openbmc/phosphor-net-ipmid/auth_algo.hpp

22  * RMCP+ Authenticated Key-Exchange Protocol (RAKP)
24  * RAKP-None is not supported as per the following recommendation
25  * (https://www.us-cert.gov/ncas/alerts/TA13-207A)
26  * ("cipher 0" is an option enabled by default on many IPMI enabled devices that
33     RAKP_HMAC_SHA1,   // Mandatory (implemented, default choice in ipmitool)
58     virtual ~Interface() = default;
59     Interface(const Interface&) = default;
60     Interface& operator=(const Interface&) = default;
61     Interface(Interface&&) = default;
62     Interface& operator=(Interface&&) = default;
71      * @param input message
79         const std::vector<uint8_t>& input) const = 0;
87      * @param input message
95         const std::vector<uint8_t>& input) const = 0;
100      * @param[in] algo - authentication algorithm
152  * RAKP-HMAC-SHA1 specifies the use of RAKP messages for the key exchange
153  * portion of establishing the session, and that HMAC-SHA1 (per [RFC2104]) is
154  * used to create 20-byte Key Exchange Authentication Code fields in RAKP
155  * Message 2 and RAKP Message 3. HMAC-SHA1-96(per [RFC2404]) is used for
156  * generating a 12-byte Integrity Check Value field for RAKP Message 4.
170     ~AlgoSHA1() = default;
171     AlgoSHA1(const AlgoSHA1&) = default;
172     AlgoSHA1& operator=(const AlgoSHA1&) = default;
173     AlgoSHA1(AlgoSHA1&&) = default;
174     AlgoSHA1& operator=(AlgoSHA1&&) = default;
177         const std::vector<uint8_t>& input) const override;
180         const std::vector<uint8_t>& input) const override;
186  * RAKP-HMAC-SHA256 specifies the use of RAKP messages for the key exchange
187  * portion of establishing the session, and that HMAC-SHA256 (per [FIPS 180-2]
188  * and [RFC4634] and is used to create a 32-byte Key Exchange Authentication
189  * Code fields in RAKP Message 2 and RAKP Message 3. HMAC-SHA256-128 (per
190  * [RFC4868]) is used for generating a 16-byte Integrity Check Value field for
204     ~AlgoSHA256() = default;
205     AlgoSHA256(const AlgoSHA256&) = default;
206     AlgoSHA256& operator=(const AlgoSHA256&) = default;
207     AlgoSHA256(AlgoSHA256&&) = default;
208     AlgoSHA256& operator=(AlgoSHA256&&) = default;
211         const std::vector<uint8_t>& input) const override;
214         const std::vector<uint8_t>& input) const override;