1 /* 2 * EAP server/peer: EAP-PAX shared routines 3 * Copyright (c) 2005-2006, Jouni Malinen <j (at) w1.fi> 4 * 5 * This program is free software; you can redistribute it and/or modify 6 * it under the terms of the GNU General Public License version 2 as 7 * published by the Free Software Foundation. 8 * 9 * Alternatively, this software may be distributed under the terms of BSD 10 * license. 11 * 12 * See README and COPYING for more details. 13 */ 14 15 #ifndef EAP_PAX_COMMON_H 16 #define EAP_PAX_COMMON_H 17 18 #ifdef _MSC_VER 19 #pragma pack(push, 1) 20 #endif /* _MSC_VER */ 21 22 struct eap_pax_hdr { 23 u8 code; 24 u8 identifier; 25 u16 length; /* including code, identifier, and length */ 26 u8 type; /* EAP_TYPE_PAX */ 27 u8 op_code; 28 u8 flags; 29 u8 mac_id; 30 u8 dh_group_id; 31 u8 public_key_id; 32 /* Followed by variable length payload and ICV */ 33 } STRUCT_PACKED; 34 35 #ifdef _MSC_VER 36 #pragma pack(pop) 37 #endif /* _MSC_VER */ 38 39 40 /* op_code: */ 41 enum { 42 EAP_PAX_OP_STD_1 = 0x01, 43 EAP_PAX_OP_STD_2 = 0x02, 44 EAP_PAX_OP_STD_3 = 0x03, 45 EAP_PAX_OP_SEC_1 = 0x11, 46 EAP_PAX_OP_SEC_2 = 0x12, 47 EAP_PAX_OP_SEC_3 = 0x13, 48 EAP_PAX_OP_SEC_4 = 0x14, 49 EAP_PAX_OP_SEC_5 = 0x15, 50 EAP_PAX_OP_ACK = 0x21 51 }; 52 53 /* flags: */ 54 #define EAP_PAX_FLAGS_MF 0x01 55 #define EAP_PAX_FLAGS_CE 0x02 56 #define EAP_PAX_FLAGS_AI 0x04 57 58 /* mac_id: */ 59 #define EAP_PAX_MAC_HMAC_SHA1_128 0x01 60 #define EAP_PAX_HMAC_SHA256_128 0x02 61 62 /* dh_group_id: */ 63 #define EAP_PAX_DH_GROUP_NONE 0x00 64 #define EAP_PAX_DH_GROUP_2048_MODP 0x01 65 #define EAP_PAX_DH_GROUP_3072_MODP 0x02 66 #define EAP_PAX_DH_GROUP_NIST_ECC_P_256 0x03 67 68 /* public_key_id: */ 69 #define EAP_PAX_PUBLIC_KEY_NONE 0x00 70 #define EAP_PAX_PUBLIC_KEY_RSAES_OAEP 0x01 71 #define EAP_PAX_PUBLIC_KEY_RSA_PKCS1_V1_5 0x02 72 #define EAP_PAX_PUBLIC_KEY_EL_GAMAL_NIST_ECC 0x03 73 74 /* ADE type: */ 75 #define EAP_PAX_ADE_VENDOR_SPECIFIC 0x01 76 #define EAP_PAX_ADE_CLIENT_CHANNEL_BINDING 0x02 77 #define EAP_PAX_ADE_SERVER_CHANNEL_BINDING 0x03 78 79 80 #define EAP_PAX_RAND_LEN 32 81 #define EAP_PAX_MAC_LEN 16 82 #define EAP_PAX_ICV_LEN 16 83 #define EAP_PAX_AK_LEN 16 84 #define EAP_PAX_MK_LEN 16 85 #define EAP_PAX_CK_LEN 16 86 #define EAP_PAX_ICK_LEN 16 87 88 89 int eap_pax_kdf(u8 mac_id, const u8 *key, size_t key_len, 90 const char *identifier, 91 const u8 *entropy, size_t entropy_len, 92 size_t output_len, u8 *output); 93 int eap_pax_mac(u8 mac_id, const u8 *key, size_t key_len, 94 const u8 *data1, size_t data1_len, 95 const u8 *data2, size_t data2_len, 96 const u8 *data3, size_t data3_len, 97 u8 *mac); 98 int eap_pax_initial_key_derivation(u8 mac_id, const u8 *ak, const u8 *e, 99 u8 *mk, u8 *ck, u8 *ick); 100 101 #endif /* EAP_PAX_COMMON_H */ 102
