General Public License version 2 as 7189251Ssam * published by the Free Software Foundation. 8189251Ssam * 9189251Ssam * Alternatively, this software may be distributed under the terms of BSD 10189251Ssam * license. 11189251Ssam * 12189251Ssam * See README and COPYING for more details. 13189251Ssam */ 14189251Ssam 15189251Ssam#ifndef EAP_PAX_COMMON_H 16189251Ssam#define EAP_PAX_COMMON_H 17189251Ssam 18189251Ssam#ifdef _MSC_VER 19189251Ssam#pragma pack(push, 1) 20189251Ssam#endif /* _MSC_VER */ 21189251Ssam 22189251Ssamstruct eap_pax_hdr { 23189251Ssam u8 op_code; 24189251Ssam u8 flags; 25189251Ssam u8 mac_id; 26189251Ssam u8 dh_group_id; 27189251Ssam u8 public_key_id; 28189251Ssam /* Followed by variable length payload and ICV */ 29189251Ssam} STRUCT_PACKED; 30189251Ssam 31189251Ssam#ifdef _MSC_VER 32189251Ssam#pragma pack(pop) 33189251Ssam#endif /* _MSC_VER */ 34189251Ssam 35189251Ssam 36189251Ssam/* op_code: */ 37189251Ssamenum { 38189251Ssam EAP_PAX_OP_STD_1 = 0x01, 39189251Ssam EAP_PAX_OP_STD_2 = 0x02, 40189251Ssam EAP_PAX_OP_STD_3 = 0x03, 41189251Ssam EAP_PAX_OP_SEC_1 = 0x11, 42189251Ssam EAP_PAX_OP_SEC_2 = 0x12, 43189251Ssam EAP_PAX_OP_SEC_3 = 0x13, 44189251Ssam EAP_PAX_OP_SEC_4 = 0x14, 45189251Ssam EAP_PAX_OP_SEC_5 = 0x15, 46189251Ssam EAP_PAX_OP_ACK = 0x21 47189251Ssam}; 48189251Ssam 49189251Ssam/* flags: */ 50189251Ssam#define EAP_PAX_FLAGS_MF 0x01 51189251Ssam#define EAP_PAX_FLAGS_CE 0x02 52189251Ssam#define EAP_PAX_FLAGS_AI 0x04 53189251Ssam 54189251Ssam/* mac_id: */ 55189251Ssam#define EAP_PAX_MAC_HMAC_SHA1_128 0x01 56189251Ssam#define EAP_PAX_HMAC_SHA256_128 0x02 57189251Ssam 58189251Ssam/* dh_group_id: */ 59189251Ssam#define EAP_PAX_DH_GROUP_NONE 0x00 60189251Ssam#define EAP_PAX_DH_GROUP_2048_MODP 0x01 61189251Ssam#define EAP_PAX_DH_GROUP_3072_MODP 0x02 62189251Ssam#define EAP_PAX_DH_GROUP_NIST_ECC_P_256 0x03 63189251Ssam 64189251Ssam/* public_key_id: */ 65189251Ssam#define EAP_PAX_PUBLIC_KEY_NONE 0x00 66189251Ssam#define EAP_PAX_PUBLIC_KEY_RSAES_OAEP 0x01 67189251Ssam#define EAP_PAX_PUBLIC_KEY_RSA_PKCS1_V1_5 0x02 68189251Ssam#define EAP_PAX_PUBLIC_KEY_EL_GAMAL_NIST_ECC 0x03 69189251Ssam 70189251Ssam/* ADE type: */ 71189251Ssam#define EAP_PAX_ADE_VENDOR_SPECIFIC 0x01 72189251Ssam#define EAP_PAX_ADE_CLIENT_CHANNEL_BINDING 0x02 73189251Ssam#define EAP_PAX_ADE_SERVER_CHANNEL_BINDING 0x03 74189251Ssam 75189251Ssam 76189251Ssam#define EAP_PAX_RAND_LEN 32 77189251Ssam#define EAP_PAX_MAC_LEN 16 78189251Ssam#define EAP_PAX_ICV_LEN 16 79189251Ssam#define EAP_PAX_AK_LEN 16 80189251Ssam#define EAP_PAX_MK_LEN 16 81189251Ssam#define EAP_PAX_CK_LEN 16 82189251Ssam#define EAP_PAX_ICK_LEN 16 83189251Ssam 84189251Ssam 85189251Ssamint eap_pax_kdf(u8 mac_id, const u8 *key, size_t key_len, 86189251Ssam const char *identifier, 87189251Ssam const u8 *entropy, size_t entropy_len, 88189251Ssam size_t output_len, u8 *output); 89189251Ssamint eap_pax_mac(u8 mac_id, const u8 *key, size_t key_len, 90189251Ssam const u8 *data1, size_t data1_len, 91189251Ssam const u8 *data2, size_t data2_len, 92189251Ssam const u8 *data3, size_t data3_len, 93189251Ssam u8 *mac); 94189251Ssamint eap_pax_initial_key_derivation(u8 mac_id, const u8 *ak, const u8 *e, 95189251Ssam u8 *mk, u8 *ck, u8 *ick); 96189251Ssam 97189251Ssam#endif /* EAP_PAX_COMMON_H */ 98