1 files changed, 135 insertions, 0 deletions
diff --git a/sys/netkey/keydb.h b/sys/netkey/keydb.h
new file mode 100644
index 0000000..9574a44
--- /dev/null
+++ b/sys/netkey/keydb.h
@@ -0,0 +1,135 @@
+/*
+ * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the project nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software
+ *    without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ * $FreeBSD$
+ */
+
+#ifndef _NETKEY_KEYDB_H_
+#define	_NETKEY_KEYDB_H_
+
+#ifdef KERNEL
+
+/* Security Assocciation Index */
+/* NOTE: Encure to be same address family */
+struct secasindex {
+	struct	sockaddr_storage src;	/* srouce address for SA */
+	struct	sockaddr_storage dst;	/* destination address for SA */
+	u_int16_t	proto;		/* IPPROTO_ESP or IPPROTO_AH */
+	u_int8_t	mode;		/* mode of protocol, see ipsec.h */
+};
+
+/* Security Association Data Base */
+struct secashead {
+	LIST_ENTRY(secashead) chain;
+
+	struct	secasindex saidx;
+	struct	secpolicyindex *owner;	/* Indicate it who owned its SA. */
+					/* If NULL then it's shared SA */
+
+	u_int8_t	state;		/* MATURE or DEAD. */
+	LIST_HEAD(_satree, secasvar) savtree[SADB_SASTATE_MAX+1];
+					/* SA chain */
+					/* The first of this list is newer SA */
+
+	struct	route sa_route;		/* XXX */
+};
+
+/* Security Association */
+struct secasvar {
+	LIST_ENTRY(secasvar) chain;
+
+	int	refcnt;			/* reference count */
+	u_int8_t	state;		/* Status of this Association */
+
+	u_int8_t	alg_auth;	/* Authentication Algorithm Identifier*/
+	u_int8_t	alg_enc;	/* Cipher Algorithm Identifier */
+	u_int32_t	spi;		/* SPI Value, network byte order */
+	u_int32_t	flags;		/* holder for SADB_KEY_FLAGS */
+
+	struct	sadb_key *key_auth;	/* Key for Authentication */
+					/* length has been shifted up to 3. */
+	struct	sadb_key *key_enc;	/* Key for Encryption */
+					/* length has been shifted up to 3. */
+	caddr_t	iv;			/* Initilization Vector */
+	u_int	ivlen;			/* length of IV */
+
+	struct	secreplay *replay;	/* replay prevention */
+	u_int32_t	tick;			/* for lifetime */
+
+	struct	sadb_lifetime *lft_c;	/* CURRENT lifetime, it's constant. */
+	struct	sadb_lifetime *lft_h;	/* HARD lifetime */
+	struct	sadb_lifetime *lft_s;	/* SOFT lifetime */
+
+	u_int32_t	seq;		/* sequence number */
+	pid_t	pid;			/* message's pid */
+
+	struct	secashead *sah;		/* back pointer to the secashead */
+};
+
+/* replay prevention */
+struct secreplay {
+	u_int32_t	count;
+	u_int	wsize;			/* window size, i.g. 4 bytes */
+	u_int32_t	seq;		/* used by sender */
+	u_int32_t	lastseq;	/* used by receiver */
+	caddr_t	bitmap;			/* used by receiver */
+};
+
+/* socket table due to send PF_KEY messages. */
+struct secreg {
+	LIST_ENTRY(secreg) chain;
+
+	struct	socket *so;
+};
+
+#ifndef IPSEC_NONBLOCK_ACQUIRE
+/* acquiring list table. */
+struct secacq {
+	LIST_ENTRY(secacq) chain;
+
+	struct	secasindex saidx;
+
+	u_int32_t	seq;		/* sequence number */
+	u_int32_t	tick;		/* for lifetime */
+	int	count;			/* for lifetime */
+};
+#endif
+
+/* Sensitivity Level Specification */
+/* nothing */
+
+#define	SADB_KILL_INTERVAL	600	/* six seconds */
+
+struct key_cb {
+	int key_count;
+	int any_count;
+};
+
+#endif /* KERNEL */
+
+#endif /* _NETKEY_KEYDB_H_ */