122 lines
4.1 KiB
C++
122 lines
4.1 KiB
C++
/*
|
|
* Copyright (c) 2012 Juli Mallett. All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*/
|
|
|
|
#include <common/buffer.h>
|
|
|
|
#include <ssh/ssh_algorithm_negotiation.h>
|
|
#include <ssh/ssh_mac.h>
|
|
#include <ssh/ssh_session.h>
|
|
|
|
namespace {
|
|
struct ssh_mac_algorithm {
|
|
const char *rfc4250_name_;
|
|
CryptoMAC::Algorithm crypto_algorithm_;
|
|
unsigned size_;
|
|
};
|
|
|
|
static const struct ssh_mac_algorithm ssh_mac_algorithms[] = {
|
|
{ "hmac-sha1", CryptoMAC::SHA1, 0 },
|
|
{ "hmac-sha2-256", CryptoMAC::SHA256, 0 },
|
|
{ "hmac-sha2-512", CryptoMAC::SHA512, 0 },
|
|
{ "hmac-ripemd160", CryptoMAC::RIPEMD160, 0 },
|
|
{ "hmac-md5", CryptoMAC::MD5, 0 },
|
|
{ "hmac-sha1-96", CryptoMAC::SHA1, 12 },
|
|
{ "hmac-md5-96", CryptoMAC::MD5, 12 },
|
|
{ NULL, CryptoMAC::MD5, 0 }
|
|
};
|
|
|
|
class CryptoSSHMAC : public SSH::MAC {
|
|
LogHandle log_;
|
|
CryptoMAC::Instance *instance_;
|
|
public:
|
|
CryptoSSHMAC(const std::string& xname, CryptoMAC::Instance *instance, unsigned xsize)
|
|
: SSH::MAC(xname, xsize == 0 ? instance->size() : xsize, instance->size()),
|
|
log_("/ssh/mac/crypto/" + xname),
|
|
instance_(instance)
|
|
{ }
|
|
|
|
~CryptoSSHMAC()
|
|
{ }
|
|
|
|
MAC *clone(void) const
|
|
{
|
|
return (new CryptoSSHMAC(name_, instance_->clone(), key_size_));
|
|
}
|
|
|
|
bool initialize(const Buffer *key)
|
|
{
|
|
return (instance_->initialize(key));
|
|
}
|
|
|
|
bool mac(Buffer *out, const Buffer *in)
|
|
{
|
|
return (instance_->mac(out, in));
|
|
}
|
|
};
|
|
}
|
|
|
|
void
|
|
SSH::MAC::add_algorithms(Session *session)
|
|
{
|
|
const struct ssh_mac_algorithm *alg;
|
|
|
|
for (alg = ssh_mac_algorithms; alg->rfc4250_name_ != NULL; alg++) {
|
|
const CryptoMAC::Method *method = CryptoMAC::Method::method(alg->crypto_algorithm_);
|
|
if (method == NULL) {
|
|
DEBUG("/ssh/mac") << "Could not get method for algorithm: " << alg->crypto_algorithm_;
|
|
continue;
|
|
}
|
|
CryptoMAC::Instance *instance = method->instance(alg->crypto_algorithm_);
|
|
if (instance == NULL) {
|
|
DEBUG("/ssh/mac") << "Could not get instance for algorithm: " << alg->crypto_algorithm_;
|
|
continue;
|
|
}
|
|
session->algorithm_negotiation_->add_algorithm(new CryptoSSHMAC(alg->rfc4250_name_, instance, alg->size_));
|
|
}
|
|
}
|
|
|
|
SSH::MAC *
|
|
SSH::MAC::algorithm(CryptoMAC::Algorithm xalgorithm)
|
|
{
|
|
const struct ssh_mac_algorithm *alg;
|
|
|
|
for (alg = ssh_mac_algorithms; alg->rfc4250_name_ != NULL; alg++) {
|
|
if (xalgorithm != alg->crypto_algorithm_)
|
|
continue;
|
|
const CryptoMAC::Method *method = CryptoMAC::Method::method(xalgorithm);
|
|
if (method == NULL) {
|
|
ERROR("/ssh/mac") << "Could not get method for algorithm: " << xalgorithm;
|
|
return (NULL);
|
|
}
|
|
CryptoMAC::Instance *instance = method->instance(xalgorithm);
|
|
if (instance == NULL) {
|
|
ERROR("/ssh/mac") << "Could not get instance for algorithm: " << xalgorithm;
|
|
return (NULL);
|
|
}
|
|
return (new CryptoSSHMAC(alg->rfc4250_name_, instance, alg->size_));
|
|
}
|
|
ERROR("/ssh/mac") << "No SSH MAC support is available for algorithm: " << xalgorithm;
|
|
return (NULL);
|
|
}
|