1c1
< /* $OpenBSD: kexgexs.c,v 1.14 2010/11/10 01:33:07 djm Exp $ */
---
> /* $OpenBSD: kexgexs.c,v 1.19 2014/02/02 03:44:31 djm Exp $ */
71,73d70
< if (server_host_private == NULL)
< fatal("Missing private key for hostkey type %d",
< kex->hostkey_type);
75d71
<
157,158c153,154
< memset(kbuf, 0, klen);
< xfree(kbuf);
---
> explicit_bzero(kbuf, klen);
> free(kbuf);
167c163
< kex->evp_md,
---
> kex->hash_alg,
190,192c186,187
< if (PRIVSEP(key_sign(server_host_private, &signature, &slen, hash,
< hashlen)) < 0)
< fatal("kexgex_server: key_sign failed");
---
> kex->sign(server_host_private, server_host_public, &signature, &slen,
> hash, hashlen);
204,205c199,200
< xfree(signature);
< xfree(server_host_key_blob);
---
> free(signature);
> free(server_host_key_blob);
209c204
< kex_derive_keys(kex, hash, hashlen, shared_secret);
---
> kex_derive_keys_bn(kex, hash, hashlen, shared_secret);