[snmp] Add SNMP-USM-HMAC-SHA2-MIB

OTP-17615 (RFC 7860)

2 files changed, 116 insertions, 4 deletions

diff --git a/lib/snmp/mibs/Makefile.in b/lib/snmp/mibs/Makefile.in
index a807e19913..6419009a6a 100644
--- a/lib/snmp/mibs/Makefile.in
+++ b/lib/snmp/mibs/Makefile.in
@@ -2,7 +2,7 @@
 
 # %CopyrightBegin%
 # 
-# Copyright Ericsson AB 1996-2020. All Rights Reserved.
+# Copyright Ericsson AB 1996-2021. All Rights Reserved.
 # 
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -41,6 +41,11 @@ RELSYSDIR = $(RELEASE_PATH)/lib/snmp-$(VSN)
 # Common macros
 # ----------------------------------------------------
 
+OTP_MIBS = \
+	OTP-REG \
+	OTP-TC \
+	OTP-SNMPEA-MIB
+
 MIBS = \
 	RFC1213-MIB \
 	STANDARD-MIB \
@@ -56,9 +61,8 @@ MIBS = \
 	SNMP-USM-AES-MIB \
 	INET-ADDRESS-MIB \
 	TRANSPORT-ADDRESS-MIB \
-	OTP-REG \
-	OTP-TC \
-	OTP-SNMPEA-MIB
+	SNMP-USM-HMAC-SHA2-MIB \
+	$(OTP_MIBS)
 
 STD_v1_MIB_FILES = \
 	RFC1155-SMI.mib \
@@ -152,6 +156,9 @@ $(SNMP_BIN_TARGET_DIR)/SNMP-COMMUNITY-MIB.bin: \
 $(SNMP_BIN_TARGET_DIR)/SNMP-USER-BASED-SM-MIB.bin: \
 	$(SNMP_BIN_TARGET_DIR)/SNMP-FRAMEWORK-MIB.bin
 
+$(SNMP_BIN_TARGET_DIR)/SNMP-USM-HMAC-SHA2-MIB.bin: \
+	$(SNMP_BIN_TARGET_DIR)/SNMP-FRAMEWORK-MIB.bin
+
 $(SNMP_BIN_TARGET_DIR)/SNMP-VIEW-BASED-ACM-MIB.bin: \
 	$(SNMP_BIN_TARGET_DIR)/SNMP-FRAMEWORK-MIB.bin
 
diff --git a/lib/snmp/mibs/SNMP-USM-HMAC-SHA2-MIB.mib b/lib/snmp/mibs/SNMP-USM-HMAC-SHA2-MIB.mib
new file mode 100644
index 0000000000..1d6ae5c0c0
--- /dev/null
+++ b/lib/snmp/mibs/SNMP-USM-HMAC-SHA2-MIB.mib
@@ -0,0 +1,105 @@
+SNMP-USM-HMAC-SHA2-MIB DEFINITIONS ::= BEGIN
+    IMPORTS
+       MODULE-IDENTITY, OBJECT-IDENTITY,
+           mib-2 FROM SNMPv2-SMI -- RFC 2578
+           snmpAuthProtocols FROM SNMP-FRAMEWORK-MIB; -- RFC 3411
+
+snmpUsmHmacSha2MIB MODULE-IDENTITY
+    LAST-UPDATED    "201604180000Z" -- 18 April 2016, midnight
+    ORGANIZATION    "SNMPv3 Working Group"
+    CONTACT-INFO    "WG email: OPSAWG@ietf.org
+                    Subscribe:
+                        https://www.ietf.org/mailman/listinfo/opsawg
+                    Editor:    Johannes Merkle
+                               secunet Security Networks
+                    Postal:    Mergenthaler Allee 77
+                               D-65760 Eschborn
+                               Germany
+                    Phone:     +49 20154543091
+                    Email:     johannes.merkle@secunet.com
+
+                    Co-Editor: Manfred Lochter
+                               Bundesamt fuer Sicherheit in der
+                               Informationstechnik (BSI)
+                    Postal:    Postfach 200363
+                               D-53133 Bonn
+                               Germany
+                    Phone:     +49 228 9582 5643
+                    Email:     manfred.lochter@bsi.bund.de"
+
+    DESCRIPTION
+        "Definitions of Object Identities needed for the use of
+        HMAC-SHA2 Authentication Protocols by SNMP's User-based Security
+        Model.
+
+        Copyright (c) 2016 IETF Trust and the persons identified as
+        authors of the code.  All rights reserved.
+
+        Redistribution and use in source and binary forms, with or
+        without modification, is permitted pursuant to, and subject
+        to the license terms contained in, the Simplified BSD License
+        set forth in Section 4.c of the IETF Trust's Legal Provisions
+        Relating to IETF Documents
+        (http://trustee.ietf.org/license-info)."
+
+    REVISION "201604180000Z" -- 18 April 2016, midnight
+    DESCRIPTION
+        "Version correcting the MODULE-IDENTITY value,
+        published as RFC 7860"
+
+    REVISION "201510140000Z" -- 14 October 2015, midnight
+    DESCRIPTION
+        "Initial version, published as RFC 7630"
+
+    ::= { mib-2 235 }
+
+
+usmHMAC128SHA224AuthProtocol OBJECT-IDENTITY
+    STATUS      current
+    DESCRIPTION "The Authentication Protocol
+                usmHMAC128SHA224AuthProtocol uses HMAC-SHA-224 and
+                truncates output to 128 bits."
+    REFERENCE   "- Krawczyk, H., Bellare, M., and R. Canetti,
+                HMAC: Keyed-Hashing for Message Authentication,
+                RFC 2104.
+                - National Institute of Standards and Technology,
+                Secure Hash Standard (SHS), FIPS PUB 180-4, 2012."
+    ::= { snmpAuthProtocols 4 }
+
+usmHMAC192SHA256AuthProtocol OBJECT-IDENTITY
+    STATUS      current
+    DESCRIPTION "The Authentication Protocol
+                usmHMAC192SHA256AuthProtocol uses HMAC-SHA-256 and
+                truncates output to 192 bits."
+    REFERENCE   "- Krawczyk, H., Bellare, M., and R. Canetti,
+                HMAC: Keyed-Hashing for Message Authentication,
+                RFC 2104.
+                - National Institute of Standards and Technology,
+                Secure Hash Standard (SHS), FIPS PUB 180-4, 2012."
+    ::= { snmpAuthProtocols 5 }
+
+usmHMAC256SHA384AuthProtocol OBJECT-IDENTITY
+    STATUS      current
+    DESCRIPTION "The Authentication Protocol
+                usmHMAC256SHA384AuthProtocol uses HMAC-SHA-384 and
+                truncates output to 256 bits."
+    REFERENCE   "- Krawczyk, H., Bellare, M., and R. Canetti,
+                HMAC: Keyed-Hashing for Message Authentication,
+                RFC 2104.
+                - National Institute of Standards and Technology,
+                Secure Hash Standard (SHS), FIPS PUB 180-4, 2012."
+    ::= { snmpAuthProtocols 6 }
+
+usmHMAC384SHA512AuthProtocol OBJECT-IDENTITY
+    STATUS      current
+    DESCRIPTION "The Authentication Protocol
+                usmHMAC384SHA512AuthProtocol uses HMAC-SHA-512 and
+                truncates output to 384 bits."
+    REFERENCE   "- Krawczyk, H., Bellare, M., and R. Canetti,
+                HMAC: Keyed-Hashing for Message Authentication,
+                RFC 2104.
+                - National Institute of Standards and Technology,
+                Secure Hash Standard (SHS), FIPS PUB 180-4, 2012."
+    ::= { snmpAuthProtocols 7 }
+
+END