xref: /freebsd/sys/netipsec/ah_var.h (revision 71fe318b852b8dfb3e799cb12ef184750f7f8eac)
1 /*	$FreeBSD$	*/
2 /*	$OpenBSD: ip_ah.h,v 1.29 2002/06/09 16:26:10 itojun Exp $	*/
3 /*
4  * The authors of this code are John Ioannidis (ji@tla.org),
5  * Angelos D. Keromytis (kermit@csd.uch.gr) and
6  * Niels Provos (provos@physnet.uni-hamburg.de).
7  *
8  * The original version of this code was written by John Ioannidis
9  * for BSD/OS in Athens, Greece, in November 1995.
10  *
11  * Ported to OpenBSD and NetBSD, with additional transforms, in December 1996,
12  * by Angelos D. Keromytis.
13  *
14  * Additional transforms and features in 1997 and 1998 by Angelos D. Keromytis
15  * and Niels Provos.
16  *
17  * Additional features in 1999 by Angelos D. Keromytis.
18  *
19  * Copyright (C) 1995, 1996, 1997, 1998, 1999 John Ioannidis,
20  * Angelos D. Keromytis and Niels Provos.
21  * Copyright (c) 2001 Angelos D. Keromytis.
22  *
23  * Permission to use, copy, and modify this software with or without fee
24  * is hereby granted, provided that this entire notice is included in
25  * all copies of any software which is or includes a copy or
26  * modification of this software.
27  * You may use this code under the GNU public license if you so wish. Please
28  * contribute changes back to the authors under this freer than GPL license
29  * so that we may further the use of strong encryption without limitations to
30  * all.
31  *
32  * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR
33  * IMPLIED WARRANTY. IN PARTICULAR, NONE OF THE AUTHORS MAKES ANY
34  * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE
35  * MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR
36  * PURPOSE.
37  */
38 
39 #ifndef _NETIPSEC_AH_VAR_H_
40 #define _NETIPSEC_AH_VAR_H_
41 
42 /*
43  * These define the algorithm indices into the histogram.  They're
44  * presently based on the PF_KEY v2 protocol values which is bogus;
45  * they should be decoupled from the protocol at which time we can
46  * pack them and reduce the size of the array to a minimum.
47  */
48 #define	AH_ALG_MAX	16
49 
50 struct ahstat {
51 	u_int32_t	ahs_hdrops;	/* Packet shorter than header shows */
52 	u_int32_t	ahs_nopf;	/* Protocol family not supported */
53 	u_int32_t	ahs_notdb;
54 	u_int32_t	ahs_badkcr;
55 	u_int32_t	ahs_badauth;
56 	u_int32_t	ahs_noxform;
57 	u_int32_t	ahs_qfull;
58 	u_int32_t	ahs_wrap;
59 	u_int32_t	ahs_replay;
60 	u_int32_t	ahs_badauthl;	/* Bad authenticator length */
61 	u_int32_t	ahs_input;	/* Input AH packets */
62 	u_int32_t	ahs_output;	/* Output AH packets */
63 	u_int32_t	ahs_invalid;	/* Trying to use an invalid TDB */
64 	u_int64_t	ahs_ibytes;	/* Input bytes */
65 	u_int64_t	ahs_obytes;	/* Output bytes */
66 	u_int32_t	ahs_toobig;	/* Packet got larger than IP_MAXPACKET */
67 	u_int32_t	ahs_pdrops;	/* Packet blocked due to policy */
68 	u_int32_t	ahs_crypto;	/* Crypto processing failure */
69 	u_int32_t	ahs_tunnel;	/* Tunnel sanity check failure */
70 	u_int32_t	ahs_hist[AH_ALG_MAX];	/* Per-algorithm op count */
71 };
72 
73 #ifdef _KERNEL
74 extern	int ah_enable;
75 extern	int ah_cleartos;
76 extern	struct ahstat ahstat;
77 #endif /* _KERNEL */
78 #endif /*_NETIPSEC_AH_VAR_H_*/
79