mirror of https://github.com/ntop/n2n.git
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
79 lines
2.8 KiB
79 lines
2.8 KiB
8 years ago
|
/* (c) 2009 Richard Andrews <andrews@ntop.org> */
|
||
|
|
|
||
|
|
#if !defined(N2N_TRANSFORMS_H_)
|
||
|
|
#define N2N_TRANSFORMS_H_
|
||
|
|
|
||
|
|
#include "n2n_keyfile.h"
|
||
|
|
#include "n2n_wire.h"
|
||
|
|
|
||
|
|
|
||
|
|
#define N2N_TRANSFORM_ID_INVAL 0 /* marks uninitialised data */
|
||
|
|
#define N2N_TRANSFORM_ID_NULL 1
|
||
|
|
#define N2N_TRANSFORM_ID_TWOFISH 2
|
||
|
|
#define N2N_TRANSFORM_ID_AESCBC 3
|
||
|
|
#define N2N_TRANSFORM_ID_LZO 4
|
||
|
|
#define N2N_TRANSFORM_ID_TWOFISH_LZO 5
|
||
|
|
#define N2N_TRANSFORM_ID_AESCBC_LZO 6
|
||
|
|
#define N2N_TRANSFORM_ID_USER_START 64
|
||
|
|
#define N2N_TRANSFORM_ID_MAX 65535
|
||
|
|
|
||
|
|
|
||
|
|
struct n2n_trans_op;
|
||
|
|
typedef struct n2n_trans_op n2n_trans_op_t;
|
||
|
|
|
||
|
|
struct n2n_tostat
|
||
|
|
{
|
||
|
|
uint8_t can_tx; /* Does this transop have a valid SA for encoding. */
|
||
|
|
n2n_cipherspec_t tx_spec; /* If can_tx, the spec used to encode. */
|
||
|
|
};
|
||
|
|
|
||
|
|
typedef struct n2n_tostat n2n_tostat_t;
|
||
|
|
|
||
|
|
|
||
|
|
typedef int (*n2n_transdeinit_f)( n2n_trans_op_t * arg );
|
||
|
|
typedef int (*n2n_transaddspec_f)( n2n_trans_op_t * arg,
|
||
|
|
const n2n_cipherspec_t * cspec );
|
||
|
|
typedef n2n_tostat_t (*n2n_transtick_f)( n2n_trans_op_t * arg,
|
||
|
|
time_t now );
|
||
|
|
|
||
|
|
typedef int (*n2n_transform_f)( n2n_trans_op_t * arg,
|
||
|
|
uint8_t * outbuf,
|
||
|
|
size_t out_len,
|
||
|
|
const uint8_t * inbuf,
|
||
|
|
size_t in_len );
|
||
|
|
|
||
|
|
/** Holds the info associated with a data transform plugin.
|
||
|
|
*
|
||
|
|
* When a packet arrives the transform ID is extracted. This defines the code
|
||
|
|
* to use to decode the packet content. The transform code then decodes the
|
||
|
|
* packet and consults its internal key lookup.
|
||
|
|
*/
|
||
|
|
struct n2n_trans_op
|
||
|
|
{
|
||
|
|
void * priv; /* opaque data. Key schedule goes here. */
|
||
|
|
|
||
|
|
n2n_transform_t transform_id; /* link header enum to a transform */
|
||
|
|
size_t tx_cnt;
|
||
|
|
size_t rx_cnt;
|
||
|
|
|
||
|
|
n2n_transdeinit_f deinit; /* destructor function */
|
||
|
|
n2n_transaddspec_f addspec; /* parse opaque data from a key schedule file. */
|
||
|
|
n2n_transtick_f tick; /* periodic maintenance */
|
||
|
|
n2n_transform_f fwd; /* encode a payload */
|
||
|
|
n2n_transform_f rev; /* decode a payload */
|
||
|
|
};
|
||
|
|
|
||
|
|
/* Setup a single twofish SA for single-key operation. */
|
||
|
|
int transop_twofish_setup( n2n_trans_op_t * ttt,
|
||
|
|
n2n_sa_t sa_num,
|
||
|
|
uint8_t * encrypt_pwd,
|
||
|
|
uint32_t encrypt_pwd_len );
|
||
|
|
|
||
|
|
/* Initialise an empty transop ready to receive cipherspec elements. */
|
||
|
|
int transop_twofish_init( n2n_trans_op_t * ttt );
|
||
|
|
int transop_aes_init( n2n_trans_op_t * ttt );
|
||
|
|
void transop_null_init( n2n_trans_op_t * ttt );
|
||
|
|
|
||
|
|
#endif /* #if !defined(N2N_TRANSFORMS_H_) */
|
||
|
|
|