usr.bin/ssh/kex.c

682 kex_free_newkeys(struct newkeys *newkeys)
684 	if (newkeys == NULL)
686 	if (newkeys->enc.key) {
687 		explicit_bzero(newkeys->enc.key, newkeys->enc.key_len);
688 		free(newkeys->enc.key);
689 		newkeys->enc.key = NULL;
691 	if (newkeys->enc.iv) {
692 		explicit_bzero(newkeys->enc.iv, newkeys->enc.iv_len);
693 		free(newkeys->enc.iv);
694 		newkeys->enc.iv = NULL;
696 	free(newkeys->enc.name);
697 	explicit_bzero(&newkeys->enc, sizeof(newkeys->enc));
698 	free(newkeys->comp.name);
699 	explicit_bzero(&newkeys->comp, sizeof(newkeys->comp));
700 	mac_clear(&newkeys->mac);
701 	if (newkeys->mac.key) {
702 		explicit_bzero(newkeys->mac.key, newkeys->mac.key_len);
703 		free(newkeys->mac.key);
704 		newkeys->mac.key = NULL;
706 	free(newkeys->mac.name);
707 	explicit_bzero(&newkeys->mac, sizeof(newkeys->mac));
708 	freezero(newkeys, sizeof(*newkeys));
724 		kex_free_newkeys(kex->newkeys[mode]);
725 		kex->newkeys[mode] = NULL;
924 	struct newkeys *newkeys;
990 		if ((newkeys = calloc(1, sizeof(*newkeys))) == NULL) {
994 		kex->newkeys[mode] = newkeys;
1000 		if ((r = choose_enc(&newkeys->enc, cprop[nenc],
1006 		authlen = cipher_authlen(newkeys->enc.cipher);
1009 		    (r = choose_mac(ssh, &newkeys->mac, cprop[nmac],
1015 		if ((r = choose_comp(&newkeys->comp, cprop[ncomp],
1023 		    newkeys->enc.name,
1024 		    authlen == 0 ? newkeys->mac.name : "<implicit>",
1025 		    newkeys->comp.name);
1029 		newkeys = kex->newkeys[mode];
1030 		need = MAXIMUM(need, newkeys->enc.key_len);
1031 		need = MAXIMUM(need, newkeys->enc.block_size);
1032 		need = MAXIMUM(need, newkeys->enc.iv_len);
1033 		need = MAXIMUM(need, newkeys->mac.key_len);
1034 		dh_need = MAXIMUM(dh_need, cipher_seclen(newkeys->enc.cipher));
1035 		dh_need = MAXIMUM(dh_need, newkeys->enc.block_size);
1036 		dh_need = MAXIMUM(dh_need, newkeys->enc.iv_len);
1037 		dh_need = MAXIMUM(dh_need, newkeys->mac.key_len);
1150 		kex->newkeys[mode]->enc.iv  = keys[ctos ? 0 : 1];
1151 		kex->newkeys[mode]->enc.key = keys[ctos ? 2 : 3];
1152 		kex->newkeys[mode]->mac.key = keys[ctos ? 4 : 5];