96 lines · c
1/* SPDX-License-Identifier: GPL-2.0-or-later */2/* RxRPC key type3 *4 * Copyright (C) 2007 Red Hat, Inc. All Rights Reserved.5 * Written by David Howells (dhowells@redhat.com)6 */7 8#ifndef _KEYS_RXRPC_TYPE_H9#define _KEYS_RXRPC_TYPE_H10 11#include <linux/key.h>12 13/*14 * key type for AF_RXRPC keys15 */16extern struct key_type key_type_rxrpc;17 18extern struct key *rxrpc_get_null_key(const char *);19 20/*21 * RxRPC key for Kerberos IV (type-2 security)22 */23struct rxkad_key {24 u32 vice_id;25 u32 start; /* time at which ticket starts */26 u32 expiry; /* time at which ticket expires */27 u32 kvno; /* key version number */28 u8 primary_flag; /* T if key for primary cell for this user */29 u16 ticket_len; /* length of ticket[] */30 u8 session_key[8]; /* DES session key */31 u8 ticket[]; /* the encrypted ticket */32};33 34/*35 * list of tokens attached to an rxrpc key36 */37struct rxrpc_key_token {38 u16 security_index; /* RxRPC header security index */39 bool no_leak_key; /* Don't copy the key to userspace */40 struct rxrpc_key_token *next; /* the next token in the list */41 union {42 struct rxkad_key *kad;43 };44};45 46/*47 * structure of raw payloads passed to add_key() or instantiate key48 */49struct rxrpc_key_data_v1 {50 u16 security_index;51 u16 ticket_length;52 u32 expiry; /* time_t */53 u32 kvno;54 u8 session_key[8];55 u8 ticket[];56};57 58/*59 * AF_RXRPC key payload derived from XDR format60 * - based on openafs-1.4.10/src/auth/afs_token.xg61 */62#define AFSTOKEN_LENGTH_MAX 16384 /* max payload size */63#define AFSTOKEN_STRING_MAX 256 /* max small string length */64#define AFSTOKEN_DATA_MAX 64 /* max small data length */65#define AFSTOKEN_CELL_MAX 64 /* max cellname length */66#define AFSTOKEN_MAX 8 /* max tokens per payload */67#define AFSTOKEN_BDATALN_MAX 16384 /* max big data length */68#define AFSTOKEN_RK_TIX_MAX 12000 /* max RxKAD ticket size */69#define AFSTOKEN_GK_KEY_MAX 64 /* max GSSAPI key size */70#define AFSTOKEN_GK_TOKEN_MAX 16384 /* max GSSAPI token size */71 72/*73 * Truncate a time64_t to the range from 1970 to 2106 as in the network74 * protocol.75 */76static inline u32 rxrpc_time64_to_u32(time64_t time)77{78 if (time < 0)79 return 0;80 81 if (time > UINT_MAX)82 return UINT_MAX;83 84 return (u32)time;85}86 87/*88 * Extend u32 back to time64_t using the same 1970-2106 range.89 */90static inline time64_t rxrpc_u32_to_time64(u32 time)91{92 return (time64_t)time;93}94 95#endif /* _KEYS_RXRPC_TYPE_H */96