path: root/src/pki.c
AgeCommit message (Expand)AuthorFilesLines
2021-08-18CVE-2021-3634: Create a separate length for session_idJakub Jelen1-4/+4
2021-06-16Make the max file line length configurableXiang Xiao1-1/+5
2020-12-11Add safety checks for all ssh_string_fill callsDirkjan Bussink1-3/+14
2020-09-03Fix another memory leak on invalid nid valueDirkjan Bussink1-0/+4
2020-07-16pki: Avoid memory leak on invalid curve NIDJakub Jelen1-0/+2
2020-02-12pki: Small code cleanup in ssh_pki_signature_verify()Andreas Schneider1-2/+4
2020-02-12pki: Use SSH_BUFFER_FREE() in ssh_pki_signature_verify()Andreas Schneider1-1/+1
2020-02-12pki: Add missing return check for ssh_buffer_pack()Andreas Schneider1-4/+10
2020-02-12pki: Fix memory leak of blob on errorAndreas Schneider1-0/+1
2020-02-11src: updates documentation incorporate PKCS#11 URIs in import functions.Sahana Prasad1-4/+6
2020-02-11pki: add support for sk-ecdsa and sk-ed25519Sebastian Kinne1-4/+155
2020-01-23pki: Avoid uneeded memory duplicationAndreas Schneider1-2/+2
2019-12-20src: Implements PKCS11 URI supportSahana Prasad1-0/+15
2019-12-20src: Helper funtions to detect PKCS #11 URIsSahana Prasad1-0/+43
2019-12-09pki: Use SSH_BUFFER_FREE()Andreas Schneider1-21/+21
2019-12-09pki: Use SSH_STRING_FREE()Andreas Schneider1-44/+44
2019-12-09SSH-01-006: Add missing NULL check in ssh_pki_do_sign_agent()Andreas Schneider1-0/+3
2019-11-07server: Use really the negotiated signature typeJakub Jelen1-8/+4
2019-09-24pki: Remove unused function pki_signature_verify()Anderson Toshiyuki Sasaki1-1/+1
2019-09-24pki_crypto: Use OpenSSL for Ed25519 signaturesAnderson Toshiyuki Sasaki1-10/+14
2019-07-30Replace ssh_print_hexa() with ssh_log_hexdump()Anderson Toshiyuki Sasaki1-16/+16
2019-07-29pki: Search OpenSSH header not only at the beginningAnderson Toshiyuki Sasaki1-4/+4
2019-06-26pki: Add workarounds for old OpenSSHAnderson Toshiyuki Sasaki1-0/+28
2019-06-19pki: Search for the PEM headers not only on the start of the key fileJakub Jelen1-7/+7
2019-06-19pki: Reformat pki_privatekey_type_from_string()Jakub Jelen1-4/+10
2019-06-13pki: Derive correct algorithm identification for certificate authentication w...Jakub Jelen1-13/+28
2019-06-12kex, pki, server, options: Filter algorithms in FIPS modeAnderson Toshiyuki Sasaki1-4/+21
2019-06-12pki: Check if the key is allowed against right listAnderson Toshiyuki Sasaki1-3/+18
2019-05-28pki: Avoid a null pointer derefrenceAndreas Schneider1-1/+2
2019-05-13pki: Fail to sign when using wrong hash algorithmAnderson Toshiyuki Sasaki1-0/+89
2019-05-13pki: Remove unused codeAnderson Toshiyuki Sasaki1-6/+0
2019-05-13pki: Use pki_sign_data() and pki_verify_data_signature()Anderson Toshiyuki Sasaki1-31/+1
2019-05-13pki: Add a common place to store raw signaturesAnderson Toshiyuki Sasaki1-0/+3
2019-05-13pki: Make DSA signature to use SHA1 instead of AUTOAnderson Toshiyuki Sasaki1-2/+14
2019-05-13auth, pki: Calculate hash internally when signing/verifyingAnderson Toshiyuki Sasaki1-149/+69
2019-05-13pki: Refactor ssh_srv_pki_do_sign_sessionid()Anderson Toshiyuki Sasaki1-49/+54
2019-05-13pki: Refactor ssh_pki_do_sign()Anderson Toshiyuki Sasaki1-82/+76
2019-04-17pki: allow certificates to be used in signature verificationBen Toews1-4/+31
2019-04-17pki: parse keys from certificates into ssh_keyBen Toews1-21/+51
2019-04-17pki: support ECDSA/ED25519 certificatesBen Toews1-5/+37
2019-04-17libssh: deprecate SSH_KEYTYPE_ECDSABen Toews1-20/+56
2019-01-26pki: Avoid a possible segfaults in error pathsAndreas Schneider1-2/+2
2019-01-09packet: Introduce a new function to access cryptoJakub Jelen1-12/+9
2018-11-30pki: Return default RSA key type for DIGEST_AUTOJakub Jelen1-0/+1
2018-11-30pki: Sanity-check signature matches base key typeJakub Jelen1-0/+6
2018-11-30pki: Separate signature extraction and verificationJakub Jelen1-13/+5
2018-11-30pki: Use self-explanatory variable namesJakub Jelen1-10/+10
2018-11-30The largest ECDSA key has 521 bitsJakub Jelen1-1/+1
2018-11-23kex,packet,packet_cb: ReformatJakub Jelen1-1/+2
2018-11-20pki: Fix typos in documentationTilo Eckert1-2/+3