From 5c131a016b61f9f7b6d4249a0d6a84d0cc9f1c66 Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Fri, 9 Jun 2006 07:31:30 +0000 Subject: specifying keysize in bits, as it is required in IKEv2 added generic kernel SA algorithm handling, which brings us: aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs --- src/charon/threads/kernel_interface.h | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) (limited to 'src/charon/threads/kernel_interface.h') diff --git a/src/charon/threads/kernel_interface.h b/src/charon/threads/kernel_interface.h index 6c9a181ed..9d5846f34 100644 --- a/src/charon/threads/kernel_interface.h +++ b/src/charon/threads/kernel_interface.h @@ -26,6 +26,7 @@ #include #include +#include #include typedef struct kernel_interface_t kernel_interface_t; @@ -70,7 +71,9 @@ struct kernel_interface_t { * SPI (via get_spi). In this case, the replace * flag must be set. * This function does install a single SA for a - * single protocol in one direction. + * single protocol in one direction. The kernel-interface + * gets the keys itself from the PRF, as we don't know + * his algorithms and key sizes. * * @param this calling object * @param src source address for this SA @@ -81,9 +84,8 @@ struct kernel_interface_t { * @param expire_soft lifetime in seconds before rekeying * @param expire_hard lieftime in seconds before delete * @param enc_alg Algorithm to use for encryption (ESP only) - * @param enc_key Key to use for encryption * @param int_alg Algorithm to use for integrity protection - * @param int_key Key for integrity protection + * @param prf_plus PRF to derive keys * @param replace Should an already installed SA be updated? * @return * - SUCCESS @@ -96,10 +98,9 @@ struct kernel_interface_t { u_int32_t reqid, u_int64_t expire_soft, u_int64_t expire_hard, - encryption_algorithm_t enc_alg, - chunk_t enc_key, - integrity_algorithm_t int_alg, - chunk_t int_key, + algorithm_t *enc_alg, + algorithm_t *int_alg, + prf_plus_t *prf_plus, bool replace); /** * @brief Delete a previusly installed SA from the SAD. -- cgit v1.2.3