//
// Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2005 Yokogawa Electric Corporation,
// IPA (Information-technology Promotion Agency, Japan).
// All rights reserved.
// 
// Redistribution and use of this software in source and binary forms, with 
// or without modification, are permitted provided that the following 
// conditions and disclaimer are agreed and accepted by the user:
// 
// 1. Redistributions of source code must retain the above copyright 
// notice, this list of conditions and the following disclaimer.
// 
// 2. Redistributions in binary form must reproduce the above copyright 
// notice, this list of conditions and the following disclaimer in the 
// documentation and/or other materials provided with the distribution.
// 
// 3. Neither the names of the copyrighters, the name of the project which 
// is related to this software (hereinafter referred to as "project") nor 
// the names of the contributors may be used to endorse or promote products 
// derived from this software without specific prior written permission.
// 
// 4. No merchantable use may be permitted without prior written 
// notification to the copyrighters. However, using this software for the 
// purpose of testing or evaluating any products including merchantable 
// products may be permitted without any notification to the copyrighters.
// 
// 
// 
// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHTERS, THE PROJECT AND 
// CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING 
// BUT NOT LIMITED THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS 
// FOR A PARTICULAR PURPOSE, ARE DISCLAIMED.  IN NO EVENT SHALL THE 
// COPYRIGHTERS, THE PROJECT OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, 
// INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES 
// (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR 
// SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 
// HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 
// CONTRACT,STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 
// ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF 
// THE POSSIBILITY OF SUCH DAMAGE.
//
// $Name: REL_2_1_2 $
//
// $TAHI: ct/ipsec/RTU_E_common.def,v 1.7 2001/12/12 04:29:27 ozoe Exp $
//

#ifndef IPSEC_ECHO_DATA
#define IPSEC_ECHO_DATA echo_data
#endif

#include "./RTU_common.def"

//======================================================================

#if (IPSEC_IPVERSION == 4) 
//
// tunnel mode padding size depends on IP header size
//
Payload echo_data {
	data = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37};
	data = { 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46};
        data = {
                0x50, 0x61, 0x64, 0x4c, 0x65, 0x6e, 0x67, 0x74,
                0x68, 0x30
        };
}

Payload echo_data_odd {
	data = { 0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37};
	data = { 0x38, 0x39, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46};
        data = { 0x4f, 0x64, 0x64};
}
#else
Payload echo_data {
        data = {
                0x50, 0x61, 0x64, 0x4c, 0x65, 0x6e, 0x20, 0x69,
                0x73, 0x20, 0x5a, 0x65, 0x72, 0x6f
        };
}

Payload echo_data_odd {
        data = { 0x4f, 0x64, 0x64, 0x44, 0x61, 0x74, 0x61};
}
#endif

//======================================================================
//
// Algorithm predefinition
//

ESPAlgorithm ealgo_descbc_012 {
	crypt = descbc("TAHITEST");
}

ESPAlgorithm ealgo_3descbc_012 {
	crypt = des3cbc("TAHITEST89ABCDEFGHIJKLMN");
}

ESPAlgorithm ealgo_descbc_foo {
	crypt = descbc("foo0foo1");
}

ESPAlgorithm ealgo_descbc_012_hmacmd5_012 {
	crypt = descbc("TAHITEST");
	auth = hmacmd5("TAHITEST89ABCDEF");
}

ESPAlgorithm ealgo_descbc_012_hmacmd5_foo {
	crypt = descbc("TAHITEST");
	auth = hmacmd5("foo0foo1foo2foo3");
}

ESPAlgorithm ealgo_descbc_012_hmacsha1_012 {
	crypt = descbc("TAHITEST");
	auth = hmacsha1("TAHITEST89ABCDEF0123");
}

ESPAlgorithm ealgo_descbc_012_hmacsha1_foo {
	crypt = descbc("TAHITEST");
	auth = hmacsha1("foo0foo1foo2foo3foo4");
}

ESPAlgorithm ealgo_null {
	crypt = null_crypt(4);
}

ESPAlgorithm ealgo_null_hmacmd5_012 {
	crypt = null_crypt(4);
	auth = hmacmd5("TAHITEST89ABCDEF");
}

ESPAlgorithm ealgo_null_hmacsha1_012 {
	crypt = null_crypt(4);
	auth = hmacsha1("TAHITEST89ABCDEF0123");
}

ESPAlgorithm ealgo_3descbc_012_hmacmd5_012 {
	crypt = des3cbc("TAHITEST89ABCDEFGHIJKLMN");
	auth = hmacmd5("TAHITEST89ABCDEF");
}

ESPAlgorithm ealgo_3descbc_012_hmacsha1_012 {
	crypt = des3cbc("TAHITEST89ABCDEFGHIJKLMN");
	auth = hmacsha1("TAHITEST89ABCDEF0123");
}

//======================================================================
//
// ESP definition (default use)
//

#ifndef EALGO_FROM_SG1_NET2
#define EALGO_FROM_SG1_NET2 ealgo_descbc_012
#endif

#ifndef EALGO_TO_SG1_NET2
#define EALGO_TO_SG1_NET2 ealgo_descbc_012
#endif


Hdr_ESP esp_from_sg {
	SPI = 0x1000;
	SequenceNumber = 1;
	algorithm = EALGO_FROM_SG1_NET2;
}

Hdr_ESP esp_to_sg {
	SPI = 0x1000;
	SequenceNumber = any;	// 1;
	algorithm = EALGO_TO_SG1_NET2;
}

Hdr_ESP esp_from_sg_sn2 {
	SPI = 0x1000;
	SequenceNumber = 2;
	algorithm = EALGO_FROM_SG1_NET2;
}

Hdr_ESP esp_from_sg_sn3 {
	SPI = 0x1000;
	SequenceNumber = 3;
	algorithm = EALGO_FROM_SG1_NET2;
}

Hdr_ESP esp_from_sg_sn4 {
	SPI = 0x1000;
	SequenceNumber = 4;
	algorithm = EALGO_FROM_SG1_NET2;
}


//======================================================================
//
// ESP Tunnel from SG1_NET2 (Echo Request from HOST1_NET4 to HOST1_NET1)
//

#ifndef ESP_FROM_SG1_NET2
#define ESP_FROM_SG1_NET2 esp_from_sg
#endif

FEM_hdr_ipvX_exth(
	esptun_from_sg1_net2_echo_request_from_host1_net4_to_host1_net1_on_net0 ,
	hether_router2nut,
	{
		_SRC(vX(IPSEC_SG1_NET2_ADDR));
		_DST(vX(IPSEC_NUT_NET0_ADDR));
	},
	{
		header = _HDR_IPVX_NAME(esptun_from_sg1_net2_echo_request_from_host1_net4_to_host1_net1_on_net0);
		exthdr = ESP_FROM_SG1_NET2;
		upper = _PACKET_IPVX_NAME(echo_request_from_host1_net4_to_host1_net1_on_net0);
	}
)

//======================================================================
//
// ESP Tunnel to SG1_NET2 (Echo Reply from HOST1_NET1 to HOST1_NET4)
//

#ifndef ESP_TO_SG1_NET2
#define ESP_TO_SG1_NET2 esp_to_sg
#endif

FEM_hdr_ipvX_exth(
	esptun_to_sg1_net2_echo_reply_from_host1_net1_to_host1_net4_on_net0 ,
	hether_nut2router,
	{
		_SRC(vX(IPSEC_NUT_NET0_ADDR));
		_DST(vX(IPSEC_SG1_NET2_ADDR));
	},
	{
		header = _HDR_IPVX_NAME(esptun_to_sg1_net2_echo_reply_from_host1_net1_to_host1_net4_on_net0);
		exthdr = ESP_TO_SG1_NET2;
		upper  = _PACKET_IPVX_NAME(echo_reply_from_host1_net1_to_host1_net4_on_net0);
	}
)

//end