xref: /freebsd/crypto/openssh/myproposal.h (revision ce6a89e27cd190313be39bb479880aeda4778436)
1 /* $OpenBSD: myproposal.h,v 1.57 2018/09/12 01:34:02 djm Exp $ */
2 /* $FreeBSD$ */
3 
4 /*
5  * Copyright (c) 2000 Markus Friedl.  All rights reserved.
6  *
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted provided that the following conditions
9  * are met:
10  * 1. Redistributions of source code must retain the above copyright
11  *    notice, this list of conditions and the following disclaimer.
12  * 2. Redistributions in binary form must reproduce the above copyright
13  *    notice, this list of conditions and the following disclaimer in the
14  *    documentation and/or other materials provided with the distribution.
15  *
16  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
17  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
18  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
19  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
20  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
21  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
22  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
23  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
24  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
25  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
26  */
27 
28 #include <openssl/opensslv.h>
29 
30 /* conditional algorithm support */
31 
32 #ifdef OPENSSL_HAS_ECC
33 #ifdef OPENSSL_HAS_NISTP521
34 # define KEX_ECDH_METHODS \
35 	"ecdh-sha2-nistp256," \
36 	"ecdh-sha2-nistp384," \
37 	"ecdh-sha2-nistp521,"
38 # define HOSTKEY_ECDSA_CERT_METHODS \
39 	"ecdsa-sha2-nistp256-cert-v01@openssh.com," \
40 	"ecdsa-sha2-nistp384-cert-v01@openssh.com," \
41 	"ecdsa-sha2-nistp521-cert-v01@openssh.com,"
42 # define HOSTKEY_ECDSA_METHODS \
43 	"ecdsa-sha2-nistp256," \
44 	"ecdsa-sha2-nistp384," \
45 	"ecdsa-sha2-nistp521,"
46 #else
47 # define KEX_ECDH_METHODS \
48 	"ecdh-sha2-nistp256," \
49 	"ecdh-sha2-nistp384,"
50 # define HOSTKEY_ECDSA_CERT_METHODS \
51 	"ecdsa-sha2-nistp256-cert-v01@openssh.com," \
52 	"ecdsa-sha2-nistp384-cert-v01@openssh.com,"
53 # define HOSTKEY_ECDSA_METHODS \
54 	"ecdsa-sha2-nistp256," \
55 	"ecdsa-sha2-nistp384,"
56 #endif
57 #else
58 # define KEX_ECDH_METHODS
59 # define HOSTKEY_ECDSA_CERT_METHODS
60 # define HOSTKEY_ECDSA_METHODS
61 #endif
62 
63 #ifdef OPENSSL_HAVE_EVPGCM
64 # define AESGCM_CIPHER_MODES \
65 	",aes128-gcm@openssh.com,aes256-gcm@openssh.com"
66 #else
67 # define AESGCM_CIPHER_MODES
68 #endif
69 
70 #ifdef HAVE_EVP_SHA256
71 # define KEX_SHA2_METHODS \
72 	"diffie-hellman-group-exchange-sha256," \
73 	"diffie-hellman-group16-sha512," \
74 	"diffie-hellman-group18-sha512,"
75 # define KEX_SHA2_GROUP14 \
76 	"diffie-hellman-group14-sha256,"
77 #define	SHA2_HMAC_MODES \
78 	"hmac-sha2-256," \
79 	"hmac-sha2-512,"
80 #else
81 # define KEX_SHA2_METHODS
82 # define KEX_SHA2_GROUP14
83 # define SHA2_HMAC_MODES
84 #endif
85 
86 #ifdef WITH_OPENSSL
87 # ifdef HAVE_EVP_SHA256
88 #  define KEX_CURVE25519_METHODS \
89 	"curve25519-sha256," \
90 	"curve25519-sha256@libssh.org,"
91 # else
92 #  define KEX_CURVE25519_METHODS ""
93 # endif
94 #define KEX_COMMON_KEX \
95 	KEX_CURVE25519_METHODS \
96 	KEX_ECDH_METHODS \
97 	KEX_SHA2_METHODS
98 
99 #define KEX_SERVER_KEX KEX_COMMON_KEX \
100 	KEX_SHA2_GROUP14 \
101 	"diffie-hellman-group14-sha1" \
102 
103 #define KEX_CLIENT_KEX KEX_COMMON_KEX \
104 	"diffie-hellman-group-exchange-sha1," \
105 	KEX_SHA2_GROUP14 \
106 	"diffie-hellman-group14-sha1"
107 
108 #define	KEX_DEFAULT_PK_ALG	\
109 	HOSTKEY_ECDSA_CERT_METHODS \
110 	"ssh-ed25519-cert-v01@openssh.com," \
111 	"rsa-sha2-512-cert-v01@openssh.com," \
112 	"rsa-sha2-256-cert-v01@openssh.com," \
113 	"ssh-rsa-cert-v01@openssh.com," \
114 	HOSTKEY_ECDSA_METHODS \
115 	"ssh-ed25519," \
116 	"rsa-sha2-512," \
117 	"rsa-sha2-256," \
118 	"ssh-rsa"
119 
120 /* the actual algorithms */
121 
122 #define KEX_SERVER_ENCRYPT \
123 	"chacha20-poly1305@openssh.com," \
124 	"aes128-ctr,aes192-ctr,aes256-ctr" \
125 	AESGCM_CIPHER_MODES \
126 	",aes128-cbc,aes192-cbc,aes256-cbc"
127 
128 #define KEX_CLIENT_ENCRYPT KEX_SERVER_ENCRYPT
129 
130 #define KEX_SERVER_MAC \
131 	"umac-64-etm@openssh.com," \
132 	"umac-128-etm@openssh.com," \
133 	"hmac-sha2-256-etm@openssh.com," \
134 	"hmac-sha2-512-etm@openssh.com," \
135 	"hmac-sha1-etm@openssh.com," \
136 	"umac-64@openssh.com," \
137 	"umac-128@openssh.com," \
138 	"hmac-sha2-256," \
139 	"hmac-sha2-512," \
140 	"hmac-sha1"
141 
142 #define KEX_CLIENT_MAC KEX_SERVER_MAC
143 
144 /* Not a KEX value, but here so all the algorithm defaults are together */
145 #define	SSH_ALLOWED_CA_SIGALGS	\
146 	"ecdsa-sha2-nistp256," \
147 	"ecdsa-sha2-nistp384," \
148 	"ecdsa-sha2-nistp521," \
149 	"ssh-ed25519," \
150 	"rsa-sha2-512," \
151 	"rsa-sha2-256," \
152 	"ssh-rsa"
153 
154 #else /* WITH_OPENSSL */
155 
156 #define KEX_SERVER_KEX		\
157 	"curve25519-sha256," \
158 	"curve25519-sha256@libssh.org"
159 #define	KEX_DEFAULT_PK_ALG	\
160 	"ssh-ed25519-cert-v01@openssh.com," \
161 	"ssh-ed25519"
162 #define	KEX_SERVER_ENCRYPT \
163 	"chacha20-poly1305@openssh.com," \
164 	"aes128-ctr,aes192-ctr,aes256-ctr"
165 #define	KEX_SERVER_MAC \
166 	"umac-64-etm@openssh.com," \
167 	"umac-128-etm@openssh.com," \
168 	"hmac-sha2-256-etm@openssh.com," \
169 	"hmac-sha2-512-etm@openssh.com," \
170 	"hmac-sha1-etm@openssh.com," \
171 	"umac-64@openssh.com," \
172 	"umac-128@openssh.com," \
173 	"hmac-sha2-256," \
174 	"hmac-sha2-512," \
175 	"hmac-sha1"
176 
177 #define KEX_CLIENT_KEX KEX_SERVER_KEX
178 #define	KEX_CLIENT_ENCRYPT KEX_SERVER_ENCRYPT
179 #define KEX_CLIENT_MAC KEX_SERVER_MAC
180 
181 #define	SSH_ALLOWED_CA_SIGALGS	"ssh-ed25519"
182 
183 #endif /* WITH_OPENSSL */
184 
185 #define	KEX_DEFAULT_COMP	"none,zlib@openssh.com"
186 #define	KEX_DEFAULT_LANG	""
187 
188 #define KEX_CLIENT \
189 	KEX_CLIENT_KEX, \
190 	KEX_DEFAULT_PK_ALG, \
191 	KEX_CLIENT_ENCRYPT, \
192 	KEX_CLIENT_ENCRYPT, \
193 	KEX_CLIENT_MAC, \
194 	KEX_CLIENT_MAC, \
195 	KEX_DEFAULT_COMP, \
196 	KEX_DEFAULT_COMP, \
197 	KEX_DEFAULT_LANG, \
198 	KEX_DEFAULT_LANG
199 
200 #define KEX_SERVER \
201 	KEX_SERVER_KEX, \
202 	KEX_DEFAULT_PK_ALG, \
203 	KEX_SERVER_ENCRYPT, \
204 	KEX_SERVER_ENCRYPT, \
205 	KEX_SERVER_MAC, \
206 	KEX_SERVER_MAC, \
207 	KEX_DEFAULT_COMP, \
208 	KEX_DEFAULT_COMP, \
209 	KEX_DEFAULT_LANG, \
210 	KEX_DEFAULT_LANG
211 
212