4 * uAnytun is a tiny implementation of SATP. Unlike Anytun which is a full
5 * featured implementation uAnytun has no support for multiple connections
6 * or synchronisation. It is a small single threaded implementation intended
7 * to act as a client on small platforms.
8 * The secure anycast tunneling protocol (satp) defines a protocol used
9 * for communication between any combination of unicast and anycast
10 * tunnel endpoints. It has less protocol overhead than IPSec in Tunnel
11 * mode and allows tunneling of every ETHER TYPE protocol (e.g.
12 * ethernet, ip, arp ...). satp directly includes cryptography and
13 * message authentication based on the methods used by SRTP. It is
14 * intended to deliver a generic, scaleable and secure solution for
15 * tunneling and relaying of packets of any protocol.
18 * Copyright (C) 2007-2014 Christian Pointner <equinox@anytun.org>
20 * This file is part of uAnytun.
22 * uAnytun is free software: you can redistribute it and/or modify
23 * it under the terms of the GNU General Public License as published by
24 * the Free Software Foundation, either version 3 of the License, or
27 * uAnytun is distributed in the hope that it will be useful,
28 * but WITHOUT ANY WARRANTY; without even the implied warranty of
29 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
30 * GNU General Public License for more details.
32 * You should have received a copy of the GNU General Public License
33 * along with uAnytun. If not, see <http://www.gnu.org/licenses/>.
35 * In addition, as a special exception, the copyright holders give
36 * permission to link the code of portions of this program with the
37 * OpenSSL library under certain conditions as described in each
38 * individual source file, and distribute linked combinations
40 * You must obey the GNU General Public License in all respects
41 * for all of the code used other than OpenSSL. If you modify
42 * file(s) with this exception, you may extend this exception to your
43 * version of the file(s), but you are not obligated to do so. If you
44 * do not wish to do so, delete this exception statement from your
45 * version. If you delete this exception statement from all source
46 * files in the program, then also delete it here.
49 #ifndef UANYTUN_cipher_h_INCLUDED
50 #define UANYTUN_cipher_h_INCLUDED
53 #if defined(USE_SSL_CRYPTO)
54 #include <openssl/aes.h>
55 #elif defined(USE_NETTLE)
56 #include <nettle/aes.h>
57 #else // USE_GCRYPT is the default
60 #include "key_derivation.h"
62 enum key_derivation_dir_enum { kd_inbound = 0, kd_outbound = 1 };
63 typedef enum key_derivation_dir_enum key_derivation_dir_t;
64 typedef u_int8_t key_derivation_t;
67 enum cipher_type_enum { c_unknown, c_null, c_aes_ctr };
68 typedef enum cipher_type_enum cipher_type_t;
70 struct cipher_struct {
72 u_int16_t key_length_;
77 typedef struct cipher_struct cipher_t;
79 int cipher_init(cipher_t* c, const char* type);
80 void cipher_close(cipher_t* c);
82 int cipher_encrypt(cipher_t* c, key_derivation_t* kd, key_derivation_dir_t dir, plain_packet_t* in, encrypted_packet_t* out, seq_nr_t seq_nr, sender_id_t sender_id, mux_t mux);
83 int cipher_decrypt(cipher_t* c, key_derivation_t* kd, key_derivation_dir_t dir, encrypted_packet_t* in, plain_packet_t* out);
85 int32_t cipher_null_crypt(u_int8_t* in, u_int32_t ilen, u_int8_t* out, u_int32_t olen);
90 #define C_AESCTR_DEFAULT_KEY_LENGTH 128
91 #define C_AESCTR_CTR_LENGTH 16
92 #define C_AESCTR_SALT_LENGTH 14
94 union __attribute__((__packed__)) cipher_aesctr_ctr_union {
95 u_int8_t buf_[C_AESCTR_CTR_LENGTH];
96 struct __attribute__ ((__packed__)) {
97 u_int8_t buf_[C_AESCTR_SALT_LENGTH];
100 struct __attribute__((__packed__)) {
101 u_int8_t fill_[C_AESCTR_SALT_LENGTH - sizeof(mux_t) - sizeof(sender_id_t) - 2*sizeof(u_int8_t) - sizeof(seq_nr_t)];
103 sender_id_t sender_id_;
109 typedef union cipher_aesctr_ctr_union cipher_aesctr_ctr_t;
111 struct cipher_aesctr_param_struct {
112 #if defined(USE_SSL_CRYPTO)
114 u_int8_t ecount_buf_[AES_BLOCK_SIZE];
115 #elif defined(USE_NETTLE)
117 #else // USE_GCRYPT is the default
118 gcry_cipher_hd_t handle_;
120 cipher_aesctr_ctr_t ctr_;
122 typedef struct cipher_aesctr_param_struct cipher_aesctr_param_t;
124 int cipher_aesctr_init(cipher_t* c);
125 void cipher_aesctr_close(cipher_t* c);
126 int cipher_aesctr_calc_ctr(cipher_t* c, key_derivation_t* kd, key_derivation_dir_t dir, seq_nr_t seq_nr, sender_id_t sender_id, mux_t mux);
127 int32_t cipher_aesctr_crypt(cipher_t* c, key_derivation_t* kd, key_derivation_dir_t dir, u_int8_t* in, u_int32_t ilen, u_int8_t* out, u_int32_t olen, seq_nr_t seq_nr, sender_id_t sender_id, mux_t mux);