| /* $OpenBSD: myproposal.h,v 1.67 2020/01/24 00:28:57 djm Exp $ */ |
| |
| /* |
| * Copyright (c) 2000 Markus Friedl. All rights reserved. |
| * |
| * Redistribution and use in source and binary forms, with or without |
| * modification, are permitted provided that the following conditions |
| * are met: |
| * 1. Redistributions of source code must retain the above copyright |
| * notice, this list of conditions and the following disclaimer. |
| * 2. Redistributions in binary form must reproduce the above copyright |
| * notice, this list of conditions and the following disclaimer in the |
| * documentation and/or other materials provided with the distribution. |
| * |
| * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR |
| * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES |
| * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. |
| * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, |
| * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT |
| * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
| * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
| * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
| * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF |
| * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| */ |
| |
| #define KEX_SERVER_KEX \ |
| "curve25519-sha256," \ |
| "[email protected]," \ |
| "ecdh-sha2-nistp256," \ |
| "ecdh-sha2-nistp384," \ |
| "ecdh-sha2-nistp521," \ |
| "diffie-hellman-group-exchange-sha256," \ |
| "diffie-hellman-group16-sha512," \ |
| "diffie-hellman-group18-sha512," \ |
| "diffie-hellman-group14-sha256" |
| |
| #define KEX_CLIENT_KEX KEX_SERVER_KEX |
| |
| #define KEX_DEFAULT_PK_ALG \ |
| "[email protected]," \ |
| "[email protected]," \ |
| "[email protected]," \ |
| "[email protected]," \ |
| "[email protected]," \ |
| "[email protected]," \ |
| "[email protected]," \ |
| "[email protected]," \ |
| "[email protected]," \ |
| "ecdsa-sha2-nistp256," \ |
| "ecdsa-sha2-nistp384," \ |
| "ecdsa-sha2-nistp521," \ |
| "[email protected]," \ |
| "ssh-ed25519," \ |
| "[email protected]," \ |
| "rsa-sha2-512," \ |
| "rsa-sha2-256," \ |
| "ssh-rsa" |
| |
| #define KEX_SERVER_ENCRYPT \ |
| "[email protected]," \ |
| "aes128-ctr,aes192-ctr,aes256-ctr," \ |
| "[email protected],[email protected]" |
| |
| #define KEX_CLIENT_ENCRYPT KEX_SERVER_ENCRYPT |
| |
| #define KEX_SERVER_MAC \ |
| "[email protected]," \ |
| "[email protected]," \ |
| "[email protected]," \ |
| "[email protected]," \ |
| "[email protected]," \ |
| "[email protected]," \ |
| "[email protected]," \ |
| "hmac-sha2-256," \ |
| "hmac-sha2-512," \ |
| "hmac-sha1" |
| |
| #define KEX_CLIENT_MAC KEX_SERVER_MAC |
| |
| /* Not a KEX value, but here so all the algorithm defaults are together */ |
| #define SSH_ALLOWED_CA_SIGALGS \ |
| "ecdsa-sha2-nistp256," \ |
| "ecdsa-sha2-nistp384," \ |
| "ecdsa-sha2-nistp521," \ |
| "[email protected]," \ |
| "ssh-ed25519," \ |
| "[email protected]," \ |
| "rsa-sha2-512," \ |
| "rsa-sha2-256" |
| |
| #define KEX_DEFAULT_COMP "none,[email protected]" |
| #define KEX_DEFAULT_LANG "" |
| |
| #define KEX_CLIENT \ |
| KEX_CLIENT_KEX, \ |
| KEX_DEFAULT_PK_ALG, \ |
| KEX_CLIENT_ENCRYPT, \ |
| KEX_CLIENT_ENCRYPT, \ |
| KEX_CLIENT_MAC, \ |
| KEX_CLIENT_MAC, \ |
| KEX_DEFAULT_COMP, \ |
| KEX_DEFAULT_COMP, \ |
| KEX_DEFAULT_LANG, \ |
| KEX_DEFAULT_LANG |
| |
| #define KEX_SERVER \ |
| KEX_SERVER_KEX, \ |
| KEX_DEFAULT_PK_ALG, \ |
| KEX_SERVER_ENCRYPT, \ |
| KEX_SERVER_ENCRYPT, \ |
| KEX_SERVER_MAC, \ |
| KEX_SERVER_MAC, \ |
| KEX_DEFAULT_COMP, \ |
| KEX_DEFAULT_COMP, \ |
| KEX_DEFAULT_LANG, \ |
| KEX_DEFAULT_LANG |
