gdb - Local mods (compile)
[dragonfly.git] / crypto / openssh / myproposal.h
1 /* $OpenBSD: myproposal.h,v 1.41 2014/07/11 13:54:34 tedu Exp $ */
2
3 /*
4  * Copyright (c) 2000 Markus Friedl.  All rights reserved.
5  *
6  * Redistribution and use in source and binary forms, with or without
7  * modification, are permitted provided that the following conditions
8  * are met:
9  * 1. Redistributions of source code must retain the above copyright
10  *    notice, this list of conditions and the following disclaimer.
11  * 2. Redistributions in binary form must reproduce the above copyright
12  *    notice, this list of conditions and the following disclaimer in the
13  *    documentation and/or other materials provided with the distribution.
14  *
15  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
16  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
17  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
18  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
19  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
20  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
21  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
22  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
23  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
24  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
25  */
26
27 #include <openssl/opensslv.h>
28
29 /* conditional algorithm support */
30
31 #ifdef OPENSSL_HAS_ECC
32 #ifdef OPENSSL_HAS_NISTP521
33 # define KEX_ECDH_METHODS \
34         "ecdh-sha2-nistp256," \
35         "ecdh-sha2-nistp384," \
36         "ecdh-sha2-nistp521,"
37 # define HOSTKEY_ECDSA_CERT_METHODS \
38         "ecdsa-sha2-nistp256-cert-v01@openssh.com," \
39         "ecdsa-sha2-nistp384-cert-v01@openssh.com," \
40         "ecdsa-sha2-nistp521-cert-v01@openssh.com,"
41 # define HOSTKEY_ECDSA_METHODS \
42         "ecdsa-sha2-nistp256," \
43         "ecdsa-sha2-nistp384," \
44         "ecdsa-sha2-nistp521,"
45 #else
46 # define KEX_ECDH_METHODS \
47         "ecdh-sha2-nistp256," \
48         "ecdh-sha2-nistp384,"
49 # define HOSTKEY_ECDSA_CERT_METHODS \
50         "ecdsa-sha2-nistp256-cert-v01@openssh.com," \
51         "ecdsa-sha2-nistp384-cert-v01@openssh.com,"
52 # define HOSTKEY_ECDSA_METHODS \
53         "ecdsa-sha2-nistp256," \
54         "ecdsa-sha2-nistp384,"
55 #endif
56 #else
57 # define KEX_ECDH_METHODS
58 # define HOSTKEY_ECDSA_CERT_METHODS
59 # define HOSTKEY_ECDSA_METHODS
60 #endif
61
62 #ifdef OPENSSL_HAVE_EVPGCM
63 # define AESGCM_CIPHER_MODES \
64         "aes128-gcm@openssh.com,aes256-gcm@openssh.com,"
65 #else
66 # define AESGCM_CIPHER_MODES
67 #endif
68
69 #ifdef HAVE_EVP_SHA256
70 # define KEX_SHA256_METHODS \
71         "diffie-hellman-group-exchange-sha256,"
72 #define SHA2_HMAC_MODES \
73         "hmac-sha2-256," \
74         "hmac-sha2-512,"
75 #else
76 # define KEX_SHA256_METHODS
77 # define SHA2_HMAC_MODES
78 #endif
79
80 #ifdef WITH_OPENSSL
81 # ifdef HAVE_EVP_SHA256
82 #  define KEX_CURVE25519_METHODS "curve25519-sha256@libssh.org,"
83 # else
84 #  define KEX_CURVE25519_METHODS ""
85 # endif
86 #define KEX_SERVER_KEX \
87         KEX_CURVE25519_METHODS \
88         KEX_ECDH_METHODS \
89         KEX_SHA256_METHODS \
90         "diffie-hellman-group14-sha1"
91
92 #define KEX_CLIENT_KEX KEX_SERVER_KEX "," \
93         "diffie-hellman-group-exchange-sha1," \
94         "diffie-hellman-group1-sha1"
95
96 #define KEX_DEFAULT_PK_ALG      \
97         HOSTKEY_ECDSA_CERT_METHODS \
98         "ssh-ed25519-cert-v01@openssh.com," \
99         "ssh-rsa-cert-v01@openssh.com," \
100         "ssh-dss-cert-v01@openssh.com," \
101         "ssh-rsa-cert-v00@openssh.com," \
102         "ssh-dss-cert-v00@openssh.com," \
103         HOSTKEY_ECDSA_METHODS \
104         "ssh-ed25519," \
105         "ssh-rsa," \
106         "ssh-dss"
107
108 /* the actual algorithms */
109
110 #define KEX_SERVER_ENCRYPT \
111         "aes128-ctr,aes192-ctr,aes256-ctr," \
112         AESGCM_CIPHER_MODES \
113         "chacha20-poly1305@openssh.com"
114
115 #define KEX_CLIENT_ENCRYPT KEX_SERVER_ENCRYPT "," \
116         "arcfour256,arcfour128," \
117         "aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc," \
118         "aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se"
119
120 #define KEX_SERVER_MAC \
121         "umac-64-etm@openssh.com," \
122         "umac-128-etm@openssh.com," \
123         "hmac-sha2-256-etm@openssh.com," \
124         "hmac-sha2-512-etm@openssh.com," \
125         "hmac-sha1-etm@openssh.com," \
126         "umac-64@openssh.com," \
127         "umac-128@openssh.com," \
128         "hmac-sha2-256," \
129         "hmac-sha2-512," \
130         "hmac-sha1"
131
132 #define KEX_CLIENT_MAC KEX_SERVER_MAC "," \
133         "hmac-md5-etm@openssh.com," \
134         "hmac-ripemd160-etm@openssh.com," \
135         "hmac-sha1-96-etm@openssh.com," \
136         "hmac-md5-96-etm@openssh.com," \
137         "hmac-md5," \
138         "hmac-ripemd160," \
139         "hmac-ripemd160@openssh.com," \
140         "hmac-sha1-96," \
141         "hmac-md5-96"
142
143 #else
144
145 #define KEX_SERVER_KEX          \
146         "curve25519-sha256@libssh.org"
147 #define KEX_DEFAULT_PK_ALG      \
148         "ssh-ed25519-cert-v01@openssh.com," \
149         "ssh-ed25519"
150 #define KEX_SERVER_ENCRYPT \
151         "aes128-ctr,aes192-ctr,aes256-ctr," \
152         "chacha20-poly1305@openssh.com"
153 #define KEX_SERVER_MAC \
154         "umac-64-etm@openssh.com," \
155         "umac-128-etm@openssh.com," \
156         "hmac-sha2-256-etm@openssh.com," \
157         "hmac-sha2-512-etm@openssh.com," \
158         "hmac-sha1-etm@openssh.com," \
159         "umac-64@openssh.com," \
160         "umac-128@openssh.com," \
161         "hmac-sha2-256," \
162         "hmac-sha2-512," \
163         "hmac-sha1"
164
165 #define KEX_CLIENT_KEX KEX_SERVER_KEX
166 #define KEX_CLIENT_ENCRYPT KEX_SERVER_ENCRYPT
167 #define KEX_CLIENT_MAC KEX_SERVER_MAC
168
169 #endif /* WITH_OPENSSL */
170
171 #define KEX_DEFAULT_COMP        "none,zlib@openssh.com,zlib"
172 #define KEX_DEFAULT_LANG        ""
173
174 #define KEX_ENCRYPT_INCLUDE_NONE KEX_SERVER_ENCRYPT ",none"
175
176 #define KEX_CLIENT \
177         KEX_CLIENT_KEX, \
178         KEX_DEFAULT_PK_ALG, \
179         KEX_CLIENT_ENCRYPT, \
180         KEX_CLIENT_ENCRYPT, \
181         KEX_CLIENT_MAC, \
182         KEX_CLIENT_MAC, \
183         KEX_DEFAULT_COMP, \
184         KEX_DEFAULT_COMP, \
185         KEX_DEFAULT_LANG, \
186         KEX_DEFAULT_LANG
187
188 #define KEX_SERVER \
189         KEX_SERVER_KEX, \
190         KEX_DEFAULT_PK_ALG, \
191         KEX_SERVER_ENCRYPT, \
192         KEX_SERVER_ENCRYPT, \
193         KEX_SERVER_MAC, \
194         KEX_SERVER_MAC, \
195         KEX_DEFAULT_COMP, \
196         KEX_DEFAULT_COMP, \
197         KEX_DEFAULT_LANG, \
198         KEX_DEFAULT_LANG
199