crypto/openssh/kex.c

537 kex_free_newkeys(struct newkeys *newkeys)
539 	if (newkeys == NULL)
541 	if (newkeys->enc.key) {
542 		explicit_bzero(newkeys->enc.key, newkeys->enc.key_len);
543 		free(newkeys->enc.key);
544 		newkeys->enc.key = NULL;
546 	if (newkeys->enc.iv) {
547 		explicit_bzero(newkeys->enc.iv, newkeys->enc.iv_len);
548 		free(newkeys->enc.iv);
549 		newkeys->enc.iv = NULL;
551 	free(newkeys->enc.name);
552 	explicit_bzero(&newkeys->enc, sizeof(newkeys->enc));
553 	free(newkeys->comp.name);
554 	explicit_bzero(&newkeys->comp, sizeof(newkeys->comp));
555 	mac_clear(&newkeys->mac);
556 	if (newkeys->mac.key) {
557 		explicit_bzero(newkeys->mac.key, newkeys->mac.key_len);
558 		free(newkeys->mac.key);
559 		newkeys->mac.key = NULL;
561 	free(newkeys->mac.name);
562 	explicit_bzero(&newkeys->mac, sizeof(newkeys->mac));
563 	explicit_bzero(newkeys, sizeof(*newkeys));
564 	free(newkeys);
581 		kex_free_newkeys(kex->newkeys[mode]);
582 		kex->newkeys[mode] = NULL;
748 	struct newkeys *newkeys;
795 		if ((newkeys = calloc(1, sizeof(*newkeys))) == NULL) {
799 		kex->newkeys[mode] = newkeys;
805 		if ((r = choose_enc(&newkeys->enc, cprop[nenc],
811 		authlen = cipher_authlen(newkeys->enc.cipher);
814 		    (r = choose_mac(ssh, &newkeys->mac, cprop[nmac],
820 		if ((r = choose_comp(&newkeys->comp, cprop[ncomp],
828 		    newkeys->enc.name,
829 		    authlen == 0 ? newkeys->mac.name : "<implicit>",
830 		    newkeys->comp.name);
834 		newkeys = kex->newkeys[mode];
835 		need = MAX(need, newkeys->enc.key_len);
836 		need = MAX(need, newkeys->enc.block_size);
837 		need = MAX(need, newkeys->enc.iv_len);
838 		need = MAX(need, newkeys->mac.key_len);
839 		dh_need = MAX(dh_need, cipher_seclen(newkeys->enc.cipher));
840 		dh_need = MAX(dh_need, newkeys->enc.block_size);
841 		dh_need = MAX(dh_need, newkeys->enc.iv_len);
842 		dh_need = MAX(dh_need, newkeys->mac.key_len);
943 		kex->newkeys[mode]->enc.iv  = keys[ctos ? 0 : 1];
944 		kex->newkeys[mode]->enc.key = keys[ctos ? 2 : 3];
945 		kex->newkeys[mode]->mac.key = keys[ctos ? 4 : 5];