Skip to content

Commit 5a771c2

Browse files
pquantinguyharris
authored andcommitted
Add ESP SA Key DSB secret type
Its implementation can be found here: https://gitlab.com/wireshark/wireshark/-/merge_requests/20256
1 parent 091ea45 commit 5a771c2

File tree

1 file changed

+47
-0
lines changed

1 file changed

+47
-0
lines changed

draft-ietf-opsawg-pcapng.md

Lines changed: 47 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2223,6 +2223,53 @@ The following is a list of Secrets Types.
22232223
{: #format_zigbee_aps title='ZigBee APS Key Data Format' artwork-align="center"}
22242224

22252225

2226+
{: indent='8'}
2227+
0x45535053:
2228+
: ESP Security Association keys.
2229+
This is in CSV format ([RFC 4180]), with each record containing fields that
2230+
describe an ESP security association. Each line has the following columns:
2231+
"Protocol","Src IP","Dest IP","SPI","Encryption","Encryption Key",
2232+
"Authentication","Authentication Key","SN","ESN High Bits".
2233+
All columns must be filled in the order specified here with a value and the header line is ignored if present.
2234+
If a column contains an unknown value, the line should be skipped.
2235+
If the line contains more columns than what is expected by the reader, the extra ones should be ignored.
2236+
If the line contains fewer columns than what is expected by the reader, it should either apply a default
2237+
value (if possible) or the line should be skipped.
2238+
2239+
* Protocol: Protocol used. Can be either "IPv4", "IPv6" or "Any".
2240+
2241+
* Src IP: Source IP address. String containing the address, wildcard (*) character is supported.
2242+
2243+
* Dest IP: Destination IP address. String containing the address, wildcard (*) character is supported.
2244+
2245+
* SPI: Security Parameter Index. String of a 32 bits integer in hexadecimal format (starting with 0x).
2246+
2247+
* Encryption: Encryption algorithm. Can be "NULL", "TripleDES-CBC [RFC2451]", "AES-CBC [RFC3602]",
2248+
"AES-CTR [RFC3686]", "DES-CBC [RFC2405]", "CAST5-CBC [RFC2144]", "BLOWFISH-CBC [RFC2451]", "TWOFISH-CBC",
2249+
"AES-GCM [RFC4106]", "AES-GCM with 8 octet ICV [RFC4106]", "AES-GCM with 12 octet ICV [RFC4106]",
2250+
"AES-GCM with 16 octet ICV [RFC4106]", "AES-GCM with IIV and 16 octet ICV [RFC4106 & RFC8750]",
2251+
"ChaCha20 with Poly1305 [RFC7634]" or "ChaCha20 with Poly1305 and IIV [RFC7634 & RFC8750]".
2252+
New algorithms might be aded in the future.
2253+
2254+
* Encryption Key: Encryption key. String containing the key in heaxadecimal format (starting with 0x).
2255+
2256+
* Authentication: Authentication algorithm. Can be "NULL", "HMAC-SHA-1-96 [RFC2404]",
2257+
"HMAC-SHA-256-96 [draft-ietf-ipsec-ciph-sha-256-00]", "HMAC-SHA-256-128 [RFC4868]",
2258+
"HMAC-SHA-384-192 [RFC4868]", "HMAC-SHA-512-256 [RFC4868]", "HMAC-MD5-96 [RFC2403]",
2259+
"MAC-RIPEMD-160-96 [RFC2857]", "ANY 64 bit authentication [no checking]",
2260+
"ANY 96 bit authentication [no checking]", "ANY 128 bit authentication [no checking]",
2261+
"ANY 192 bit authentication [no checking]" or "ANY 256 bit authentication [no checking]".
2262+
New algorithms might be aded in the future.
2263+
2264+
* Authentication Key: Authentication key. String containing the key in heaxadecimal format (starting with 0x).
2265+
2266+
* SN: Sequence number length. Can be "32-bit" or "64-bit".
2267+
2268+
* ESN High Bits: Extended Sequence Number upper 32 bits. String of a 32 bits integer in hexadecimal
2269+
format (starting with 0x).
2270+
{: vspace='0'}
2271+
2272+
22262273
## Custom Block {#section_custom_block}
22272274

22282275
A Custom Block (CB) is the container for storing custom data that

0 commit comments

Comments
 (0)