/*	$NetBSD: algorithm.h,v 1.8 2025/03/08 16:39:08 christos Exp $	*/

/* Id: algorithm.h,v 1.10 2005/04/09 16:25:23 manubsd Exp */

/*
 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
 * All rights reserved.
 * 
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. Neither the name of the project nor the names of its contributors
 *    may be used to endorse or promote products derived from this software
 *    without specific prior written permission.
 * 
 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 */

#ifndef _ALGORITHM_H
#define _ALGORITHM_H

#include <gnuc.h>

/* algorithm class */
enum {
	algclass_ipsec_enc,
	algclass_ipsec_auth,
	algclass_ipsec_comp,
	algclass_isakmp_enc,
	algclass_isakmp_hash,
	algclass_isakmp_dh,
	algclass_isakmp_ameth,	/* authentication method. */
#define MAXALGCLASS	7
};

#define ALG_DEFAULT_KEYLEN	64

#define ALGTYPE_NOTHING		0

/* algorithm type */
enum algtype {
	algtype_nothing = 0,

	/* enc */
	algtype_des_iv64,
	algtype_des,
	algtype_3des,
	algtype_rc5,
	algtype_idea,
	algtype_cast128,
	algtype_blowfish,
	algtype_3idea,
	algtype_des_iv32,
	algtype_rc4,
	algtype_null_enc,
	algtype_aes,
	algtype_aesgcm16,
	algtype_twofish,
	algtype_camellia,

	/* ipsec auth */
	algtype_hmac_md5,
	algtype_hmac_sha1,
	algtype_des_mac,
	algtype_kpdk,
	algtype_non_auth,
	algtype_hmac_sha2_256,
	algtype_hmac_sha2_384,
	algtype_hmac_sha2_512,

	/* ipcomp */
	algtype_oui,
	algtype_deflate,
	algtype_lzs,

	/* hash */
	algtype_md5,
	algtype_sha1,
	algtype_tiger,
	algtype_sha2_256,
	algtype_sha2_384,
	algtype_sha2_512,

	/* dh_group */
	algtype_modp768,
	algtype_modp1024,
	algtype_ec2n155,
	algtype_ec2n185,
	algtype_modp1536,
	algtype_modp2048,
	algtype_modp3072,
	algtype_modp4096,
	algtype_modp6144,
	algtype_modp8192,

	/* authentication method. */
	algtype_psk,
	algtype_dsssig,
	algtype_rsasig,
	algtype_rsaenc,
	algtype_rsarev,
	algtype_gssapikrb,
#ifdef ENABLE_HYBRID
	algtype_hybrid_rsa_s,
	algtype_hybrid_dss_s,
	algtype_hybrid_rsa_c,
	algtype_hybrid_dss_c,
	algtype_xauth_psk_s,
	algtype_xauth_psk_c,
	algtype_xauth_rsa_s,
	algtype_xauth_rsa_c,
#endif
};

struct hmac_algorithm {
	const char *name;
	int type;
	int doi;
	caddr_t (*init)(vchar_t *);
	void (*update)(caddr_t, vchar_t *);
	vchar_t *(*final)(caddr_t);
	int (*hashlen)(void);
	vchar_t *(*one)(vchar_t *, vchar_t *);
};

struct hash_algorithm {
	const char *name;
	int type;
	int doi;
	caddr_t (*init)(void);
	void (*update)(caddr_t, vchar_t *);
	vchar_t *(*final)(caddr_t);
	int (*hashlen)(void);
	vchar_t *(*one)(vchar_t *);
};

struct enc_algorithm {
	const char *name;
	int type;
	int doi;
	int blocklen;
	vchar_t *(*encrypt)(vchar_t *, vchar_t *, vchar_t *);
	vchar_t *(*decrypt)(vchar_t *, vchar_t *, vchar_t *);
	int (*weakkey)(vchar_t *);
	int (*keylen)(int);
};

/* dh group */
struct dh_algorithm {
	const char *name;
	int type;
	int doi;
	struct dhgroup *dhgroup;
};

/* ipcomp, auth meth, dh group */
struct misc_algorithm {
	const char *name;
	int type;
	int doi;
};

extern int alg_oakley_hashdef_ok(int);
extern int alg_oakley_hashdef_doi(int);
extern int alg_oakley_hashdef_hashlen(int);
extern vchar_t *alg_oakley_hashdef_one(int, vchar_t *);

extern int alg_oakley_hmacdef_doi(int);
extern vchar_t *alg_oakley_hmacdef_one(int, vchar_t *, vchar_t *);

extern int alg_oakley_encdef_ok(int);
extern int alg_oakley_encdef_doi(int);
extern int alg_oakley_encdef_keylen(int, int);
extern int alg_oakley_encdef_blocklen(int);
extern vchar_t *alg_oakley_encdef_decrypt(int, vchar_t *, vchar_t *, vchar_t *);
extern vchar_t *alg_oakley_encdef_encrypt(int, vchar_t *, vchar_t *, vchar_t *);

extern int alg_ipsec_encdef_doi(int);
extern int alg_ipsec_encdef_keylen(int, int);

extern int alg_ipsec_hmacdef_doi(int);
extern int alg_ipsec_hmacdef_hashlen(int);

extern int alg_ipsec_compdef_doi(int);

extern int alg_oakley_dhdef_doi(int);
extern int alg_oakley_dhdef_ok(int);
extern struct dhgroup *alg_oakley_dhdef_group(int);

extern int alg_oakley_authdef_doi(int);

extern int default_keylen(int, int);
extern int check_keylen(int, int, int);
extern int algtype2doi(int, int);
extern int algclass2doi(int);

extern const char *alg_oakley_encdef_name(int);
extern const char *alg_oakley_hashdef_name(int);
extern const char *alg_oakley_dhdef_name(int);
extern const char *alg_oakley_authdef_name(int);

#endif /* _ALGORITHM_H */

.