1
0
mirror of https://git.libssh.org/projects/libssh.git synced 2025-11-30 13:01:23 +03:00

dh-gex: Verify received primes in FIPS mode to match one of the known groups

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
This commit is contained in:
Jakub Jelen
2019-03-25 16:42:19 +01:00
committed by Andreas Schneider
parent e446507352
commit 104c696bca
3 changed files with 42 additions and 0 deletions

View File

@@ -68,5 +68,6 @@ void ssh_server_dh_init(ssh_session session);
#endif /* WITH_SERVER */
int ssh_server_dh_process_init(ssh_session session, ssh_buffer packet);
int ssh_fallback_group(uint32_t pmax, bignum *p, bignum *g);
bool ssh_dh_is_known_group(bignum modulus, bignum generator);
#endif /* DH_H_ */