diff options
Diffstat (limited to 'src/libcharon/plugins/eap_tls/tls/tls_crypto.h')
| -rw-r--r-- | src/libcharon/plugins/eap_tls/tls/tls_crypto.h | 188 |
1 files changed, 0 insertions, 188 deletions
diff --git a/src/libcharon/plugins/eap_tls/tls/tls_crypto.h b/src/libcharon/plugins/eap_tls/tls/tls_crypto.h deleted file mode 100644 index 69b8da742..000000000 --- a/src/libcharon/plugins/eap_tls/tls/tls_crypto.h +++ /dev/null @@ -1,188 +0,0 @@ -/* - * Copyright (C) 2010 Martin Willi - * Copyright (C) 2010 revosec AG - * - * This program is free software; you can redistribute it and/or modify it - * under the terms of the GNU General Public License as published by the - * Free Software Foundation; either version 2 of the License, or (at your - * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>. - * - * This program is distributed in the hope that it will be useful, but - * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY - * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License - * for more details. - */ - -/** - * @defgroup tls_crypto tls_crypto - * @{ @ingroup tls - */ - -#ifndef TLS_CRYPTO_H_ -#define TLS_CRYPTO_H_ - -typedef struct tls_crypto_t tls_crypto_t; -typedef enum tls_cipher_suite_t tls_cipher_suite_t; - -#include "tls.h" -#include "tls_prf.h" -#include "tls_protection.h" - -#include <credentials/keys/private_key.h> - -/** - * TLS cipher suites - */ -enum tls_cipher_suite_t { - TLS_NULL_WITH_NULL_NULL = 0x00, - TLS_RSA_WITH_NULL_MD5 = 0x01, - TLS_RSA_WITH_NULL_SHA = 0x02, - TLS_RSA_WITH_NULL_SHA256 = 0x3B, - TLS_RSA_WITH_RC4_128_MD5 = 0x04, - TLS_RSA_WITH_RC4_128_SHA = 0x05, - TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x0A, - TLS_RSA_WITH_AES_128_CBC_SHA = 0x2F, - TLS_RSA_WITH_AES_256_CBC_SHA = 0x35, - TLS_RSA_WITH_AES_128_CBC_SHA256 = 0x3C, - TLS_RSA_WITH_AES_256_CBC_SHA256 = 0x3D, - TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA = 0x0D, - TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA = 0x10, - TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA = 0x13, - TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA = 0x16, - TLS_DH_DSS_WITH_AES_128_CBC_SHA = 0x30, - TLS_DH_RSA_WITH_AES_128_CBC_SHA = 0x31, - TLS_DHE_DSS_WITH_AES_128_CBC_SHA = 0x32, - TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x33, - TLS_DH_DSS_WITH_AES_256_CBC_SHA = 0x36, - TLS_DH_RSA_WITH_AES_256_CBC_SHA = 0x37, - TLS_DHE_DSS_WITH_AES_256_CBC_SHA = 0x38, - TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x39, - TLS_DH_DSS_WITH_AES_128_CBC_SHA256 = 0x3E, - TLS_DH_RSA_WITH_AES_128_CBC_SHA256 = 0x3F, - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 = 0x40, - TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 = 0x67, - TLS_DH_DSS_WITH_AES_256_CBC_SHA256 = 0x68, - TLS_DH_RSA_WITH_AES_256_CBC_SHA256 = 0x69, - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 = 0x6A, - TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 = 0x6B, - TLS_DH_ANON_WITH_RC4_128_MD5 = 0x18, - TLS_DH_ANON_WITH_3DES_EDE_CBC_SHA = 0x1B, - TLS_DH_ANON_WITH_AES_128_CBC_SHA = 0x34, - TLS_DH_ANON_WITH_AES_256_CBC_SHA = 0x3A, - TLS_DH_ANON_WITH_AES_128_CBC_SHA256 = 0x6C, - TLS_DH_ANON_WITH_AES_256_CBC_SHA256 = 0x6D, -}; - -/** - * TLS crypto helper functions. - */ -struct tls_crypto_t { - - /** - * Get a list of supported TLS cipher suites. - * - * @param suites list of suites, points to internal data - * @return number of suites returned - */ - int (*get_cipher_suites)(tls_crypto_t *this, tls_cipher_suite_t **suites); - - /** - * Select and store a cipher suite from a given list of candidates. - * - * @param suites list of candidates to select from - * @param count number of suites - * @return selected suite, 0 if none acceptable - */ - tls_cipher_suite_t (*select_cipher_suite)(tls_crypto_t *this, - tls_cipher_suite_t *suites, int count); - - /** - * Set the protection layer of the TLS stack to control it. - * - * @param protection protection layer to work on - */ - void (*set_protection)(tls_crypto_t *this, tls_protection_t *protection); - - /** - * Store exchanged handshake data, used for cryptographic operations. - * - * @param type handshake sub type - * @param data data to append to handshake buffer - */ - void (*append_handshake)(tls_crypto_t *this, - tls_handshake_type_t type, chunk_t data); - - /** - * Create a signature of the handshake data using a given private key. - * - * @param key private key to use for signature - * @param writer TLS writer to write signature to - * @return TRUE if signature create successfully - */ - bool (*sign_handshake)(tls_crypto_t *this, private_key_t *key, - tls_writer_t *writer); - - /** - * Verify the signature over handshake data using a given public key. - * - * @param key public key to verify signature with - * @param reader TLS reader to read signature from - * @return TRUE if signature valid - */ - bool (*verify_handshake)(tls_crypto_t *this, public_key_t *key, - tls_reader_t *reader); - - /** - * Calculate the data of a TLS finished message. - * - * @param label ASCII label to use for calculation - * @param out buffer to write finished data to - * @return TRUE if calculation successful - */ - bool (*calculate_finished)(tls_crypto_t *this, char *label, char out[12]); - - /** - * Derive the master secret, MAC and encryption keys. - * - * @param premaster premaster secret - * @param client_random random data from client hello - * @param server_random random data from server hello - */ - void (*derive_secrets)(tls_crypto_t *this, chunk_t premaster, - chunk_t client_random, chunk_t server_random); - - /** - * Change the cipher used at protection layer. - * - * @param inbound TRUE to change inbound cipher, FALSE for outbound - */ - void (*change_cipher)(tls_crypto_t *this, bool inbound); - - /** - * Derive the EAP-TLS MSK. - * - * @param client_random random data from client hello - * @param server_random random data from server hello - */ - void (*derive_eap_msk)(tls_crypto_t *this, - chunk_t client_random, chunk_t server_random); - - /** - * Get the MSK to use in EAP-TLS. - * - * @return MSK, points to internal data - */ - chunk_t (*get_eap_msk)(tls_crypto_t *this); - - /** - * Destroy a tls_crypto_t. - */ - void (*destroy)(tls_crypto_t *this); -}; - -/** - * Create a tls_crypto instance. - */ -tls_crypto_t *tls_crypto_create(tls_t *tls); - -#endif /** TLS_CRYPTO_H_ @}*/ |