121 	ssh->kex->server = is_server;  in ssh_init()
124 		ssh->kex->kex[KEX_DH_GRP1_SHA1] = kex_gen_server;  in ssh_init()
125 		ssh->kex->kex[KEX_DH_GRP14_SHA1] = kex_gen_server;  in ssh_init()
126 		ssh->kex->kex[KEX_DH_GRP14_SHA256] = kex_gen_server;  in ssh_init()
127 		ssh->kex->kex[KEX_DH_GRP16_SHA512] = kex_gen_server;  in ssh_init()
128 		ssh->kex->kex[KEX_DH_GRP18_SHA512] = kex_gen_server;  in ssh_init()
129 		ssh->kex->kex[KEX_DH_GEX_SHA1] = kexgex_server;  in ssh_init()
130 		ssh->kex->kex[KEX_DH_GEX_SHA256] = kexgex_server;  in ssh_init()
132 		ssh->kex->kex[KEX_ECDH_SHA2] = kex_gen_server;  in ssh_init()
135 		ssh->kex->kex[KEX_C25519_SHA256] = kex_gen_server;  in ssh_init()
136 		ssh->kex->kex[KEX_KEM_SNTRUP761X25519_SHA512] = kex_gen_server;  in ssh_init()
137 		ssh->kex->kex[KEX_KEM_MLKEM768X25519_SHA256] = kex_gen_server;  in ssh_init()
138 		ssh->kex->load_host_public_key=&_ssh_host_public_key;  in ssh_init()
139 		ssh->kex->load_host_private_key=&_ssh_host_private_key;  in ssh_init()
140 		ssh->kex->sign=&_ssh_host_key_sign;  in ssh_init()
143 		ssh->kex->kex[KEX_DH_GRP1_SHA1] = kex_gen_client;  in ssh_init()
144 		ssh->kex->kex[KEX_DH_GRP14_SHA1] = kex_gen_client;  in ssh_init()
145 		ssh->kex->kex[KEX_DH_GRP14_SHA256] = kex_gen_client;  in ssh_init()
146 		ssh->kex->kex[KEX_DH_GRP16_SHA512] = kex_gen_client;  in ssh_init()
147 		ssh->kex->kex[KEX_DH_GRP18_SHA512] = kex_gen_client;  in ssh_init()
148 		ssh->kex->kex[KEX_DH_GEX_SHA1] = kexgex_client;  in ssh_init()
149 		ssh->kex->kex[KEX_DH_GEX_SHA256] = kexgex_client;  in ssh_init()
151 		ssh->kex->kex[KEX_ECDH_SHA2] = kex_gen_client;  in ssh_init()
154 		ssh->kex->kex[KEX_C25519_SHA256] = kex_gen_client;  in ssh_init()
155 		ssh->kex->kex[KEX_KEM_SNTRUP761X25519_SHA512] = kex_gen_client;  in ssh_init()
156 		ssh->kex->kex[KEX_KEM_MLKEM768X25519_SHA256] = kex_gen_client;  in ssh_init()
157 		ssh->kex->verify_host_key =&_ssh_verify_host_key;  in ssh_init()
177 		if (ssh->kex && ssh->kex->server)  in ssh_free()
209 	if (ssh->kex->server) {  in ssh_add_hostkey()
240 	if (cb == NULL || ssh->kex == NULL)  in ssh_set_verify_host_key_callback()
243 	ssh->kex->verify_host_key = cb;  in ssh_set_verify_host_key_callback()
266 	if (sshbuf_len(ssh->kex->client_version) == 0 ||  in ssh_packet_next()
267 	    sshbuf_len(ssh->kex->server_version) == 0)  in ssh_packet_next()
378 		if (ssh->kex->server || ++n > SSH_MAX_PRE_BANNER_LINES) {  in _ssh_read_banner()
447 	struct kex *kex = ssh->kex;  in _ssh_exchange_banner()  local
456 	if (kex->server) {  in _ssh_exchange_banner()
457 		if (sshbuf_len(ssh->kex->server_version) == 0)  in _ssh_exchange_banner()
458 			r = _ssh_send_banner(ssh, ssh->kex->server_version);  in _ssh_exchange_banner()
460 		    sshbuf_len(ssh->kex->server_version) != 0 &&  in _ssh_exchange_banner()
461 		    sshbuf_len(ssh->kex->client_version) == 0)  in _ssh_exchange_banner()
462 			r = _ssh_read_banner(ssh, ssh->kex->client_version);  in _ssh_exchange_banner()
464 		if (sshbuf_len(ssh->kex->server_version) == 0)  in _ssh_exchange_banner()
465 			r = _ssh_read_banner(ssh, ssh->kex->server_version);  in _ssh_exchange_banner()
467 		    sshbuf_len(ssh->kex->server_version) != 0 &&  in _ssh_exchange_banner()
468 		    sshbuf_len(ssh->kex->client_version) == 0)  in _ssh_exchange_banner()
469 			r = _ssh_send_banner(ssh, ssh->kex->client_version);  in _ssh_exchange_banner()
474 	if (sshbuf_len(ssh->kex->server_version) != 0 &&  in _ssh_exchange_banner()
475 	    sshbuf_len(ssh->kex->client_version) != 0) {  in _ssh_exchange_banner()
538 	if ((r = kex_buf2prop(ssh->kex->my, NULL, &proposal)) != 0)  in _ssh_order_hostkeyalgs()
566 		debug2_f("orig/%d    %s", ssh->kex->server, orig);  in _ssh_order_hostkeyalgs()
567 		debug2_f("replace/%d %s", ssh->kex->server, replace);  in _ssh_order_hostkeyalgs()
571 		r = kex_prop2buf(ssh->kex->my, proposal);  in _ssh_order_hostkeyalgs()