mirror of
https://git.libssh.org/projects/libssh.git
synced 2026-02-05 12:50:30 +09:00
46090facba
The commit also propares the internals throughout the code base for the inclusion of a new AEAD cipher, because previously, the source code counted only with chacha20-poly1305 cipher, which is very specific in many cases. The SSH_HMAC_AEAD_GCM mac algorithm is not actually used, but the name needed to be defined so we can match in the algorithms selection per OpenSSH specification (MACs are ignored in case GCM is select as a cipher [1]). If the provided OpenSSL does not provide EVP_aes_128_gcm() function, the AES-GCM ciphers will not be compiled in. [1] https://cvsweb.openbsd.org/src/usr.bin/ssh/PROTOCOL.chacha20poly1305?annotate=HEAD Signed-off-by: Jakub Jelen <jjelen@redhat.com> Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
120 lines
3.7 KiB
C
120 lines
3.7 KiB
C
/*
|
|
* This file is part of the SSH Library
|
|
*
|
|
* Copyright (c) 2009 by Aris Adamantiadis
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation; either
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
|
*/
|
|
|
|
#ifndef WRAPPER_H_
|
|
#define WRAPPER_H_
|
|
|
|
#include "config.h"
|
|
#include "libssh/libssh.h"
|
|
#include "libssh/libcrypto.h"
|
|
#include "libssh/libgcrypt.h"
|
|
#include "libssh/libmbedcrypto.h"
|
|
|
|
enum ssh_digest_e {
|
|
SSH_DIGEST_AUTO=0,
|
|
SSH_DIGEST_SHA1=1,
|
|
SSH_DIGEST_SHA256,
|
|
SSH_DIGEST_SHA512
|
|
};
|
|
|
|
enum ssh_mac_e {
|
|
SSH_MAC_SHA1=1,
|
|
SSH_MAC_SHA256,
|
|
SSH_MAC_SHA384,
|
|
SSH_MAC_SHA512
|
|
};
|
|
|
|
enum ssh_hmac_e {
|
|
SSH_HMAC_SHA1 = 1,
|
|
SSH_HMAC_SHA256,
|
|
SSH_HMAC_SHA384,
|
|
SSH_HMAC_SHA512,
|
|
SSH_HMAC_MD5,
|
|
SSH_HMAC_AEAD_POLY1305,
|
|
SSH_HMAC_AEAD_GCM
|
|
};
|
|
|
|
enum ssh_des_e {
|
|
SSH_3DES,
|
|
SSH_DES
|
|
};
|
|
|
|
struct ssh_hmac_struct {
|
|
const char* name;
|
|
enum ssh_hmac_e hmac_type;
|
|
};
|
|
|
|
struct ssh_cipher_struct;
|
|
|
|
typedef struct ssh_mac_ctx_struct *ssh_mac_ctx;
|
|
MD5CTX md5_init(void);
|
|
void md5_update(MD5CTX c, const void *data, unsigned long len);
|
|
void md5_final(unsigned char *md,MD5CTX c);
|
|
|
|
SHACTX sha1_init(void);
|
|
void sha1_update(SHACTX c, const void *data, unsigned long len);
|
|
void sha1_final(unsigned char *md,SHACTX c);
|
|
void sha1(unsigned char *digest,int len,unsigned char *hash);
|
|
|
|
SHA256CTX sha256_init(void);
|
|
void sha256_update(SHA256CTX c, const void *data, unsigned long len);
|
|
void sha256_final(unsigned char *md,SHA256CTX c);
|
|
void sha256(unsigned char *digest, int len, unsigned char *hash);
|
|
|
|
SHA384CTX sha384_init(void);
|
|
void sha384_update(SHA384CTX c, const void *data, unsigned long len);
|
|
void sha384_final(unsigned char *md,SHA384CTX c);
|
|
void sha384(unsigned char *digest, int len, unsigned char *hash);
|
|
|
|
SHA512CTX sha512_init(void);
|
|
void sha512_update(SHA512CTX c, const void *data, unsigned long len);
|
|
void sha512_final(unsigned char *md,SHA512CTX c);
|
|
void sha512(unsigned char *digest, int len, unsigned char *hash);
|
|
|
|
void evp(int nid, unsigned char *digest, int len, unsigned char *hash, unsigned int *hlen);
|
|
EVPCTX evp_init(int nid);
|
|
void evp_update(EVPCTX ctx, const void *data, unsigned long len);
|
|
void evp_final(EVPCTX ctx, unsigned char *md, unsigned int *mdlen);
|
|
|
|
ssh_mac_ctx ssh_mac_ctx_init(enum ssh_mac_e type);
|
|
void ssh_mac_update(ssh_mac_ctx ctx, const void *data, unsigned long len);
|
|
void ssh_mac_final(unsigned char *md, ssh_mac_ctx ctx);
|
|
|
|
HMACCTX hmac_init(const void *key,int len, enum ssh_hmac_e type);
|
|
void hmac_update(HMACCTX c, const void *data, unsigned long len);
|
|
void hmac_final(HMACCTX ctx,unsigned char *hashmacbuf,unsigned int *len);
|
|
size_t hmac_digest_len(enum ssh_hmac_e type);
|
|
|
|
int crypt_set_algorithms_client(ssh_session session);
|
|
int crypt_set_algorithms_server(ssh_session session);
|
|
struct ssh_crypto_struct *crypto_new(void);
|
|
void crypto_free(struct ssh_crypto_struct *crypto);
|
|
|
|
void ssh_reseed(void);
|
|
int ssh_crypto_init(void);
|
|
void ssh_crypto_finalize(void);
|
|
|
|
void ssh_cipher_clear(struct ssh_cipher_struct *cipher);
|
|
struct ssh_hmac_struct *ssh_get_hmactab(void);
|
|
struct ssh_cipher_struct *ssh_get_ciphertab(void);
|
|
const char *ssh_hmac_type_to_string(enum ssh_hmac_e hmac_type);
|
|
|
|
#endif /* WRAPPER_H_ */
|