diff options
| author | Jakub Jelen <jjelen@redhat.com> | 2018-10-08 13:24:49 +0200 |
|---|---|---|
| committer | Andreas Schneider <asn@cryptomilk.org> | 2018-10-09 12:05:40 +0200 |
| commit | 46090facbae8c8292d2775546082ccbd5e56fbd1 (patch) | |
| tree | 3e6875a6e353d9d496972f0756f220446f082db2 /config.h.cmake | |
| parent | 777786d76c83b017ce6936bd15aa3413fd65bcca (diff) | |
| download | libssh-46090facbae8c8292d2775546082ccbd5e56fbd1.tar.gz libssh-46090facbae8c8292d2775546082ccbd5e56fbd1.tar.xz libssh-46090facbae8c8292d2775546082ccbd5e56fbd1.zip | |
libcrypto: Implement OpenSSH-compatible AES-GCM ciphers using OpenSSL
The commit also propares the internals throughout the code base
for the inclusion of a new AEAD cipher, because previously, the
source code counted only with chacha20-poly1305 cipher, which
is very specific in many cases.
The SSH_HMAC_AEAD_GCM mac algorithm is not actually used, but the name
needed to be defined so we can match in the algorithms selection per
OpenSSH specification (MACs are ignored in case GCM is select as a cipher [1]).
If the provided OpenSSL does not provide EVP_aes_128_gcm() function,
the AES-GCM ciphers will not be compiled in.
[1] https://cvsweb.openbsd.org/src/usr.bin/ssh/PROTOCOL.chacha20poly1305?annotate=HEAD
Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
Diffstat (limited to 'config.h.cmake')
| -rw-r--r-- | config.h.cmake | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/config.h.cmake b/config.h.cmake index d7adb154..e5f92043 100644 --- a/config.h.cmake +++ b/config.h.cmake @@ -100,6 +100,9 @@ /* Define to 1 if you have the `EVP_aes128_cbc' function. */ #cmakedefine HAVE_OPENSSL_EVP_AES_CBC 1 +/* Define to 1 if you have the `EVP_aes128_gcm' function. */ +#cmakedefine HAVE_OPENSSL_EVP_AES_GCM 1 + /* Define to 1 if you have the `CRYPTO_THREADID_set_callback' function. */ #cmakedefine HAVE_OPENSSL_CRYPTO_THREADID_SET_CALLBACK 1 |