esp

Documentation

Index

• Constants
• Variables
• type EncryptionAlgorithm
• type IntegrityAlgorithm
• type OpenResult
• type SA
  • func NewInboundSAFromChild(child ikev2.ChildSAResult) (*SA, error)
  • func NewOutboundSAFromChild(child ikev2.ChildSAResult) (*SA, error)
  • func NewSA(sa SA) (*SA, error)
  • func (s *SA) Open(packet []byte) (OpenResult, error)
  • func (s *SA) Seal(nextHeader uint8, payload []byte, opts SealOptions) ([]byte, error)
• type SealOptions

Constants

const (
	NextHeaderIPv4 = 4
	NextHeaderIPv6 = 41
)

Variables

var (
	ErrInvalidSA     = errors.New("invalid esp sa")
	ErrInvalidPacket = errors.New("invalid esp packet")
	ErrReplay        = errors.New("esp replay detected")
)

Types

type EncryptionAlgorithm

type EncryptionAlgorithm uint16

const (
	EncryptionAESCBC    EncryptionAlgorithm = EncryptionAlgorithm(ikev2.ENCR_AES_CBC)
	EncryptionAESGCM_16 EncryptionAlgorithm = EncryptionAlgorithm(ikev2.ENCR_AES_GCM_16)
)

type IntegrityAlgorithm

type IntegrityAlgorithm uint16

const (
	IntegrityHMACSHA1_96      IntegrityAlgorithm = IntegrityAlgorithm(ikev2.INTEG_HMAC_SHA1_96)
	IntegrityHMACSHA2_256_128 IntegrityAlgorithm = IntegrityAlgorithm(ikev2.INTEG_HMAC_SHA2_256_128)
)

type OpenResult

type OpenResult struct {
	SPI        uint32
	Sequence   uint32
	NextHeader uint8
	Payload    []byte
}

type SA

type SA struct {
	SPI              uint32
	Encryption       EncryptionAlgorithm
	EncryptionKey    []byte
	IntegrityKey     []byte
	Integrity        IntegrityAlgorithm
	ICVLength        int
	BlockSize        int
	Sequence         uint32
	HighestSequence  uint32
	ReplayWindowSize uint32
	ReplayBitmap     uint64
}

func NewInboundSAFromChild

func NewInboundSAFromChild(child ikev2.ChildSAResult) (*SA, error)

func NewOutboundSAFromChild

func NewOutboundSAFromChild(child ikev2.ChildSAResult) (*SA, error)

func NewSA

func NewSA(sa SA) (*SA, error)

func (*SA) Open

func (s *SA) Open(packet []byte) (OpenResult, error)

func (*SA) Seal

func (s *SA) Seal(nextHeader uint8, payload []byte, opts SealOptions) ([]byte, error)

type SealOptions

type SealOptions struct {
	Sequence uint32
	IV       []byte
	Random   io.Reader
}