目录
1 前言 ...............................................................................................................................1
2 相关数据结构类型.......................................................................................................1
2.1 算法基础结构类型 .................................................................................................1
2.1.1 ipsec_alg_supported ..........................................................................................1
2.1.2 ipsec_alg ............................................................................................................1
2.2 加解密算法结构类型 .............................................................................................2
2.2.1 ipsec_alg_enc.....................................................................................................2
2.3 认证算法结构类型 .................................................................................................2
2.3.1 ipsec_alg_auth ...................................................................................................2
3 算法管理初始化...........................................................................................................3
3.1 IPSEC_ALG_INIT().....................................................................................................3
3.2 IPSEC_ALG_HASH_INIT() ..........................................................................................4
4 算法注册过程 ...............................................................................................................5
4.1 注册接口 .................................................................................................................8
4.1.1 register_ipsec_alg()............................................................................................8
4.1.1.1 ipsec_alg_insert()........................................................................................................10
4.1.1.2 pfkey_list_insert_supported() .....................................................................................11
5 算法注销过程 .............................................................................................................12
5.1 注销接口 ...............................................................................................................12
5.1.1 unregister_ipsec_alg()......................................................................................13
5.1.1.1 ipsec_alg_delete() .......................................................................................................14
5.1.1.2 pfkey_list_remove_supported() ..................................................................................14
6 算法的使用 .................................................................................................................15
6.1 与 SA 的关系........................................................................................................15
6.1.1 pfkey_sa_process() ..........................................................................................21
6.1.2 ipsec_alg_enc_key_create().............................................................................23
6.1.3 ipsec_alg_auth_key_create() ...........................................................................26
6.1.3.1 ipsec_alg_get()............................................................................................................28
6.2 与解密过程的关系 ...............................................................................................29
6.2.1 ipsec_rcv() .......................................................................................................30
6.2.1.1 ipsec_rsm()..................................................................................................................32
6.2.1.1.1 ipsec_rcv_init().......................................................................................................36
6.2.1.1.2 ipsec_rcv_decap_init() ...........................................................................................42
6.2.1.1.3 ipsec_rcv_decap_lookup()......................................................................................44
6.2.1.1.3.1 ipsec_rcv_esp_checks()....................................................................................45
6.2.1.1.4 ipsec_rcv_auth_init()..............................................................................................46
6.2.1.1.5 ipsec_rcv_auth_decap()..........................................................................................50
6.2.1.1.5.1 ipsec_rcv_esp_decrypt_setup() ........................................................................55
6.2.1.1.6 ipsec_rcv_auth_calc() ............................................................................................56
6.2.1.1.6.1 ipsec_rcv_esp_authcalc() .................................................................................57
6.2.1.1.6.1.1 ipsec_alg_sa_esp_hash()............................................................................58
