1 /*
2  * EAP server/peer: EAP-PAX shared routines
3  * Copyright (c) 2005-2007, Jouni Malinen <j@w1.fi>
4  *
5  * This software may be distributed under the terms of the BSD license.
6  * See README for more details.
7  */
8 
9 #ifndef EAP_PAX_COMMON_H
10 #define EAP_PAX_COMMON_H
11 
12 #ifdef _MSC_VER
13 #pragma pack(push, 1)
14 #endif /* _MSC_VER */
15 
16 struct eap_pax_hdr {
17 	u8 op_code;
18 	u8 flags;
19 	u8 mac_id;
20 	u8 dh_group_id;
21 	u8 public_key_id;
22 	/* Followed by variable length payload and ICV */
23 } STRUCT_PACKED;
24 
25 #ifdef _MSC_VER
26 #pragma pack(pop)
27 #endif /* _MSC_VER */
28 
29 
30 /* op_code: */
31 enum {
32 	EAP_PAX_OP_STD_1 = 0x01,
33 	EAP_PAX_OP_STD_2 = 0x02,
34 	EAP_PAX_OP_STD_3 = 0x03,
35 	EAP_PAX_OP_SEC_1 = 0x11,
36 	EAP_PAX_OP_SEC_2 = 0x12,
37 	EAP_PAX_OP_SEC_3 = 0x13,
38 	EAP_PAX_OP_SEC_4 = 0x14,
39 	EAP_PAX_OP_SEC_5 = 0x15,
40 	EAP_PAX_OP_ACK = 0x21
41 };
42 
43 /* flags: */
44 #define EAP_PAX_FLAGS_MF			0x01
45 #define EAP_PAX_FLAGS_CE			0x02
46 #define EAP_PAX_FLAGS_AI			0x04
47 
48 /* mac_id: */
49 #define EAP_PAX_MAC_HMAC_SHA1_128		0x01
50 #define EAP_PAX_HMAC_SHA256_128			0x02
51 
52 /* dh_group_id: */
53 #define EAP_PAX_DH_GROUP_NONE			0x00
54 #define EAP_PAX_DH_GROUP_2048_MODP		0x01
55 #define EAP_PAX_DH_GROUP_3072_MODP		0x02
56 #define EAP_PAX_DH_GROUP_NIST_ECC_P_256		0x03
57 
58 /* public_key_id: */
59 #define EAP_PAX_PUBLIC_KEY_NONE			0x00
60 #define EAP_PAX_PUBLIC_KEY_RSAES_OAEP		0x01
61 #define EAP_PAX_PUBLIC_KEY_RSA_PKCS1_V1_5	0x02
62 #define EAP_PAX_PUBLIC_KEY_EL_GAMAL_NIST_ECC	0x03
63 
64 /* ADE type: */
65 #define EAP_PAX_ADE_VENDOR_SPECIFIC		0x01
66 #define EAP_PAX_ADE_CLIENT_CHANNEL_BINDING	0x02
67 #define EAP_PAX_ADE_SERVER_CHANNEL_BINDING	0x03
68 
69 
70 #define EAP_PAX_RAND_LEN 32
71 #define EAP_PAX_MAC_LEN 16
72 #define EAP_PAX_ICV_LEN 16
73 #define EAP_PAX_AK_LEN 16
74 #define EAP_PAX_MK_LEN 16
75 #define EAP_PAX_CK_LEN 16
76 #define EAP_PAX_ICK_LEN 16
77 #define EAP_PAX_MID_LEN 16
78 
79 
80 int eap_pax_kdf(u8 mac_id, const u8 *key, size_t key_len,
81 		const char *identifier,
82 		const u8 *entropy, size_t entropy_len,
83 		size_t output_len, u8 *output);
84 int eap_pax_mac(u8 mac_id, const u8 *key, size_t key_len,
85 		const u8 *data1, size_t data1_len,
86 		const u8 *data2, size_t data2_len,
87 		const u8 *data3, size_t data3_len,
88 		u8 *mac);
89 int eap_pax_initial_key_derivation(u8 mac_id, const u8 *ak, const u8 *e,
90 				   u8 *mk, u8 *ck, u8 *ick, u8 *mid);
91 
92 #endif /* EAP_PAX_COMMON_H */
93