crypto/caam/pdb.h

1 /* SPDX-License-Identifier: GPL-2.0 */
5  * Copyright 2008-2016 Freescale Semiconductor, Inc.
14  * PDB- IPSec ESP Header Modification Options
19  * Encap and Decap - Decrement TTL (Hop Limit) - Based on the value of the
27  * Decap - DiffServ Copy - Copy the IPv4 TOS or IPv6 Traffic Class byte
32  * Encap- Copy DF bit -if an IPv4 tunnel mode outer IP header is coming from
47  * PDB - IPSec ESP Encap/Decap Options
50 #define PDBOPTS_ESP_ARS32	0x40 /* 32-entry antireplay window */
51 #define PDBOPTS_ESP_ARS128	0x80 /* 128-entry antireplay window */
52 #define PDBOPTS_ESP_ARS64	0xc0 /* 64-entry antireplay window */
61 #define PDBOPTS_ESP_TUNNEL	0x01 /* tunnel mode next-header byte */
64 #define PDBOPTS_ESP_UPDATE_CSUM 0x80 /* encap-update ip header checksum */
65 #define PDBOPTS_ESP_VERIFY_CSUM 0x20 /* decap-validate ip header checksum */
72  * ipsec_encap_cbc - PDB part for IPsec CBC encapsulation
73  * @iv: 16-byte array initialization vector
80  * ipsec_encap_ctr - PDB part for IPsec CTR encapsulation
81  * @ctr_nonce: 4-byte array nonce
92  * ipsec_encap_ccm - PDB part for IPsec CCM encapsulation
93  * @salt: 3-byte array salt (lower 24 bits)
94  * @ccm_opt: CCM algorithm options - MSB-LSB description:
95  *  b0_flags (8b) - CCM B0; use 0x5B for 8-byte ICV, 0x6B for 12-byte ICV,
96  *    0x7B for 16-byte ICV (cf. RFC4309, RFC3610)
97  *  ctr_flags (8b) - counter flags; constant equal to 0x3
98  *  ctr_initial (16b) - initial count constant
108  * ipsec_encap_gcm - PDB part for IPsec GCM encapsulation
109  * @salt: 3-byte array salt (lower 24 bits)
120  * ipsec_encap_pdb - PDB for IPsec encapsulation
121  * @options: MSB-LSB description
122  *  hmo (header manipulation options) - 4b
123  *  reserved - 4b
124  *  next header - 8b
125  *  next header offset - 8b
126  *  option flags (depend on selected algorithm) - 8b
129  * @spi: IPsec SPI (Security Parameters Index)
131  *  reserved - 16b
132  *  Opt. IP Hdr Len - 16b
145 	u32 spi;  member
151  * ipsec_decap_cbc - PDB part for IPsec CBC decapsulation
159  * ipsec_decap_ctr - PDB part for IPsec CTR decapsulation
160  * @ctr_nonce: 4-byte array nonce
169  * ipsec_decap_ccm - PDB part for IPsec CCM decapsulation
170  * @salt: 3-byte salt (lower 24 bits)
171  * @ccm_opt: CCM algorithm options - MSB-LSB description:
172  *  b0_flags (8b) - CCM B0; use 0x5B for 8-byte ICV, 0x6B for 12-byte ICV,
173  *    0x7B for 16-byte ICV (cf. RFC4309, RFC3610)
174  *  ctr_flags (8b) - counter flags; constant equal to 0x3
175  *  ctr_initial (16b) - initial count constant
183  * ipsec_decap_gcm - PDB part for IPsec GCN decapsulation
184  * @salt: 4-byte salt
193  * ipsec_decap_pdb - PDB for IPsec decapsulation
194  * @options: MSB-LSB description
195  *  hmo (header manipulation options) - 4b
196  *  IP header length - 12b
197  *  next header offset - 8b
198  *  option flags (depend on selected algorithm) - 8b
201  * @anti_replay: Anti-replay window; size depends on ARS (option flags)
433  * Two of these exist: DSA-SIGN, and DSA-VERIFY. They are similar
501  * @sgf: scatter-gather field
520  * RSA Decrypt PDB - Private Key Form #1
521  * @sgf: scatter-gather field
538  * RSA Decrypt PDB - Private Key Form #2
539  * @sgf     : scatter-gather field
549  * @p_q_len : length in bytes of first two prime factors of the RSA modulus n
566  * RSA Decrypt PDB - Private Key Form #3
569  * @sgf     : scatter-gather field
581  * @p_q_len : length in bytes of first two prime factors of the RSA modulus n