| … | |
… | |
| 65 | */ |
65 | */ |
| 66 | |
66 | |
| 67 | #define PROTOCOL_MAJOR 1 |
67 | #define PROTOCOL_MAJOR 1 |
| 68 | #define PROTOCOL_MINOR 0 |
68 | #define PROTOCOL_MINOR 0 |
| 69 | |
69 | |
|
|
70 | #define SERIAL_SIZE 16 |
|
|
71 | |
| 70 | #define SEED_SIZE 64 // how many octets to seed rng with |
72 | #define SEED_SIZE 64 // how many octets to seed rng with |
| 71 | |
73 | |
| 72 | #define HKDF_XTR_HASH EVP_sha512 |
74 | #define HKDF_XTR_HASH EVP_sha512 |
| 73 | #define HKDF_PRF_HASH EVP_sha256 |
75 | #define HKDF_PRF_HASH EVP_sha256 |
| 74 | |
76 | |
| 75 | #define HKDF_SALT 32 |
77 | #define HKDF_SALT 32 |
| 76 | #define IKM_SIZE 32 |
|
|
| 77 | |
78 | |
| 78 | #define RSA_KEYLEN (RSABITS >> 3) |
79 | #define RSA_KEYLEN (RSABITS >> 3) |
| 79 | |
80 | |
| 80 | #define AUTH_DIGEST ENABLE_AUTH |
81 | #define AUTH_DIGEST ENABLE_AUTH |
| 81 | #define AUTH_SIZE (HASH_SIZE (AUTH_DIGEST)) |
82 | #define AUTH_SIZE (HASH_SIZE (AUTH_DIGEST)) |
| 82 | #define AUTH_TTL 12 // challenge bytes timeout after n seconds of non-use |
83 | #define AUTH_TTL 12 // challenge bytes timeout after n seconds of non-use |
| 83 | |
84 | |
| 84 | #define CIPHER ENABLE_CIPHER |
85 | #define CIPHER ENABLE_CIPHER |
| 85 | #define CIPHER_KEYSIZE (KEY_SIZE (CIPHER)) |
86 | #define CIPHER_KEYSIZE (KEY_SIZE (CIPHER)) |
| 86 | |
87 | |
| 87 | #define MAC_DIGEST ENABLE_DIGEST |
88 | #define MAC_DIGEST ENABLE_HMAC |
| 88 | #define MAC_KEYSIZE HASH_SIZE (ENABLE_DIGEST) // number of bits used for the HMAC key |
89 | #define MAC_KEYSIZE HASH_SIZE (ENABLE_HMAC) // number of bits used for the HMAC key |
| 89 | |
90 | |
| 90 | #define WINDOWSIZE 512 // sliding window size |
91 | #define WINDOWSIZE 512 // sliding window size |
| 91 | #define MAX_SEQNO (0xfffffff0U - WINDOWSIZE * 8) |
92 | #define MAX_SEQNO (0xfffffff0U - WINDOWSIZE * 8) |
| 92 | |
93 | |
| 93 | // hdr seq len hmac MAC MAC |
94 | // hdr seq len hmac MAC MAC |
