1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
|
#ifndef SSHCRYPTO_H____
#define SSHCRYPTO_H____
#include "buf.h"
#include "crypto.h"
/* crypto type */
#define sshcrypto_TYPEOLDCRYPTO 0x1 /* oldcrypto removed */
#define sshcrypto_TYPENEWCRYPTO \
0x2 /* ssh-ed25519, curve25519-sha256@libssh.org, \
chacha20-poly1305@openssh.com */
#define sshcrypto_TYPEPQCRYPTO \
0x4 /* TODO, TODO, chacha20-poly1305@openssh.com */
/* kex - kem + hash */
#define sshcrypto_kem_PUBLICKEYMAX crypto_kem_sntrup761x25519_PUBLICKEYBYTES
#define sshcrypto_kem_CIPHERTEXTMAX crypto_kem_sntrup761x25519_CIPHERTEXTBYTES
#define sshcrypto_kem_MAX crypto_kem_sntrup761x25519_BYTES
#define sshcrypto_hash_MAX crypto_hash_sha512_BYTES
#define sshcrypto_FLAGSTRICTKEX 0x1
struct sshcrypto_kex {
const char *name;
int (*enc)(unsigned char *, unsigned char *, const unsigned char *);
long long kem_publickeybytes;
long long kem_ciphertextbytes;
long long kem_bytes;
int (*hash)(unsigned char *, const unsigned char *, unsigned long long);
long long hash_bytes;
void (*buf_putkemkey)(struct buf *, const unsigned char *);
unsigned int cryptotype;
int flagenabled;
};
extern struct sshcrypto_kex sshcrypto_kexs[];
struct sshcrypto_pseudokex {
const char *name;
const char *cname;
int flag;
};
extern struct sshcrypto_pseudokex sshcrypto_pseudokexs[];
extern int sshcrypto_kex_flags;
extern const char *sshcrypto_kex_name;
extern int (*sshcrypto_enc)(unsigned char *, unsigned char *,
const unsigned char *);
extern long long sshcrypto_kem_publickeybytes;
extern long long sshcrypto_kem_ciphertextbytes;
extern long long sshcrypto_kem_bytes;
extern int (*sshcrypto_hash)(unsigned char *, const unsigned char *,
unsigned long long);
extern long long sshcrypto_hash_bytes;
extern void (*sshcrypto_buf_putkemkey)(struct buf *, const unsigned char *);
extern int sshcrypto_kex_select(const unsigned char *, long long,
crypto_uint8 *);
extern void sshcrypto_kex_put(struct buf *);
#if defined(crypto_dh_x25519_BYTES) && defined(crypto_hash_sha256_BYTES)
/* sshcrypto_kex_curve25519.c */
extern int curve25519_enc(unsigned char *, unsigned char *,
const unsigned char *);
extern void curve25519_putkemkey(struct buf *, const unsigned char *);
#endif
#if defined(crypto_kem_sntrup761x25519_BYTES) && \
defined(crypto_hash_sha512_BYTES)
/* sshcrypto_kex_sntrup761x25519.c */
extern void sntrup761x25519_putkemkey(struct buf *, const unsigned char *);
#endif
/* key - sign */
#define sshcrypto_sign_PUBLICKEYMAX 32 /* space for ed25519 pk */
#define sshcrypto_sign_SECRETKEYMAX 64 /* space for ed25519 sk */
#define sshcrypto_sign_MAX 64 /* space for ed25519 sig */
#define sshcrypto_sign_BASE64PUBLICKEYMAX \
69 /* space for ed25519 in base64 + 0-terminator */
#define sshcrypto_sign_BASE64PUBLICKEYMIN \
69 /* space for ed25519 in base64 + 0-terminator */
#define sshcrypto_sign_NAMEMAX \
12 /* space for string ssh-ed25519 + 0-terminator */
struct sshcrypto_key {
const char *name;
int (*sign)(unsigned char *, unsigned long long *, const unsigned char *,
unsigned long long, const unsigned char *);
int (*sign_open)(unsigned char *, unsigned long long *,
const unsigned char *, unsigned long long,
const unsigned char *);
int (*sign_keypair)(unsigned char *, unsigned char *);
unsigned char sign_publickey[sshcrypto_sign_PUBLICKEYMAX];
long long sign_publickeybytes;
long long sign_secretkeybytes;
long long sign_bytes;
const char *sign_publickeyfilename;
const char *sign_secretkeyfilename;
unsigned int cryptotype;
int sign_flagserver;
int sign_flagclient;
void (*buf_putsignature)(struct buf *, const unsigned char *);
void (*buf_putsignpk)(struct buf *, const unsigned char *);
void (*buf_putsignpkbase64)(struct buf *, const unsigned char *);
int (*parsesignature)(unsigned char *, const unsigned char *, long long);
int (*parsesignpk)(unsigned char *, const unsigned char *, long long);
};
extern struct sshcrypto_key sshcrypto_keys[];
extern const char *sshcrypto_key_name;
extern int (*sshcrypto_sign)(unsigned char *, unsigned long long *,
const unsigned char *, unsigned long long,
const unsigned char *);
extern unsigned char *sshcrypto_sign_publickey;
extern long long sshcrypto_sign_publickeybytes;
extern long long sshcrypto_sign_secretkeybytes;
extern long long sshcrypto_sign_bytes;
extern const char *sshcrypto_sign_secretkeyfilename;
extern void (*sshcrypto_buf_putsignature)(struct buf *, const unsigned char *);
extern void (*sshcrypto_buf_putsignpk)(struct buf *, const unsigned char *);
extern int sshcrypto_key_select(const unsigned char *, long long);
extern void sshcrypto_key_put(struct buf *);
#ifdef crypto_sign_ed25519_BYTES
/* sshcrypto_key_ed25519.c */
extern void ed25519_putsignature(struct buf *, const unsigned char *);
extern void ed25519_putsignpk(struct buf *, const unsigned char *);
extern void ed25519_putsignpkbase64(struct buf *, const unsigned char *);
extern int ed25519_parsesignpk(unsigned char *, const unsigned char *,
long long);
extern int ed25519_parsesignature(unsigned char *, const unsigned char *,
long long);
#endif
/* cipher + mac */
#define sshcrypto_cipher_KEYMAX 128 /* space for 2 x sha512 */
struct sshcrypto_cipher {
const char *name;
int (*stream_xor)(unsigned char *, const unsigned char *,
unsigned long long, const unsigned char *,
const unsigned char *);
int (*auth)(unsigned char *, const unsigned char *, unsigned long long,
const unsigned char *);
long long stream_keybytes;
long long cipher_blockbytes;
long long auth_bytes;
void (*packet_put)(struct buf *);
int (*packet_get)(struct buf *);
unsigned int cryptotype;
int flagenabled;
};
extern struct sshcrypto_cipher sshcrypto_ciphers[];
extern const char *sshcrypto_cipher_name;
extern int (*sshcrypto_stream_xor)(unsigned char *, const unsigned char *,
unsigned long long, const unsigned char *,
const unsigned char *);
extern int (*sshcrypto_auth)(unsigned char *, const unsigned char *,
unsigned long long, const unsigned char *);
extern long long sshcrypto_stream_keybytes;
extern long long sshcrypto_cipher_blockbytes;
extern long long sshcrypto_auth_bytes;
extern void (*sshcrypto_packet_put)(struct buf *);
extern int (*sshcrypto_packet_get)(struct buf *);
extern int sshcrypto_cipher_select(const unsigned char *, long long);
extern int sshcrypto_cipher_macselect(const unsigned char *, long long);
extern void sshcrypto_cipher_put(struct buf *);
extern void sshcrypto_cipher_macput(struct buf *b);
/* from sshcrypto_cipher_chachapoly.c */
extern void chachapoly_packet_put(struct buf *);
extern int chachapoly_packet_get(struct buf *);
/* init/purge */
extern void sshcrypto_init(void);
extern void sshcrypto_purge(void);
#endif
|
