/* * Copyright (C) 2005-2010 Martin Willi * Copyright (C) 2010 revosec AG * Copyright (C) 2005 Jan Hutter * Hochschule fuer Technik Rapperswil * * This program is free software; you can redistribute it and/or modify it * under the terms of the GNU General Public License as published by the * Free Software Foundation; either version 2 of the License, or (at your * option) any later version. See . * * This program is distributed in the hope that it will be useful, but * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License * for more details. */ #include #include "ke_payload.h" #include typedef struct private_ke_payload_t private_ke_payload_t; /** * Private data of an ke_payload_t object. */ struct private_ke_payload_t { /** * Public ke_payload_t interface. */ ke_payload_t public; /** * Next payload type. */ u_int8_t next_payload; /** * Critical flag. */ bool critical; /** * Reserved bits */ bool reserved_bit[7]; /** * Reserved bytes */ u_int8_t reserved_byte[2]; /** * Length of this payload. */ u_int16_t payload_length; /** * DH Group Number. */ u_int16_t dh_group_number; /** * Key Exchange Data of this KE payload. */ chunk_t key_exchange_data; }; /** * Encoding rules to parse or generate a IKEv2-KE Payload. * * The defined offsets are the positions in a object of type * private_ke_payload_t. */ encoding_rule_t ke_payload_encodings[] = { /* 1 Byte next payload type, stored in the field next_payload */ { U_INT_8, offsetof(private_ke_payload_t, next_payload) }, /* the critical bit */ { FLAG, offsetof(private_ke_payload_t, critical) }, /* 7 Bit reserved bits */ { RESERVED_BIT, offsetof(private_ke_payload_t, reserved_bit[0]) }, { RESERVED_BIT, offsetof(private_ke_payload_t, reserved_bit[1]) }, { RESERVED_BIT, offsetof(private_ke_payload_t, reserved_bit[2]) }, { RESERVED_BIT, offsetof(private_ke_payload_t, reserved_bit[3]) }, { RESERVED_BIT, offsetof(private_ke_payload_t, reserved_bit[4]) }, { RESERVED_BIT, offsetof(private_ke_payload_t, reserved_bit[5]) }, { RESERVED_BIT, offsetof(private_ke_payload_t, reserved_bit[6]) }, /* Length of the whole payload*/ { PAYLOAD_LENGTH, offsetof(private_ke_payload_t, payload_length) }, /* DH Group number as 16 bit field*/ { U_INT_16, offsetof(private_ke_payload_t, dh_group_number) }, /* 2 reserved bytes */ { RESERVED_BYTE, offsetof(private_ke_payload_t, reserved_byte[0])}, { RESERVED_BYTE, offsetof(private_ke_payload_t, reserved_byte[1])}, /* Key Exchange Data is from variable size */ { KEY_EXCHANGE_DATA, offsetof(private_ke_payload_t, key_exchange_data)} }; /* 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ ! Next Payload !C! RESERVED ! Payload Length ! +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ ! DH Group # ! RESERVED ! +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ ! ! ~ Key Exchange Data ~ ! ! +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ */ METHOD(payload_t, verify, status_t, private_ke_payload_t *this) { return SUCCESS; } METHOD(payload_t, get_encoding_rules, void, private_ke_payload_t *this, encoding_rule_t **rules, size_t *rule_count) { *rules = ke_payload_encodings; *rule_count = countof(ke_payload_encodings); } METHOD(payload_t, get_type, payload_type_t, private_ke_payload_t *this) { return KEY_EXCHANGE; } METHOD(payload_t, get_next_type, payload_type_t, private_ke_payload_t *this) { return this->next_payload; } METHOD(payload_t, set_next_type, void, private_ke_payload_t *this,payload_type_t type) { this->next_payload = type; } METHOD(payload_t, get_length, size_t, private_ke_payload_t *this) { return this->payload_length; } METHOD(ke_payload_t, get_key_exchange_data, chunk_t, private_ke_payload_t *this) { return this->key_exchange_data; } METHOD(ke_payload_t, get_dh_group_number, diffie_hellman_group_t, private_ke_payload_t *this) { return this->dh_group_number; } METHOD2(payload_t, ke_payload_t, destroy, void, private_ke_payload_t *this) { free(this->key_exchange_data.ptr); free(this); } /* * Described in header */ ke_payload_t *ke_payload_create() { private_ke_payload_t *this; INIT(this, .public = { .payload_interface = { .verify = _verify, .get_encoding_rules = _get_encoding_rules, .get_length = _get_length, .get_next_type = _get_next_type, .set_next_type = _set_next_type, .get_type = _get_type, .destroy = _destroy, }, .get_key_exchange_data = _get_key_exchange_data, .get_dh_group_number = _get_dh_group_number, .destroy = _destroy, }, .next_payload = NO_PAYLOAD, .payload_length = KE_PAYLOAD_HEADER_LENGTH, .dh_group_number = MODP_NONE, ); return &this->public; } /* * Described in header */ ke_payload_t *ke_payload_create_from_diffie_hellman(diffie_hellman_t *dh) { private_ke_payload_t *this = (private_ke_payload_t*)ke_payload_create(); dh->get_my_public_value(dh, &this->key_exchange_data); this->dh_group_number = dh->get_dh_group(dh); this->payload_length = this->key_exchange_data.len + KE_PAYLOAD_HEADER_LENGTH; return &this->public; }