Annotation of src/usr.bin/ssh/kex.h, Revision 1.8
1.1 markus 1: /*
2: * Copyright (c) 2000 Markus Friedl. All rights reserved.
3: *
4: * Redistribution and use in source and binary forms, with or without
5: * modification, are permitted provided that the following conditions
6: * are met:
7: * 1. Redistributions of source code must retain the above copyright
8: * notice, this list of conditions and the following disclaimer.
9: * 2. Redistributions in binary form must reproduce the above copyright
10: * notice, this list of conditions and the following disclaimer in the
11: * documentation and/or other materials provided with the distribution.
12: *
13: * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
14: * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
15: * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
16: * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
17: * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
18: * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
19: * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
20: * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
21: * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
22: * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
23: */
24: #ifndef KEX_H
25: #define KEX_H
26:
1.5 provos 27: #define KEX_DH1 "diffie-hellman-group1-sha1"
28: #define KEX_DHGEX "diffie-hellman-group-exchange-sha1"
29: #define KEX_DSS "ssh-dss"
1.1 markus 30:
31: enum kex_init_proposals {
32: PROPOSAL_KEX_ALGS,
33: PROPOSAL_SERVER_HOST_KEY_ALGS,
34: PROPOSAL_ENC_ALGS_CTOS,
35: PROPOSAL_ENC_ALGS_STOC,
36: PROPOSAL_MAC_ALGS_CTOS,
37: PROPOSAL_MAC_ALGS_STOC,
38: PROPOSAL_COMP_ALGS_CTOS,
39: PROPOSAL_COMP_ALGS_STOC,
40: PROPOSAL_LANG_CTOS,
41: PROPOSAL_LANG_STOC,
42: PROPOSAL_MAX
43: };
44:
45: enum kex_modes {
46: MODE_IN,
47: MODE_OUT,
48: MODE_MAX
49: };
50:
1.5 provos 51: enum kex_exchange {
52: DH_GRP1_SHA1,
53: DH_GEX_SHA1
54: };
55:
1.1 markus 56: typedef struct Kex Kex;
57: typedef struct Mac Mac;
58: typedef struct Comp Comp;
59: typedef struct Enc Enc;
60:
61: struct Enc {
1.6 markus 62: char *name;
63: Cipher *cipher;
1.1 markus 64: int enabled;
65: unsigned char *key;
66: unsigned char *iv;
67: };
68: struct Mac {
1.6 markus 69: char *name;
70: int enabled;
1.1 markus 71: EVP_MD *md;
72: int mac_len;
73: unsigned char *key;
74: int key_len;
75: };
76: struct Comp {
77: int type;
78: int enabled;
79: char *name;
80: };
81: struct Kex {
82: Enc enc [MODE_MAX];
83: Mac mac [MODE_MAX];
84: Comp comp[MODE_MAX];
85: int we_need;
86: int server;
87: char *name;
1.8 ! markus 88: int hostkey_type;
1.5 provos 89: int kex_type;
1.1 markus 90: };
91:
92: Buffer *kex_init(char *myproposal[PROPOSAL_MAX]);
1.3 markus 93: void
94: kex_exchange_kexinit(
95: Buffer *my_kexinit, Buffer *peer_kexint,
96: char *peer_proposal[PROPOSAL_MAX]);
97: Kex *
98: kex_choose_conf(char *cprop[PROPOSAL_MAX],
99: char *sprop[PROPOSAL_MAX], int server);
100: int kex_derive_keys(Kex *k, unsigned char *hash, BIGNUM *shared_secret);
101: void packet_set_kex(Kex *k);
1.2 markus 102: int dh_pub_is_valid(DH *dh, BIGNUM *dh_pub);
1.5 provos 103: DH *dh_new_group_asc(const char *, const char *);
104: DH *dh_new_group(BIGNUM *, BIGNUM *);
1.2 markus 105: DH *dh_new_group1();
1.1 markus 106:
107: unsigned char *
108: kex_hash(
109: char *client_version_string,
110: char *server_version_string,
111: char *ckexinit, int ckexinitlen,
112: char *skexinit, int skexinitlen,
113: char *serverhostkeyblob, int sbloblen,
114: BIGNUM *client_dh_pub,
115: BIGNUM *server_dh_pub,
116: BIGNUM *shared_secret);
117:
1.5 provos 118: unsigned char *
119: kex_hash_gex(
120: char *client_version_string,
121: char *server_version_string,
122: char *ckexinit, int ckexinitlen,
123: char *skexinit, int skexinitlen,
124: char *serverhostkeyblob, int sbloblen,
125: int minbits, BIGNUM *prime, BIGNUM *gen,
126: BIGNUM *client_dh_pub,
127: BIGNUM *server_dh_pub,
128: BIGNUM *shared_secret);
1.1 markus 129: #endif