Child Security Association entry. More...

#include <ike.h>

Data Fields
IkeChildSaState state
Child SA state. More...

IkeContext * context
IKE context. More...

IkeSaEntry * sa
IKE SA entry. More...

IkeChildSaEntry * oldChildSa
Old Child SA. More...

IpAddr remoteIpAddr
IP address of the peer. More...

IpsecMode mode
IPsec mode (tunnel or transport) More...

IpsecProtocol protocol
Security protocol (AH or ESP) More...

bool_t initiator
Initiator of the CREATE_CHILD_SA exchange. More...

systime_t lifetimeStart

uint8_t initiatorNonce [IKE_MAX_NONCE_SIZE]
Initiator nonce. More...

size_t initiatorNonceLen
Length of the initiator nonce. More...

uint8_t responderNonce [IKE_MAX_NONCE_SIZE]
Responder nonce. More...

size_t responderNonceLen
Length of the responder nonce. More...

uint8_t localSpi [4]

uint8_t remoteSpi [4]

uint16_t encAlgoId
Encryption algorithm. More...

uint16_t authAlgoId
Integrity algorithm. More...

uint16_t esn
Extended sequence numbers. More...

uint8_t keyMaterial [IKE_MAX_CHILD_SA_KEY_MAT_LEN]
Keying material. More...

const uint8_t * skai
Integrity protection key (initiator) More...

const uint8_t * skar
Integrity protection key (responder) More...

const uint8_t * skei
Encryption key (initiator) More...

const uint8_t * sker
Encryption key (responder) More...

CipherMode cipherMode
Cipher mode of operation. More...

const CipherAlgo * cipherAlgo
Cipher algorithm. More...

const HashAlgo * authHashAlgo
Hash algorithm for HMAC-based integrity calculations. More...

const CipherAlgo * authCipherAlgo
Cipher algorithm for CMAC-based integrity calculations. More...

size_t encKeyLen
Length of the encryption key, in bytes. More...

size_t authKeyLen
Length of the integrity protection key, in bytes. More...

size_t saltLen
Length of the salt, in bytes. More...

size_t ivLen
Length of the initialization vector, in bytes. More...

size_t icvLen
Length of the ICV tag, in bytes. More...

uint8_t iv [8]
Initialization vector. More...

IpsecPacketInfo packetInfo

IpsecSelector selector

bool_t rekeyRequest
Child SA rekey request. More...

bool_t deleteRequest
Child SA delete request. More...

bool_t deleteReceived

int_t inboundSa
Inbound SAD entry. More...

int_t outboundSa
Outbound SAD entry. More...

Detailed Description

Child Security Association entry.

Definition at line 1853 of file ike.h.

Field Documentation

◆ authAlgoId

uint16_t authAlgoId

Integrity algorithm.

Definition at line 1871 of file ike.h.

◆ authCipherAlgo

const CipherAlgo* authCipherAlgo

Cipher algorithm for CMAC-based integrity calculations.

Definition at line 1883 of file ike.h.

◆ authHashAlgo

const HashAlgo* authHashAlgo

Hash algorithm for HMAC-based integrity calculations.

Definition at line 1882 of file ike.h.

◆ authKeyLen

size_t authKeyLen

Length of the integrity protection key, in bytes.

Definition at line 1885 of file ike.h.

◆ cipherAlgo

const CipherAlgo* cipherAlgo

Cipher algorithm.

Definition at line 1881 of file ike.h.

◆ cipherMode

CipherMode cipherMode

Cipher mode of operation.

Definition at line 1880 of file ike.h.

◆ context

IkeContext* context

IKE context.

Definition at line 1856 of file ike.h.

◆ deleteReceived

bool_t deleteReceived

Definition at line 1896 of file ike.h.

◆ deleteRequest

bool_t deleteRequest

Child SA delete request.

Definition at line 1895 of file ike.h.

◆ encAlgoId

uint16_t encAlgoId

Encryption algorithm.

Definition at line 1870 of file ike.h.

◆ encKeyLen

size_t encKeyLen

Length of the encryption key, in bytes.

Definition at line 1884 of file ike.h.

◆ esn

uint16_t esn

Extended sequence numbers.

Definition at line 1872 of file ike.h.

◆ icvLen

size_t icvLen

Length of the ICV tag, in bytes.

Definition at line 1888 of file ike.h.

◆ inboundSa

int_t inboundSa

Inbound SAD entry.

Definition at line 1898 of file ike.h.

◆ initiator

bool_t initiator

Initiator of the CREATE_CHILD_SA exchange.

Definition at line 1862 of file ike.h.

◆ initiatorNonce

uint8_t initiatorNonce[IKE_MAX_NONCE_SIZE]

Initiator nonce.

Definition at line 1864 of file ike.h.

◆ initiatorNonceLen

size_t initiatorNonceLen

Length of the initiator nonce.

Definition at line 1865 of file ike.h.

◆ iv

uint8_t iv[8]

Initialization vector.

Definition at line 1889 of file ike.h.

◆ ivLen

size_t ivLen

Length of the initialization vector, in bytes.

Definition at line 1887 of file ike.h.

◆ keyMaterial

uint8_t keyMaterial[IKE_MAX_CHILD_SA_KEY_MAT_LEN]

Keying material.

Definition at line 1874 of file ike.h.

◆ lifetimeStart

systime_t lifetimeStart

Definition at line 1863 of file ike.h.

◆ localSpi

uint8_t localSpi[4]

Definition at line 1868 of file ike.h.

◆ mode

IpsecMode mode

IPsec mode (tunnel or transport)

Definition at line 1860 of file ike.h.

◆ oldChildSa

IkeChildSaEntry* oldChildSa

Old Child SA.

Definition at line 1858 of file ike.h.

◆ outboundSa

int_t outboundSa

Outbound SAD entry.

Definition at line 1899 of file ike.h.

◆ packetInfo

IpsecPacketInfo packetInfo

Definition at line 1891 of file ike.h.

◆ protocol

IpsecProtocol protocol

Security protocol (AH or ESP)

Definition at line 1861 of file ike.h.

◆ rekeyRequest

bool_t rekeyRequest

Child SA rekey request.

Definition at line 1894 of file ike.h.

◆ remoteIpAddr

IpAddr remoteIpAddr

IP address of the peer.

Definition at line 1859 of file ike.h.

◆ remoteSpi

uint8_t remoteSpi[4]

Definition at line 1869 of file ike.h.

◆ responderNonce

uint8_t responderNonce[IKE_MAX_NONCE_SIZE]

Responder nonce.

Definition at line 1866 of file ike.h.

◆ responderNonceLen

size_t responderNonceLen

Length of the responder nonce.

Definition at line 1867 of file ike.h.

◆ sa

IkeSaEntry* sa

IKE SA entry.

Definition at line 1857 of file ike.h.

◆ saltLen

size_t saltLen

Length of the salt, in bytes.

Definition at line 1886 of file ike.h.

◆ selector

IpsecSelector selector

Definition at line 1892 of file ike.h.

◆ skai

const uint8_t* skai

Integrity protection key (initiator)

Definition at line 1875 of file ike.h.

◆ skar

const uint8_t* skar

Integrity protection key (responder)

Definition at line 1876 of file ike.h.

◆ skei

const uint8_t* skei

Encryption key (initiator)

Definition at line 1877 of file ike.h.

◆ sker

const uint8_t* sker

Encryption key (responder)

Definition at line 1878 of file ike.h.

◆ state

IkeChildSaState state

Child SA state.

Definition at line 1855 of file ike.h.

The documentation for this struct was generated from the following file:

cyclone_ipsec/ike/ike.h

Data Fields