[BACK]Return to kex.h CVS log [TXT][DIR] Up to [local] / src / usr.bin / ssh

Annotation of src/usr.bin/ssh/kex.h, Revision 1.2.2.4

1.2.2.4 ! jason       1: /*     $OpenBSD: kex.h,v 1.15 2001/03/05 17:17:20 markus Exp $ */
1.2.2.3   jason       2:
1.1       markus      3: /*
                      4:  * Copyright (c) 2000 Markus Friedl.  All rights reserved.
                      5:  *
                      6:  * Redistribution and use in source and binary forms, with or without
                      7:  * modification, are permitted provided that the following conditions
                      8:  * are met:
                      9:  * 1. Redistributions of source code must retain the above copyright
                     10:  *    notice, this list of conditions and the following disclaimer.
                     11:  * 2. Redistributions in binary form must reproduce the above copyright
                     12:  *    notice, this list of conditions and the following disclaimer in the
                     13:  *    documentation and/or other materials provided with the distribution.
                     14:  *
                     15:  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
                     16:  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
                     17:  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
                     18:  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
                     19:  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
                     20:  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
                     21:  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
                     22:  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
                     23:  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
                     24:  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
                     25:  */
                     26: #ifndef KEX_H
                     27: #define KEX_H
                     28:
1.2.2.3   jason      29: #include <openssl/evp.h>
                     30: #include "buffer.h"
                     31:
1.2.2.2   jason      32: #define        KEX_DH1         "diffie-hellman-group1-sha1"
                     33: #define        KEX_DHGEX       "diffie-hellman-group-exchange-sha1"
1.1       markus     34:
                     35: enum kex_init_proposals {
                     36:        PROPOSAL_KEX_ALGS,
                     37:        PROPOSAL_SERVER_HOST_KEY_ALGS,
                     38:        PROPOSAL_ENC_ALGS_CTOS,
                     39:        PROPOSAL_ENC_ALGS_STOC,
                     40:        PROPOSAL_MAC_ALGS_CTOS,
                     41:        PROPOSAL_MAC_ALGS_STOC,
                     42:        PROPOSAL_COMP_ALGS_CTOS,
                     43:        PROPOSAL_COMP_ALGS_STOC,
                     44:        PROPOSAL_LANG_CTOS,
                     45:        PROPOSAL_LANG_STOC,
                     46:        PROPOSAL_MAX
                     47: };
                     48:
                     49: enum kex_modes {
                     50:        MODE_IN,
                     51:        MODE_OUT,
                     52:        MODE_MAX
                     53: };
                     54:
1.2.2.2   jason      55: enum kex_exchange {
                     56:        DH_GRP1_SHA1,
                     57:        DH_GEX_SHA1
                     58: };
1.2.2.3   jason      59:
1.1       markus     60: typedef struct Kex Kex;
                     61: typedef struct Mac Mac;
                     62: typedef struct Comp Comp;
                     63: typedef struct Enc Enc;
                     64:
                     65: struct Enc {
1.2.2.2   jason      66:        char            *name;
                     67:        Cipher          *cipher;
1.1       markus     68:        int             enabled;
1.2.2.3   jason      69:        u_char  *key;
                     70:        u_char  *iv;
1.1       markus     71: };
                     72: struct Mac {
1.2.2.2   jason      73:        char            *name;
1.1       markus     74:        int             enabled;
1.2.2.2   jason      75:        EVP_MD          *md;
1.1       markus     76:        int             mac_len;
1.2.2.3   jason      77:        u_char  *key;
1.1       markus     78:        int             key_len;
                     79: };
                     80: struct Comp {
                     81:        int             type;
                     82:        int             enabled;
                     83:        char            *name;
                     84: };
                     85: struct Kex {
                     86:        Enc             enc [MODE_MAX];
                     87:        Mac             mac [MODE_MAX];
                     88:        Comp            comp[MODE_MAX];
                     89:        int             we_need;
                     90:        int             server;
                     91:        char            *name;
1.2.2.3   jason      92:        int             hostkey_type;
1.2.2.2   jason      93:        int             kex_type;
1.1       markus     94: };
                     95:
                     96: Buffer *kex_init(char *myproposal[PROPOSAL_MAX]);
1.2.2.1   jason      97: void
                     98: kex_exchange_kexinit(
                     99:     Buffer *my_kexinit, Buffer *peer_kexint,
                    100:     char *peer_proposal[PROPOSAL_MAX]);
                    101: Kex *
                    102: kex_choose_conf(char *cprop[PROPOSAL_MAX],
                    103:     char *sprop[PROPOSAL_MAX], int server);
1.2.2.3   jason     104: int    kex_derive_keys(Kex *k, u_char *hash, BIGNUM *shared_secret);
1.1       markus    105: void   packet_set_kex(Kex *k);
1.2.2.1   jason     106: int    dh_pub_is_valid(DH *dh, BIGNUM *dh_pub);
1.2.2.2   jason     107: DH     *dh_new_group_asc(const char *, const char *);
                    108: DH     *dh_new_group(BIGNUM *, BIGNUM *);
1.2.2.4 ! jason     109: void   dh_gen_key(DH *, int);
1.2.2.3   jason     110: DH     *dh_new_group1(void);
1.1       markus    111:
1.2.2.3   jason     112: u_char *
1.1       markus    113: kex_hash(
                    114:     char *client_version_string,
                    115:     char *server_version_string,
                    116:     char *ckexinit, int ckexinitlen,
                    117:     char *skexinit, int skexinitlen,
                    118:     char *serverhostkeyblob, int sbloblen,
                    119:     BIGNUM *client_dh_pub,
                    120:     BIGNUM *server_dh_pub,
                    121:     BIGNUM *shared_secret);
                    122:
1.2.2.3   jason     123: u_char *
1.2.2.2   jason     124: kex_hash_gex(
                    125:     char *client_version_string,
                    126:     char *server_version_string,
                    127:     char *ckexinit, int ckexinitlen,
                    128:     char *skexinit, int skexinitlen,
                    129:     char *serverhostkeyblob, int sbloblen,
                    130:     int minbits, BIGNUM *prime, BIGNUM *gen,
                    131:     BIGNUM *client_dh_pub,
                    132:     BIGNUM *server_dh_pub,
                    133:     BIGNUM *shared_secret);
1.1       markus    134: #endif