Line | Source | Count |
1 | | - |
2 | | - |
3 | | - |
4 | | - |
5 | | - |
6 | | - |
7 | | - |
8 | | - |
9 | | - |
10 | | - |
11 | | - |
12 | | - |
13 | | - |
14 | | - |
15 | | - |
16 | | - |
17 | | - |
18 | | - |
19 | | - |
20 | | - |
21 | | - |
22 | | - |
23 | | - |
24 | | - |
25 | | - |
26 | | - |
27 | #include "includes.h" | - |
28 | | - |
29 | #if defined(WITH_OPENSSL) && defined(OPENSSL_HAS_ECC) | - |
30 | | - |
31 | #include <sys/types.h> | - |
32 | | - |
33 | #include <signal.h> | - |
34 | #include <string.h> | - |
35 | | - |
36 | #include <openssl/bn.h> | - |
37 | #include <openssl/evp.h> | - |
38 | #include <openssl/ec.h> | - |
39 | #include <openssl/ecdh.h> | - |
40 | | - |
41 | #include "ssh2.h" | - |
42 | #include "sshkey.h" | - |
43 | #include "cipher.h" | - |
44 | #include "kex.h" | - |
45 | #include "sshbuf.h" | - |
46 | #include "digest.h" | - |
47 | #include "ssherr.h" | - |
48 | | - |
49 | int | - |
50 | kex_ecdh_hash( | - |
51 | int hash_alg, | - |
52 | const EC_GROUP *ec_group, | - |
53 | const char *client_version_string, | - |
54 | const char *server_version_string, | - |
55 | const u_char *ckexinit, size_t ckexinitlen, | - |
56 | const u_char *skexinit, size_t skexinitlen, | - |
57 | const u_char *serverhostkeyblob, size_t sbloblen, | - |
58 | const EC_POINT *client_dh_pub, | - |
59 | const EC_POINT *server_dh_pub, | - |
60 | const BIGNUM *shared_secret, | - |
61 | u_char *hash, size_t *hashlen) | - |
62 | { | - |
63 | struct sshbuf *b; | - |
64 | int r; | - |
65 | | - |
66 | if (*hashlen < ssh_digest_bytes(hash_alg))TRUE | never evaluated | FALSE | evaluated 120 times by 1 test |
| 0-120 |
67 | return SSH_ERR_INVALID_ARGUMENT; never executed: return -10; | 0 |
68 | if ((b = sshbuf_new()) == NULL)TRUE | never evaluated | FALSE | evaluated 120 times by 1 test |
| 0-120 |
69 | return SSH_ERR_ALLOC_FAIL; never executed: return -2; | 0 |
70 | if ((r = sshbuf_put_cstring(b, client_version_string)) != 0 ||TRUE | never evaluated | FALSE | evaluated 120 times by 1 test |
| 0-120 |
71 | (r = sshbuf_put_cstring(b, server_version_string)) != 0 ||TRUE | never evaluated | FALSE | evaluated 120 times by 1 test |
| 0-120 |
72 | | - |
73 | (r = sshbuf_put_u32(b, ckexinitlen+1)) != 0 ||TRUE | never evaluated | FALSE | evaluated 120 times by 1 test |
| 0-120 |
74 | (r = sshbuf_put_u8(b, SSH2_MSG_KEXINIT)) != 0 ||TRUE | never evaluated | FALSE | evaluated 120 times by 1 test |
| 0-120 |
75 | (r = sshbuf_put(b, ckexinit, ckexinitlen)) != 0 ||TRUE | never evaluated | FALSE | evaluated 120 times by 1 test |
| 0-120 |
76 | (r = sshbuf_put_u32(b, skexinitlen+1)) != 0 ||TRUE | never evaluated | FALSE | evaluated 120 times by 1 test |
| 0-120 |
77 | (r = sshbuf_put_u8(b, SSH2_MSG_KEXINIT)) != 0 ||TRUE | never evaluated | FALSE | evaluated 120 times by 1 test |
| 0-120 |
78 | (r = sshbuf_put(b, skexinit, skexinitlen)) != 0 ||TRUE | never evaluated | FALSE | evaluated 120 times by 1 test |
| 0-120 |
79 | (r = sshbuf_put_string(b, serverhostkeyblob, sbloblen)) != 0 ||TRUE | never evaluated | FALSE | evaluated 120 times by 1 test |
| 0-120 |
80 | (r = sshbuf_put_ec(b, client_dh_pub, ec_group)) != 0 ||TRUE | never evaluated | FALSE | evaluated 120 times by 1 test |
| 0-120 |
81 | (r = sshbuf_put_ec(b, server_dh_pub, ec_group)) != 0 ||TRUE | never evaluated | FALSE | evaluated 120 times by 1 test |
| 0-120 |
82 | (r = sshbuf_put_bignum2(b, shared_secret)) != 0) {TRUE | never evaluated | FALSE | evaluated 120 times by 1 test |
| 0-120 |
83 | sshbuf_free(b); | - |
84 | return r; never executed: return r; | 0 |
85 | } | - |
86 | #ifdef DEBUG_KEX | - |
87 | sshbuf_dump(b, stderr); | - |
88 | #endif | - |
89 | if (ssh_digest_buffer(hash_alg, b, hash, *hashlen) != 0) {TRUE | never evaluated | FALSE | evaluated 120 times by 1 test |
| 0-120 |
90 | sshbuf_free(b); | - |
91 | return SSH_ERR_LIBCRYPTO_ERROR; never executed: return -22; | 0 |
92 | } | - |
93 | sshbuf_free(b); | - |
94 | *hashlen = ssh_digest_bytes(hash_alg); | - |
95 | #ifdef DEBUG_KEX | - |
96 | dump_digest("hash", hash, *hashlen); | - |
97 | #endif | - |
98 | return 0;executed 120 times by 1 test: return 0; | 120 |
99 | } | - |
100 | #endif /* defined(WITH_OPENSSL) && defined(OPENSSL_HAS_ECC) */ | - |
| | |