diff options
author | Juraj Vijtiuk <juraj.vijtiuk@sartura.hr> | 2017-12-28 11:10:43 +0100 |
---|---|---|
committer | Andreas Schneider <asn@cryptomilk.org> | 2017-12-28 11:17:39 +0100 |
commit | 778652460f7cceb3e760964a890ffd99ec8230e7 (patch) | |
tree | b30fca5918cc4f88abcba9e12146c6fe5db11ad1 /include/libssh/pki.h | |
parent | 5c3b1ee0a427e3a6a0b2ba0862fd9d2c4c25d736 (diff) | |
download | libssh-778652460f7cceb3e760964a890ffd99ec8230e7.tar.gz libssh-778652460f7cceb3e760964a890ffd99ec8230e7.tar.xz libssh-778652460f7cceb3e760964a890ffd99ec8230e7.zip |
add mbedtls crypto support
Summary:
This patch adds support for mbedTLS as a crypto backend for libssh.
mbedTLS is an SSL/TLS library that has been designed to mainly be used
in embedded systems. It is loosely coupled and has a low memory
footprint. mbedTLS also provides a cryptography library (libmbedcrypto)
that can be used without the TLS modules.
The patch is unfortunately quite big, since several new files had to
be added.
DSA is disabled at compile time, since mbedTLS doesn't support DSA
Patch review and feedback would be appreciated, and if any issues or
suggestions appear, I'm willing to work on them.
Signed-off-by: Juraj Vijtiuk <juraj.vijtiuk@sartura.hr>
Test Plan:
* The patch has been tested with a Debug and MinSizeRel build, with
libssh unit tests, client tests and the pkd tests.
* All the tests have been run with valgrind's memcheck, drd and helgrind
tools.
* The examples/samplessh client works when built with the patch.
Reviewers: asn, aris
Subscribers: simonsj
Differential Revision: https://bugs.libssh.org/D1
Diffstat (limited to 'include/libssh/pki.h')
-rw-r--r-- | include/libssh/pki.h | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/include/libssh/pki.h b/include/libssh/pki.h index e0e30f1a..e078768b 100644 --- a/include/libssh/pki.h +++ b/include/libssh/pki.h @@ -48,6 +48,10 @@ struct ssh_key_struct { gcry_sexp_t dsa; gcry_sexp_t rsa; gcry_sexp_t ecdsa; +#elif HAVE_LIBMBEDCRYPTO + mbedtls_pk_context *rsa; + mbedtls_ecdsa_context *ecdsa; + void *dsa; #elif HAVE_LIBCRYPTO DSA *dsa; RSA *rsa; @@ -78,6 +82,9 @@ struct ssh_signature_struct { # else void *ecdsa_sig; # endif +#elif defined HAVE_LIBMBEDCRYPTO + ssh_string rsa_sig; + struct mbedtls_ecdsa_sig ecdsa_sig; #endif ed25519_signature *ed25519_sig; }; |