Crate ipsec_parser

Expand description

§IPsec parsers

This crate contains several parsers using for IPsec: IKEv2, and reading the envelope of ESP encapsulated messages. This parser provides the base functions to read and analyze messages, but does not handle the interpretation of messages.

ESP is supported, but only to read the envelope of the payload.

Encapsulated ESP is supported, to differentiate between IKE and ESP headers.

§IKEv2 parser

An IKEv2 (RFC7296) parser, implemented with the nom parser combinator framework.

The code is available on Github and is part of the Rusticata project.

To parse an IKE packet, first read the header using parse_ikev2_header, then use the type from the header to parse the remaining part:

use ipsec_parser::*;
use nom::IResult;

static IKEV2_INIT_RESP: &'static [u8] = include_bytes!("../assets/ike-sa-init-resp.bin");

fn test_ikev2_init_resp() {
    let bytes = IKEV2_INIT_RESP;
    match parse_ikev2_header(&bytes) {
        Ok( (rem, ref hdr) ) => {
            match parse_ikev2_payload_list(rem,hdr.next_payload) {
                Ok( (_, Ok(ref p)) ) => {
                    // p is a list of payloads
                    // first one is always dummy
                    assert!(p.len() > 0);
                    assert_eq!(p[0].content, IkeV2PayloadContent::Dummy);
                    for payload in p {
                        match payload.content {
                            IkeV2PayloadContent::SA(ref sa) => { /* .. */ },
                            _ => ()
                        }
                    }
                },
                e => { eprintln!("Parsing payload failed: {:?}", e); },
            }
        },
        _ => { eprintln!("Parsing header failed"); },
    }
}

Re-exports§

pub use nom;

Structs§

AuthenticationMethod: Method of authentication used.
AuthenticationPayload: Authentication Payload
CertificateEncoding: Certificate Encoding
CertificatePayload: Certificate Payload
CertificateRequestPayload: Certificate Request Payload
DeletePayload: Delete Payload
ESPHeader: Encapsulating Security Payload Packet Format
EncryptedPayload: Encrypted Payload
IdentificationPayload: Identification Payloads
IdentificationType: Type of Identification
IkeExchangeType: Payload exchange type: SA, Auth, CreateChildSA, etc.
IkePayloadType: Payload type
IkeTransformAuthType: Authentication / Integrity values
IkeTransformDHType: Diffie-Hellman values
IkeTransformESNType: Extended Sequence Number values
IkeTransformEncType: Encryption values
IkeTransformPRFType: Pseudo-Random Function values
IkeTransformType: Transform (cryptographic algorithm) type
IkeV2GenericPayload: Generic (unparsed payload)
IkeV2Header: The IKE Header
IkeV2Payload: IKE Message Payload
IkeV2PayloadHeader: Generic Payload Header
IkeV2Proposal: Ciphersuite Proposal
IkeV2RawTransform: Raw representation of a transform (cryptographic algorithm) and parameters
KeyExchangePayload: Key Exchange Payload
NoncePayload: Nonce Payload
NotifyPayload: Notify Payload
NotifyType: Notify Message Type
ProtocolID: Protocol type: IKE, AH or ESP
TSType: Type of Traffic Selector
TrafficSelector: Traffic Selector
TrafficSelectorPayload: Traffic Selector Payload
VendorIDPayload: Vendor ID Payload

Crate ipsec_parser

§IPsec parsers

§IKEv2 parser

Re-exports§

Structs§

Enums§

Constants§

Functions§

Crate ipsec_parserCopy item path

§IPsec parsers

§IKEv2 parser

Re-exports§

Structs§

Enums§

Constants§

Functions§

Crate ipsec_parser