ClearML/dropbear
1
0
Fork 0
mirror of https://github.com/clearml/dropbear synced 2025-04-07 06:04:15 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add comments about requiring keysize <= 2*SHA1_HASH_SIZE

Browse Source 
--HG--
extra : convert_revision : bcb33fce2fad01a7626598209d43af3571bd86f0
This commit is contained in:
Matt Johnston 2007-02-04 10:31:48 +00:00
parent 16517e6760
commit 60d4cd5996
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
common-algo.c
View File

@ -31,6 +31,8 @@
/* Mappings for ciphers, parameters are /* Mappings for ciphers, parameters are
{&cipher_desc, keysize, blocksize} */ {&cipher_desc, keysize, blocksize} */
/* NOTE: if keysize > 2*SHA1_HASH_SIZE, code such as hashkeys()
needs revisiting */
#ifdef DROPBEAR_AES256_CBC #ifdef DROPBEAR_AES256_CBC
static const struct dropbear_cipher dropbear_aes256 = static const struct dropbear_cipher dropbear_aes256 =

8
common-kex.c
View File

@ -217,12 +217,10 @@ static void kexinitialise() {
* already initialised hash_state hs, which should already have processed * already initialised hash_state hs, which should already have processed
* the dh_K and hash, since these are common. X is the letter 'A', 'B' etc. * the dh_K and hash, since these are common. X is the letter 'A', 'B' etc.
* out must have at least min(SHA1_HASH_SIZE, outlen) bytes allocated. * out must have at least min(SHA1_HASH_SIZE, outlen) bytes allocated.
* The output will only be expanded once, since that is all that is required * The output will only be expanded once, as we are assured that
* (for 3DES and SHA, with 24 and 20 bytes respectively). * outlen <= 2*SHA1_HASH_SIZE for all known hashes.
* *
* See Section 5.2 of the IETF secsh Transport Draft for details */ * See Section 7.2 of rfc4253 (ssh transport) for details */
/* Duplicated verbatim from kex.c --mihnea */
static void hashkeys(unsigned char *out, int outlen, static void hashkeys(unsigned char *out, int outlen,
const hash_state * hs, const unsigned char X) { const hash_state * hs, const unsigned char X) {