crypto/openssh/kex.c

558 kex_free_newkeys(struct newkeys *newkeys)
560 	if (newkeys == NULL)
562 	if (newkeys->enc.key) {
563 		explicit_bzero(newkeys->enc.key, newkeys->enc.key_len);
564 		free(newkeys->enc.key);
565 		newkeys->enc.key = NULL;
567 	if (newkeys->enc.iv) {
568 		explicit_bzero(newkeys->enc.iv, newkeys->enc.iv_len);
569 		free(newkeys->enc.iv);
570 		newkeys->enc.iv = NULL;
572 	free(newkeys->enc.name);
573 	explicit_bzero(&newkeys->enc, sizeof(newkeys->enc));
574 	free(newkeys->comp.name);
575 	explicit_bzero(&newkeys->comp, sizeof(newkeys->comp));
576 	mac_clear(&newkeys->mac);
577 	if (newkeys->mac.key) {
578 		explicit_bzero(newkeys->mac.key, newkeys->mac.key_len);
579 		free(newkeys->mac.key);
580 		newkeys->mac.key = NULL;
582 	free(newkeys->mac.name);
583 	explicit_bzero(&newkeys->mac, sizeof(newkeys->mac));
584 	explicit_bzero(newkeys, sizeof(*newkeys));
585 	free(newkeys);
602 		kex_free_newkeys(kex->newkeys[mode]);
603 		kex->newkeys[mode] = NULL;
774 	struct newkeys *newkeys;
819 		if ((newkeys = calloc(1, sizeof(*newkeys))) == NULL) {
823 		kex->newkeys[mode] = newkeys;
829 		if ((r = choose_enc(&newkeys->enc, cprop[nenc],
835 		authlen = cipher_authlen(newkeys->enc.cipher);
838 		    (r = choose_mac(ssh, &newkeys->mac, cprop[nmac],
844 		if ((r = choose_comp(&newkeys->comp, cprop[ncomp],
852 		    newkeys->enc.name,
853 		    authlen == 0 ? newkeys->mac.name : "<implicit>",
854 		    newkeys->comp.name);
858 		newkeys = kex->newkeys[mode];
859 		need = MAXIMUM(need, newkeys->enc.key_len);
860 		need = MAXIMUM(need, newkeys->enc.block_size);
861 		need = MAXIMUM(need, newkeys->enc.iv_len);
862 		need = MAXIMUM(need, newkeys->mac.key_len);
863 		dh_need = MAXIMUM(dh_need, cipher_seclen(newkeys->enc.cipher));
864 		dh_need = MAXIMUM(dh_need, newkeys->enc.block_size);
865 		dh_need = MAXIMUM(dh_need, newkeys->enc.iv_len);
866 		dh_need = MAXIMUM(dh_need, newkeys->mac.key_len);
967 		kex->newkeys[mode]->enc.iv  = keys[ctos ? 0 : 1];
968 		kex->newkeys[mode]->enc.key = keys[ctos ? 2 : 3];
969 		kex->newkeys[mode]->mac.key = keys[ctos ? 4 : 5];