mirror of
https://git.tartarus.org/simon/putty.git
synced 2025-01-09 17:38:00 +00:00
40dfbeba41
I decided that the 'namemaker' system introduced recently in commit
fbb979aa98 was just too marginal to be sensible, and it's easier
to simply quote the full SSH id for each protocol.
Also, included an empty argument at the end of each macro invocation,
so that the variadic "..." is never completely missing.
111 lines
4.0 KiB
C
111 lines
4.0 KiB
C
/*
|
|
* Top-level vtables to select an AES implementation.
|
|
*/
|
|
|
|
#include <assert.h>
|
|
#include <stdlib.h>
|
|
|
|
#include "putty.h"
|
|
#include "ssh.h"
|
|
#include "aes.h"
|
|
|
|
static ssh_cipher *aes_select(const ssh_cipheralg *alg)
|
|
{
|
|
const ssh_cipheralg *const *real_algs = (const ssh_cipheralg **)alg->extra;
|
|
|
|
for (size_t i = 0; real_algs[i]; i++) {
|
|
const ssh_cipheralg *alg = real_algs[i];
|
|
const struct aes_extra *alg_extra =
|
|
(const struct aes_extra *)alg->extra;
|
|
if (check_availability(alg_extra))
|
|
return ssh_cipher_new(alg);
|
|
}
|
|
|
|
/* We should never reach the NULL at the end of the list, because
|
|
* the last non-NULL entry should be software-only AES, which is
|
|
* always available. */
|
|
unreachable("aes_select ran off the end of its list");
|
|
}
|
|
|
|
#if HAVE_AES_NI
|
|
#define IF_NI(...) __VA_ARGS__
|
|
#else
|
|
#define IF_NI(...)
|
|
#endif
|
|
|
|
#if HAVE_NEON_CRYPTO
|
|
#define IF_NEON(...) __VA_ARGS__
|
|
#else
|
|
#define IF_NEON(...)
|
|
#endif
|
|
|
|
#define AES_SELECTOR_VTABLE(mode_c, id, mode_display, bits, ...) \
|
|
static const ssh_cipheralg * \
|
|
ssh_aes ## bits ## _ ## mode_c ## _impls[] = { \
|
|
IF_NI(&ssh_aes ## bits ## _ ## mode_c ## _ni,) \
|
|
IF_NEON(&ssh_aes ## bits ## _ ## mode_c ## _neon,) \
|
|
&ssh_aes ## bits ## _ ## mode_c ## _sw, \
|
|
NULL, \
|
|
}; \
|
|
const ssh_cipheralg ssh_aes ## bits ## _ ## mode_c = { \
|
|
.new = aes_select, \
|
|
.ssh2_id = id, \
|
|
.blksize = 16, \
|
|
.real_keybits = bits, \
|
|
.padded_keybytes = bits/8, \
|
|
.text_name = "AES-" #bits " " mode_display \
|
|
" (dummy selector vtable)", \
|
|
.extra = ssh_aes ## bits ## _ ## mode_c ## _impls, \
|
|
__VA_ARGS__ \
|
|
}
|
|
|
|
AES_SELECTOR_VTABLE(cbc, "aes128-cbc", "CBC", 128, );
|
|
AES_SELECTOR_VTABLE(cbc, "aes192-cbc", "CBC", 192, );
|
|
AES_SELECTOR_VTABLE(cbc, "aes256-cbc", "CBC", 256, );
|
|
AES_SELECTOR_VTABLE(sdctr, "aes128-ctr", "SDCTR", 128, );
|
|
AES_SELECTOR_VTABLE(sdctr, "aes192-ctr", "SDCTR", 192, );
|
|
AES_SELECTOR_VTABLE(sdctr, "aes256-ctr", "SDCTR", 256, );
|
|
AES_SELECTOR_VTABLE(gcm, "aes128-gcm@openssh.com", "GCM", 128,
|
|
.required_mac = &ssh2_aesgcm_mac);
|
|
AES_SELECTOR_VTABLE(gcm, "aes256-gcm@openssh.com", "GCM", 256,
|
|
.required_mac = &ssh2_aesgcm_mac);
|
|
|
|
/* 192-bit AES-GCM is included only so that testcrypt can run standard
|
|
* test vectors against it. OpenSSH doesn't define a protocol id for
|
|
* it. Hence setting its ssh2_id to NULL here, and more importantly,
|
|
* leaving it out of aesgcm_list[] below. */
|
|
AES_SELECTOR_VTABLE(gcm, NULL, "GCM", 192,
|
|
.required_mac = &ssh2_aesgcm_mac);
|
|
|
|
static const ssh_cipheralg ssh_rijndael_lysator = {
|
|
/* Same as aes256_cbc, but with a different protocol ID */
|
|
.new = aes_select,
|
|
.ssh2_id = "rijndael-cbc@lysator.liu.se",
|
|
.blksize = 16,
|
|
.real_keybits = 256,
|
|
.padded_keybytes = 256/8,
|
|
.text_name = "AES-256 CBC (dummy selector vtable)",
|
|
.extra = ssh_aes256_cbc_impls,
|
|
};
|
|
|
|
static const ssh_cipheralg *const aes_list[] = {
|
|
&ssh_aes256_sdctr,
|
|
&ssh_aes256_cbc,
|
|
&ssh_rijndael_lysator,
|
|
&ssh_aes192_sdctr,
|
|
&ssh_aes192_cbc,
|
|
&ssh_aes128_sdctr,
|
|
&ssh_aes128_cbc,
|
|
};
|
|
|
|
const ssh2_ciphers ssh2_aes = { lenof(aes_list), aes_list };
|
|
|
|
static const ssh_cipheralg *const aesgcm_list[] = {
|
|
/* OpenSSH only defines protocol ids for 128- and 256-bit AES-GCM,
|
|
* not 192-bit. */
|
|
&ssh_aes128_gcm,
|
|
&ssh_aes256_gcm,
|
|
};
|
|
|
|
const ssh2_ciphers ssh2_aesgcm = { lenof(aesgcm_list), aesgcm_list };
|