IPSEC实验代码.doc

IPSEC实验代码 #include sysinclude.h extern struct ipsecSpdHeader *g_ipsec_spd_in; extern struct ipsecSpdHeader *g_ipsec_spd_out; extern void ipsec_Receive_process(char *pBuffer,int dwLen); extern void ipsec_Send_process(char *pBuffer, int iLen); extern AH_ALGORITHM *ahAlgorithmLookup(UCHAR algAuth); extern ESP_ALGORITHM *espAlgorithmLookup(UCHAR algEncry); extern int ah4CalculateICV(UCHAR *pPacketCpy, unsigned short totalLen,UCHAR *pOutput, const AH_ALGORITHM *pAlg,IPSEC_ASSOC *pSA); extern int espAuthCalculate(UCHAR *pData,unsigned short dataLen,UCHAR *pOutput,AH_ALGORITHM *pAlg,IPSEC_ASSOC *pSA); // ethernet头长度为14 // IPsec头长度为20 const int IPSEC_HEAD_LEN = sizeof(IPSEC_HEAD); // 20 // AH长度为24 const int IPSEC_AH_LEN = 24; // AH的头长度为12 const int IPSEC_AH_HEAD_LEN = sizeof(IPSEC_AH); // 12 bool isESP = false; // 计算校验和 UINT16 checkSum(IPSEC_HEAD * pHead){ UINT32 checksum = 0; checksum += (UINT32)((pHead-verlen) 8); // 8 checksum += (UINT32)(pHead-tos); // 8 checksum += (UINT32)(ntohs(pHead-tot_len)); // 16 checksum += (UINT32)(ntohs(pHead-id)); // 16 checksum += (UINT32)(ntohs(pHead-frag_off)); // 16 checksum += (UINT32)((pHead-ttl) 8); // 8 checksum += (UINT32)(pHead-protocol); // 8 checksum += (UINT32)(ntohl(pHead-saddr) 16); // 16 checksum += (UINT32)(ntohl(pHead-saddr) 0xFFFF); // 16 checksum += (UINT32)(ntohl(pHead-daddr) 16); // 16 checksum += (UINT32)(ntohl(pHead-daddr) 0xFFFF); // 16 while (checksum 16) { checksum = (checksum 0xFFFF) + (checksum 16); } checksum = ~checksum; return (UINT16) checksum; } // 在SPD里面查找相应的SP // 按照报文源地址、目的地址和上层协议号查找与之匹配的SP IPSEC_POLICY_SELECTOR * getSP(u_long srcAddr, u_long dstAddr, IPSEC_POLICY_SELECTOR *spd, bool isESP) { IPSEC_POLICY_SELECTOR * p = spd; while (p != NULL) { if (((p-srcAddr p-srcPref) == (srcAddr p-srcPref)) ((p-dstAddr p-dstPref) == (dstAddr p-dstPref))) { if (isESP p-sa-proto != IPSEC_PROTO_ESP) { p = p-next; continue; } break;