blob: 3794f21278c6553be835adefa8c459562270c44a [file] [log] [blame]
djm@openbsd.orgb7689152016-09-28 21:44:52 +00001/* $OpenBSD: kex.h,v 1.81 2016/09/28 21:44:52 djm Exp $ */
Ben Lindstrom36579d32001-01-29 07:39:26 +00002
Damien Miller33b13562000-04-04 14:38:59 +10003/*
Ben Lindstrom44697232001-07-04 03:32:30 +00004 * Copyright (c) 2000, 2001 Markus Friedl. All rights reserved.
Damien Miller33b13562000-04-04 14:38:59 +10005 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 * 1. Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
11 * 2. Redistributions in binary form must reproduce the above copyright
12 * notice, this list of conditions and the following disclaimer in the
13 * documentation and/or other materials provided with the distribution.
Damien Miller33b13562000-04-04 14:38:59 +100014 *
15 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
16 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
17 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
18 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
19 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
20 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
21 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
22 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
23 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
24 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
25 */
26#ifndef KEX_H
27#define KEX_H
28
markus@openbsd.org128343b2015-01-13 19:31:40 +000029#include "mac.h"
djm@openbsd.org1129dcf2015-01-15 09:40:00 +000030#include "buffer.h" /* XXX for typedef */
31#include "key.h" /* XXX for typedef */
markus@openbsd.org128343b2015-01-13 19:31:40 +000032
markus@openbsd.org57d10cb2015-01-19 20:16:15 +000033#ifdef WITH_LEAKMALLOC
34#include "leakmalloc.h"
Darren Tucker8ccb7392010-09-10 12:28:24 +100035#endif
Damien Millerd8337c52006-07-24 14:14:19 +100036
Damien Miller773dda22015-01-30 23:10:17 +110037#ifdef WITH_OPENSSL
38# ifdef OPENSSL_HAS_ECC
39# include <openssl/ec.h>
40# else /* OPENSSL_HAS_ECC */
41# define EC_KEY void
42# define EC_GROUP void
43# define EC_POINT void
44# endif /* OPENSSL_HAS_ECC */
45#else /* WITH_OPENSSL */
46# define EC_KEY void
47# define EC_GROUP void
48# define EC_POINT void
49#endif /* WITH_OPENSSL */
50
Darren Tucker5b48cdd2009-06-21 18:15:25 +100051#define KEX_COOKIE_LEN 16
52
djm@openbsd.orgb97739d2016-09-22 21:15:41 +000053#define KEX_DH1 "diffie-hellman-group1-sha1"
54#define KEX_DH14_SHA1 "diffie-hellman-group14-sha1"
55#define KEX_DH14_SHA256 "diffie-hellman-group14-sha256"
56#define KEX_DH16_SHA512 "diffie-hellman-group16-sha512"
57#define KEX_DH18_SHA512 "diffie-hellman-group18-sha512"
58#define KEX_DHGEX_SHA1 "diffie-hellman-group-exchange-sha1"
59#define KEX_DHGEX_SHA256 "diffie-hellman-group-exchange-sha256"
60#define KEX_ECDH_SHA2_NISTP256 "ecdh-sha2-nistp256"
61#define KEX_ECDH_SHA2_NISTP384 "ecdh-sha2-nistp384"
62#define KEX_ECDH_SHA2_NISTP521 "ecdh-sha2-nistp521"
63#define KEX_CURVE25519_SHA256 "curve25519-sha256"
64#define KEX_CURVE25519_SHA256_OLD "curve25519-sha256@libssh.org"
Damien Miller33b13562000-04-04 14:38:59 +100065
Damien Miller9786e6e2005-07-26 21:54:56 +100066#define COMP_NONE 0
djm@openbsd.orgb7689152016-09-28 21:44:52 +000067#define COMP_ZLIB 1
68#define COMP_DELAYED 2
Damien Miller9786e6e2005-07-26 21:54:56 +100069
markus@openbsd.org57d10cb2015-01-19 20:16:15 +000070#define CURVE25519_SIZE 32
71
Damien Miller33b13562000-04-04 14:38:59 +100072enum kex_init_proposals {
73 PROPOSAL_KEX_ALGS,
74 PROPOSAL_SERVER_HOST_KEY_ALGS,
75 PROPOSAL_ENC_ALGS_CTOS,
76 PROPOSAL_ENC_ALGS_STOC,
77 PROPOSAL_MAC_ALGS_CTOS,
78 PROPOSAL_MAC_ALGS_STOC,
79 PROPOSAL_COMP_ALGS_CTOS,
80 PROPOSAL_COMP_ALGS_STOC,
81 PROPOSAL_LANG_CTOS,
82 PROPOSAL_LANG_STOC,
83 PROPOSAL_MAX
84};
85
86enum kex_modes {
87 MODE_IN,
88 MODE_OUT,
89 MODE_MAX
90};
91
Damien Miller874d77b2000-10-14 16:23:11 +110092enum kex_exchange {
Damien Miller8e7fb332003-02-24 12:03:03 +110093 KEX_DH_GRP1_SHA1,
Damien Millerf675fc42004-06-15 10:30:09 +100094 KEX_DH_GRP14_SHA1,
djm@openbsd.org0e8eeec2016-05-02 10:26:04 +000095 KEX_DH_GRP14_SHA256,
96 KEX_DH_GRP16_SHA512,
97 KEX_DH_GRP18_SHA512,
Damien Miller8e7fb332003-02-24 12:03:03 +110098 KEX_DH_GEX_SHA1,
Damien Millera63128d2006-03-15 12:08:28 +110099 KEX_DH_GEX_SHA256,
Damien Millereb8b60e2010-08-31 22:41:14 +1000100 KEX_ECDH_SHA2,
Damien Miller1e124262013-11-04 08:26:52 +1100101 KEX_C25519_SHA256,
Damien Miller8e7fb332003-02-24 12:03:03 +1100102 KEX_MAX
Damien Miller874d77b2000-10-14 16:23:11 +1100103};
Kevin Stevesef4eea92001-02-05 12:42:17 +0000104
Ben Lindstrom2d90e002001-04-04 02:00:54 +0000105#define KEX_INIT_SENT 0x0001
106
markus@openbsd.org091c3022015-01-19 19:52:16 +0000107struct sshenc {
Ben Lindstrom2d90e002001-04-04 02:00:54 +0000108 char *name;
markus@openbsd.org091c3022015-01-19 19:52:16 +0000109 const struct sshcipher *cipher;
Ben Lindstrom2d90e002001-04-04 02:00:54 +0000110 int enabled;
Damien Miller963f6b22002-02-19 15:21:23 +1100111 u_int key_len;
Damien Miller1d75abf2013-01-09 16:12:19 +1100112 u_int iv_len;
Damien Miller963f6b22002-02-19 15:21:23 +1100113 u_int block_size;
Ben Lindstrom46c16222000-12-22 01:43:59 +0000114 u_char *key;
115 u_char *iv;
Damien Miller33b13562000-04-04 14:38:59 +1000116};
markus@openbsd.org091c3022015-01-19 19:52:16 +0000117struct sshcomp {
118 u_int type;
Ben Lindstrom2d90e002001-04-04 02:00:54 +0000119 int enabled;
120 char *name;
Damien Miller33b13562000-04-04 14:38:59 +1000121};
markus@openbsd.org091c3022015-01-19 19:52:16 +0000122struct newkeys {
123 struct sshenc enc;
124 struct sshmac mac;
markus@openbsd.org57d10cb2015-01-19 20:16:15 +0000125 struct sshcomp comp;
Ben Lindstrom2d90e002001-04-04 02:00:54 +0000126};
markus@openbsd.org57d10cb2015-01-19 20:16:15 +0000127
128struct ssh;
129
markus@openbsd.org091c3022015-01-19 19:52:16 +0000130struct kex {
Ben Lindstrom2d90e002001-04-04 02:00:54 +0000131 u_char *session_id;
markus@openbsd.org091c3022015-01-19 19:52:16 +0000132 size_t session_id_len;
133 struct newkeys *newkeys[MODE_MAX];
Damien Millereccb9de2005-06-17 12:59:34 +1000134 u_int we_need;
Damien Miller76eea4a2014-01-26 09:37:25 +1100135 u_int dh_need;
Ben Lindstrom2d90e002001-04-04 02:00:54 +0000136 int server;
137 char *name;
markus@openbsd.org76c9fbb2015-12-04 16:41:28 +0000138 char *hostkey_alg;
Ben Lindstrom2d90e002001-04-04 02:00:54 +0000139 int hostkey_type;
djm@openbsd.org5104db72015-01-26 06:10:03 +0000140 int hostkey_nid;
markus@openbsd.org57d10cb2015-01-19 20:16:15 +0000141 u_int kex_type;
markus@openbsd.org76c9fbb2015-12-04 16:41:28 +0000142 int rsa_sha2;
143 int ext_info_c;
markus@openbsd.org091c3022015-01-19 19:52:16 +0000144 struct sshbuf *my;
145 struct sshbuf *peer;
Damien Miller97c91f62006-04-23 12:08:37 +1000146 sig_atomic_t done;
markus@openbsd.org57d10cb2015-01-19 20:16:15 +0000147 u_int flags;
Damien Millerb3051d02014-01-10 10:58:53 +1100148 int hash_alg;
Damien Millerea111192013-04-23 19:24:32 +1000149 int ec_nid;
Ben Lindstrom2d90e002001-04-04 02:00:54 +0000150 char *client_version_string;
151 char *server_version_string;
djm@openbsd.orgf3199122015-07-29 04:43:06 +0000152 char *failed_choice;
markus@openbsd.org57d10cb2015-01-19 20:16:15 +0000153 int (*verify_host_key)(struct sshkey *, struct ssh *);
djm@openbsd.org5104db72015-01-26 06:10:03 +0000154 struct sshkey *(*load_host_public_key)(int, int, struct ssh *);
155 struct sshkey *(*load_host_private_key)(int, int, struct ssh *);
djm@openbsd.org523463a2015-02-16 22:13:32 +0000156 int (*host_key_index)(struct sshkey *, int, struct ssh *);
markus@openbsd.org76c9fbb2015-12-04 16:41:28 +0000157 int (*sign)(struct sshkey *, struct sshkey *, u_char **, size_t *,
158 const u_char *, size_t, const char *, u_int);
markus@openbsd.org57d10cb2015-01-19 20:16:15 +0000159 int (*kex[KEX_MAX])(struct ssh *);
160 /* kex specific state */
161 DH *dh; /* DH */
162 u_int min, max, nbits; /* GEX */
163 EC_KEY *ec_client_key; /* ECDH */
164 const EC_GROUP *ec_group; /* ECDH */
165 u_char c25519_client_key[CURVE25519_SIZE]; /* 25519 */
166 u_char c25519_client_pubkey[CURVE25519_SIZE]; /* 25519 */
Damien Miller33b13562000-04-04 14:38:59 +1000167};
168
Damien Millerd5f62bf2010-09-24 22:11:14 +1000169int kex_names_valid(const char *);
Damien Miller690d9892013-11-08 12:16:49 +1100170char *kex_alg_list(char);
djm@openbsd.orgf9eca242015-07-30 00:01:34 +0000171char *kex_names_cat(const char *, const char *);
172int kex_assemble_names(const char *, char **);
Damien Millerd5f62bf2010-09-24 22:11:14 +1000173
markus@openbsd.org57d10cb2015-01-19 20:16:15 +0000174int kex_new(struct ssh *, char *[PROPOSAL_MAX], struct kex **);
175int kex_setup(struct ssh *, char *[PROPOSAL_MAX]);
176void kex_free_newkeys(struct newkeys *);
177void kex_free(struct kex *);
Ben Lindstrom238abf62001-04-04 17:52:53 +0000178
markus@openbsd.org57d10cb2015-01-19 20:16:15 +0000179int kex_buf2prop(struct sshbuf *, int *, char ***);
180int kex_prop2buf(struct sshbuf *, char *proposal[PROPOSAL_MAX]);
181void kex_prop_free(char **);
182
183int kex_send_kexinit(struct ssh *);
markus@openbsd.org3fdc88a2015-01-19 20:07:45 +0000184int kex_input_kexinit(int, u_int32_t, void *);
markus@openbsd.org76c9fbb2015-12-04 16:41:28 +0000185int kex_input_ext_info(int, u_int32_t, void *);
markus@openbsd.org57d10cb2015-01-19 20:16:15 +0000186int kex_derive_keys(struct ssh *, u_char *, u_int, const struct sshbuf *);
187int kex_derive_keys_bn(struct ssh *, u_char *, u_int, const BIGNUM *);
188int kex_send_newkeys(struct ssh *);
djm@openbsd.org19bcf2e2016-02-08 10:57:07 +0000189int kex_start_rekex(struct ssh *);
Damien Miller33b13562000-04-04 14:38:59 +1000190
markus@openbsd.org57d10cb2015-01-19 20:16:15 +0000191int kexdh_client(struct ssh *);
192int kexdh_server(struct ssh *);
193int kexgex_client(struct ssh *);
194int kexgex_server(struct ssh *);
195int kexecdh_client(struct ssh *);
196int kexecdh_server(struct ssh *);
197int kexc25519_client(struct ssh *);
198int kexc25519_server(struct ssh *);
Damien Miller8e7fb332003-02-24 12:03:03 +1100199
djm@openbsd.org0e8eeec2016-05-02 10:26:04 +0000200int kex_dh_hash(int, const char *, const char *,
markus@openbsd.org57d10cb2015-01-19 20:16:15 +0000201 const u_char *, size_t, const u_char *, size_t, const u_char *, size_t,
202 const BIGNUM *, const BIGNUM *, const BIGNUM *, u_char *, size_t *);
Damien Miller1e124262013-11-04 08:26:52 +1100203
markus@openbsd.org57d10cb2015-01-19 20:16:15 +0000204int kexgex_hash(int, const char *, const char *,
205 const u_char *, size_t, const u_char *, size_t, const u_char *, size_t,
206 int, int, int,
207 const BIGNUM *, const BIGNUM *, const BIGNUM *,
208 const BIGNUM *, const BIGNUM *,
209 u_char *, size_t *);
210
211int kex_ecdh_hash(int, const EC_GROUP *, const char *, const char *,
212 const u_char *, size_t, const u_char *, size_t, const u_char *, size_t,
213 const EC_POINT *, const EC_POINT *, const BIGNUM *, u_char *, size_t *);
214
djm@openbsd.org1a31d022016-05-02 08:49:03 +0000215int kex_c25519_hash(int, const char *, const char *,
216 const u_char *, size_t, const u_char *, size_t,
217 const u_char *, size_t, const u_char *, const u_char *,
markus@openbsd.org57d10cb2015-01-19 20:16:15 +0000218 const u_char *, size_t, u_char *, size_t *);
219
220void kexc25519_keygen(u_char key[CURVE25519_SIZE], u_char pub[CURVE25519_SIZE])
Damien Miller686c7d92014-05-15 14:37:03 +1000221 __attribute__((__bounded__(__minbytes__, 1, CURVE25519_SIZE)))
222 __attribute__((__bounded__(__minbytes__, 2, CURVE25519_SIZE)));
markus@openbsd.org57d10cb2015-01-19 20:16:15 +0000223int kexc25519_shared_key(const u_char key[CURVE25519_SIZE],
224 const u_char pub[CURVE25519_SIZE], struct sshbuf *out)
Damien Miller686c7d92014-05-15 14:37:03 +1000225 __attribute__((__bounded__(__minbytes__, 1, CURVE25519_SIZE)))
226 __attribute__((__bounded__(__minbytes__, 2, CURVE25519_SIZE)));
Damien Miller8e7fb332003-02-24 12:03:03 +1100227
markus@openbsd.org57d10cb2015-01-19 20:16:15 +0000228int
Darren Tuckere4ab1152004-05-24 10:14:24 +1000229derive_ssh1_session_id(BIGNUM *, BIGNUM *, u_int8_t[8], u_int8_t[16]);
230
Damien Millereb8b60e2010-08-31 22:41:14 +1000231#if defined(DEBUG_KEX) || defined(DEBUG_KEXDH) || defined(DEBUG_KEXECDH)
Ben Lindstrom16ae3d02001-07-04 04:02:36 +0000232void dump_digest(char *, u_char *, int);
Ben Lindstrom20d7c7b2001-04-04 01:56:17 +0000233#endif
234
Damien Miller773dda22015-01-30 23:10:17 +1100235#if !defined(WITH_OPENSSL) || !defined(OPENSSL_HAS_ECC)
236# undef EC_KEY
237# undef EC_GROUP
238# undef EC_POINT
239#endif
240
Damien Miller33b13562000-04-04 14:38:59 +1000241#endif