/*
* Copyright (c) 2003-2009 Nokia Corporation and/or its subsidiary(-ies).
* All rights reserved.
* This component and the accompanying materials are made available
* under the terms of "Eclipse Public License v1.0"
* which accompanies this distribution, and is available
* at the URL "http://www.eclipse.org/legal/epl-v10.html".
*
* Initial Contributors:
* Nokia Corporation - initial contribution.
*
* Contributors:
*
* Description:  IKEv2 SA data definition
*                Class TIkev2SAData is the IKEv2 SA parameter definition which
*                is used to pass SA information between IKE server and IKEv2
*                plug-in.
*
*/
#ifndef __IKEV2SADATA_H__
#define __IKEV2SADATA_H__
#include <e32def.h>
#include <in_sock.h>
#include "ikemsgheader.h"
#include "internaladdress.h"
#include "ipsecsadata.h"
#include "ipsecsalifetime.h"
#include "ikev2message.h"

class CIkeData;

#define SECOND 1000000  // One second is 1000000 us. (1 us. per tick)

//
// Private generic PFKEY extension type value 
//
#define   IKEV2_KEY_MATERIAL_SIZE   40
#define   IKEV2_MAX_IV_SIZE         16

class TIkev2SAData 
{
public:
    TIkev2SAData();

    void CleanUp();
	void FreeRespMsg();
    void FreeRequestMsg();
	void StoreVirtualIp(const TInetAddr& aVirtualAddr);
	void SaveRespMsg(CIkeV2Message* aRespMsg);
	void SaveRequestMsg(CIkeV2Message* aRequestMsg);
	void Copy(TIkev2SAData& aSrc);
    TUint32 SaId() const; 
    void SetSaId(TUint32 aSaId);
    TIkeSPI& SpiI();
    void SetSpiI(const TIkeSPI& aSpiI);
    TIkeSPI& SpiR();
    void SetSpiR(const TIkeSPI& aSpiR);

    void GenerateIkeKeyDerivatesL(const TDesC8& aSKEYSEED,TUint16 aPrfAlg, 
                                  const TDesC8& aNonceI, const TDesC8& aNonceR);
    
    /**
     * Gets the request message ID we should use in our next
     * request.
     */
    TUint32 NextRequestId() const;
    
    /**
     * Get the message ID we expecting see
     * in a next received response.
     */    
    TUint32 ExpectedResponseId() const;
    
    /**
     * Get the message ID we expecting see
     * in a next received request. We should
     * also use this message ID in our
     * corresponding response. 
     */
    TUint32 ExpectedRequestId() const;
    
    
private:
	TUint32 iSAId;          // Internal negotiation Id
	TIkeSPI iSPI_I;         // Initiator SPI 
	TIkeSPI iSPI_R;         // Responder SPI

public:	

	TInt    iSAState;       // IKE SA State
	TBool   iInitiator;     // TRUE if local end is initiator
	
	CIkeData* iIkeData;     
	TUint32   iVpnIapId;    
	
	TInetAddr iLocalAddr;   // The address of the physical interface we are using.
	TInetAddr iVirtualAddr; // The address assigned to the VPN interface by the SGW.
	TInetAddr iRemoteAddr;  // Remote Address ("From Policy")
	TInetAddr iDestinAddr;  // Current peer destination address and port.
	                        // (Is different that iRemoteAddr, if the SGW is behind NAT)
    
	TUint32   iNATFlags;    // If not zero, there is NAT between sites
	TBool     iFloatedPort; // If true floated port used (and NON-ESP-MARKER)

	TUint32 iWindowSize;    // Message ID window size (currently 1)
	CIkeV2Message* iLastResponse; // The last IKE response message buffer
	CIkeV2Message* iLastRequest; // The last IKE response message buffer
	TInt    iRespRetryCount;// Count of response retries tranmitted in sequence
	
	//
	// Selected IKE SA proposal 
	//
	TUint16 iEncrAlg;       // Encryption algorithm (transform ID 1)
	TUint16 iPRFAlg;        // Pseudo Random function (transform ID 2)
	TUint16 iIntegAlg;      // Integrity algorithm  (transform ID 3)
	TUint16 iDHGroup;       // Diffie Hellmann Group(transform ID 4)
	
	TUint16 iEAPType;       // EAP type if any	
	TUint16 iAuthMethod;    // Authentication method selected
	TUint32 iLifetime;      // Local lifetime in seconds
	TInt    iCipherKeyLth;  // Cipher key length
	TInt    iCipherBlkLth;  // Cipher block length
	TInt    iIntChkSumLth;  // Integrity checksum length
	TBool   iMobikeUsed;    // MOBIKE protocol supported by both ends
    //
	// IKEv2 keymaterial
	//
	TBuf8<IKEV2_KEY_MATERIAL_SIZE> iSK_d;
	TBuf8<IKEV2_KEY_MATERIAL_SIZE> iSK_ai;
	TBuf8<IKEV2_KEY_MATERIAL_SIZE> iSK_ar;	
	TBuf8<IKEV2_KEY_MATERIAL_SIZE> iSK_ei;
	TBuf8<IKEV2_KEY_MATERIAL_SIZE> iSK_er;	
	TBuf8<IKEV2_KEY_MATERIAL_SIZE> iSK_pi;
	TBuf8<IKEV2_KEY_MATERIAL_SIZE> iSK_pr;	
};


//
//  IKE SA states
//
const TInt KSaStateNotDefined     = 0;
const TInt KSaStateReady          = 1;
/*
const TInt KSaStateRekeying       = 2;
const TInt KSaStateWaitingChildSa = 3;
const TInt KSaStateDeleting       = 4;
const TInt KSaStateNotifying      = 5;
const TInt KSaStateRoaming        = 6;
*/

#endif