eapcrypt.h

source_code 实现无线局域网中的802.1x功能

/**************************************************************************/
/* WIRE1x Version 1.0: A client-side 802.1x implementation                */
/* based on xsupplicant of Open1x for Windows XP, 2000, 98, and Me        */
/*                                                                        */
/* This code is released under both the GPL version 2 and BSD licenses.   */
/* Either license may be used.  The respective licenses are found below.  */
/*                                                                        */
/* Copyright (C) 2004, WIRE Lab, National Tsing Hua Univ., Hsinchu, Taiwan*/
/* All Rights Reserved                                                    */
/**************************************************************************/
/**
 * A client-side 802.1x implementation supporting EAP/TLS
 *
 * This code is released under both the GPL version 2 and BSD licenses.
 * Either license may be used.  The respective licenses are found below.
 *
 * Copyright (C) 2002 Bryan D. Payne & Nick L. Petroni Jr.
 * All Rights Reserved
 *
 * --- GPL Version 2 License ---
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * as published by the Free Software Foundation; either version 2
 * of the License, or (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
 *
 * --- BSD License ---
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions are met:
 *
 *  - Redistributions of source code must retain the above copyright notice,
 *    this list of conditions and the following disclaimer.
 *  - Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *  - All advertising materials mentioning features or use of this software
 *    must display the following acknowledgement:
 *       This product includes software developed by the University of
 *       Maryland at College Park and its contributors.
 *  - Neither the name of the University nor the names of its contributors
 *    may be used to endorse or promote products derived from this software
 *    without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 * POSSIBILITY OF SUCH DAMAGE.
 */

/*******************************************************************
 * EAP Crypto Functions
 * 
 * File: eapcrypt.h
 *
 * Authors: [e-mail], [e-mail]
 *
 * $Id: eapcrypt.h,v 1.9 2003/04/27 03:50:28 chessing Exp $
 * $Date: 2003/04/27 03:50:28 $
 *******************************************************************/


#ifndef _EAP_CRYPT_H
#define _EAP_CRYPT_H


#include <openssl/ssl.h>

/*********** MACRO DEFINITIONS ******************/
#define EAPCRYPT_SESSION_KEY_CONST              "client EAP encryption"
#define EAPCRYPT_SESSION_KEY_CONST_SIZE         21
#define EAPCRYPT_SESSION_KEY_SIZE               128

/*********** STRUCTURE DEFINITIONS **************/
struct packet_data
{
  char *packet;
  int pkt_size;
  int pkt_ptr;
};

/*********** VARIABLES **************************/
extern SSL_CTX *ctx;
extern SSL *ssl;
extern BIO *ssl_in, *ssl_out;

/*********** FUNCTION PROTOTYPES ****************/
/**
 * Initialize eapcrypt by doing all those things that must be done
 * before other functions can be called. If eapcrypt has already
 * been initialized, will return success immediately
 *
 * return -1 on fail 0 on success
 */
int
eapcrypt_init();

int
eapcrypt_key_hmac(u_char *,
                  int,
                  u_char *
                  );

int 
eapcrypt_decrypt_key(u_char *,
		     u_char *,
		     int,
		     u_char *,
		     int);
int
eapcrypt_get_peer_key(u_char *,
		      int
		      );

int eapcrypt_tls_init();

int eapcrypt_tls_shutdown();

int eapcrypt_tls_reset();

int eapcrypt_tls_return_data(u_char *, int *);

int eapcrypt_tls_parse_data(u_char *, int);

int eapcrypt_tls_load_root_certs(char *root, char *rootdir, char *crldir);

int eapcrypt_tls_load_user_cert(char *, char *, char *);

int eapcrypt_state();

int eapcrypt_encrypt(u_char *, int, u_char *,int *);

int eapcrypt_decrypt(u_char *, int, u_char *, int *);

int eapcrypt_set_keyblock(u_char *, int blocksize);

int eapcrypt_PRF(u_char *, int, u_char *, int, u_char *, int, u_char *, int);

//****************************************
//for uint32_t
typedef unsigned int uint32_t;

//for uint8_t
typedef unsigned char uint8_t;
//*****************************************

u_char *eapcrypt_gen_keyblock(u_char *, uint32_t);

#endif /* _EAP_CRYPT_H_ */

/*** EOF ***/