version 3.0

ssh/ssh_session.h

@@ -0,0 +1,159 @@
+/*
+ * Copyright (c) 2012-2013 Juli Mallett. All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ */
+
+#ifndef	SSH_SSH_SESSION_H
+#define	SSH_SSH_SESSION_H
+
+namespace SSH {
+	class AlgorithmNegotiation;
+	class Compression;
+	class Encryption;
+	class KeyExchange;
+	class Language;
+	class MAC;
+	class ServerHostKey;
+
+	enum Role {
+		ClientRole,
+		ServerRole,
+	};
+
+	struct UnidirectionalAlgorithms {
+		Encryption *encryption_;
+		MAC *mac_;
+		Compression *compression_;
+		Language *language_;
+
+		UnidirectionalAlgorithms(void)
+		: encryption_(NULL),
+		  mac_(NULL),
+		  compression_(NULL),
+		  language_(NULL)
+		{ }
+	};
+
+	struct Algorithms {
+		KeyExchange *key_exchange_;
+		ServerHostKey *server_host_key_;
+		UnidirectionalAlgorithms client_to_server_;
+		UnidirectionalAlgorithms server_to_client_;
+		UnidirectionalAlgorithms *local_to_remote_;
+		UnidirectionalAlgorithms *remote_to_local_;
+
+		Algorithms(Role role)
+		: key_exchange_(NULL),
+		  server_host_key_(NULL),
+		  client_to_server_(),
+		  server_to_client_(),
+		  local_to_remote_(role == ClientRole ? &client_to_server_ : &server_to_client_),
+		  remote_to_local_(role == ClientRole ? &server_to_client_ : &client_to_server_)
+		{ }
+	};
+
+	struct Session {
+		Role role_;
+
+		AlgorithmNegotiation *algorithm_negotiation_;
+		Algorithms chosen_algorithms_;
+		Algorithms active_algorithms_;
+		Buffer client_version_;	/* Client's version string.  */
+		Buffer server_version_;	/* Server's version string.  */
+		Buffer client_kexinit_;	/* Client's first key exchange packet.  */
+		Buffer server_kexinit_;	/* Server's first key exchange packet.  */
+		Buffer shared_secret_;	/* Shared secret from key exchange.  */
+		Buffer session_id_;	/* First exchange hash.  */
+		Buffer exchange_hash_;	/* Most recent exchange hash.  */
+	private:
+		Buffer client_to_server_iv_;	/* Initial client-to-server IV.  */
+		Buffer server_to_client_iv_;	/* Initial server-to-client IV.  */
+		Buffer client_to_server_key_;	/* Client-to-server encryption key.  */
+		Buffer server_to_client_key_;	/* Server-to-client encryption key.  */
+		Buffer client_to_server_integrity_key_;	/* Client-to-server integrity key.  */
+		Buffer server_to_client_integrity_key_;	/* Server-to-client integrity key.  */
+	public:
+		uint32_t local_sequence_number_;	/* Our packet sequence number.  */
+		uint32_t remote_sequence_number_;	/* Our peer's packet sequence number.  */
+
+		Session(Role role)
+		: role_(role),
+		  algorithm_negotiation_(NULL),
+		  chosen_algorithms_(role),
+		  active_algorithms_(role),
+		  client_version_(),
+		  server_version_(),
+		  client_kexinit_(),
+		  server_kexinit_(),
+		  shared_secret_(),
+		  session_id_(),
+		  exchange_hash_(),
+		  client_to_server_iv_(),
+		  server_to_client_iv_(),
+		  client_to_server_key_(),
+		  server_to_client_key_(),
+		  client_to_server_integrity_key_(),
+		  server_to_client_integrity_key_(),
+		  local_sequence_number_(0),
+		  remote_sequence_number_(0)
+		{ }
+
+		void local_version(const Buffer& version)
+		{
+			if (role_ == ClientRole)
+				client_version_ = version;
+			else
+				server_version_ = version;
+		}
+
+		void remote_version(const Buffer& version)
+		{
+			if (role_ == ClientRole)
+				server_version_ = version;
+			else
+				client_version_ = version;
+		}
+
+		void local_kexinit(const Buffer& kexinit)
+		{
+			if (role_ == ClientRole)
+				client_kexinit_ = kexinit;
+			else
+				server_kexinit_ = kexinit;
+		}
+
+		void remote_kexinit(const Buffer& kexinit)
+		{
+			if (role_ == ClientRole)
+				server_kexinit_ = kexinit;
+			else
+				client_kexinit_ = kexinit;
+		}
+
+		void activate_chosen(void);
+	private:
+		Buffer generate_key(const std::string& x, unsigned key_size);
+	};
+}
+
+#endif /* !SSH_SSH_SESSION_H */