Line | Source | Count |
1 | | - |
2 | | - |
3 | | - |
4 | | - |
5 | | - |
6 | | - |
7 | | - |
8 | | - |
9 | | - |
10 | | - |
11 | | - |
12 | | - |
13 | | - |
14 | | - |
15 | | - |
16 | | - |
17 | | - |
18 | | - |
19 | | - |
20 | | - |
21 | | - |
22 | | - |
23 | | - |
24 | | - |
25 | | - |
26 | | - |
27 | #include "includes.h" | - |
28 | | - |
29 | #ifdef WITH_OPENSSL | - |
30 | | - |
31 | #include <sys/types.h> | - |
32 | | - |
33 | #include <openssl/evp.h> | - |
34 | #include <signal.h> | - |
35 | | - |
36 | #include "openbsd-compat/openssl-compat.h" | - |
37 | | - |
38 | #include "sshkey.h" | - |
39 | #include "cipher.h" | - |
40 | #include "kex.h" | - |
41 | #include "ssh2.h" | - |
42 | #include "ssherr.h" | - |
43 | #include "sshbuf.h" | - |
44 | #include "digest.h" | - |
45 | | - |
46 | int | - |
47 | kexgex_hash( | - |
48 | int hash_alg, | - |
49 | const char *client_version_string, | - |
50 | const char *server_version_string, | - |
51 | const u_char *ckexinit, size_t ckexinitlen, | - |
52 | const u_char *skexinit, size_t skexinitlen, | - |
53 | const u_char *serverhostkeyblob, size_t sbloblen, | - |
54 | int min, int wantbits, int max, | - |
55 | const BIGNUM *prime, | - |
56 | const BIGNUM *gen, | - |
57 | const BIGNUM *client_dh_pub, | - |
58 | const BIGNUM *server_dh_pub, | - |
59 | const BIGNUM *shared_secret, | - |
60 | u_char *hash, size_t *hashlen) | - |
61 | { | - |
62 | struct sshbuf *b; | - |
63 | int r; | - |
64 | | - |
65 | if (*hashlen < ssh_digest_bytes(SSH_DIGEST_SHA1))TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
66 | return SSH_ERR_INVALID_ARGUMENT; never executed: return -10; | 0 |
67 | if ((b = sshbuf_new()) == NULL)TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
68 | return SSH_ERR_ALLOC_FAIL; never executed: return -2; | 0 |
69 | if ((r = sshbuf_put_cstring(b, client_version_string)) != 0 ||TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
70 | (r = sshbuf_put_cstring(b, server_version_string)) != 0 ||TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
71 | | - |
72 | (r = sshbuf_put_u32(b, ckexinitlen+1)) != 0 ||TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
73 | (r = sshbuf_put_u8(b, SSH2_MSG_KEXINIT)) != 0 ||TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
74 | (r = sshbuf_put(b, ckexinit, ckexinitlen)) != 0 ||TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
75 | (r = sshbuf_put_u32(b, skexinitlen+1)) != 0 ||TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
76 | (r = sshbuf_put_u8(b, SSH2_MSG_KEXINIT)) != 0 ||TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
77 | (r = sshbuf_put(b, skexinit, skexinitlen)) != 0 ||TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
78 | (r = sshbuf_put_string(b, serverhostkeyblob, sbloblen)) != 0 ||TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
79 | (min != -1 && (r = sshbuf_put_u32(b, min)) != 0) ||TRUE | evaluated 80 times by 1 test | FALSE | never evaluated |
TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
80 | (r = sshbuf_put_u32(b, wantbits)) != 0 ||TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
81 | (max != -1 && (r = sshbuf_put_u32(b, max)) != 0) ||TRUE | evaluated 80 times by 1 test | FALSE | never evaluated |
TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
82 | (r = sshbuf_put_bignum2(b, prime)) != 0 ||TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
83 | (r = sshbuf_put_bignum2(b, gen)) != 0 ||TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
84 | (r = sshbuf_put_bignum2(b, client_dh_pub)) != 0 ||TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
85 | (r = sshbuf_put_bignum2(b, server_dh_pub)) != 0 ||TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
86 | (r = sshbuf_put_bignum2(b, shared_secret)) != 0) {TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
87 | sshbuf_free(b); | - |
88 | return r; never executed: return r; | 0 |
89 | } | - |
90 | #ifdef DEBUG_KEXDH | - |
91 | sshbuf_dump(b, stderr); | - |
92 | #endif | - |
93 | if (ssh_digest_buffer(hash_alg, b, hash, *hashlen) != 0) {TRUE | never evaluated | FALSE | evaluated 80 times by 1 test |
| 0-80 |
94 | sshbuf_free(b); | - |
95 | return SSH_ERR_LIBCRYPTO_ERROR; never executed: return -22; | 0 |
96 | } | - |
97 | sshbuf_free(b); | - |
98 | *hashlen = ssh_digest_bytes(hash_alg); | - |
99 | #ifdef DEBUG_KEXDH | - |
100 | dump_digest("hash", hash, *hashlen); | - |
101 | #endif | - |
102 | return 0;executed 80 times by 1 test: return 0; | 80 |
103 | } | - |
104 | #endif /* WITH_OPENSSL */ | - |
| | |