xref: /freebsd/crypto/openssh/myproposal.h (revision 3332f1b444d4a73238e9f59cca27bfc95fe936bd)
1 /* $OpenBSD: myproposal.h,v 1.68 2020/10/03 04:15:06 djm Exp $ */
2 
3 /*
4  * Copyright (c) 2000 Markus Friedl.  All rights reserved.
5  *
6  * Redistribution and use in source and binary forms, with or without
7  * modification, are permitted provided that the following conditions
8  * are met:
9  * 1. Redistributions of source code must retain the above copyright
10  *    notice, this list of conditions and the following disclaimer.
11  * 2. Redistributions in binary form must reproduce the above copyright
12  *    notice, this list of conditions and the following disclaimer in the
13  *    documentation and/or other materials provided with the distribution.
14  *
15  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
16  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
17  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
18  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
19  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
20  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
21  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
22  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
23  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
24  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
25  */
26 
27 #define KEX_SERVER_KEX	\
28 	"curve25519-sha256," \
29 	"curve25519-sha256@libssh.org," \
30 	"ecdh-sha2-nistp256," \
31 	"ecdh-sha2-nistp384," \
32 	"ecdh-sha2-nistp521," \
33 	"diffie-hellman-group-exchange-sha256," \
34 	"diffie-hellman-group16-sha512," \
35 	"diffie-hellman-group18-sha512," \
36 	"diffie-hellman-group14-sha256"
37 
38 #define KEX_CLIENT_KEX KEX_SERVER_KEX
39 
40 #define	KEX_DEFAULT_PK_ALG	\
41 	"ssh-ed25519-cert-v01@openssh.com," \
42 	"ecdsa-sha2-nistp256-cert-v01@openssh.com," \
43 	"ecdsa-sha2-nistp384-cert-v01@openssh.com," \
44 	"ecdsa-sha2-nistp521-cert-v01@openssh.com," \
45 	"sk-ssh-ed25519-cert-v01@openssh.com," \
46 	"sk-ecdsa-sha2-nistp256-cert-v01@openssh.com," \
47 	"rsa-sha2-512-cert-v01@openssh.com," \
48 	"rsa-sha2-256-cert-v01@openssh.com," \
49 	"ssh-rsa-cert-v01@openssh.com," \
50 	"ssh-ed25519," \
51 	"ecdsa-sha2-nistp256," \
52 	"ecdsa-sha2-nistp384," \
53 	"ecdsa-sha2-nistp521," \
54 	"sk-ssh-ed25519@openssh.com," \
55 	"sk-ecdsa-sha2-nistp256@openssh.com," \
56 	"rsa-sha2-512," \
57 	"rsa-sha2-256," \
58 	"ssh-rsa"
59 
60 #define	KEX_SERVER_ENCRYPT \
61 	"chacha20-poly1305@openssh.com," \
62 	"aes128-ctr,aes192-ctr,aes256-ctr," \
63 	"aes128-gcm@openssh.com,aes256-gcm@openssh.com"
64 
65 #define KEX_CLIENT_ENCRYPT KEX_SERVER_ENCRYPT
66 
67 #define	KEX_SERVER_MAC \
68 	"umac-64-etm@openssh.com," \
69 	"umac-128-etm@openssh.com," \
70 	"hmac-sha2-256-etm@openssh.com," \
71 	"hmac-sha2-512-etm@openssh.com," \
72 	"hmac-sha1-etm@openssh.com," \
73 	"umac-64@openssh.com," \
74 	"umac-128@openssh.com," \
75 	"hmac-sha2-256," \
76 	"hmac-sha2-512," \
77 	"hmac-sha1"
78 
79 #define KEX_CLIENT_MAC KEX_SERVER_MAC
80 
81 /* Not a KEX value, but here so all the algorithm defaults are together */
82 #define	SSH_ALLOWED_CA_SIGALGS	\
83 	"ssh-ed25519," \
84 	"ecdsa-sha2-nistp256," \
85 	"ecdsa-sha2-nistp384," \
86 	"ecdsa-sha2-nistp521," \
87 	"sk-ssh-ed25519@openssh.com," \
88 	"sk-ecdsa-sha2-nistp256@openssh.com," \
89 	"rsa-sha2-512," \
90 	"rsa-sha2-256"
91 
92 #define	KEX_DEFAULT_COMP	"none,zlib@openssh.com"
93 #define	KEX_DEFAULT_LANG	""
94 
95 #define KEX_CLIENT \
96 	KEX_CLIENT_KEX, \
97 	KEX_DEFAULT_PK_ALG, \
98 	KEX_CLIENT_ENCRYPT, \
99 	KEX_CLIENT_ENCRYPT, \
100 	KEX_CLIENT_MAC, \
101 	KEX_CLIENT_MAC, \
102 	KEX_DEFAULT_COMP, \
103 	KEX_DEFAULT_COMP, \
104 	KEX_DEFAULT_LANG, \
105 	KEX_DEFAULT_LANG
106 
107 #define KEX_SERVER \
108 	KEX_SERVER_KEX, \
109 	KEX_DEFAULT_PK_ALG, \
110 	KEX_SERVER_ENCRYPT, \
111 	KEX_SERVER_ENCRYPT, \
112 	KEX_SERVER_MAC, \
113 	KEX_SERVER_MAC, \
114 	KEX_DEFAULT_COMP, \
115 	KEX_DEFAULT_COMP, \
116 	KEX_DEFAULT_LANG, \
117 	KEX_DEFAULT_LANG
118