124 typedef struct ipsa_s {  struct
125 	struct ipsa_s *ipsa_next;	/* Next in hash bucket */  argument
126 	struct ipsa_s **ipsa_ptpn;	/* Pointer to previous next pointer. */  argument
128 	void (*ipsa_freefunc)(struct ipsa_s *); /* freeassoc function */  argument
129 	void (*ipsa_noncefunc)(struct ipsa_s *, uchar_t *,  argument
146 	struct ipsid_s *ipsa_src_cid;	/* Source certificate identity */  argument
147 	struct ipsid_s *ipsa_dst_cid;	/* Destination certificate identity */
148 	mblk_t	*ipsa_lpkt;	/* Packet received while larval (CAS me) */
149 	mblk_t	*ipsa_bpkt_head;	/* Packets received while idle */
150 	mblk_t	*ipsa_bpkt_tail;
152 	uint8_t	ipsa_mblkcnt;	/* Number of packets received while idle */
165 	uint64_t ipsa_replay_arr[SADB_MAX_REPLAY >> 6];
167 	uint64_t ipsa_unique_id;	/* Non-zero for unique SAs */
168 	uint64_t ipsa_unique_mask;	/* mask value for unique_id */
205 	time_t ipsa_softexpiretime;	/* Time of my first soft expire. */  argument
212 	uint8_t	*ipsa_salt;  argument
213 	uint_t ipsa_saltbits;  argument
214 	uint_t ipsa_saltlen;  argument
224 	time_t ipsa_softaddlt;	/* Seconds of soft lifetime after add. */  argument
225 	time_t ipsa_softuselt;	/* Seconds of soft lifetime after first use. */  argument
230 	uint64_t ipsa_softbyteslt;	/* Bytes of soft lifetime. */  argument
238 	uint_t ipsa_softalloc;	/* Allocations allowed (soft). */  argument
243 	uint_t ipsa_state;	/* State of my association. */  argument
246 	uint32_t ipsa_spi;	/* Security parameters index. */  argument
263 	uint32_t ipsa_srcaddr[IPSA_MAX_ADDRLEN];  argument
264 	uint32_t ipsa_dstaddr[IPSA_MAX_ADDRLEN];
265 	uint32_t ipsa_innersrc[IPSA_MAX_ADDRLEN];
266 	uint32_t ipsa_innerdst[IPSA_MAX_ADDRLEN];
268 	uint8_t ipsa_innersrcpfx;
269 	uint8_t ipsa_innerdstpfx;
271 	uint16_t ipsa_inbound_cksum; /* cksum correction for inbound packets */
272 	uint16_t ipsa_local_nat_port;	/* Local NAT-T port.  (0 --> 4500) */
273 	uint16_t ipsa_remote_nat_port; /* The other port that isn't 4500 */
276 	uint32_t ipsa_natt_addr_loc;
277 	uint32_t ipsa_natt_addr_rem;
283 	uint8_t ipsa_icmp_type;
284 	uint8_t ipsa_icmp_type_end;
285 	uint8_t ipsa_icmp_code;
286 	uint8_t ipsa_icmp_code_end;
291 	crypto_key_t ipsa_kcfauthkey;		/* authentication key */
292 	crypto_key_t ipsa_kcfencrkey;		/* encryption key */
293 	crypto_ctx_template_t ipsa_authtmpl;	/* auth context template */
294 	crypto_ctx_template_t ipsa_encrtmpl;	/* encr context template */
295 	crypto_mechanism_t ipsa_amech;		/* auth mech type and ICV len */
296 	crypto_mechanism_t ipsa_emech;		/* encr mech type */
297 	size_t ipsa_mac_len;			/* auth MAC/ICV length */
298 	size_t ipsa_iv_len;			/* encr IV length */
299 	size_t ipsa_datalen;			/* block length in bytes. */
308 	mblk_t *(*ipsa_output_func)(mblk_t *, ip_xmit_attr_t *);
309 	mblk_t *(*ipsa_input_func)(mblk_t *, void *, ip_recv_attr_t *);
314 	uint32_t	ipsa_otherspi;
315 	netstack_t	*ipsa_netstack;	/* Does not have a netstack_hold */
317 	ts_label_t *ipsa_tsl;			/* MLS: label attributes */
318 	ts_label_t *ipsa_otsl;			/* MLS: outer label */
319 	uint8_t	ipsa_mac_exempt;		/* MLS: mac exempt flag */
320 	uchar_t	ipsa_opt_storage[IP_MAX_OPT_LENGTH];