Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 1 | /* |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 2 | * Author: Tatu Ylonen <ylo@cs.hut.fi> |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 3 | * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland |
| 4 | * All rights reserved |
Damien Miller | 4af5130 | 2000-04-16 11:18:38 +1000 | [diff] [blame] | 5 | * |
Damien Miller | e4340be | 2000-09-16 13:29:08 +1100 | [diff] [blame^] | 6 | * As far as I am concerned, the code I have written for this software |
| 7 | * can be used freely for any purpose. Any derived versions of this |
| 8 | * software must be clearly marked as such, and if the derived work is |
| 9 | * incompatible with the protocol description in the RFC file, it must be |
| 10 | * called by a name other than "ssh" or "Secure Shell". |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 11 | */ |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 12 | |
Damien Miller | e4340be | 2000-09-16 13:29:08 +1100 | [diff] [blame^] | 13 | /* RCSID("$OpenBSD: cipher.h,v 1.19 2000/09/07 20:27:50 deraadt Exp $"); */ |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 14 | |
| 15 | #ifndef CIPHER_H |
| 16 | #define CIPHER_H |
| 17 | |
| 18 | #include <openssl/des.h> |
| 19 | #include <openssl/blowfish.h> |
Damien Miller | b38eff8 | 2000-04-01 11:09:21 +1000 | [diff] [blame] | 20 | #include <openssl/rc4.h> |
| 21 | #include <openssl/cast.h> |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 22 | |
| 23 | /* Cipher types. New types can be added, but old types should not be removed |
| 24 | for compatibility. The maximum allowed value is 31. */ |
Damien Miller | 30c3d42 | 2000-05-09 11:02:59 +1000 | [diff] [blame] | 25 | #define SSH_CIPHER_ILLEGAL -2 /* No valid cipher selected. */ |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 26 | #define SSH_CIPHER_NOT_SET -1 /* None selected (invalid number). */ |
| 27 | #define SSH_CIPHER_NONE 0 /* no encryption */ |
| 28 | #define SSH_CIPHER_IDEA 1 /* IDEA CFB */ |
| 29 | #define SSH_CIPHER_DES 2 /* DES CBC */ |
| 30 | #define SSH_CIPHER_3DES 3 /* 3DES CBC */ |
| 31 | #define SSH_CIPHER_BROKEN_TSS 4 /* TRI's Simple Stream encryption CBC */ |
| 32 | #define SSH_CIPHER_BROKEN_RC4 5 /* Alleged RC4 */ |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 33 | #define SSH_CIPHER_BLOWFISH 6 |
Damien Miller | b38eff8 | 2000-04-01 11:09:21 +1000 | [diff] [blame] | 34 | #define SSH_CIPHER_RESERVED 7 |
| 35 | |
| 36 | /* these ciphers are used in SSH2: */ |
| 37 | #define SSH_CIPHER_BLOWFISH_CBC 8 |
| 38 | #define SSH_CIPHER_3DES_CBC 9 |
| 39 | #define SSH_CIPHER_ARCFOUR 10 /* Alleged RC4 */ |
| 40 | #define SSH_CIPHER_CAST128_CBC 11 |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 41 | |
| 42 | typedef struct { |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 43 | unsigned int type; |
| 44 | union { |
| 45 | struct { |
| 46 | des_key_schedule key1; |
| 47 | des_key_schedule key2; |
| 48 | des_cblock iv2; |
| 49 | des_key_schedule key3; |
| 50 | des_cblock iv3; |
| 51 | } des3; |
| 52 | struct { |
| 53 | struct bf_key_st key; |
| 54 | unsigned char iv[8]; |
| 55 | } bf; |
Damien Miller | b38eff8 | 2000-04-01 11:09:21 +1000 | [diff] [blame] | 56 | struct { |
| 57 | CAST_KEY key; |
| 58 | unsigned char iv[8]; |
| 59 | } cast; |
| 60 | RC4_KEY rc4; |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 61 | } u; |
| 62 | } CipherContext; |
Damien Miller | 5428f64 | 1999-11-25 11:54:57 +1100 | [diff] [blame] | 63 | /* |
| 64 | * Returns a bit mask indicating which ciphers are supported by this |
| 65 | * implementation. The bit mask has the corresponding bit set of each |
| 66 | * supported cipher. |
| 67 | */ |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 68 | unsigned int cipher_mask(); |
Damien Miller | 1383bd8 | 2000-04-06 12:32:37 +1000 | [diff] [blame] | 69 | unsigned int cipher_mask1(); |
| 70 | unsigned int cipher_mask2(); |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 71 | |
| 72 | /* Returns the name of the cipher. */ |
| 73 | const char *cipher_name(int cipher); |
| 74 | |
Damien Miller | 5428f64 | 1999-11-25 11:54:57 +1100 | [diff] [blame] | 75 | /* |
| 76 | * Parses the name of the cipher. Returns the number of the corresponding |
| 77 | * cipher, or -1 on error. |
| 78 | */ |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 79 | int cipher_number(const char *name); |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 80 | |
Damien Miller | 7892879 | 2000-04-12 20:17:38 +1000 | [diff] [blame] | 81 | /* returns 1 if all ciphers are supported (ssh2 only) */ |
| 82 | int ciphers_valid(const char *names); |
| 83 | |
Damien Miller | 5428f64 | 1999-11-25 11:54:57 +1100 | [diff] [blame] | 84 | /* |
| 85 | * Selects the cipher to use and sets the key. If for_encryption is true, |
| 86 | * the key is setup for encryption; otherwise it is setup for decryption. |
| 87 | */ |
Damien Miller | 4af5130 | 2000-04-16 11:18:38 +1000 | [diff] [blame] | 88 | void |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 89 | cipher_set_key(CipherContext * context, int cipher, |
Damien Miller | 1383bd8 | 2000-04-06 12:32:37 +1000 | [diff] [blame] | 90 | const unsigned char *key, int keylen); |
Damien Miller | 4af5130 | 2000-04-16 11:18:38 +1000 | [diff] [blame] | 91 | void |
Damien Miller | b38eff8 | 2000-04-01 11:09:21 +1000 | [diff] [blame] | 92 | cipher_set_key_iv(CipherContext * context, int cipher, |
Damien Miller | 4af5130 | 2000-04-16 11:18:38 +1000 | [diff] [blame] | 93 | const unsigned char *key, int keylen, |
Damien Miller | b38eff8 | 2000-04-01 11:09:21 +1000 | [diff] [blame] | 94 | const unsigned char *iv, int ivlen); |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 95 | |
Damien Miller | 5428f64 | 1999-11-25 11:54:57 +1100 | [diff] [blame] | 96 | /* |
| 97 | * Sets key for the cipher by computing the MD5 checksum of the passphrase, |
| 98 | * and using the resulting 16 bytes as the key. |
| 99 | */ |
Damien Miller | 4af5130 | 2000-04-16 11:18:38 +1000 | [diff] [blame] | 100 | void |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 101 | cipher_set_key_string(CipherContext * context, int cipher, |
Damien Miller | 1383bd8 | 2000-04-06 12:32:37 +1000 | [diff] [blame] | 102 | const char *passphrase); |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 103 | |
| 104 | /* Encrypts data using the cipher. */ |
Damien Miller | 4af5130 | 2000-04-16 11:18:38 +1000 | [diff] [blame] | 105 | void |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 106 | cipher_encrypt(CipherContext * context, unsigned char *dest, |
| 107 | const unsigned char *src, unsigned int len); |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 108 | |
| 109 | /* Decrypts data using the cipher. */ |
Damien Miller | 4af5130 | 2000-04-16 11:18:38 +1000 | [diff] [blame] | 110 | void |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 111 | cipher_decrypt(CipherContext * context, unsigned char *dest, |
| 112 | const unsigned char *src, unsigned int len); |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 113 | |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 114 | #endif /* CIPHER_H */ |