Include the used reserved bytes from ID payloads in AUTH calculation

2011-01-05 16:45:53 +01:00
parent 502edf425f
commit 5f15faebc8
12 changed files with 132 additions and 40 deletions
@@ -43,10 +43,12 @@ struct pubkey_authenticator_t {
 * @param ike_sa			associated ike_sa
 * @param received_nonce	nonce received in IKE_SA_INIT
 * @param sent_init			sent IKE_SA_INIT message data
+ * @param reserved			reserved bytes of ID payload
 * @return					public key authenticator
 */
 pubkey_authenticator_t *pubkey_authenticator_create_builder(ike_sa_t *ike_sa,
-									chunk_t received_nonce, chunk_t sent_init);
+									chunk_t received_nonce, chunk_t sent_init,
+									char reserved[3]);

 /**
 * Create an authenticator to verify public key signatures.
@@ -54,9 +56,11 @@ pubkey_authenticator_t *pubkey_authenticator_create_builder(ike_sa_t *ike_sa,
 * @param ike_sa			associated ike_sa
 * @param sent_nonce		nonce sent in IKE_SA_INIT
 * @param received_init		received IKE_SA_INIT message data
+ * @param reserved			reserved bytes of ID payload
 * @return					public key authenticator
 */
 pubkey_authenticator_t *pubkey_authenticator_create_verifier(ike_sa_t *ike_sa,
-									chunk_t sent_nonce, chunk_t received_init);
+									chunk_t sent_nonce, chunk_t received_init,
+									char reserved[3]);

 #endif /** PUBKEY_AUTHENTICATOR_H_ @}*/