Move password-packet padding into the BPP module.

Now when we construct a packet containing sensitive data, we just set
a field saying '... and make it take up at least this much space, to
disguise its true size', and nothing in the rest of the system worries
about that flag until ssh2bpp.c acts on it.

Also, I've changed the strategy for doing the padding. Previously, we
were following the real packet with an SSH_MSG_IGNORE to make up the
size. But that was only a partial defence: it works OK against passive
traffic analysis, but an attacker proxying the TCP stream and
dribbling it out one byte at a time could still have found out the
size of the real packet by noting when the dribbled data provoked a
response. Now I put the SSH_MSG_IGNORE _first_, which should defeat
that attack.

But that in turn doesn't work when we're doing compression, because we
can't predict the compressed sizes accurately enough to make that
strategy sensible. Fortunately, compression provides an alternative
strategy anyway: if we've got zlib turned on when we send one of these
sensitive packets, then we can pad out the compressed zlib data as
much as we like by adding empty RFC1951 blocks (effectively chaining
ZLIB_PARTIAL_FLUSHes). So both strategies should now be dribble-proof.

ssh.h

@@ -81,7 +81,7 @@ typedef struct PktOut {
     long prefix;            /* bytes up to and including type field */
     long length;            /* total bytes, including prefix */
     int type;
-    long forcepad;	    /* SSH-2: force padding to at least this length */
+    long minlen;            /* SSH-2: ensure wire length is at least this */
     unsigned char *data;    /* allocated storage */
     long maxlen;	    /* amount of storage allocated for `data' */
     long encrypted_len;	    /* for SSH-2 total-size counting */
@@ -561,12 +561,12 @@ struct ssh_compress {
     void *(*compress_init) (void);
     void (*compress_cleanup) (void *);
     void (*compress) (void *, unsigned char *block, int len,
-                      unsigned char **outblock, int *outlen);
+                      unsigned char **outblock, int *outlen,
+                      int minlen);
     void *(*decompress_init) (void);
     void (*decompress_cleanup) (void *);
     int (*decompress) (void *, unsigned char *block, int len,
 		       unsigned char **outblock, int *outlen);
-    int (*disable_compression) (void *);
     const char *text_name;
 };
 
@@ -982,7 +982,7 @@ void zlib_compress_cleanup(void *);
 void *zlib_decompress_init(void);
 void zlib_decompress_cleanup(void *);
 void zlib_compress_block(void *, unsigned char *block, int len,
-                         unsigned char **outblock, int *outlen);
+                         unsigned char **outblock, int *outlen, int minlen);
 int zlib_decompress_block(void *, unsigned char *block, int len,
 			  unsigned char **outblock, int *outlen);