/*
 * This file and its contents are supplied under the terms of the
 * Common Development and Distribution License ("CDDL"), version 1.0.
 * You may only use this file in accordance with the terms of version
 * 1.0 of the CDDL.
 *
 * A full copy of the text of the CDDL should have accompanied this
 * source.  A copy of the CDDL is also available via the Internet at
 * http://www.illumos.org/license/CDDL.
 */

/*
 * Copyright 2024 Oxide Computer Company
 */

#ifndef _INET_TCPSIG_H
#define _INET_TCPSIG_H

#include <sys/stdbool.h>
#include <inet/keysock.h>
#include <inet/sadb.h>

#ifdef  __cplusplus
extern "C" {
#endif

typedef struct tcpsig_sa {
        list_node_t                     ts_link;

        tcp_stack_t                     *ts_stack;

        sa_family_t                     ts_family;
        struct sockaddr_storage         ts_src;
        struct sockaddr_storage         ts_dst;

        ipsa_key_t                      ts_key;

        kmutex_t                        ts_lock;

        /* All of the following are protected by ts_lock */

        time_t                          ts_addtime;     /* Time added */
        time_t                          ts_usetime;     /* Time of first use */
        time_t                          ts_lastuse;     /* Time of last use */
        time_t                          ts_softexpiretime; /* First soft exp */
        time_t                          ts_hardexpiretime; /* First hard exp */

        /* Configured lifetimes */
        uint64_t                        ts_softaddlt;
        uint64_t                        ts_softuselt;
        uint64_t                        ts_hardaddlt;
        uint64_t                        ts_harduselt;

        uint64_t                        ts_refcnt;
        bool                            ts_tombstoned;
        uint_t                          ts_state;
} tcpsig_sa_t;

typedef struct tcpsig_db {
        krwlock_t                       td_lock;
        list_t                          td_salist;
} tcpsig_db_t;

extern void tcpsig_init(tcp_stack_t *);
extern void tcpsig_fini(tcp_stack_t *);
extern void tcpsig_sa_handler(keysock_t *, mblk_t *, sadb_msg_t *,
    sadb_ext_t **);

extern void tcpsig_sa_rele(tcpsig_sa_t *);
extern bool tcpsig_sa_exists(tcp_t *, bool, tcpsig_sa_t **);
extern bool tcpsig_signature(mblk_t *, tcp_t *, tcpha_t *, int, uint8_t *,
    bool);
extern bool tcpsig_verify(mblk_t *, tcp_t *, tcpha_t *, ip_recv_attr_t *,
    uint8_t *);

#ifdef  __cplusplus
}
#endif

#endif /* _INET_TCPSIG_H */