2 * EAP server/peer: EAP-PAX shared routines
3 * Copyright (c) 2005-2007, Jouni Malinen <j@w1.fi>
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
9 * Alternatively, this software may be distributed under the terms of BSD
12 * See README and COPYING for more details.
15 #ifndef EAP_PAX_COMMON_H
16 #define EAP_PAX_COMMON_H
28 /* Followed by variable length payload and ICV */
38 EAP_PAX_OP_STD_1 = 0x01,
39 EAP_PAX_OP_STD_2 = 0x02,
40 EAP_PAX_OP_STD_3 = 0x03,
41 EAP_PAX_OP_SEC_1 = 0x11,
42 EAP_PAX_OP_SEC_2 = 0x12,
43 EAP_PAX_OP_SEC_3 = 0x13,
44 EAP_PAX_OP_SEC_4 = 0x14,
45 EAP_PAX_OP_SEC_5 = 0x15,
50 #define EAP_PAX_FLAGS_MF 0x01
51 #define EAP_PAX_FLAGS_CE 0x02
52 #define EAP_PAX_FLAGS_AI 0x04
55 #define EAP_PAX_MAC_HMAC_SHA1_128 0x01
56 #define EAP_PAX_HMAC_SHA256_128 0x02
59 #define EAP_PAX_DH_GROUP_NONE 0x00
60 #define EAP_PAX_DH_GROUP_2048_MODP 0x01
61 #define EAP_PAX_DH_GROUP_3072_MODP 0x02
62 #define EAP_PAX_DH_GROUP_NIST_ECC_P_256 0x03
65 #define EAP_PAX_PUBLIC_KEY_NONE 0x00
66 #define EAP_PAX_PUBLIC_KEY_RSAES_OAEP 0x01
67 #define EAP_PAX_PUBLIC_KEY_RSA_PKCS1_V1_5 0x02
68 #define EAP_PAX_PUBLIC_KEY_EL_GAMAL_NIST_ECC 0x03
71 #define EAP_PAX_ADE_VENDOR_SPECIFIC 0x01
72 #define EAP_PAX_ADE_CLIENT_CHANNEL_BINDING 0x02
73 #define EAP_PAX_ADE_SERVER_CHANNEL_BINDING 0x03
76 #define EAP_PAX_RAND_LEN 32
77 #define EAP_PAX_MAC_LEN 16
78 #define EAP_PAX_ICV_LEN 16
79 #define EAP_PAX_AK_LEN 16
80 #define EAP_PAX_MK_LEN 16
81 #define EAP_PAX_CK_LEN 16
82 #define EAP_PAX_ICK_LEN 16
85 int eap_pax_kdf(u8 mac_id, const u8 *key, size_t key_len,
86 const char *identifier,
87 const u8 *entropy, size_t entropy_len,
88 size_t output_len, u8 *output);
89 int eap_pax_mac(u8 mac_id, const u8 *key, size_t key_len,
90 const u8 *data1, size_t data1_len,
91 const u8 *data2, size_t data2_len,
92 const u8 *data3, size_t data3_len,
94 int eap_pax_initial_key_derivation(u8 mac_id, const u8 *ak, const u8 *e,
95 u8 *mk, u8 *ck, u8 *ick);
97 #endif /* EAP_PAX_COMMON_H */