libssh  0.8.5
The SSH library
crypto.h
1/*
2 * This file is part of the SSH Library
3 *
4 * Copyright (c) 2003-2009 by Aris Adamantiadis
5 *
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2.1 of the License, or (at your option) any later version.
10 *
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
15 *
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
19 */
20
21/*
22 * crypto.h is an include file for internal cryptographic structures of libssh
23 */
24
25#ifndef _CRYPTO_H_
26#define _CRYPTO_H_
27
28#include "config.h"
29
30#ifdef HAVE_LIBGCRYPT
31#include <gcrypt.h>
32#endif
33#include "libssh/wrapper.h"
34
35#ifdef cbc_encrypt
36#undef cbc_encrypt
37#endif
38#ifdef cbc_decrypt
39#undef cbc_decrypt
40#endif
41
42#ifdef HAVE_OPENSSL_ECDH_H
43#include <openssl/ecdh.h>
44#endif
45#include "libssh/ecdh.h"
46#include "libssh/kex.h"
47#include "libssh/curve25519.h"
48
49#define DIGEST_MAX_LEN 64
50
51enum ssh_key_exchange_e {
52 /* diffie-hellman-group1-sha1 */
53 SSH_KEX_DH_GROUP1_SHA1=1,
54 /* diffie-hellman-group14-sha1 */
55 SSH_KEX_DH_GROUP14_SHA1,
56 /* ecdh-sha2-nistp256 */
57 SSH_KEX_ECDH_SHA2_NISTP256,
58 /* ecdh-sha2-nistp384 */
59 SSH_KEX_ECDH_SHA2_NISTP384,
60 /* ecdh-sha2-nistp521 */
61 SSH_KEX_ECDH_SHA2_NISTP521,
62 /* curve25519-sha256@libssh.org */
63 SSH_KEX_CURVE25519_SHA256_LIBSSH_ORG,
64 /* curve25519-sha256 */
65 SSH_KEX_CURVE25519_SHA256,
66 /* diffie-hellman-group16-sha512 */
67 SSH_KEX_DH_GROUP16_SHA512,
68 /* diffie-hellman-group18-sha512 */
69 SSH_KEX_DH_GROUP18_SHA512,
70};
71
72enum ssh_cipher_e {
73 SSH_NO_CIPHER=0,
74 SSH_BLOWFISH_CBC,
75 SSH_3DES_CBC,
76 SSH_AES128_CBC,
77 SSH_AES192_CBC,
78 SSH_AES256_CBC,
79 SSH_AES128_CTR,
80 SSH_AES192_CTR,
81 SSH_AES256_CTR
82};
83
84struct ssh_crypto_struct {
85 bignum e,f,x,k,y;
86#ifdef HAVE_ECDH
87#ifdef HAVE_OPENSSL_ECC
88 EC_KEY *ecdh_privkey;
89#elif defined HAVE_GCRYPT_ECC
90 gcry_sexp_t ecdh_privkey;
91#elif defined HAVE_LIBMBEDCRYPTO
92 mbedtls_ecp_keypair *ecdh_privkey;
93#endif
94 ssh_string ecdh_client_pubkey;
95 ssh_string ecdh_server_pubkey;
96#endif
97#ifdef HAVE_CURVE25519
98 ssh_curve25519_privkey curve25519_privkey;
99 ssh_curve25519_pubkey curve25519_client_pubkey;
100 ssh_curve25519_pubkey curve25519_server_pubkey;
101#endif
102 ssh_string dh_server_signature; /* information used by dh_handshake. */
103 size_t digest_len; /* len of all the fields below */
104 unsigned char *session_id;
105 unsigned char *secret_hash; /* Secret hash is same as session id until re-kex */
106 unsigned char *encryptIV;
107 unsigned char *decryptIV;
108 unsigned char *decryptkey;
109 unsigned char *encryptkey;
110 unsigned char *encryptMAC;
111 unsigned char *decryptMAC;
112 unsigned char hmacbuf[DIGEST_MAX_LEN];
113 struct ssh_cipher_struct *in_cipher, *out_cipher; /* the cipher structures/objects */
114 enum ssh_hmac_e in_hmac, out_hmac; /* the MAC algorithms used */
115
116 ssh_key server_pubkey;
117 int do_compress_out; /* idem */
118 int do_compress_in; /* don't set them, set the option instead */
119 int delayed_compress_in; /* Use of zlib@openssh.org */
120 int delayed_compress_out;
121 void *compress_out_ctx; /* don't touch it */
122 void *compress_in_ctx; /* really, don't */
123 /* kex sent by server, client, and mutually elected methods */
124 struct ssh_kex_struct server_kex;
125 struct ssh_kex_struct client_kex;
126 char *kex_methods[SSH_KEX_METHODS];
127 enum ssh_key_exchange_e kex_type;
128 enum ssh_mac_e mac_type; /* Mac operations to use for key gen */
129};
130
131struct ssh_cipher_struct {
132 const char *name; /* ssh name of the algorithm */
133 unsigned int blocksize; /* blocksize of the algo */
134 enum ssh_cipher_e ciphertype;
135 uint32_t lenfield_blocksize; /* blocksize of the packet length field */
136 size_t keylen; /* length of the key structure */
137#ifdef HAVE_LIBGCRYPT
138 gcry_cipher_hd_t *key;
139#elif defined HAVE_LIBCRYPTO
140 struct ssh_3des_key_schedule *des3_key;
141 struct ssh_aes_key_schedule *aes_key;
142 const EVP_CIPHER *cipher;
143 EVP_CIPHER_CTX *ctx;
144#elif defined HAVE_LIBMBEDCRYPTO
145 mbedtls_cipher_context_t encrypt_ctx;
146 mbedtls_cipher_context_t decrypt_ctx;
147 mbedtls_cipher_type_t type;
148#endif
149 struct chacha20_poly1305_keysched *chacha20_schedule;
150 unsigned int keysize; /* bytes of key used. != keylen */
151 size_t tag_size; /* overhead required for tag */
152 /* sets the new key for immediate use */
153 int (*set_encrypt_key)(struct ssh_cipher_struct *cipher, void *key, void *IV);
154 int (*set_decrypt_key)(struct ssh_cipher_struct *cipher, void *key, void *IV);
155 void (*encrypt)(struct ssh_cipher_struct *cipher, void *in, void *out,
156 unsigned long len);
157 void (*decrypt)(struct ssh_cipher_struct *cipher, void *in, void *out,
158 unsigned long len);
159 void (*aead_encrypt)(struct ssh_cipher_struct *cipher, void *in, void *out,
160 size_t len, uint8_t *mac, uint64_t seq);
161 int (*aead_decrypt_length)(struct ssh_cipher_struct *cipher, void *in,
162 uint8_t *out, size_t len, uint64_t seq);
163 int (*aead_decrypt)(struct ssh_cipher_struct *cipher, void *complete_packet, uint8_t *out,
164 size_t encrypted_size, uint64_t seq);
165 void (*cleanup)(struct ssh_cipher_struct *cipher);
166};
167
168const struct ssh_cipher_struct *ssh_get_chacha20poly1305_cipher(void);
169
170#endif /* _CRYPTO_H_ */
chacha20_poly1305_keysched
Definition: chachapoly.c:32
ssh_cipher_struct
Definition: crypto.h:131
ssh_crypto_struct
Definition: crypto.h:84
ssh_kex_struct
Definition: kex.h:29
ssh_key_struct
Definition: pki.h:42
ssh_string_struct
Definition: string.h:29
Generated by doxygen 1.9.3