Stan Hu
64c3993f5c
This adds support for hmac-sha2-512 to ensure compatibility with SSH clients that request this MAC algorithm. This rebases https://github.com/golang/crypto/pull/18. Change-Id: Ia103c10a8b7e2e8dde556d5c36550eb5fa6bc1f6 GitHub-Last-Rev: 987ccae2bc7ae5e90a482d8797351c39dcb9bf33 GitHub-Pull-Request: golang/crypto#257 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/501455 Reviewed-by: Dmitri Shuralyov <dmitshur@google.com> Commit-Queue: Han-Wen Nienhuys <hanwen@google.com> Auto-Submit: Dmitri Shuralyov <dmitshur@google.com> Reviewed-by: Han-Wen Nienhuys <hanwen@google.com> Run-TryBot: Han-Wen Nienhuys <hanwen@google.com> TryBot-Result: Gopher Robot <gobot@golang.org>
69 lines
1.5 KiB
Go
69 lines
1.5 KiB
Go
// Copyright 2012 The Go Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package ssh
|
|
|
|
// Message authentication support
|
|
|
|
import (
|
|
"crypto/hmac"
|
|
"crypto/sha1"
|
|
"crypto/sha256"
|
|
"crypto/sha512"
|
|
"hash"
|
|
)
|
|
|
|
type macMode struct {
|
|
keySize int
|
|
etm bool
|
|
new func(key []byte) hash.Hash
|
|
}
|
|
|
|
// truncatingMAC wraps around a hash.Hash and truncates the output digest to
|
|
// a given size.
|
|
type truncatingMAC struct {
|
|
length int
|
|
hmac hash.Hash
|
|
}
|
|
|
|
func (t truncatingMAC) Write(data []byte) (int, error) {
|
|
return t.hmac.Write(data)
|
|
}
|
|
|
|
func (t truncatingMAC) Sum(in []byte) []byte {
|
|
out := t.hmac.Sum(in)
|
|
return out[:len(in)+t.length]
|
|
}
|
|
|
|
func (t truncatingMAC) Reset() {
|
|
t.hmac.Reset()
|
|
}
|
|
|
|
func (t truncatingMAC) Size() int {
|
|
return t.length
|
|
}
|
|
|
|
func (t truncatingMAC) BlockSize() int { return t.hmac.BlockSize() }
|
|
|
|
var macModes = map[string]*macMode{
|
|
"hmac-sha2-512-etm@openssh.com": {64, true, func(key []byte) hash.Hash {
|
|
return hmac.New(sha512.New, key)
|
|
}},
|
|
"hmac-sha2-256-etm@openssh.com": {32, true, func(key []byte) hash.Hash {
|
|
return hmac.New(sha256.New, key)
|
|
}},
|
|
"hmac-sha2-512": {64, false, func(key []byte) hash.Hash {
|
|
return hmac.New(sha512.New, key)
|
|
}},
|
|
"hmac-sha2-256": {32, false, func(key []byte) hash.Hash {
|
|
return hmac.New(sha256.New, key)
|
|
}},
|
|
"hmac-sha1": {20, false, func(key []byte) hash.Hash {
|
|
return hmac.New(sha1.New, key)
|
|
}},
|
|
"hmac-sha1-96": {20, false, func(key []byte) hash.Hash {
|
|
return truncatingMAC{12, hmac.New(sha1.New, key)}
|
|
}},
|
|
}
|