687 kex_free_newkeys(struct newkeys *newkeys)  in kex_free_newkeys()  argument
689 	if (newkeys == NULL)  in kex_free_newkeys()
691 	if (newkeys->enc.key) {  in kex_free_newkeys()
692 		explicit_bzero(newkeys->enc.key, newkeys->enc.key_len);  in kex_free_newkeys()
693 		free(newkeys->enc.key);  in kex_free_newkeys()
694 		newkeys->enc.key = NULL;  in kex_free_newkeys()
696 	if (newkeys->enc.iv) {  in kex_free_newkeys()
697 		explicit_bzero(newkeys->enc.iv, newkeys->enc.iv_len);  in kex_free_newkeys()
698 		free(newkeys->enc.iv);  in kex_free_newkeys()
699 		newkeys->enc.iv = NULL;  in kex_free_newkeys()
701 	free(newkeys->enc.name);  in kex_free_newkeys()
702 	explicit_bzero(&newkeys->enc, sizeof(newkeys->enc));  in kex_free_newkeys()
703 	free(newkeys->comp.name);  in kex_free_newkeys()
704 	explicit_bzero(&newkeys->comp, sizeof(newkeys->comp));  in kex_free_newkeys()
705 	mac_clear(&newkeys->mac);  in kex_free_newkeys()
706 	if (newkeys->mac.key) {  in kex_free_newkeys()
707 		explicit_bzero(newkeys->mac.key, newkeys->mac.key_len);  in kex_free_newkeys()
708 		free(newkeys->mac.key);  in kex_free_newkeys()
709 		newkeys->mac.key = NULL;  in kex_free_newkeys()
711 	free(newkeys->mac.name);  in kex_free_newkeys()
712 	explicit_bzero(&newkeys->mac, sizeof(newkeys->mac));  in kex_free_newkeys()
713 	freezero(newkeys, sizeof(*newkeys));  in kex_free_newkeys()
731 		kex_free_newkeys(kex->newkeys[mode]);  in kex_free()
732 		kex->newkeys[mode] = NULL;  in kex_free()
929 	struct newkeys *newkeys;  in kex_choose_conf()  local
995 		if ((newkeys = calloc(1, sizeof(*newkeys))) == NULL) {  in kex_choose_conf()
999 		kex->newkeys[mode] = newkeys;  in kex_choose_conf()
1005 		if ((r = choose_enc(&newkeys->enc, cprop[nenc],  in kex_choose_conf()
1011 		authlen = cipher_authlen(newkeys->enc.cipher);  in kex_choose_conf()
1014 		    (r = choose_mac(ssh, &newkeys->mac, cprop[nmac],  in kex_choose_conf()
1020 		if ((r = choose_comp(&newkeys->comp, cprop[ncomp],  in kex_choose_conf()
1028 		    newkeys->enc.name,  in kex_choose_conf()
1029 		    authlen == 0 ? newkeys->mac.name : "<implicit>",  in kex_choose_conf()
1030 		    newkeys->comp.name);  in kex_choose_conf()
1034 		newkeys = kex->newkeys[mode];  in kex_choose_conf()
1035 		need = MAXIMUM(need, newkeys->enc.key_len);  in kex_choose_conf()
1036 		need = MAXIMUM(need, newkeys->enc.block_size);  in kex_choose_conf()
1037 		need = MAXIMUM(need, newkeys->enc.iv_len);  in kex_choose_conf()
1038 		need = MAXIMUM(need, newkeys->mac.key_len);  in kex_choose_conf()
1039 		dh_need = MAXIMUM(dh_need, cipher_seclen(newkeys->enc.cipher));  in kex_choose_conf()
1040 		dh_need = MAXIMUM(dh_need, newkeys->enc.block_size);  in kex_choose_conf()
1041 		dh_need = MAXIMUM(dh_need, newkeys->enc.iv_len);  in kex_choose_conf()
1042 		dh_need = MAXIMUM(dh_need, newkeys->mac.key_len);  in kex_choose_conf()
1155 		kex->newkeys[mode]->enc.iv  = keys[ctos ? 0 : 1];  in kex_derive_keys()
1156 		kex->newkeys[mode]->enc.key = keys[ctos ? 2 : 3];  in kex_derive_keys()
1157 		kex->newkeys[mode]->mac.key = keys[ctos ? 4 : 5];  in kex_derive_keys()