/*

 * Copyright (C) 2005-2012 Free Software Foundation, Inc.

 *

 * Author: Nikos Mavrogiannopoulos

 *

 * This file is part of GnuTLS.

 *

 * The GnuTLS is free software; you can redistribute it and/or

 * modify it under the terms of the GNU Lesser General Public License

 * as published by the Free Software Foundation; either version 2.1 of

 * the License, or (at your option) any later version.

 *

 * This library is distributed in the hope that it will be useful, but

 * WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU

 * Lesser General Public License for more details.

 *

 * You should have received a copy of the GNU Lesser General Public License

 * along with this program.  If not, see <https://www.gnu.org/licenses/>

 *

 */

#ifndef GNUTLS_LIB_AUTH_PSK_H

#define GNUTLS_LIB_AUTH_PSK_H

#include <auth.h>

#include <auth/dh_common.h>

typedef struct gnutls_psk_client_credentials_st {

	gnutls_datum_t username;

	gnutls_datum_t key;

	gnutls_psk_client_credentials_function2 *get_function;

	gnutls_psk_client_credentials_function *get_function_legacy;

	/* TLS 1.3 - The HMAC algorithm to use to compute the binder values */

	const mac_entry_st *binder_algo;

} psk_client_credentials_st;

typedef struct gnutls_psk_server_credentials_st {

	char *password_file;

	/* callback function, instead of reading the

	 * password files.

	 */

	gnutls_psk_server_credentials_function2 *pwd_callback;

	gnutls_psk_server_credentials_function *pwd_callback_legacy;

	/* For DHE_PSK */

	gnutls_dh_params_t dh_params;

	unsigned int deinit_dh_params;

	gnutls_sec_param_t dh_sec_param;

	/* this callback is used to retrieve the DH or RSA

	 * parameters.

	 */

	gnutls_params_function *params_func;

	/* Identity hint. */

	char *hint;

	/* TLS 1.3 - HMAC algorithm for the binder values */

	const mac_entry_st *binder_algo;

} psk_server_cred_st;

/* these structures should not use allocated data */

typedef struct psk_auth_info_st {

	char username[MAX_USERNAME_SIZE + 1];

	uint16_t username_len;

	dh_info_st dh;

	char hint[MAX_USERNAME_SIZE + 1];

} *psk_auth_info_t;

typedef struct psk_auth_info_st psk_auth_info_st;

inline static

void _gnutls_copy_psk_username(psk_auth_info_t info, const gnutls_datum_t *username)

{

	assert(sizeof(info->username) > username->size);

	memcpy(info->username, username->data, username->size);

	info->username[username->size] = 0;

	info->username_len = username->size;

}

#ifdef ENABLE_PSK

int

_gnutls_set_psk_session_key(gnutls_session_t session, gnutls_datum_t * key,

			    gnutls_datum_t * psk2);

int _gnutls_gen_psk_server_kx(gnutls_session_t session,

			      gnutls_buffer_st * data);

int _gnutls_gen_psk_client_kx(gnutls_session_t, gnutls_buffer_st *);

#else

#define _gnutls_set_psk_session_key(x,y,z) GNUTLS_E_UNIMPLEMENTED_FEATURE

#endif				/* ENABLE_PSK */

#endif /* GNUTLS_LIB_AUTH_PSK_H */