1
1
libssh/src
Anderson Toshiyuki Sasaki 486ad81974 libcrypto: Use CRYPTO_memcmp() instead of memcmp
When comparing the authentication tag for chacha20-poly1305, use the
constant time CRYPTO_memcmp() instead of memcmp().

Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
Reviewed-by: Jakub Jelen <jjelen@redhat.com>
2021-01-12 12:54:18 +01:00
..
ABI Bump SO version to 4.8.1 2019-06-14 15:22:56 +02:00
external external: Do not confuse new gcc 2020-05-05 14:23:06 +02:00
threads Remove no longer needed compatibility check 2021-01-11 10:45:22 +01:00
agent.c agent: Use SSH_BUFFER_FREE() 2019-12-09 16:08:03 +01:00
auth.c auth: Add ssh_userauth_publickey_auto_get_current_identity() 2020-12-10 09:22:13 +01:00
base64.c base64: Use SSH_BUFFER_FREE() 2019-12-09 16:08:03 +01:00
bignum.c bignum: Print ssh_make_string_bn() using SSH_LOG() 2019-12-09 16:08:03 +01:00
bind_config.c bind_config: Fail if a known option couldn't be set 2019-06-12 10:17:54 +02:00
bind.c Reformat ssh_bind_accept() 2020-04-15 20:05:56 +02:00
buffer.c buffer: Add NULL check for 'buffer' argument 2020-06-03 10:40:06 +02:00
callbacks.c callbacks: Implement list of callbacks for channels 2016-05-02 16:56:54 +02:00
chachapoly.c chacha: Create common file to avoid code duplication 2020-01-23 09:48:11 +01:00
channels.c channel_rcv_close: indentation 2021-01-11 20:46:02 +01:00
client.c Happy new year 2021! 2021-01-01 16:08:30 +01:00
CMakeLists.txt packet_crypt: Move secure_memcmp() to a shared source 2021-01-12 12:54:18 +01:00
config_parser.c config_parser: Allow equal sign as a separator and eat up trailing whitespace 2020-04-20 14:14:33 +02:00
config.c New API for parsing configuration from string 2020-11-03 18:23:47 +01:00
connect.c channels: Fix integer and bool argument of channel_default_bufferize() 2019-12-09 16:08:03 +01:00
connector.c connector: Stop socket-to-channel EOF flooding 2019-04-29 13:16:54 +02:00
crypto_common.c packet_crypt: Move secure_memcmp() to a shared source 2021-01-12 12:54:18 +01:00
curve25519.c Add safety checks for all ssh_string_fill calls 2020-12-11 13:32:02 +01:00
dh_crypto.c kex: Add support for diffie-hellman-group14-sha256 2020-04-06 09:27:26 +02:00
dh_key.c kex: Add support for diffie-hellman-group14-sha256 2020-04-06 09:27:26 +02:00
dh-gex.c dh-gex: Check return value of ssh_get_random() 2020-04-02 07:25:53 +02:00
dh.c Clean memory on failure paths 2021-01-12 12:46:25 +01:00
ecdh_crypto.c ecdh_crypto: Use SSH_STRING_FREE() 2019-12-09 16:08:03 +01:00
ecdh_gcrypt.c ecdh_gcrypt: Use SSH_STRING_FREE() 2019-12-09 16:08:03 +01:00
ecdh_mbedcrypto.c ecdh_mbedcrypto: Use SSH_STRING_FREE() 2019-12-09 16:08:03 +01:00
ecdh.c ecdh: Use SSH_STRING_FREE() 2019-12-09 16:08:03 +01:00
error.c error: Add ssh_reset_error() function 2018-08-27 11:29:18 +02:00
gcrypt_missing.c dh: Do some basic refactoring 2019-01-24 11:56:23 +01:00
getpass.c getpass: Use explicit_bzero() 2018-09-04 19:57:31 +02:00
gssapi.c gssapi: Use SSH_BUFFER_FREE() 2019-12-09 16:08:03 +01:00
gzip.c gzip: Use SSH_BUFFER_FREE() 2019-12-09 16:08:03 +01:00
init.c init: Introduce internal is_ssh_initialized() 2020-04-09 11:25:49 +02:00
kdf.c Use a common KDF function 2019-03-07 12:03:32 +01:00
kex.c Cleanup AES compatibility code 2021-01-11 10:45:22 +01:00
known_hosts.c known_hosts: Avoid using deprecated functions (even from deprecated functions) 2019-09-16 09:35:24 +02:00
knownhosts.c Always check return value of ssh_list_new() 2020-12-11 13:35:20 +01:00
legacy.c legacy,keys: Fix the macro conditions 2019-12-23 14:45:24 +01:00
libcrypto-compat.c Remove no longer needed compatibility function 2021-01-11 10:45:22 +01:00
libcrypto-compat.h Remove compat reset function 2021-01-11 10:45:22 +01:00
libcrypto.c libcrypto: Use CRYPTO_memcmp() instead of memcmp 2021-01-12 12:54:18 +01:00
libgcrypt.c Add basic support for none cipher and MACs 2020-05-05 14:23:06 +02:00
libmbedcrypto.c Add basic support for none cipher and MACs 2020-05-05 14:23:06 +02:00
libssh.map auth: Add ssh_userauth_publickey_auto_get_current_identity() 2020-12-10 09:22:13 +01:00
log.c log: Make sure the buffer for date is big enough 2018-08-20 18:42:03 +02:00
match.c match: Limit possible recursion when parsing wildcards to a sensible number 2019-12-09 16:08:03 +01:00
mbedcrypto_missing.c mbedcrypto_missing: Always check return values 2019-12-23 14:31:32 +01:00
messages.c Always check return value of ssh_list_new() 2020-12-11 13:35:20 +01:00
misc.c misc: Do not call random() 2020-09-17 10:45:25 +02:00
options.c options: Do not reference non-existing function 2020-05-21 13:34:23 +02:00
packet_cb.c Clean memory on failure paths 2021-01-12 12:46:25 +01:00
packet_crypt.c packet_crypt: Move secure_memcmp() to a shared source 2021-01-12 12:54:18 +01:00
packet.c Always check return value of ssh_list_new() 2020-12-11 13:35:20 +01:00
pcap.c pcap: Use SSH_BUFFER_FREE() 2019-12-09 16:08:03 +01:00
pki_container_openssh.c pki: Fix possible information leak via uninitialized stack buffer 2019-12-09 16:08:03 +01:00
pki_crypto.c Bump minimum version requirement for OpenSSL 2020-12-22 09:15:38 +01:00
pki_ed25519_common.c Add safety checks for all ssh_string_fill calls 2020-12-11 13:32:02 +01:00
pki_ed25519.c pki: Move common Ed25519 functions to pki_ed25519_common.c 2019-09-24 16:49:35 +02:00
pki_gcrypt.c Add safety checks for all ssh_string_fill calls 2020-12-11 13:32:02 +01:00
pki_mbedcrypto.c Add safety checks for all ssh_string_fill calls 2020-12-11 13:32:02 +01:00
pki.c Add safety checks for all ssh_string_fill calls 2020-12-11 13:32:02 +01:00
poll.c ssh_event_dopoll can also return SSH_AGAIN 2019-02-27 08:17:53 +01:00
scp.c scp: Do not allow newlines in pushed files names 2019-12-09 16:08:03 +01:00
server.c server: Use SSH_STRING_FREE() 2019-12-09 16:08:03 +01:00
session.c session: add missing return value documentation 2020-04-24 16:00:29 +02:00
sftp.c sftp: Fix more typos 2020-08-12 13:13:13 +02:00
sftpserver.c sftpserver: Add missing return check for ssh_buffer_add_data() 2020-06-03 10:38:40 +02:00
socket.c socket: Use the users shell for running proxy command 2019-12-23 14:45:24 +01:00
string.c string: Don't allow to allocate strings bigger than 256M 2018-09-04 12:29:20 +02:00
threads.c threads: Automatically call ssh_init on load 2018-08-03 16:43:03 +02:00
token.c token: Added function to remove duplicates 2019-07-04 10:29:20 +02:00
wrapper.c wrapper: Avoid memory leak on errors during key exchange 2020-12-08 14:54:25 +01:00