gssapi: Add support for ECDH GSSAPI KEX

In particular, gss-nistp256-sha256-* and
gss-curve25519-sha256-*.

Signed-off-by: Pavol Žáčik <pzacik@redhat.com>
Reviewed-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
This commit is contained in:
Pavol Žáčik
2025-11-25 11:52:48 +01:00
committed by Jakub Jelen
parent 5fed1bc8be
commit 88c2ea6752
16 changed files with 467 additions and 323 deletions

View File

@@ -95,7 +95,10 @@ static void setup_config(void **state)
/* Enable GSSAPI key exchange */
ss->gssapi_key_exchange = true;
ss->gssapi_key_exchange_algs = "gss-group14-sha256-,gss-group16-sha512-";
ss->gssapi_key_exchange_algs = "gss-group14-sha256-,"
"gss-group16-sha512-,"
"gss-nistp256-sha256-,"
"gss-curve25519-sha256-";
tss->state = s;
tss->ss = ss;