blob: ce533670b85a10220eb2b52f0625942ed9f3adc7 [file] [log] [blame]
Damien Millerd4a8b7e1999-10-27 13:42:43 +10001/*
Damien Miller95def091999-11-25 00:26:21 +11002 * Author: Tatu Ylonen <ylo@cs.hut.fi>
Damien Miller95def091999-11-25 00:26:21 +11003 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
4 * All rights reserved
Damien Miller4af51302000-04-16 11:18:38 +10005 *
Damien Millere4340be2000-09-16 13:29:08 +11006 * As far as I am concerned, the code I have written for this software
7 * can be used freely for any purpose. Any derived versions of this
8 * software must be clearly marked as such, and if the derived work is
9 * incompatible with the protocol description in the RFC file, it must be
10 * called by a name other than "ssh" or "Secure Shell".
Damien Miller4af51302000-04-16 11:18:38 +100011 *
Damien Millere4340be2000-09-16 13:29:08 +110012 *
13 * Copyright (c) 1999 Niels Provos. All rights reserved.
Ben Lindstrom44697232001-07-04 03:32:30 +000014 * Copyright (c) 1999, 2000 Markus Friedl. All rights reserved.
Damien Millere4340be2000-09-16 13:29:08 +110015 *
16 * Redistribution and use in source and binary forms, with or without
17 * modification, are permitted provided that the following conditions
18 * are met:
19 * 1. Redistributions of source code must retain the above copyright
20 * notice, this list of conditions and the following disclaimer.
21 * 2. Redistributions in binary form must reproduce the above copyright
22 * notice, this list of conditions and the following disclaimer in the
23 * documentation and/or other materials provided with the distribution.
24 *
25 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
26 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
27 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
28 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
29 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
30 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
31 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
32 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
33 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
34 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Damien Miller95def091999-11-25 00:26:21 +110035 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100036
37#include "includes.h"
Damien Millerf5399c22003-05-18 20:53:59 +100038RCSID("$OpenBSD: cipher.c,v 1.65 2003/05/17 04:27:52 markus Exp $");
Damien Millerd4a8b7e1999-10-27 13:42:43 +100039
Damien Miller78928792000-04-12 20:17:38 +100040#include "xmalloc.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000041#include "log.h"
42#include "cipher.h"
Damien Millerd4a8b7e1999-10-27 13:42:43 +100043
44#include <openssl/md5.h>
Damien Miller21cf4e02002-02-19 15:26:42 +110045
Damien Millerc7375ac2002-03-11 10:51:17 +110046#if OPENSSL_VERSION_NUMBER < 0x00906000L
47#define SSH_OLD_EVP
48#define EVP_CIPHER_CTX_get_app_data(e) ((e)->app_data)
49#endif
50
Ben Lindstromf088f432002-06-06 20:50:07 +000051#if OPENSSL_VERSION_NUMBER < 0x00907000L
Damien Miller3a3261f2003-05-15 13:37:19 +100052extern const EVP_CIPHER *evp_rijndael(void);
53extern void ssh_rijndael_iv(EVP_CIPHER_CTX *, int, u_char *, u_int);
Ben Lindstromf088f432002-06-06 20:50:07 +000054#endif
Damien Miller3a3261f2003-05-15 13:37:19 +100055extern const EVP_CIPHER *evp_ssh1_bf(void);
56extern const EVP_CIPHER *evp_ssh1_3des(void);
57extern void ssh1_3des_iv(EVP_CIPHER_CTX *, int, u_char *, int);
Damien Millerf5399c22003-05-18 20:53:59 +100058extern const EVP_CIPHER *evp_aes_128_ctr(void);
59extern void ssh_aes_ctr_iv(EVP_CIPHER_CTX *, int, u_char *, u_int);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100060
Damien Miller963f6b22002-02-19 15:21:23 +110061struct Cipher {
62 char *name;
63 int number; /* for ssh1 only */
64 u_int block_size;
65 u_int key_len;
Ben Lindstrom6a246412002-06-06 19:48:16 +000066 const EVP_CIPHER *(*evptype)(void);
Damien Miller21cf4e02002-02-19 15:26:42 +110067} ciphers[] = {
68 { "none", SSH_CIPHER_NONE, 8, 0, EVP_enc_null },
69 { "des", SSH_CIPHER_DES, 8, 8, EVP_des_cbc },
70 { "3des", SSH_CIPHER_3DES, 8, 16, evp_ssh1_3des },
71 { "blowfish", SSH_CIPHER_BLOWFISH, 8, 32, evp_ssh1_bf },
Damien Miller963f6b22002-02-19 15:21:23 +110072
Damien Miller21cf4e02002-02-19 15:26:42 +110073 { "3des-cbc", SSH_CIPHER_SSH2, 8, 24, EVP_des_ede3_cbc },
74 { "blowfish-cbc", SSH_CIPHER_SSH2, 8, 16, EVP_bf_cbc },
75 { "cast128-cbc", SSH_CIPHER_SSH2, 8, 16, EVP_cast5_cbc },
76 { "arcfour", SSH_CIPHER_SSH2, 8, 16, EVP_rc4 },
Ben Lindstromf088f432002-06-06 20:50:07 +000077#if OPENSSL_VERSION_NUMBER < 0x00907000L
Damien Miller21cf4e02002-02-19 15:26:42 +110078 { "aes128-cbc", SSH_CIPHER_SSH2, 16, 16, evp_rijndael },
79 { "aes192-cbc", SSH_CIPHER_SSH2, 16, 24, evp_rijndael },
80 { "aes256-cbc", SSH_CIPHER_SSH2, 16, 32, evp_rijndael },
Ben Lindstrom8a725a82002-04-04 22:10:38 +000081 { "rijndael-cbc@lysator.liu.se",
82 SSH_CIPHER_SSH2, 16, 32, evp_rijndael },
Ben Lindstromf088f432002-06-06 20:50:07 +000083#else
84 { "aes128-cbc", SSH_CIPHER_SSH2, 16, 16, EVP_aes_128_cbc },
85 { "aes192-cbc", SSH_CIPHER_SSH2, 16, 24, EVP_aes_192_cbc },
86 { "aes256-cbc", SSH_CIPHER_SSH2, 16, 32, EVP_aes_256_cbc },
87 { "rijndael-cbc@lysator.liu.se",
88 SSH_CIPHER_SSH2, 16, 32, EVP_aes_256_cbc },
89#endif
Damien Miller5c3a5582003-09-23 22:12:38 +100090#if OPENSSL_VERSION_NUMBER >= 0x00906000L
Damien Millerf5399c22003-05-18 20:53:59 +100091 { "aes128-ctr", SSH_CIPHER_SSH2, 16, 16, evp_aes_128_ctr },
92 { "aes192-ctr", SSH_CIPHER_SSH2, 16, 24, evp_aes_128_ctr },
93 { "aes256-ctr", SSH_CIPHER_SSH2, 16, 32, evp_aes_128_ctr },
Damien Miller5c3a5582003-09-23 22:12:38 +100094#endif
Damien Miller874d77b2000-10-14 16:23:11 +110095
Damien Miller21cf4e02002-02-19 15:26:42 +110096 { NULL, SSH_CIPHER_ILLEGAL, 0, 0, NULL }
Damien Millerd4a8b7e1999-10-27 13:42:43 +100097};
98
Damien Miller874d77b2000-10-14 16:23:11 +110099/*--*/
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000100
Ben Lindstrom6328ab32002-03-22 02:54:23 +0000101u_int
Damien Miller963f6b22002-02-19 15:21:23 +1100102cipher_blocksize(Cipher *c)
103{
104 return (c->block_size);
105}
Ben Lindstrom836f0e92002-06-23 21:21:30 +0000106
Ben Lindstrom6328ab32002-03-22 02:54:23 +0000107u_int
Damien Miller963f6b22002-02-19 15:21:23 +1100108cipher_keylen(Cipher *c)
109{
110 return (c->key_len);
111}
Ben Lindstrom836f0e92002-06-23 21:21:30 +0000112
Ben Lindstrom6328ab32002-03-22 02:54:23 +0000113u_int
Ben Lindstrom212faca2002-03-22 01:39:44 +0000114cipher_get_number(Cipher *c)
115{
116 return (c->number);
117}
Damien Miller963f6b22002-02-19 15:21:23 +1100118
Ben Lindstrom46c16222000-12-22 01:43:59 +0000119u_int
Damien Miller874d77b2000-10-14 16:23:11 +1100120cipher_mask_ssh1(int client)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000121{
Ben Lindstrom46c16222000-12-22 01:43:59 +0000122 u_int mask = 0;
Damien Miller9f0f5c62001-12-21 14:45:46 +1100123 mask |= 1 << SSH_CIPHER_3DES; /* Mandatory */
Damien Miller95def091999-11-25 00:26:21 +1100124 mask |= 1 << SSH_CIPHER_BLOWFISH;
Damien Miller874d77b2000-10-14 16:23:11 +1100125 if (client) {
126 mask |= 1 << SSH_CIPHER_DES;
127 }
Damien Miller1383bd82000-04-06 12:32:37 +1000128 return mask;
129}
Damien Miller874d77b2000-10-14 16:23:11 +1100130
131Cipher *
132cipher_by_name(const char *name)
Damien Miller1383bd82000-04-06 12:32:37 +1000133{
Damien Miller874d77b2000-10-14 16:23:11 +1100134 Cipher *c;
135 for (c = ciphers; c->name != NULL; c++)
136 if (strcasecmp(c->name, name) == 0)
137 return c;
138 return NULL;
Damien Miller1383bd82000-04-06 12:32:37 +1000139}
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000140
Damien Miller874d77b2000-10-14 16:23:11 +1100141Cipher *
142cipher_by_number(int id)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000143{
Damien Miller874d77b2000-10-14 16:23:11 +1100144 Cipher *c;
145 for (c = ciphers; c->name != NULL; c++)
146 if (c->number == id)
147 return c;
148 return NULL;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000149}
150
Damien Miller78928792000-04-12 20:17:38 +1000151#define CIPHER_SEP ","
152int
153ciphers_valid(const char *names)
154{
Damien Miller874d77b2000-10-14 16:23:11 +1100155 Cipher *c;
Damien Miller37023962000-07-11 17:31:38 +1000156 char *ciphers, *cp;
Damien Miller78928792000-04-12 20:17:38 +1000157 char *p;
Damien Miller78928792000-04-12 20:17:38 +1000158
Damien Millerb1715dc2000-05-30 13:44:51 +1000159 if (names == NULL || strcmp(names, "") == 0)
Damien Miller78928792000-04-12 20:17:38 +1000160 return 0;
Damien Miller37023962000-07-11 17:31:38 +1000161 ciphers = cp = xstrdup(names);
Damien Miller874d77b2000-10-14 16:23:11 +1100162 for ((p = strsep(&cp, CIPHER_SEP)); p && *p != '\0';
Damien Miller9f0f5c62001-12-21 14:45:46 +1100163 (p = strsep(&cp, CIPHER_SEP))) {
Damien Miller874d77b2000-10-14 16:23:11 +1100164 c = cipher_by_name(p);
165 if (c == NULL || c->number != SSH_CIPHER_SSH2) {
166 debug("bad cipher %s [%s]", p, names);
Damien Miller78928792000-04-12 20:17:38 +1000167 xfree(ciphers);
168 return 0;
Damien Miller874d77b2000-10-14 16:23:11 +1100169 } else {
Damien Miller50a41ed2000-10-16 12:14:42 +1100170 debug3("cipher ok: %s [%s]", p, names);
Damien Miller78928792000-04-12 20:17:38 +1000171 }
172 }
Damien Miller50a41ed2000-10-16 12:14:42 +1100173 debug3("ciphers ok: [%s]", names);
Damien Miller78928792000-04-12 20:17:38 +1000174 xfree(ciphers);
175 return 1;
176}
177
Damien Miller5428f641999-11-25 11:54:57 +1100178/*
179 * Parses the name of the cipher. Returns the number of the corresponding
180 * cipher, or -1 on error.
181 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000182
183int
184cipher_number(const char *name)
185{
Damien Miller874d77b2000-10-14 16:23:11 +1100186 Cipher *c;
Damien Millerb1715dc2000-05-30 13:44:51 +1000187 if (name == NULL)
188 return -1;
Damien Miller874d77b2000-10-14 16:23:11 +1100189 c = cipher_by_name(name);
190 return (c==NULL) ? -1 : c->number;
191}
192
193char *
194cipher_name(int id)
195{
196 Cipher *c = cipher_by_number(id);
197 return (c==NULL) ? "<unknown>" : c->name;
198}
199
200void
Damien Miller21cf4e02002-02-19 15:26:42 +1100201cipher_init(CipherContext *cc, Cipher *cipher,
202 const u_char *key, u_int keylen, const u_char *iv, u_int ivlen,
203 int encrypt)
Damien Miller874d77b2000-10-14 16:23:11 +1100204{
Damien Miller21cf4e02002-02-19 15:26:42 +1100205 static int dowarn = 1;
Damien Millerc7375ac2002-03-11 10:51:17 +1100206#ifdef SSH_OLD_EVP
207 EVP_CIPHER *type;
208#else
Damien Miller21cf4e02002-02-19 15:26:42 +1100209 const EVP_CIPHER *type;
Damien Millerc7375ac2002-03-11 10:51:17 +1100210#endif
Damien Miller21cf4e02002-02-19 15:26:42 +1100211 int klen;
212
213 if (cipher->number == SSH_CIPHER_DES) {
214 if (dowarn) {
215 error("Warning: use of DES is strongly discouraged "
216 "due to cryptographic weaknesses");
217 dowarn = 0;
218 }
219 if (keylen > 8)
220 keylen = 8;
221 }
222 cc->plaintext = (cipher->number == SSH_CIPHER_NONE);
223
Damien Miller874d77b2000-10-14 16:23:11 +1100224 if (keylen < cipher->key_len)
225 fatal("cipher_init: key length %d is insufficient for %s.",
226 keylen, cipher->name);
227 if (iv != NULL && ivlen < cipher->block_size)
228 fatal("cipher_init: iv length %d is insufficient for %s.",
229 ivlen, cipher->name);
230 cc->cipher = cipher;
Damien Miller21cf4e02002-02-19 15:26:42 +1100231
232 type = (*cipher->evptype)();
233
234 EVP_CIPHER_CTX_init(&cc->evp);
Damien Millerc7375ac2002-03-11 10:51:17 +1100235#ifdef SSH_OLD_EVP
236 if (type->key_len > 0 && type->key_len != keylen) {
237 debug("cipher_init: set keylen (%d -> %d)",
238 type->key_len, keylen);
239 type->key_len = keylen;
240 }
241 EVP_CipherInit(&cc->evp, type, (u_char *)key, (u_char *)iv,
242 (encrypt == CIPHER_ENCRYPT));
243#else
Damien Miller21cf4e02002-02-19 15:26:42 +1100244 if (EVP_CipherInit(&cc->evp, type, NULL, (u_char *)iv,
245 (encrypt == CIPHER_ENCRYPT)) == 0)
246 fatal("cipher_init: EVP_CipherInit failed for %s",
247 cipher->name);
248 klen = EVP_CIPHER_CTX_key_length(&cc->evp);
249 if (klen > 0 && keylen != klen) {
Ben Lindstrom064496f2002-12-23 02:04:22 +0000250 debug2("cipher_init: set keylen (%d -> %d)", klen, keylen);
Damien Miller21cf4e02002-02-19 15:26:42 +1100251 if (EVP_CIPHER_CTX_set_key_length(&cc->evp, keylen) == 0)
252 fatal("cipher_init: set keylen failed (%d -> %d)",
253 klen, keylen);
254 }
255 if (EVP_CipherInit(&cc->evp, NULL, (u_char *)key, NULL, -1) == 0)
256 fatal("cipher_init: EVP_CipherInit: set key failed for %s",
257 cipher->name);
Damien Millerc7375ac2002-03-11 10:51:17 +1100258#endif
Damien Miller874d77b2000-10-14 16:23:11 +1100259}
260
261void
Damien Miller963f6b22002-02-19 15:21:23 +1100262cipher_crypt(CipherContext *cc, u_char *dest, const u_char *src, u_int len)
Damien Miller874d77b2000-10-14 16:23:11 +1100263{
264 if (len % cc->cipher->block_size)
265 fatal("cipher_encrypt: bad plaintext length %d", len);
Damien Millerc7375ac2002-03-11 10:51:17 +1100266#ifdef SSH_OLD_EVP
267 EVP_Cipher(&cc->evp, dest, (u_char *)src, len);
268#else
Damien Miller21cf4e02002-02-19 15:26:42 +1100269 if (EVP_Cipher(&cc->evp, dest, (u_char *)src, len) == 0)
270 fatal("evp_crypt: EVP_Cipher failed");
Damien Millerc7375ac2002-03-11 10:51:17 +1100271#endif
Damien Miller874d77b2000-10-14 16:23:11 +1100272}
273
274void
Damien Miller963f6b22002-02-19 15:21:23 +1100275cipher_cleanup(CipherContext *cc)
Damien Miller874d77b2000-10-14 16:23:11 +1100276{
Damien Millerc7375ac2002-03-11 10:51:17 +1100277#ifdef SSH_OLD_EVP
278 EVP_CIPHER_CTX_cleanup(&cc->evp);
279#else
Damien Miller21cf4e02002-02-19 15:26:42 +1100280 if (EVP_CIPHER_CTX_cleanup(&cc->evp) == 0)
281 error("cipher_cleanup: EVP_CIPHER_CTX_cleanup failed");
Damien Millerc7375ac2002-03-11 10:51:17 +1100282#endif
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000283}
284
Damien Miller5428f641999-11-25 11:54:57 +1100285/*
286 * Selects the cipher, and keys if by computing the MD5 checksum of the
287 * passphrase and using the resulting 16 bytes as the key.
288 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000289
Damien Miller4af51302000-04-16 11:18:38 +1000290void
Damien Miller874d77b2000-10-14 16:23:11 +1100291cipher_set_key_string(CipherContext *cc, Cipher *cipher,
Damien Miller963f6b22002-02-19 15:21:23 +1100292 const char *passphrase, int encrypt)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000293{
Damien Miller95def091999-11-25 00:26:21 +1100294 MD5_CTX md;
Ben Lindstrom46c16222000-12-22 01:43:59 +0000295 u_char digest[16];
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000296
Damien Miller95def091999-11-25 00:26:21 +1100297 MD5_Init(&md);
Damien Miller874d77b2000-10-14 16:23:11 +1100298 MD5_Update(&md, (const u_char *)passphrase, strlen(passphrase));
Damien Miller95def091999-11-25 00:26:21 +1100299 MD5_Final(digest, &md);
300
Damien Miller963f6b22002-02-19 15:21:23 +1100301 cipher_init(cc, cipher, digest, 16, NULL, 0, encrypt);
Damien Miller95def091999-11-25 00:26:21 +1100302
303 memset(digest, 0, sizeof(digest));
304 memset(&md, 0, sizeof(md));
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000305}
Damien Miller21cf4e02002-02-19 15:26:42 +1100306
Ben Lindstrom6328ab32002-03-22 02:54:23 +0000307/*
Ben Lindstrom212faca2002-03-22 01:39:44 +0000308 * Exports an IV from the CipherContext required to export the key
309 * state back from the unprivileged child to the privileged parent
310 * process.
311 */
312
313int
314cipher_get_keyiv_len(CipherContext *cc)
315{
316 Cipher *c = cc->cipher;
317 int ivlen;
318
319 if (c->number == SSH_CIPHER_3DES)
320 ivlen = 24;
321 else
322 ivlen = EVP_CIPHER_CTX_iv_length(&cc->evp);
323 return (ivlen);
324}
325
326void
327cipher_get_keyiv(CipherContext *cc, u_char *iv, u_int len)
328{
329 Cipher *c = cc->cipher;
Ben Lindstrom212faca2002-03-22 01:39:44 +0000330 int evplen;
331
332 switch (c->number) {
333 case SSH_CIPHER_SSH2:
334 case SSH_CIPHER_DES:
335 case SSH_CIPHER_BLOWFISH:
336 evplen = EVP_CIPHER_CTX_iv_length(&cc->evp);
337 if (evplen == 0)
338 return;
339 if (evplen != len)
Ben Lindstrom7d9c38f2002-06-06 21:40:51 +0000340 fatal("%s: wrong iv length %d != %d", __func__,
Ben Lindstrom212faca2002-03-22 01:39:44 +0000341 evplen, len);
Ben Lindstromf088f432002-06-06 20:50:07 +0000342#if OPENSSL_VERSION_NUMBER < 0x00907000L
Damien Millera201bb32003-05-14 13:41:23 +1000343 if (c->evptype == evp_rijndael)
344 ssh_rijndael_iv(&cc->evp, 0, iv, len);
345 else
Ben Lindstromf088f432002-06-06 20:50:07 +0000346#endif
Damien Millerf5399c22003-05-18 20:53:59 +1000347 if (c->evptype == evp_aes_128_ctr)
348 ssh_aes_ctr_iv(&cc->evp, 0, iv, len);
349 else
Damien Millera201bb32003-05-14 13:41:23 +1000350 memcpy(iv, cc->evp.iv, len);
Ben Lindstrom212faca2002-03-22 01:39:44 +0000351 break;
Damien Millera201bb32003-05-14 13:41:23 +1000352 case SSH_CIPHER_3DES:
353 ssh1_3des_iv(&cc->evp, 0, iv, 24);
354 break;
Ben Lindstrom212faca2002-03-22 01:39:44 +0000355 default:
Ben Lindstrom7d9c38f2002-06-06 21:40:51 +0000356 fatal("%s: bad cipher %d", __func__, c->number);
Ben Lindstrom212faca2002-03-22 01:39:44 +0000357 }
Ben Lindstrom212faca2002-03-22 01:39:44 +0000358}
359
360void
361cipher_set_keyiv(CipherContext *cc, u_char *iv)
362{
363 Cipher *c = cc->cipher;
Ben Lindstrom212faca2002-03-22 01:39:44 +0000364 int evplen = 0;
365
366 switch (c->number) {
367 case SSH_CIPHER_SSH2:
368 case SSH_CIPHER_DES:
369 case SSH_CIPHER_BLOWFISH:
370 evplen = EVP_CIPHER_CTX_iv_length(&cc->evp);
371 if (evplen == 0)
372 return;
Ben Lindstromf088f432002-06-06 20:50:07 +0000373#if OPENSSL_VERSION_NUMBER < 0x00907000L
Damien Millera201bb32003-05-14 13:41:23 +1000374 if (c->evptype == evp_rijndael)
375 ssh_rijndael_iv(&cc->evp, 1, iv, evplen);
376 else
Ben Lindstromf088f432002-06-06 20:50:07 +0000377#endif
Damien Millerf5399c22003-05-18 20:53:59 +1000378 if (c->evptype == evp_aes_128_ctr)
379 ssh_aes_ctr_iv(&cc->evp, 1, iv, evplen);
380 else
Damien Millera201bb32003-05-14 13:41:23 +1000381 memcpy(cc->evp.iv, iv, evplen);
Ben Lindstrom212faca2002-03-22 01:39:44 +0000382 break;
Damien Millera201bb32003-05-14 13:41:23 +1000383 case SSH_CIPHER_3DES:
384 ssh1_3des_iv(&cc->evp, 1, iv, 24);
385 break;
Ben Lindstrom212faca2002-03-22 01:39:44 +0000386 default:
Ben Lindstrom7d9c38f2002-06-06 21:40:51 +0000387 fatal("%s: bad cipher %d", __func__, c->number);
Ben Lindstrom212faca2002-03-22 01:39:44 +0000388 }
Ben Lindstrom212faca2002-03-22 01:39:44 +0000389}
390
391#if OPENSSL_VERSION_NUMBER < 0x00907000L
392#define EVP_X_STATE(evp) &(evp).c
393#define EVP_X_STATE_LEN(evp) sizeof((evp).c)
394#else
395#define EVP_X_STATE(evp) (evp).cipher_data
396#define EVP_X_STATE_LEN(evp) (evp).cipher->ctx_size
397#endif
398
399int
400cipher_get_keycontext(CipherContext *cc, u_char *dat)
401{
402 Cipher *c = cc->cipher;
Ben Lindstrom402c6cc2002-06-21 00:43:42 +0000403 int plen = 0;
Ben Lindstrom212faca2002-03-22 01:39:44 +0000404
Ben Lindstrom402c6cc2002-06-21 00:43:42 +0000405 if (c->evptype == EVP_rc4) {
406 plen = EVP_X_STATE_LEN(cc->evp);
Ben Lindstrom212faca2002-03-22 01:39:44 +0000407 if (dat == NULL)
Ben Lindstrom402c6cc2002-06-21 00:43:42 +0000408 return (plen);
409 memcpy(dat, EVP_X_STATE(cc->evp), plen);
Ben Lindstrom212faca2002-03-22 01:39:44 +0000410 }
Ben Lindstrom212faca2002-03-22 01:39:44 +0000411 return (plen);
412}
413
414void
415cipher_set_keycontext(CipherContext *cc, u_char *dat)
416{
417 Cipher *c = cc->cipher;
418 int plen;
419
Ben Lindstrom402c6cc2002-06-21 00:43:42 +0000420 if (c->evptype == EVP_rc4) {
Ben Lindstrom212faca2002-03-22 01:39:44 +0000421 plen = EVP_X_STATE_LEN(cc->evp);
422 memcpy(EVP_X_STATE(cc->evp), dat, plen);
423 }
Damien Miller21cf4e02002-02-19 15:26:42 +1100424}