/* * IKEv2 responder (RFC 4306) for EAP-IKEV2 * Copyright (c) 2007, Jouni Malinen <j@w1.fi> * * This software may be distributed under the terms of the BSD license. * See README for more details. */ #ifndef IKEV2_H #define IKEV2_H #include "eap_common/ikev2_common.h" struct ikev2_proposal_data { u8 proposal_num; int integ; int prf; int encr; int dh; }; struct ikev2_responder_data { enum { SA_INIT, SA_AUTH, CHILD_SA, NOTIFY, IKEV2_DONE, IKEV2_FAILED } state; u8 i_spi[IKEV2_SPI_LEN]; u8 r_spi[IKEV2_SPI_LEN]; u8 i_nonce[IKEV2_NONCE_MAX_LEN]; size_t i_nonce_len; u8 r_nonce[IKEV2_NONCE_MAX_LEN]; size_t r_nonce_len; struct wpabuf *i_dh_public; struct wpabuf *r_dh_private; struct ikev2_proposal_data proposal; const struct dh_group *dh; struct ikev2_keys keys; u8 *IDi; size_t IDi_len; u8 IDi_type; u8 *IDr; size_t IDr_len; struct wpabuf *r_sign_msg; struct wpabuf *i_sign_msg; u8 *shared_secret; size_t shared_secret_len; enum { PEER_AUTH_CERT, PEER_AUTH_SECRET } peer_auth; u8 *key_pad; size_t key_pad_len; u16 error_type; enum { LAST_MSG_SA_INIT, LAST_MSG_SA_AUTH } last_msg; }; void ikev2_responder_deinit(struct ikev2_responder_data *data); int ikev2_responder_process(struct ikev2_responder_data *data, const struct wpabuf *buf); struct wpabuf * ikev2_responder_build(struct ikev2_responder_data *data); #endif /* IKEV2_H */