/* PF_KEY user interface, this is defined by rfc2367 so
   * do not make arbitrary modifications or else this header
   * file will not be compliant.
   */
  
  #ifndef _LINUX_PFKEY2_H
  #define _LINUX_PFKEY2_H
  
  #include <linux/types.h>
  
  #define PF_KEY_V2		2
  #define PFKEYV2_REVISION	199806L
  
  struct sadb_msg {

  	__u8		sadb_msg_version;
  	__u8		sadb_msg_type;
  	__u8		sadb_msg_errno;
  	__u8		sadb_msg_satype;
  	__u16	sadb_msg_len;
  	__u16	sadb_msg_reserved;
  	__u32	sadb_msg_seq;
  	__u32	sadb_msg_pid;

  } __attribute__((packed));
  /* sizeof(struct sadb_msg) == 16 */
  
  struct sadb_ext {

  	__u16	sadb_ext_len;
  	__u16	sadb_ext_type;

  } __attribute__((packed));
  /* sizeof(struct sadb_ext) == 4 */
  
  struct sadb_sa {

  	__u16	sadb_sa_len;
  	__u16	sadb_sa_exttype;

  	__be32		sadb_sa_spi;

  	__u8		sadb_sa_replay;
  	__u8		sadb_sa_state;
  	__u8		sadb_sa_auth;
  	__u8		sadb_sa_encrypt;
  	__u32	sadb_sa_flags;

  } __attribute__((packed));
  /* sizeof(struct sadb_sa) == 16 */
  
  struct sadb_lifetime {

  	__u16	sadb_lifetime_len;
  	__u16	sadb_lifetime_exttype;
  	__u32	sadb_lifetime_allocations;
  	__u64	sadb_lifetime_bytes;
  	__u64	sadb_lifetime_addtime;
  	__u64	sadb_lifetime_usetime;

  } __attribute__((packed));
  /* sizeof(struct sadb_lifetime) == 32 */
  
  struct sadb_address {

  	__u16	sadb_address_len;
  	__u16	sadb_address_exttype;
  	__u8		sadb_address_proto;
  	__u8		sadb_address_prefixlen;
  	__u16	sadb_address_reserved;

  } __attribute__((packed));
  /* sizeof(struct sadb_address) == 8 */
  
  struct sadb_key {

  	__u16	sadb_key_len;
  	__u16	sadb_key_exttype;
  	__u16	sadb_key_bits;
  	__u16	sadb_key_reserved;

  } __attribute__((packed));
  /* sizeof(struct sadb_key) == 8 */
  
  struct sadb_ident {

  	__u16	sadb_ident_len;
  	__u16	sadb_ident_exttype;
  	__u16	sadb_ident_type;
  	__u16	sadb_ident_reserved;
  	__u64	sadb_ident_id;

  } __attribute__((packed));
  /* sizeof(struct sadb_ident) == 16 */
  
  struct sadb_sens {

  	__u16	sadb_sens_len;
  	__u16	sadb_sens_exttype;
  	__u32	sadb_sens_dpd;
  	__u8		sadb_sens_sens_level;
  	__u8		sadb_sens_sens_len;
  	__u8		sadb_sens_integ_level;
  	__u8		sadb_sens_integ_len;
  	__u32	sadb_sens_reserved;

  } __attribute__((packed));
  /* sizeof(struct sadb_sens) == 16 */
  
  /* followed by:

  	__u64	sadb_sens_bitmap[sens_len];
  	__u64	sadb_integ_bitmap[integ_len];  */

  
  struct sadb_prop {

  	__u16	sadb_prop_len;
  	__u16	sadb_prop_exttype;
  	__u8		sadb_prop_replay;
  	__u8		sadb_prop_reserved[3];

  } __attribute__((packed));
  /* sizeof(struct sadb_prop) == 8 */
  
  /* followed by:
  	struct sadb_comb sadb_combs[(sadb_prop_len +

  		sizeof(__u64) - sizeof(struct sadb_prop)) /

  		sizeof(struct sadb_comb)]; */

  
  struct sadb_comb {

  	__u8		sadb_comb_auth;
  	__u8		sadb_comb_encrypt;
  	__u16	sadb_comb_flags;
  	__u16	sadb_comb_auth_minbits;
  	__u16	sadb_comb_auth_maxbits;
  	__u16	sadb_comb_encrypt_minbits;
  	__u16	sadb_comb_encrypt_maxbits;
  	__u32	sadb_comb_reserved;
  	__u32	sadb_comb_soft_allocations;
  	__u32	sadb_comb_hard_allocations;
  	__u64	sadb_comb_soft_bytes;
  	__u64	sadb_comb_hard_bytes;
  	__u64	sadb_comb_soft_addtime;
  	__u64	sadb_comb_hard_addtime;
  	__u64	sadb_comb_soft_usetime;
  	__u64	sadb_comb_hard_usetime;

  } __attribute__((packed));
  /* sizeof(struct sadb_comb) == 72 */
  
  struct sadb_supported {

  	__u16	sadb_supported_len;
  	__u16	sadb_supported_exttype;
  	__u32	sadb_supported_reserved;

  } __attribute__((packed));
  /* sizeof(struct sadb_supported) == 8 */
  
  /* followed by:
  	struct sadb_alg sadb_algs[(sadb_supported_len +

  		sizeof(__u64) - sizeof(struct sadb_supported)) /

  		sizeof(struct sadb_alg)]; */
  
  struct sadb_alg {

  	__u8		sadb_alg_id;
  	__u8		sadb_alg_ivlen;
  	__u16	sadb_alg_minbits;
  	__u16	sadb_alg_maxbits;
  	__u16	sadb_alg_reserved;

  } __attribute__((packed));
  /* sizeof(struct sadb_alg) == 8 */
  
  struct sadb_spirange {

  	__u16	sadb_spirange_len;
  	__u16	sadb_spirange_exttype;
  	__u32	sadb_spirange_min;
  	__u32	sadb_spirange_max;
  	__u32	sadb_spirange_reserved;

  } __attribute__((packed));
  /* sizeof(struct sadb_spirange) == 16 */
  
  struct sadb_x_kmprivate {

  	__u16	sadb_x_kmprivate_len;
  	__u16	sadb_x_kmprivate_exttype;
  	__u32	sadb_x_kmprivate_reserved;

  } __attribute__((packed));
  /* sizeof(struct sadb_x_kmprivate) == 8 */
  
  struct sadb_x_sa2 {

  	__u16	sadb_x_sa2_len;
  	__u16	sadb_x_sa2_exttype;
  	__u8		sadb_x_sa2_mode;
  	__u8		sadb_x_sa2_reserved1;
  	__u16	sadb_x_sa2_reserved2;
  	__u32	sadb_x_sa2_sequence;
  	__u32	sadb_x_sa2_reqid;

  } __attribute__((packed));
  /* sizeof(struct sadb_x_sa2) == 16 */
  
  struct sadb_x_policy {

  	__u16	sadb_x_policy_len;
  	__u16	sadb_x_policy_exttype;
  	__u16	sadb_x_policy_type;
  	__u8		sadb_x_policy_dir;
  	__u8		sadb_x_policy_reserved;
  	__u32	sadb_x_policy_id;
  	__u32	sadb_x_policy_priority;

  } __attribute__((packed));
  /* sizeof(struct sadb_x_policy) == 16 */
  
  struct sadb_x_ipsecrequest {

  	__u16	sadb_x_ipsecrequest_len;
  	__u16	sadb_x_ipsecrequest_proto;
  	__u8		sadb_x_ipsecrequest_mode;
  	__u8		sadb_x_ipsecrequest_level;
  	__u16	sadb_x_ipsecrequest_reserved1;
  	__u32	sadb_x_ipsecrequest_reqid;
  	__u32	sadb_x_ipsecrequest_reserved2;

  } __attribute__((packed));
  /* sizeof(struct sadb_x_ipsecrequest) == 16 */
  
  /* This defines the TYPE of Nat Traversal in use.  Currently only one
   * type of NAT-T is supported, draft-ietf-ipsec-udp-encaps-06
   */
  struct sadb_x_nat_t_type {

  	__u16	sadb_x_nat_t_type_len;
  	__u16	sadb_x_nat_t_type_exttype;
  	__u8		sadb_x_nat_t_type_type;
  	__u8		sadb_x_nat_t_type_reserved[3];

  } __attribute__((packed));
  /* sizeof(struct sadb_x_nat_t_type) == 8 */
  
  /* Pass a NAT Traversal port (Source or Dest port) */
  struct sadb_x_nat_t_port {

  	__u16	sadb_x_nat_t_port_len;
  	__u16	sadb_x_nat_t_port_exttype;

  	__be16		sadb_x_nat_t_port_port;

  	__u16	sadb_x_nat_t_port_reserved;

  } __attribute__((packed));
  /* sizeof(struct sadb_x_nat_t_port) == 8 */

  /* Generic LSM security context */
  struct sadb_x_sec_ctx {

  	__u16	sadb_x_sec_len;
  	__u16	sadb_x_sec_exttype;
  	__u8		sadb_x_ctx_alg;  /* LSMs: e.g., selinux == 1 */
  	__u8		sadb_x_ctx_doi;
  	__u16	sadb_x_ctx_len;

  } __attribute__((packed));
  /* sizeof(struct sadb_sec_ctx) = 8 */

  /* Used by MIGRATE to pass addresses IKE will use to perform
   * negotiation with the peer */
  struct sadb_x_kmaddress {

  	__u16	sadb_x_kmaddress_len;
  	__u16	sadb_x_kmaddress_exttype;
  	__u32	sadb_x_kmaddress_reserved;

  } __attribute__((packed));
  /* sizeof(struct sadb_x_kmaddress) == 8 */

  /* Message types */
  #define SADB_RESERVED		0
  #define SADB_GETSPI		1
  #define SADB_UPDATE		2
  #define SADB_ADD		3
  #define SADB_DELETE		4
  #define SADB_GET		5
  #define SADB_ACQUIRE		6
  #define SADB_REGISTER		7
  #define SADB_EXPIRE		8
  #define SADB_FLUSH		9
  #define SADB_DUMP		10
  #define SADB_X_PROMISC		11
  #define SADB_X_PCHANGE		12
  #define SADB_X_SPDUPDATE	13
  #define SADB_X_SPDADD		14
  #define SADB_X_SPDDELETE	15
  #define SADB_X_SPDGET		16
  #define SADB_X_SPDACQUIRE	17
  #define SADB_X_SPDDUMP		18
  #define SADB_X_SPDFLUSH		19
  #define SADB_X_SPDSETIDX	20
  #define SADB_X_SPDEXPIRE	21
  #define SADB_X_SPDDELETE2	22
  #define SADB_X_NAT_T_NEW_MAPPING	23

  #define SADB_X_MIGRATE		24
  #define SADB_MAX		24

  
  /* Security Association flags */
  #define SADB_SAFLAGS_PFS	1

  #define SADB_SAFLAGS_NOPMTUDISC	0x20000000

  #define SADB_SAFLAGS_DECAP_DSCP	0x40000000
  #define SADB_SAFLAGS_NOECN	0x80000000
  
  /* Security Association states */
  #define SADB_SASTATE_LARVAL	0
  #define SADB_SASTATE_MATURE	1
  #define SADB_SASTATE_DYING	2
  #define SADB_SASTATE_DEAD	3
  #define SADB_SASTATE_MAX	3
  
  /* Security Association types */
  #define SADB_SATYPE_UNSPEC	0
  #define SADB_SATYPE_AH		2
  #define SADB_SATYPE_ESP		3
  #define SADB_SATYPE_RSVP	5
  #define SADB_SATYPE_OSPFV2	6
  #define SADB_SATYPE_RIPV2	7
  #define SADB_SATYPE_MIP		8
  #define SADB_X_SATYPE_IPCOMP	9
  #define SADB_SATYPE_MAX		9
  
  /* Authentication algorithms */
  #define SADB_AALG_NONE			0
  #define SADB_AALG_MD5HMAC		2
  #define SADB_AALG_SHA1HMAC		3
  #define SADB_X_AALG_SHA2_256HMAC	5
  #define SADB_X_AALG_SHA2_384HMAC	6
  #define SADB_X_AALG_SHA2_512HMAC	7
  #define SADB_X_AALG_RIPEMD160HMAC	8

  #define SADB_X_AALG_AES_XCBC_MAC	9

  #define SADB_X_AALG_NULL		251	/* kame */
  #define SADB_AALG_MAX			251
  
  /* Encryption algorithms */
  #define SADB_EALG_NONE			0
  #define SADB_EALG_DESCBC		2
  #define SADB_EALG_3DESCBC		3
  #define SADB_X_EALG_CASTCBC		6
  #define SADB_X_EALG_BLOWFISHCBC		7
  #define SADB_EALG_NULL			11
  #define SADB_X_EALG_AESCBC		12

  #define SADB_X_EALG_AESCTR		13

  #define SADB_X_EALG_AES_CCM_ICV8	14
  #define SADB_X_EALG_AES_CCM_ICV12	15
  #define SADB_X_EALG_AES_CCM_ICV16	16
  #define SADB_X_EALG_AES_GCM_ICV8	18
  #define SADB_X_EALG_AES_GCM_ICV12	19
  #define SADB_X_EALG_AES_GCM_ICV16	20

  #define SADB_X_EALG_CAMELLIACBC		22

  #define SADB_X_EALG_NULL_AES_GMAC	23

  #define SADB_EALG_MAX                   253 /* last EALG */
  /* private allocations should use 249-255 (RFC2407) */
  #define SADB_X_EALG_SERPENTCBC  252     /* draft-ietf-ipsec-ciph-aes-cbc-00 */
  #define SADB_X_EALG_TWOFISHCBC  253     /* draft-ietf-ipsec-ciph-aes-cbc-00 */
  
  /* Compression algorithms */
  #define SADB_X_CALG_NONE		0
  #define SADB_X_CALG_OUI			1
  #define SADB_X_CALG_DEFLATE		2
  #define SADB_X_CALG_LZS			3
  #define SADB_X_CALG_LZJH		4
  #define SADB_X_CALG_MAX			4
  
  /* Extension Header values */
  #define SADB_EXT_RESERVED		0
  #define SADB_EXT_SA			1
  #define SADB_EXT_LIFETIME_CURRENT	2
  #define SADB_EXT_LIFETIME_HARD		3
  #define SADB_EXT_LIFETIME_SOFT		4
  #define SADB_EXT_ADDRESS_SRC		5
  #define SADB_EXT_ADDRESS_DST		6
  #define SADB_EXT_ADDRESS_PROXY		7
  #define SADB_EXT_KEY_AUTH		8
  #define SADB_EXT_KEY_ENCRYPT		9
  #define SADB_EXT_IDENTITY_SRC		10
  #define SADB_EXT_IDENTITY_DST		11
  #define SADB_EXT_SENSITIVITY		12
  #define SADB_EXT_PROPOSAL		13
  #define SADB_EXT_SUPPORTED_AUTH		14
  #define SADB_EXT_SUPPORTED_ENCRYPT	15
  #define SADB_EXT_SPIRANGE		16
  #define SADB_X_EXT_KMPRIVATE		17
  #define SADB_X_EXT_POLICY		18
  #define SADB_X_EXT_SA2			19
  /* The next four entries are for setting up NAT Traversal */
  #define SADB_X_EXT_NAT_T_TYPE		20
  #define SADB_X_EXT_NAT_T_SPORT		21
  #define SADB_X_EXT_NAT_T_DPORT		22
  #define SADB_X_EXT_NAT_T_OA		23

  #define SADB_X_EXT_SEC_CTX		24

  /* Used with MIGRATE to pass @ to IKE for negotiation */
  #define SADB_X_EXT_KMADDRESS		25
  #define SADB_EXT_MAX			25

  
  /* Identity Extension values */
  #define SADB_IDENTTYPE_RESERVED	0
  #define SADB_IDENTTYPE_PREFIX	1
  #define SADB_IDENTTYPE_FQDN	2
  #define SADB_IDENTTYPE_USERFQDN	3
  #define SADB_IDENTTYPE_MAX	3
  
  #endif /* !(_LINUX_PFKEY2_H) */