78 lines
1.7 KiB
C
78 lines
1.7 KiB
C
/*
|
|
* IEEE Std 802.1X-2010 definitions
|
|
* Copyright (c) 2013-2014, Qualcomm Atheros, Inc.
|
|
*
|
|
* This software may be distributed under the terms of the BSD license.
|
|
* See README for more details.
|
|
*/
|
|
|
|
#ifndef IEEE802_1X_DEFS_H
|
|
#define IEEE802_1X_DEFS_H
|
|
|
|
#define CS_ID_LEN 8
|
|
#define CS_ID_GCM_AES_128 {0x00, 0x80, 0x02, 0x00, 0x01, 0x00, 0x00, 0x01}
|
|
#define CS_NAME_GCM_AES_128 "GCM-AES-128"
|
|
|
|
enum macsec_policy {
|
|
/**
|
|
* Should secure sessions.
|
|
* This accepts key server's advice to determine whether to secure the
|
|
* session or not.
|
|
*/
|
|
SHOULD_SECURE,
|
|
|
|
/**
|
|
* Disabled MACsec - do not secure sessions.
|
|
*/
|
|
DO_NOT_SECURE,
|
|
};
|
|
|
|
|
|
/* IEEE Std 802.1X-2010 - Table 11-6 - MACsec Capability */
|
|
enum macsec_cap {
|
|
/**
|
|
* MACsec is not implemented
|
|
*/
|
|
MACSEC_CAP_NOT_IMPLEMENTED,
|
|
|
|
/**
|
|
* 'Integrity without confidentiality'
|
|
*/
|
|
MACSEC_CAP_INTEGRITY,
|
|
|
|
/**
|
|
* 'Integrity without confidentiality' and
|
|
* 'Integrity and confidentiality' with a confidentiality offset of 0
|
|
*/
|
|
MACSEC_CAP_INTEG_AND_CONF,
|
|
|
|
/**
|
|
* 'Integrity without confidentiality' and
|
|
* 'Integrity and confidentiality' with a confidentiality offset of 0,
|
|
* 30, 50
|
|
*/
|
|
MACSEC_CAP_INTEG_AND_CONF_0_30_50,
|
|
};
|
|
|
|
enum validate_frames {
|
|
Disabled,
|
|
Checked,
|
|
Strict,
|
|
};
|
|
|
|
/* IEEE Std 802.1X-2010 - Table 11-6 - Confidentiality Offset */
|
|
enum confidentiality_offset {
|
|
CONFIDENTIALITY_NONE = 0,
|
|
CONFIDENTIALITY_OFFSET_0 = 1,
|
|
CONFIDENTIALITY_OFFSET_30 = 2,
|
|
CONFIDENTIALITY_OFFSET_50 = 3,
|
|
};
|
|
|
|
/* IEEE Std 802.1X-2010 - Table 9-2 */
|
|
#define DEFAULT_PRIO_INFRA_PORT 0x10
|
|
#define DEFAULT_PRIO_PRIMRAY_AP 0x30
|
|
#define DEFAULT_PRIO_SECONDARY_AP 0x50
|
|
#define DEFAULT_PRIO_GROUP_CA_MEMBER 0x70
|
|
#define DEFAULT_PRIO_NOT_KEY_SERVER 0xFF
|
|
|
|
#endif /* IEEE802_1X_DEFS_H */
|