33 #ifdef WITH_LEAKMALLOC 34 #include "leakmalloc.h" 38 # ifdef OPENSSL_HAS_ECC 39 # include <openssl/ec.h> 42 # define EC_GROUP void 43 # define EC_POINT void 47 # define EC_GROUP void 48 # define EC_POINT void 51 #define KEX_COOKIE_LEN 16 53 #define KEX_DH1 "diffie-hellman-group1-sha1" 54 #define KEX_DH14_SHA1 "diffie-hellman-group14-sha1" 55 #define KEX_DH14_SHA256 "diffie-hellman-group14-sha256" 56 #define KEX_DH16_SHA512 "diffie-hellman-group16-sha512" 57 #define KEX_DH18_SHA512 "diffie-hellman-group18-sha512" 58 #define KEX_DHGEX_SHA1 "diffie-hellman-group-exchange-sha1" 59 #define KEX_DHGEX_SHA256 "diffie-hellman-group-exchange-sha256" 60 #define KEX_ECDH_SHA2_NISTP256 "ecdh-sha2-nistp256" 61 #define KEX_ECDH_SHA2_NISTP384 "ecdh-sha2-nistp384" 62 #define KEX_ECDH_SHA2_NISTP521 "ecdh-sha2-nistp521" 63 #define KEX_CURVE25519_SHA256 "curve25519-sha256@libssh.org" 67 #define COMP_DELAYED 2 69 #define CURVE25519_SIZE 32 71 enum kex_init_proposals {
73 PROPOSAL_SERVER_HOST_KEY_ALGS,
74 PROPOSAL_ENC_ALGS_CTOS,
75 PROPOSAL_ENC_ALGS_STOC,
76 PROPOSAL_MAC_ALGS_CTOS,
77 PROPOSAL_MAC_ALGS_STOC,
78 PROPOSAL_COMP_ALGS_CTOS,
79 PROPOSAL_COMP_ALGS_STOC,
102 KEX_GSS_GRP14_SHA256,
103 KEX_GSS_GRP16_SHA512,
104 KEX_GSS_GRP18_SHA512,
110 #define KEX_INIT_SENT 0x0001 114 const struct sshcipher *cipher;
137 size_t session_id_len;
138 struct newkeys *newkeys[MODE_MAX];
161 char *client_version_string;
162 char *server_version_string;
164 int (*verify_host_key)(
struct sshkey *,
struct ssh *);
165 struct sshkey *(*load_host_public_key)(int, int,
struct ssh *);
166 struct sshkey *(*load_host_private_key)(int, int,
struct ssh *);
167 int (*host_key_index)(
struct sshkey *, int,
struct ssh *);
168 int (*sign)(
struct sshkey *,
struct sshkey *, u_char **,
size_t *,
169 const u_char *, size_t,
const char *, u_int);
170 int (*kex[KEX_MAX])(
struct ssh *);
173 u_int min, max, nbits;
174 EC_KEY *ec_client_key;
175 const EC_GROUP *ec_group;
176 u_char c25519_client_key[CURVE25519_SIZE];
177 u_char c25519_client_pubkey[CURVE25519_SIZE];
180 int kex_names_valid(
const char *);
181 char *kex_alg_list(
char);
182 char *kex_names_cat(
const char *,
const char *);
183 int kex_assemble_names(
const char *,
char **);
185 int kex_new(
struct ssh *,
char *[PROPOSAL_MAX],
struct kex **);
186 int kex_setup(
struct ssh *,
char *[PROPOSAL_MAX]);
187 void kex_free_newkeys(
struct newkeys *);
188 void kex_free(
struct kex *);
190 int kex_buf2prop(
struct sshbuf *,
int *,
char ***);
191 int kex_prop2buf(
struct sshbuf *,
char *proposal[PROPOSAL_MAX]);
192 void kex_prop_free(
char **);
194 int kex_send_kexinit(
struct ssh *);
195 int kex_input_kexinit(
int, u_int32_t,
void *);
196 int kex_input_ext_info(
int, u_int32_t,
void *);
197 int kex_derive_keys(
struct ssh *, u_char *, u_int,
const struct sshbuf *);
198 int kex_derive_keys_bn(
struct ssh *, u_char *, u_int,
const BIGNUM *);
199 int kex_send_newkeys(
struct ssh *);
200 int kex_start_rekex(
struct ssh *);
202 int kexdh_client(
struct ssh *);
203 int kexdh_server(
struct ssh *);
204 int kexgex_client(
struct ssh *);
205 int kexgex_server(
struct ssh *);
206 int kexecdh_client(
struct ssh *);
207 int kexecdh_server(
struct ssh *);
208 int kexc25519_client(
struct ssh *);
209 int kexc25519_server(
struct ssh *);
212 int kexgss_client(
struct ssh *);
213 int kexgss_server(
struct ssh *);
216 int kex_dh_hash(
int,
const char *,
const char *,
217 const u_char *,
size_t,
const u_char *,
size_t,
const u_char *,
size_t,
218 const BIGNUM *,
const BIGNUM *,
const BIGNUM *, u_char *,
size_t *);
220 int kexgex_hash(
int,
const char *,
const char *,
221 const u_char *,
size_t,
const u_char *,
size_t,
const u_char *,
size_t,
223 const BIGNUM *,
const BIGNUM *,
const BIGNUM *,
224 const BIGNUM *,
const BIGNUM *,
227 int kex_ecdh_hash(
int,
const EC_GROUP *,
const char *,
const char *,
228 const u_char *,
size_t,
const u_char *,
size_t,
const u_char *,
size_t,
229 const EC_POINT *,
const EC_POINT *,
const BIGNUM *, u_char *,
size_t *);
231 int kex_c25519_hash(
int,
const char *,
const char *,
232 const u_char *,
size_t,
const u_char *,
size_t,
233 const u_char *,
size_t,
const u_char *,
const u_char *,
234 const u_char *,
size_t, u_char *,
size_t *);
236 void kexc25519_keygen(u_char key[CURVE25519_SIZE], u_char pub[CURVE25519_SIZE])
237 __attribute__((__bounded__(__minbytes__, 1, CURVE25519_SIZE)))
238 __attribute__((__bounded__(__minbytes__, 2, CURVE25519_SIZE)));
239 int kexc25519_shared_key(
const u_char key[CURVE25519_SIZE],
240 const u_char pub[CURVE25519_SIZE],
struct sshbuf *out)
241 __attribute__((__bounded__(__minbytes__, 1, CURVE25519_SIZE)))
242 __attribute__((__bounded__(__minbytes__, 2, CURVE25519_SIZE)));
245 derive_ssh1_session_id(BIGNUM *, BIGNUM *, u_int8_t[8], u_int8_t[16]);
247 #if defined(DEBUG_KEX) || defined(DEBUG_KEXDH) || defined(DEBUG_KEXECDH) 248 void dump_digest(
char *, u_char *,
int);
251 #if !defined(WITH_OPENSSL) || !defined(OPENSSL_HAS_ECC)