---

---

---

001: /* PF_KEY user interface, this is defined by rfc2367 so
002:  * do not make arbitrary modifications or else this header
003:  * file will not be compliant.
004:  */
005: 
006: #ifndef _LINUX_PFKEY2_H
007: #define _LINUX_PFKEY2_H
008: 
009: #include <linux/types.h>
010: 
011: #define PF_KEY_V2               2
012: #define PFKEYV2_REVISION        199806L
013: 
014: struct sadb_msg {
015:         __u8            sadb_msg_version;
016:         __u8            sadb_msg_type;
017:         __u8            sadb_msg_errno;
018:         __u8            sadb_msg_satype;
019:         __u16   sadb_msg_len;
020:         __u16   sadb_msg_reserved;
021:         __u32   sadb_msg_seq;
022:         __u32   sadb_msg_pid;
023: } __attribute__((packed));
024: /* sizeof(struct sadb_msg) == 16 */
025: 
026: struct sadb_ext {
027:         __u16   sadb_ext_len;
028:         __u16   sadb_ext_type;
029: } __attribute__((packed));
030: /* sizeof(struct sadb_ext) == 4 */
031: 
032: struct sadb_sa {
033:         __u16   sadb_sa_len;
034:         __u16   sadb_sa_exttype;
035:         __be32          sadb_sa_spi;
036:         __u8            sadb_sa_replay;
037:         __u8            sadb_sa_state;
038:         __u8            sadb_sa_auth;
039:         __u8            sadb_sa_encrypt;
040:         __u32   sadb_sa_flags;
041: } __attribute__((packed));
042: /* sizeof(struct sadb_sa) == 16 */
043: 
044: struct sadb_lifetime {
045:         __u16   sadb_lifetime_len;
046:         __u16   sadb_lifetime_exttype;
047:         __u32   sadb_lifetime_allocations;
048:         __u64   sadb_lifetime_bytes;
049:         __u64   sadb_lifetime_addtime;
050:         __u64   sadb_lifetime_usetime;
051: } __attribute__((packed));
052: /* sizeof(struct sadb_lifetime) == 32 */
053: 
054: struct sadb_address {
055:         __u16   sadb_address_len;
056:         __u16   sadb_address_exttype;
057:         __u8            sadb_address_proto;
058:         __u8            sadb_address_prefixlen;
059:         __u16   sadb_address_reserved;
060: } __attribute__((packed));
061: /* sizeof(struct sadb_address) == 8 */
062: 
063: struct sadb_key {
064:         __u16   sadb_key_len;
065:         __u16   sadb_key_exttype;
066:         __u16   sadb_key_bits;
067:         __u16   sadb_key_reserved;
068: } __attribute__((packed));
069: /* sizeof(struct sadb_key) == 8 */
070: 
071: struct sadb_ident {
072:         __u16   sadb_ident_len;
073:         __u16   sadb_ident_exttype;
074:         __u16   sadb_ident_type;
075:         __u16   sadb_ident_reserved;
076:         __u64   sadb_ident_id;
077: } __attribute__((packed));
078: /* sizeof(struct sadb_ident) == 16 */
079: 
080: struct sadb_sens {
081:         __u16   sadb_sens_len;
082:         __u16   sadb_sens_exttype;
083:         __u32   sadb_sens_dpd;
084:         __u8            sadb_sens_sens_level;
085:         __u8            sadb_sens_sens_len;
086:         __u8            sadb_sens_integ_level;
087:         __u8            sadb_sens_integ_len;
088:         __u32   sadb_sens_reserved;
089: } __attribute__((packed));
090: /* sizeof(struct sadb_sens) == 16 */
091: 
092: /* followed by:
093:         __u64   sadb_sens_bitmap[sens_len];
094:         __u64   sadb_integ_bitmap[integ_len];  */
095: 
096: struct sadb_prop {
097:         __u16   sadb_prop_len;
098:         __u16   sadb_prop_exttype;
099:         __u8            sadb_prop_replay;
100:         __u8            sadb_prop_reserved[3];
101: } __attribute__((packed));
102: /* sizeof(struct sadb_prop) == 8 */
103: 
104: /* followed by:
105:         struct sadb_comb sadb_combs[(sadb_prop_len +
106:                 sizeof(__u64) - sizeof(struct sadb_prop)) /
107:                 sizeof(struct sadb_comb)]; */
108: 
109: struct sadb_comb {
110:         __u8            sadb_comb_auth;
111:         __u8            sadb_comb_encrypt;
112:         __u16   sadb_comb_flags;
113:         __u16   sadb_comb_auth_minbits;
114:         __u16   sadb_comb_auth_maxbits;
115:         __u16   sadb_comb_encrypt_minbits;
116:         __u16   sadb_comb_encrypt_maxbits;
117:         __u32   sadb_comb_reserved;
118:         __u32   sadb_comb_soft_allocations;
119:         __u32   sadb_comb_hard_allocations;
120:         __u64   sadb_comb_soft_bytes;
121:         __u64   sadb_comb_hard_bytes;
122:         __u64   sadb_comb_soft_addtime;
123:         __u64   sadb_comb_hard_addtime;
124:         __u64   sadb_comb_soft_usetime;
125:         __u64   sadb_comb_hard_usetime;
126: } __attribute__((packed));
127: /* sizeof(struct sadb_comb) == 72 */
128: 
129: struct sadb_supported {
130:         __u16   sadb_supported_len;
131:         __u16   sadb_supported_exttype;
132:         __u32   sadb_supported_reserved;
133: } __attribute__((packed));
134: /* sizeof(struct sadb_supported) == 8 */
135: 
136: /* followed by:
137:         struct sadb_alg sadb_algs[(sadb_supported_len +
138:                 sizeof(__u64) - sizeof(struct sadb_supported)) /
139:                 sizeof(struct sadb_alg)]; */
140: 
141: struct sadb_alg {
142:         __u8            sadb_alg_id;
143:         __u8            sadb_alg_ivlen;
144:         __u16   sadb_alg_minbits;
145:         __u16   sadb_alg_maxbits;
146:         __u16   sadb_alg_reserved;
147: } __attribute__((packed));
148: /* sizeof(struct sadb_alg) == 8 */
149: 
150: struct sadb_spirange {
151:         __u16   sadb_spirange_len;
152:         __u16   sadb_spirange_exttype;
153:         __u32   sadb_spirange_min;
154:         __u32   sadb_spirange_max;
155:         __u32   sadb_spirange_reserved;
156: } __attribute__((packed));
157: /* sizeof(struct sadb_spirange) == 16 */
158: 
159: struct sadb_x_kmprivate {
160:         __u16   sadb_x_kmprivate_len;
161:         __u16   sadb_x_kmprivate_exttype;
162:         __u32   sadb_x_kmprivate_reserved;
163: } __attribute__((packed));
164: /* sizeof(struct sadb_x_kmprivate) == 8 */
165: 
166: struct sadb_x_sa2 {
167:         __u16   sadb_x_sa2_len;
168:         __u16   sadb_x_sa2_exttype;
169:         __u8            sadb_x_sa2_mode;
170:         __u8            sadb_x_sa2_reserved1;
171:         __u16   sadb_x_sa2_reserved2;
172:         __u32   sadb_x_sa2_sequence;
173:         __u32   sadb_x_sa2_reqid;
174: } __attribute__((packed));
175: /* sizeof(struct sadb_x_sa2) == 16 */
176: 
177: struct sadb_x_policy {
178:         __u16   sadb_x_policy_len;
179:         __u16   sadb_x_policy_exttype;
180:         __u16   sadb_x_policy_type;
181:         __u8            sadb_x_policy_dir;
182:         __u8            sadb_x_policy_reserved;
183:         __u32   sadb_x_policy_id;
184:         __u32   sadb_x_policy_priority;
185: } __attribute__((packed));
186: /* sizeof(struct sadb_x_policy) == 16 */
187: 
188: struct sadb_x_ipsecrequest {
189:         __u16   sadb_x_ipsecrequest_len;
190:         __u16   sadb_x_ipsecrequest_proto;
191:         __u8            sadb_x_ipsecrequest_mode;
192:         __u8            sadb_x_ipsecrequest_level;
193:         __u16   sadb_x_ipsecrequest_reserved1;
194:         __u32   sadb_x_ipsecrequest_reqid;
195:         __u32   sadb_x_ipsecrequest_reserved2;
196: } __attribute__((packed));
197: /* sizeof(struct sadb_x_ipsecrequest) == 16 */
198: 
199: /* This defines the TYPE of Nat Traversal in use.  Currently only one
200:  * type of NAT-T is supported, draft-ietf-ipsec-udp-encaps-06
201:  */
202: struct sadb_x_nat_t_type {
203:         __u16   sadb_x_nat_t_type_len;
204:         __u16   sadb_x_nat_t_type_exttype;
205:         __u8            sadb_x_nat_t_type_type;
206:         __u8            sadb_x_nat_t_type_reserved[3];
207: } __attribute__((packed));
208: /* sizeof(struct sadb_x_nat_t_type) == 8 */
209: 
210: /* Pass a NAT Traversal port (Source or Dest port) */
211: struct sadb_x_nat_t_port {
212:         __u16   sadb_x_nat_t_port_len;
213:         __u16   sadb_x_nat_t_port_exttype;
214:         __be16          sadb_x_nat_t_port_port;
215:         __u16   sadb_x_nat_t_port_reserved;
216: } __attribute__((packed));
217: /* sizeof(struct sadb_x_nat_t_port) == 8 */
218: 
219: /* Generic LSM security context */
220: struct sadb_x_sec_ctx {
221:         __u16   sadb_x_sec_len;
222:         __u16   sadb_x_sec_exttype;
223:         __u8            sadb_x_ctx_alg;  /* LSMs: e.g., selinux == 1 */
224:         __u8            sadb_x_ctx_doi;
225:         __u16   sadb_x_ctx_len;
226: } __attribute__((packed));
227: /* sizeof(struct sadb_sec_ctx) = 8 */
228: 
229: /* Used by MIGRATE to pass addresses IKE will use to perform
230:  * negotiation with the peer */
231: struct sadb_x_kmaddress {
232:         __u16   sadb_x_kmaddress_len;
233:         __u16   sadb_x_kmaddress_exttype;
234:         __u32   sadb_x_kmaddress_reserved;
235: } __attribute__((packed));
236: /* sizeof(struct sadb_x_kmaddress) == 8 */
237: 
238: /* Message types */
239: #define SADB_RESERVED           0
240: #define SADB_GETSPI             1
241: #define SADB_UPDATE             2
242: #define SADB_ADD                3
243: #define SADB_DELETE             4
244: #define SADB_GET                5
245: #define SADB_ACQUIRE            6
246: #define SADB_REGISTER           7
247: #define SADB_EXPIRE             8
248: #define SADB_FLUSH              9
249: #define SADB_DUMP               10
250: #define SADB_X_PROMISC          11
251: #define SADB_X_PCHANGE          12
252: #define SADB_X_SPDUPDATE        13
253: #define SADB_X_SPDADD           14
254: #define SADB_X_SPDDELETE        15
255: #define SADB_X_SPDGET           16
256: #define SADB_X_SPDACQUIRE       17
257: #define SADB_X_SPDDUMP          18
258: #define SADB_X_SPDFLUSH         19
259: #define SADB_X_SPDSETIDX        20
260: #define SADB_X_SPDEXPIRE        21
261: #define SADB_X_SPDDELETE2       22
262: #define SADB_X_NAT_T_NEW_MAPPING        23
263: #define SADB_X_MIGRATE          24
264: #define SADB_MAX                24
265: 
266: /* Security Association flags */
267: #define SADB_SAFLAGS_PFS        1
268: #define SADB_SAFLAGS_NOPMTUDISC 0x20000000
269: #define SADB_SAFLAGS_DECAP_DSCP 0x40000000
270: #define SADB_SAFLAGS_NOECN      0x80000000
271: 
272: /* Security Association states */
273: #define SADB_SASTATE_LARVAL     0
274: #define SADB_SASTATE_MATURE     1
275: #define SADB_SASTATE_DYING      2
276: #define SADB_SASTATE_DEAD       3
277: #define SADB_SASTATE_MAX        3
278: 
279: /* Security Association types */
280: #define SADB_SATYPE_UNSPEC      0
281: #define SADB_SATYPE_AH          2
282: #define SADB_SATYPE_ESP         3
283: #define SADB_SATYPE_RSVP        5
284: #define SADB_SATYPE_OSPFV2      6
285: #define SADB_SATYPE_RIPV2       7
286: #define SADB_SATYPE_MIP         8
287: #define SADB_X_SATYPE_IPCOMP    9
288: #define SADB_SATYPE_MAX         9
289: 
290: /* Authentication algorithms */
291: #define SADB_AALG_NONE                  0
292: #define SADB_AALG_MD5HMAC               2
293: #define SADB_AALG_SHA1HMAC              3
294: #define SADB_X_AALG_SHA2_256HMAC        5
295: #define SADB_X_AALG_SHA2_384HMAC        6
296: #define SADB_X_AALG_SHA2_512HMAC        7
297: #define SADB_X_AALG_RIPEMD160HMAC       8
298: #define SADB_X_AALG_AES_XCBC_MAC        9
299: #define SADB_X_AALG_NULL                251     /* kame */
300: #define SADB_AALG_MAX                   251
301: 
302: /* Encryption algorithms */
303: #define SADB_EALG_NONE                  0
304: #define SADB_EALG_DESCBC                2
305: #define SADB_EALG_3DESCBC               3
306: #define SADB_X_EALG_CASTCBC             6
307: #define SADB_X_EALG_BLOWFISHCBC         7
308: #define SADB_EALG_NULL                  11
309: #define SADB_X_EALG_AESCBC              12
310: #define SADB_X_EALG_AESCTR              13
311: #define SADB_X_EALG_AES_CCM_ICV8        14
312: #define SADB_X_EALG_AES_CCM_ICV12       15
313: #define SADB_X_EALG_AES_CCM_ICV16       16
314: #define SADB_X_EALG_AES_GCM_ICV8        18
315: #define SADB_X_EALG_AES_GCM_ICV12       19
316: #define SADB_X_EALG_AES_GCM_ICV16       20
317: #define SADB_X_EALG_CAMELLIACBC         22
318: #define SADB_X_EALG_NULL_AES_GMAC       23
319: #define SADB_EALG_MAX                   253 /* last EALG */
320: /* private allocations should use 249-255 (RFC2407) */
321: #define SADB_X_EALG_SERPENTCBC  252     /* draft-ietf-ipsec-ciph-aes-cbc-00 */
322: #define SADB_X_EALG_TWOFISHCBC  253     /* draft-ietf-ipsec-ciph-aes-cbc-00 */
323: 
324: /* Compression algorithms */
325: #define SADB_X_CALG_NONE                0
326: #define SADB_X_CALG_OUI                 1
327: #define SADB_X_CALG_DEFLATE             2
328: #define SADB_X_CALG_LZS                 3
329: #define SADB_X_CALG_LZJH                4
330: #define SADB_X_CALG_MAX                 4
331: 
332: /* Extension Header values */
333: #define SADB_EXT_RESERVED               0
334: #define SADB_EXT_SA                     1
335: #define SADB_EXT_LIFETIME_CURRENT       2
336: #define SADB_EXT_LIFETIME_HARD          3
337: #define SADB_EXT_LIFETIME_SOFT          4
338: #define SADB_EXT_ADDRESS_SRC            5
339: #define SADB_EXT_ADDRESS_DST            6
340: #define SADB_EXT_ADDRESS_PROXY          7
341: #define SADB_EXT_KEY_AUTH               8
342: #define SADB_EXT_KEY_ENCRYPT            9
343: #define SADB_EXT_IDENTITY_SRC           10
344: #define SADB_EXT_IDENTITY_DST           11
345: #define SADB_EXT_SENSITIVITY            12
346: #define SADB_EXT_PROPOSAL               13
347: #define SADB_EXT_SUPPORTED_AUTH         14
348: #define SADB_EXT_SUPPORTED_ENCRYPT      15
349: #define SADB_EXT_SPIRANGE               16
350: #define SADB_X_EXT_KMPRIVATE            17
351: #define SADB_X_EXT_POLICY               18
352: #define SADB_X_EXT_SA2                  19
353: /* The next four entries are for setting up NAT Traversal */
354: #define SADB_X_EXT_NAT_T_TYPE           20
355: #define SADB_X_EXT_NAT_T_SPORT          21
356: #define SADB_X_EXT_NAT_T_DPORT          22
357: #define SADB_X_EXT_NAT_T_OA             23
358: #define SADB_X_EXT_SEC_CTX              24
359: /* Used with MIGRATE to pass @ to IKE for negotiation */
360: #define SADB_X_EXT_KMADDRESS            25
361: #define SADB_EXT_MAX                    25
362: 
363: /* Identity Extension values */
364: #define SADB_IDENTTYPE_RESERVED 0
365: #define SADB_IDENTTYPE_PREFIX   1
366: #define SADB_IDENTTYPE_FQDN     2
367: #define SADB_IDENTTYPE_USERFQDN 3
368: #define SADB_IDENTTYPE_MAX      3
369: 
370: #endif /* !(_LINUX_PFKEY2_H) */
371: 

---

---

---