mirror of
https://git.proxmox.com/git/mirror_corosync
synced 2025-10-10 13:19:03 +00:00
737de4dbd4
The new network packet will look: struct crypto_config_header * that provides info on crypto/hashing hash_block[size based on hashing function] (if hash is selected) salt[SALT_SIZE] (if crypto is selected) ...data... and we kill the concept of crypto_security_header completely since values are now dynamic for hash_block_size. the reason why hash_block needs to be there, is because we do hash salt in case both hashing and crypto are selected. the crypto_config_header is totally transparent to totem and to any underlaying crypto functions. as we go cleaning, also use HASH_BLOCK_SIZE to generate hash_block. the input buffer and output buffer size are dependent on the algo used to hash. we can now determine the real header size and adjust net_mtu properly at startup. This will allow in future to use any algorithm since size is dynamic. some part of the code still needs some polishing to make it more readable (specially the mapping of pointers into the packet is still a bit obscure). Signed-off-by: Fabio M. Di Nitto <fdinitto@redhat.com> Reviewed-by: Jan Friesse <jfriesse@redhat.com>
78 lines
2.7 KiB
C
78 lines
2.7 KiB
C
/*
|
|
* Copyright (c) 2006-2012 Red Hat, Inc.
|
|
*
|
|
* All rights reserved.
|
|
*
|
|
* Author: Steven Dake (sdake@redhat.com)
|
|
* Christine Caulfield (ccaulfie@redhat.com)
|
|
* Jan Friesse (jfriesse@redhat.com)
|
|
*
|
|
* This software licensed under BSD license, the text of which follows:
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions are met:
|
|
*
|
|
* - Redistributions of source code must retain the above copyright notice,
|
|
* this list of conditions and the following disclaimer.
|
|
* - Redistributions in binary form must reproduce the above copyright notice,
|
|
* this list of conditions and the following disclaimer in the documentation
|
|
* and/or other materials provided with the distribution.
|
|
* - Neither the name of the MontaVista Software, Inc. nor the names of its
|
|
* contributors may be used to endorse or promote products derived from this
|
|
* software without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
|
* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
|
|
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
|
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
|
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
|
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
|
|
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
|
|
* THE POSSIBILITY OF SUCH DAMAGE.
|
|
*/
|
|
#ifndef TOTEMCRYPTO_H_DEFINED
|
|
#define TOTEMCRYPTO_H_DEFINED
|
|
|
|
#include <sys/types.h>
|
|
|
|
struct crypto_instance;
|
|
|
|
extern size_t crypto_sec_header_size(
|
|
const char *crypto_cipher_type,
|
|
const char *crypto_hash_type);
|
|
|
|
extern int crypto_authenticate_and_decrypt (
|
|
struct crypto_instance *instance,
|
|
unsigned char *buf,
|
|
int *buf_len);
|
|
|
|
extern int crypto_encrypt_and_sign (
|
|
struct crypto_instance *instance,
|
|
const unsigned char *buf_in,
|
|
const size_t buf_in_len,
|
|
unsigned char *buf_out,
|
|
size_t *buf_out_len);
|
|
|
|
extern struct crypto_instance *crypto_init(
|
|
const unsigned char *private_key,
|
|
unsigned int private_key_len,
|
|
const char *crypto_cipher_type,
|
|
const char *crypto_hash_type,
|
|
void (*log_printf_func) (
|
|
int level,
|
|
int subsys,
|
|
const char *function,
|
|
const char *file,
|
|
int line,
|
|
const char *format,
|
|
...)__attribute__((format(printf, 6, 7))),
|
|
int log_level_security,
|
|
int log_level_notice,
|
|
int log_level_error,
|
|
int log_subsys_id);
|
|
|
|
#endif /* TOTEMCRYPTO_H_DEFINED */
|