[net-next v4 2/6] net: Define QUIC specific constants, control and data plane structures
Adel Abouchaev
adel.abushaev at gmail.com
Fri Sep 9 00:12:34 UTC 2022
Define control and data plane structures to pass in control plane for
flow add/remove and during packet send within ancillary data. Define
constants to use within SOL_UDP to program QUIC sockets.
Signed-off-by: Adel Abouchaev <adel.abushaev at gmail.com>
---
v3: added a 3-tuple to map a flow to a key, added key generation to
include into flow context.
v4: added missing linux/in.h and linux/in6.h to the quic.h file.
---
include/uapi/linux/quic.h | 68 +++++++++++++++++++++++++++++++++++++++
include/uapi/linux/udp.h | 3 ++
2 files changed, 71 insertions(+)
create mode 100644 include/uapi/linux/quic.h
diff --git a/include/uapi/linux/quic.h b/include/uapi/linux/quic.h
new file mode 100644
index 000000000000..3a281a3037f0
--- /dev/null
+++ b/include/uapi/linux/quic.h
@@ -0,0 +1,68 @@
+/* SPDX-License-Identifier: ((GPL-2.0 WITH Linux-syscall-note) */
+
+#ifndef _UAPI_LINUX_QUIC_H
+#define _UAPI_LINUX_QUIC_H
+
+#include <linux/in.h>
+#include <linux/in6.h>
+#include <linux/types.h>
+#include <linux/tls.h>
+
+#define QUIC_MAX_CONNECTION_ID_SIZE 20
+
+/* Side by side data for QUIC egress operations */
+#define QUIC_BYPASS_ENCRYPTION 0x01
+
+struct quic_tx_ancillary_data {
+ __aligned_u64 next_pkt_num;
+ __u8 flags;
+ __u8 dst_conn_id_length;
+};
+
+struct quic_connection_info_key {
+ __u8 dst_conn_id[QUIC_MAX_CONNECTION_ID_SIZE];
+ __u8 dst_conn_id_length;
+ union {
+ struct in6_addr ipv6_addr;
+ struct in_addr ipv4_addr;
+ } addr;
+ __be16 udp_port;
+};
+
+struct quic_aes_gcm_128 {
+ __u8 header_key[TLS_CIPHER_AES_GCM_128_KEY_SIZE];
+ __u8 payload_key[TLS_CIPHER_AES_GCM_128_KEY_SIZE];
+ __u8 payload_iv[TLS_CIPHER_AES_GCM_128_IV_SIZE];
+};
+
+struct quic_aes_gcm_256 {
+ __u8 header_key[TLS_CIPHER_AES_GCM_256_KEY_SIZE];
+ __u8 payload_key[TLS_CIPHER_AES_GCM_256_KEY_SIZE];
+ __u8 payload_iv[TLS_CIPHER_AES_GCM_256_IV_SIZE];
+};
+
+struct quic_aes_ccm_128 {
+ __u8 header_key[TLS_CIPHER_AES_CCM_128_KEY_SIZE];
+ __u8 payload_key[TLS_CIPHER_AES_CCM_128_KEY_SIZE];
+ __u8 payload_iv[TLS_CIPHER_AES_CCM_128_IV_SIZE];
+};
+
+struct quic_chacha20_poly1305 {
+ __u8 header_key[TLS_CIPHER_CHACHA20_POLY1305_KEY_SIZE];
+ __u8 payload_key[TLS_CIPHER_CHACHA20_POLY1305_KEY_SIZE];
+ __u8 payload_iv[TLS_CIPHER_CHACHA20_POLY1305_IV_SIZE];
+};
+
+struct quic_connection_info {
+ __u16 cipher_type;
+ struct quic_connection_info_key key;
+ __u8 conn_payload_key_gen;
+ union {
+ struct quic_aes_gcm_128 aes_gcm_128;
+ struct quic_aes_gcm_256 aes_gcm_256;
+ struct quic_aes_ccm_128 aes_ccm_128;
+ struct quic_chacha20_poly1305 chacha20_poly1305;
+ };
+};
+
+#endif
diff --git a/include/uapi/linux/udp.h b/include/uapi/linux/udp.h
index 4828794efcf8..0ee4c598e70b 100644
--- a/include/uapi/linux/udp.h
+++ b/include/uapi/linux/udp.h
@@ -34,6 +34,9 @@ struct udphdr {
#define UDP_NO_CHECK6_RX 102 /* Disable accpeting checksum for UDP6 */
#define UDP_SEGMENT 103 /* Set GSO segmentation size */
#define UDP_GRO 104 /* This socket can receive UDP GRO packets */
+#define UDP_QUIC_ADD_TX_CONNECTION 106 /* Add QUIC Tx crypto offload */
+#define UDP_QUIC_DEL_TX_CONNECTION 107 /* Del QUIC Tx crypto offload */
+#define UDP_QUIC_ENCRYPT 108 /* QUIC encryption parameters */
/* UDP encapsulation types */
#define UDP_ENCAP_ESPINUDP_NON_IKE 1 /* draft-ietf-ipsec-nat-t-ike-00/01 */
--
2.30.2
More information about the Linux-security-module-archive
mailing list