[BACK]Return to cipher.h CVS log [TXT][DIR] Up to [local] / src / usr.bin / ssh

Annotation of src/usr.bin/ssh/cipher.h, Revision 1.47

1.47    ! markus      1: /* $OpenBSD: cipher.h,v 1.46 2014/06/24 01:13:21 djm Exp $ */
1.32      stevesk     2:
1.1       deraadt     3: /*
1.9       deraadt     4:  * Author: Tatu Ylonen <ylo@cs.hut.fi>
                      5:  * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
                      6:  *                    All rights reserved
1.16      markus      7:  *
1.19      deraadt     8:  * As far as I am concerned, the code I have written for this software
                      9:  * can be used freely for any purpose.  Any derived versions of this
                     10:  * software must be clearly marked as such, and if the derived work is
                     11:  * incompatible with the protocol description in the RFC file, it must be
                     12:  * called by a name other than "ssh" or "Secure Shell".
1.20      markus     13:  *
                     14:  * Copyright (c) 2000 Markus Friedl.  All rights reserved.
                     15:  *
                     16:  * Redistribution and use in source and binary forms, with or without
                     17:  * modification, are permitted provided that the following conditions
                     18:  * are met:
                     19:  * 1. Redistributions of source code must retain the above copyright
                     20:  *    notice, this list of conditions and the following disclaimer.
                     21:  * 2. Redistributions in binary form must reproduce the above copyright
                     22:  *    notice, this list of conditions and the following disclaimer in the
                     23:  *    documentation and/or other materials provided with the distribution.
                     24:  *
                     25:  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
                     26:  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
                     27:  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
                     28:  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
                     29:  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
                     30:  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
                     31:  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
                     32:  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
                     33:  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
                     34:  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
1.9       deraadt    35:  */
1.1       deraadt    36:
                     37: #ifndef CIPHER_H
                     38: #define CIPHER_H
                     39:
1.46      djm        40: #include <sys/types.h>
1.31      markus     41: #include <openssl/evp.h>
1.42      djm        42: #include "cipher-chachapoly.h"
1.45      markus     43: #include "cipher-aesctr.h"
1.42      djm        44:
1.20      markus     45: /*
                     46:  * Cipher types for SSH-1.  New types can be added, but old types should not
                     47:  * be removed for compatibility.  The maximum allowed value is 31.
                     48:  */
                     49: #define SSH_CIPHER_SSH2                -3
1.35      markus     50: #define SSH_CIPHER_INVALID     -2      /* No valid cipher selected. */
1.9       deraadt    51: #define SSH_CIPHER_NOT_SET     -1      /* None selected (invalid number). */
                     52: #define SSH_CIPHER_NONE                0       /* no encryption */
                     53: #define SSH_CIPHER_IDEA                1       /* IDEA CFB */
                     54: #define SSH_CIPHER_DES         2       /* DES CBC */
                     55: #define SSH_CIPHER_3DES                3       /* 3DES CBC */
                     56: #define SSH_CIPHER_BROKEN_TSS  4       /* TRI's Simple Stream encryption CBC */
                     57: #define SSH_CIPHER_BROKEN_RC4  5       /* Alleged RC4 */
1.1       deraadt    58: #define SSH_CIPHER_BLOWFISH    6
1.12      markus     59: #define SSH_CIPHER_RESERVED    7
1.20      markus     60: #define SSH_CIPHER_MAX         31
1.12      markus     61:
1.30      markus     62: #define CIPHER_ENCRYPT         1
                     63: #define CIPHER_DECRYPT         0
                     64:
1.46      djm        65: struct sshcipher;
                     66: struct sshcipher_ctx {
1.30      markus     67:        int     plaintext;
1.39      markus     68:        int     encrypt;
1.31      markus     69:        EVP_CIPHER_CTX evp;
1.42      djm        70:        struct chachapoly_ctx cp_ctx; /* XXX union with evp? */
1.45      markus     71:        struct aesctr_ctx ac_ctx; /* XXX union with evp? */
1.46      djm        72:        const struct sshcipher *cipher;
1.20      markus     73: };
                     74:
1.47    ! markus     75: typedef struct sshcipher Cipher;
        !            76: typedef struct sshcipher_ctx CipherContext;
1.46      djm        77:
1.28      markus     78: u_int   cipher_mask_ssh1(int);
1.46      djm        79: const struct sshcipher *cipher_by_name(const char *);
                     80: const struct sshcipher *cipher_by_number(int);
1.28      markus     81: int     cipher_number(const char *);
                     82: char   *cipher_name(int);
1.47    ! markus     83: const char *cipher_warning_message(const struct sshcipher_ctx *);
1.28      markus     84: int     ciphers_valid(const char *);
1.42      djm        85: char   *cipher_alg_list(char, int);
1.46      djm        86: int     cipher_init(struct sshcipher_ctx *, const struct sshcipher *,
                     87:     const u_char *, u_int, const u_char *, u_int, int);
                     88: int     cipher_crypt(struct sshcipher_ctx *, u_int, u_char *, const u_char *,
1.39      markus     89:     u_int, u_int, u_int);
1.46      djm        90: int     cipher_get_length(struct sshcipher_ctx *, u_int *, u_int,
1.42      djm        91:     const u_char *, u_int);
1.46      djm        92: int     cipher_cleanup(struct sshcipher_ctx *);
                     93: int     cipher_set_key_string(struct sshcipher_ctx *, const struct sshcipher *,
                     94:     const char *, int);
                     95: u_int   cipher_blocksize(const struct sshcipher *);
                     96: u_int   cipher_keylen(const struct sshcipher *);
                     97: u_int   cipher_seclen(const struct sshcipher *);
                     98: u_int   cipher_authlen(const struct sshcipher *);
                     99: u_int   cipher_ivlen(const struct sshcipher *);
                    100: u_int   cipher_is_cbc(const struct sshcipher *);
                    101:
                    102: u_int   cipher_get_number(const struct sshcipher *);
                    103: int     cipher_get_keyiv(struct sshcipher_ctx *, u_char *, u_int);
                    104: int     cipher_set_keyiv(struct sshcipher_ctx *, const u_char *);
                    105: int     cipher_get_keyiv_len(const struct sshcipher_ctx *);
                    106: int     cipher_get_keycontext(const struct sshcipher_ctx *, u_char *);
                    107: void    cipher_set_keycontext(struct sshcipher_ctx *, const u_char *);
1.9       deraadt   108: #endif                         /* CIPHER_H */