/*

* Copyright (c) 2003-2009 Nokia Corporation and/or its subsidiary(-ies).

* All rights reserved.

* This component and the accompanying materials are made available

* under the terms of "Eclipse Public License v1.0"

* which accompanies this distribution, and is available

* at the URL "http://www.eclipse.org/legal/epl-v10.html".

*

* Initial Contributors:

* Nokia Corporation - initial contribution.

*

* Contributors:

*

* Description:  IKEv2 SA data definition

*                Class TIkev2SAData is the IKEv2 SA parameter definition which

*                is used to pass SA information between IKE server and IKEv2

*                plug-in.

*

*/

#include "ikev2SAdata.h"

#include "ikecrypto.h"

#include "ikev2const.h"

TIkev2SAData::TIkev2SAData()

://iSAId(0),

 iSPI_I(),

 iSPI_R(),

 iSAState(0),

 iInitiator(EFalse),

 iIkeData(NULL),

 iVpnIapId(0),

 iLocalAddr(),

 iVirtualAddr(),

 iRemoteAddr(),

 iDestinAddr(),

 iNATFlags(0),

 iFloatedPort(EFalse),

 iWindowSize(0),

 iRespRetryCount(0),

 iEncrAlg(0),

 iPRFAlg(0),

 iIntegAlg(0),

 iDHGroup(0),

 iEAPType(0),

 iAuthMethod(0),

 iLifetime(0),

 iCipherKeyLth(0),

 iCipherBlkLth(0),

 iIntChkSumLth(0),

 iMobikeUsed(EFalse)

    {

    iSPI_I.SetLength(iSPI_I.MaxLength());

    iSPI_I.FillZ();

    iSPI_R.SetLength(iSPI_R.MaxLength());

    iSPI_R.FillZ();

    }

void TIkev2SAData::CleanUp() 

    { 

    FreeRespMsg(); 

    FreeRequestMsg(); 

    }

void TIkev2SAData::FreeRespMsg()

    {

    delete iLastResponse;

    iLastResponse = NULL;

    }

void TIkev2SAData::FreeRequestMsg()

    {

    delete iLastRequest;

    iLastRequest = NULL;

    }

void TIkev2SAData::StoreVirtualIp(const TInetAddr& aVirtualAddr)

    {       

    iVirtualAddr = aVirtualAddr;

    }

void TIkev2SAData::SaveRespMsg(CIkeV2Message* aRespMsg)

    {

    FreeRespMsg();

    iLastResponse = aRespMsg;

    }

void TIkev2SAData::SaveRequestMsg(CIkeV2Message* aRequestMsg)

    {

    FreeRequestMsg();

    iLastRequest = aRequestMsg;

    }

void TIkev2SAData::Copy(TIkev2SAData& aSrc)

    {

    TInetAddr savedVirtualAddr = iVirtualAddr;  

    CIkeV2Message* savedLastResponse = iLastResponse;

    CIkeV2Message* savedLastRequest = iLastRequest;

    Mem::Copy((TUint8*)&iSAId, (TUint8*)&aSrc.iSAId, sizeof(TIkev2SAData));

    if (iLastResponse != NULL)

        {

        delete savedLastResponse;

        aSrc.iLastResponse = NULL;

        }

    else

        {           

        iLastResponse = savedLastResponse;

        }

    if (iLastRequest != NULL)

        {

        delete savedLastRequest;

        aSrc.iLastRequest = NULL;

        }

    else

        {

        iLastRequest = savedLastRequest;

        }

    if ( iVirtualAddr.IsUnspecified() )

        iVirtualAddr = savedVirtualAddr; 

    }

TUint32 TIkev2SAData::SaId() const 

    {

    return iSAId;

    }

void TIkev2SAData::SetSaId(TUint32 aSaId)

    {

    iSAId = aSaId;

    }

TIkeSPI& TIkev2SAData::SpiI()

    {

    return iSPI_I;

    }

void TIkev2SAData::SetSpiI(const TIkeSPI& aSpiI)

    {

    iSPI_I = aSpiI;

    }

TIkeSPI& TIkev2SAData::SpiR()

    {

    return iSPI_R; 

    }

void TIkev2SAData::SetSpiR(const TIkeSPI& aSpiR)

{

    iSPI_R = aSpiR;

}

void TIkev2SAData::GenerateIkeKeyDerivatesL(const TDesC8& aSKEYSEED,TUint16 aPrfAlg,

                                            const TDesC8& aNonceI, const TDesC8& aNonceR)

{

    //

    //  Generate IKE keying information from SKEYDSEED (its

    //  derivates).

    //  SK_d | SK_ai | SK_ar | SK_ei | SK_er | SK_pi | SK_pr  

    //  = prf+ (SKEYSEED, Ni | Nr | SPIi | SPIr )

    //  Since the amount of keying material needed may be greater than

    //  the size of the output of the prf algorithm prf+ is used as

    //  follows    prf+ (SKEYSEED,S) = T1 | T2 | T3 | T4 | ...

    //    where:   T1 = prf (SKEYSEED, S | 0x01)

    //             T2 = prf (SKEYSEED, T1 | S | 0x02) ..

    //             TN = prf (SKEYSEED, TN-1 | S | 0xN ) ;[ N < 256 ]

    //  Calculate first required key material length:

    //  Length of SK_d = Length of PRF algorithm output

    //  Length of SK_ai and SK_ar = Length of integrity algorithm key

    //  Length of SK_ei and SK_er = Length of cipher algorithm key

    //  Length of SK_pi and SK_pr = Length of PRF output

    //

    TInt EncKeyLth = IkeCrypto::AlgorithmInfo(IKEV2_ENCR, iEncrAlg, &iCipherBlkLth);

    if ( iCipherKeyLth == 0 )

       iCipherKeyLth = EncKeyLth;

    TInt IntKeyLth = IkeCrypto::AlgorithmInfo(IKEV2_INTEG, iIntegAlg, &iIntChkSumLth);

    TInt PrfKeyLth = IkeCrypto::AlgorithmInfo(IKEV2_PRF, iPRFAlg, NULL);

    TInt KeyMatLth = 2*iCipherKeyLth + 2*IntKeyLth + 3*PrfKeyLth;

    HBufC8* S      = HBufC8::NewL(aNonceI.Length() + aNonceR.Length() + 2*IKEV2_SPI_SIZE);  

    CleanupStack::PushL(S);

    //

    // Copy value S = (Ni | Nr | SPIi | SPIr) into work buffer S

    //

    S->Des().Copy(aNonceI);

    S->Des().Append(aNonceR);

    S->Des().Append(SpiI());

    S->Des().Append(SpiR());

    HBufC8* KeyMat = IkeCrypto::GenerateKeyingMaterialL(aSKEYSEED, S->Des(), KeyMatLth, aPrfAlg);

    //

    // Store derived key material into negotiation object in the

    // following order: Key material = 

    // SK_d | SK_ai | SK_ar | SK_ei | SK_er | SK_pi | SK_pr  

    //

    TUint8* KeyMatBfr = (TUint8*)KeyMat->Ptr();  // Keymaterial buffer start

    iSK_d.Copy(KeyMatBfr, PrfKeyLth);

    KeyMatBfr += PrfKeyLth;

    iSK_ai.Copy(KeyMatBfr,IntKeyLth );

    KeyMatBfr += IntKeyLth; 

    iSK_ar.Copy(KeyMatBfr, IntKeyLth);

    KeyMatBfr += IntKeyLth; 

    iSK_ei.Copy(KeyMatBfr, iCipherKeyLth);

    KeyMatBfr += iCipherKeyLth;    

    iSK_er.Copy(KeyMatBfr, iCipherKeyLth);

    KeyMatBfr += iCipherKeyLth;    

    iSK_pi.Copy(KeyMatBfr,PrfKeyLth );

    KeyMatBfr += PrfKeyLth; 

    iSK_pr.Copy(KeyMatBfr, PrfKeyLth);

    KeyMat->Des().FillZ(); // Wipe out key material (T1 | T2 | ...) data from buffer

    delete KeyMat;

    CleanupStack::PopAndDestroy();  //S

}

TUint32 TIkev2SAData::NextRequestId() const

{

    TUint32 msgId = 0;

    if(iLastRequest != NULL)

        {

        msgId = iLastRequest->MessageId() + 1;

        }

    return msgId;

}

TUint32 TIkev2SAData::ExpectedResponseId() const

{

    __ASSERT_DEBUG(iLastRequest != NULL, User::Invariant());

    return iLastRequest->MessageId();

}

TUint32 TIkev2SAData::ExpectedRequestId() const

{

    TUint32 msgId = 0;

    if(iLastResponse != NULL)

        {

        msgId = iLastResponse->MessageId() + 1;

        }

    return msgId;

}