Child Security Association entry. More...

#include <ike.h>

Data Fields
IkeChildSaState	state
	Child SA state. More...

IkeContext *	context
	IKE context. More...

IkeSaEntry *	sa
	IKE SA entry. More...

IkeChildSaEntry *	oldChildSa
	Old Child SA. More...

IpAddr	remoteIpAddr
	IP address of the peer. More...

IpsecMode	mode
	IPsec mode (tunnel or transport) More...

IpsecProtocol	protocol
	Security protocol (AH or ESP) More...

bool_t	initiator
	Initiator of the CREATE_CHILD_SA exchange. More...

systime_t	lifetimeStart

uint8_t	initiatorNonce [IKE_MAX_NONCE_SIZE]
	Initiator nonce. More...

size_t	initiatorNonceLen
	Length of the initiator nonce. More...

uint8_t	responderNonce [IKE_MAX_NONCE_SIZE]
	Responder nonce. More...

size_t	responderNonceLen
	Length of the responder nonce. More...

uint8_t	localSpi [4]

uint8_t	remoteSpi [4]

uint16_t	encAlgoId
	Encryption algorithm. More...

uint16_t	authAlgoId
	Integrity algorithm. More...

uint16_t	esn
	Extended sequence numbers. More...

uint8_t	keyMaterial [IKE_MAX_CHILD_SA_KEY_MAT_LEN]
	Keying material. More...

const uint8_t *	skai
	Integrity protection key (initiator) More...

const uint8_t *	skar
	Integrity protection key (responder) More...

const uint8_t *	skei
	Encryption key (initiator) More...

const uint8_t *	sker
	Encryption key (responder) More...

CipherMode	cipherMode
	Cipher mode of operation. More...

const CipherAlgo *	cipherAlgo
	Cipher algorithm. More...

const HashAlgo *	authHashAlgo
	Hash algorithm for HMAC-based integrity calculations. More...

const CipherAlgo *	authCipherAlgo
	Cipher algorithm for CMAC-based integrity calculations. More...

size_t	encKeyLen
	Length of the encryption key, in bytes. More...

size_t	authKeyLen
	Length of the integrity protection key, in bytes. More...

size_t	saltLen
	Length of the salt, in bytes. More...

size_t	ivLen
	Length of the initialization vector, in bytes. More...

size_t	icvLen
	Length of the ICV tag, in bytes. More...

uint8_t	iv [8]
	Initialization vector. More...

IpsecPacketInfo	packetInfo

IpsecSelector	selector

bool_t	rekeyRequest
	Child SA rekey request. More...

bool_t	deleteRequest
	Child SA delete request. More...

bool_t	deleteReceived

int_t	inboundSa
	Inbound SAD entry. More...

int_t	outboundSa
	Outbound SAD entry. More...

Detailed Description

Child Security Association entry.

Definition at line 1729 of file ike.h.

Field Documentation

◆ authAlgoId

uint16_t authAlgoId

Integrity algorithm.

Definition at line 1747 of file ike.h.

◆ authCipherAlgo

const CipherAlgo* authCipherAlgo

Cipher algorithm for CMAC-based integrity calculations.

Definition at line 1759 of file ike.h.

◆ authHashAlgo

const HashAlgo* authHashAlgo

Hash algorithm for HMAC-based integrity calculations.

Definition at line 1758 of file ike.h.

◆ authKeyLen

size_t authKeyLen

Length of the integrity protection key, in bytes.

Definition at line 1761 of file ike.h.

◆ cipherAlgo

const CipherAlgo* cipherAlgo

Cipher algorithm.

Definition at line 1757 of file ike.h.

◆ cipherMode

CipherMode cipherMode

Cipher mode of operation.

Definition at line 1756 of file ike.h.

◆ context

IkeContext* context

IKE context.

Definition at line 1732 of file ike.h.

◆ deleteReceived

bool_t deleteReceived

Definition at line 1772 of file ike.h.

◆ deleteRequest

bool_t deleteRequest

Child SA delete request.

Definition at line 1771 of file ike.h.

◆ encAlgoId

uint16_t encAlgoId

Encryption algorithm.

Definition at line 1746 of file ike.h.

◆ encKeyLen

size_t encKeyLen

Length of the encryption key, in bytes.

Definition at line 1760 of file ike.h.

◆ esn

uint16_t esn

Extended sequence numbers.

Definition at line 1748 of file ike.h.

◆ icvLen

size_t icvLen

Length of the ICV tag, in bytes.

Definition at line 1764 of file ike.h.

◆ inboundSa

int_t inboundSa

Inbound SAD entry.

Definition at line 1774 of file ike.h.

◆ initiator

bool_t initiator

Initiator of the CREATE_CHILD_SA exchange.

Definition at line 1738 of file ike.h.

◆ initiatorNonce

uint8_t initiatorNonce[IKE_MAX_NONCE_SIZE]

Initiator nonce.

Definition at line 1740 of file ike.h.

◆ initiatorNonceLen

size_t initiatorNonceLen

Length of the initiator nonce.

Definition at line 1741 of file ike.h.

◆ iv

uint8_t iv[8]

Initialization vector.

Definition at line 1765 of file ike.h.

◆ ivLen

size_t ivLen

Length of the initialization vector, in bytes.

Definition at line 1763 of file ike.h.

◆ keyMaterial

uint8_t keyMaterial[IKE_MAX_CHILD_SA_KEY_MAT_LEN]

Keying material.

Definition at line 1750 of file ike.h.

◆ lifetimeStart

systime_t lifetimeStart

Definition at line 1739 of file ike.h.

◆ localSpi

uint8_t localSpi[4]

Definition at line 1744 of file ike.h.

◆ mode

IpsecMode mode

IPsec mode (tunnel or transport)

Definition at line 1736 of file ike.h.

◆ oldChildSa

IkeChildSaEntry* oldChildSa

Old Child SA.

Definition at line 1734 of file ike.h.

◆ outboundSa

int_t outboundSa

Outbound SAD entry.

Definition at line 1775 of file ike.h.

◆ packetInfo

IpsecPacketInfo packetInfo

Definition at line 1767 of file ike.h.

◆ protocol

IpsecProtocol protocol

Security protocol (AH or ESP)

Definition at line 1737 of file ike.h.

◆ rekeyRequest

bool_t rekeyRequest

Child SA rekey request.

Definition at line 1770 of file ike.h.

◆ remoteIpAddr

IpAddr remoteIpAddr

IP address of the peer.

Definition at line 1735 of file ike.h.

◆ remoteSpi

uint8_t remoteSpi[4]

Definition at line 1745 of file ike.h.

◆ responderNonce

uint8_t responderNonce[IKE_MAX_NONCE_SIZE]

Responder nonce.

Definition at line 1742 of file ike.h.

◆ responderNonceLen

size_t responderNonceLen

Length of the responder nonce.

Definition at line 1743 of file ike.h.

◆ sa

IkeSaEntry* sa

IKE SA entry.

Definition at line 1733 of file ike.h.

◆ saltLen

size_t saltLen

Length of the salt, in bytes.

Definition at line 1762 of file ike.h.

◆ selector

IpsecSelector selector

Definition at line 1768 of file ike.h.

◆ skai

const uint8_t* skai

Integrity protection key (initiator)

Definition at line 1751 of file ike.h.

◆ skar

const uint8_t* skar

Integrity protection key (responder)

Definition at line 1752 of file ike.h.

◆ skei

const uint8_t* skei

Encryption key (initiator)

Definition at line 1753 of file ike.h.

◆ sker

const uint8_t* sker

Encryption key (responder)

Definition at line 1754 of file ike.h.

◆ state

IkeChildSaState state

Child SA state.

Definition at line 1731 of file ike.h.

The documentation for this struct was generated from the following file:

cyclone_ipsec/ike/ike.h

Data Fields