[gssapi-openssh.git] / openssh / myproposal.h

/* $OpenBSD: myproposal.h,v 1.23 2009/01/23 07:58:11 djm Exp $ */

/*
 * Copyright (c) 2000 Markus Friedl.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */

#include <openssl/opensslv.h>

/* Old OpenSSL doesn't support what we need for DHGEX-sha256 */
#if OPENSSL_VERSION_NUMBER < 0x00907000L
# define KEX_DEFAULT_KEX		\
	"diffie-hellman-group-exchange-sha1," \
	"diffie-hellman-group14-sha1," \
	"diffie-hellman-group1-sha1"
#else
# define KEX_DEFAULT_KEX		\
	"diffie-hellman-group-exchange-sha256," \
	"diffie-hellman-group-exchange-sha1," \
	"diffie-hellman-group14-sha1," \
	"diffie-hellman-group1-sha1"
#endif

#define	KEX_DEFAULT_PK_ALG	"ssh-rsa,ssh-dss"

#define	KEX_DEFAULT_ENCRYPT \
	"aes128-ctr,aes192-ctr,aes256-ctr," \
	"arcfour256,arcfour128," \
	"aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc," \
	"aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se"
#define KEX_ENCRYPT_INCLUDE_NONE KEX_DEFAULT_ENCRYPT \
	",none"
#define	KEX_DEFAULT_MAC \
	"hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160," \
	"hmac-ripemd160@openssh.com," \
	"hmac-sha1-96,hmac-md5-96"
#define	KEX_DEFAULT_COMP	"none,zlib@openssh.com,zlib"
#define	KEX_DEFAULT_LANG	""


static char *myproposal[PROPOSAL_MAX] = {
	KEX_DEFAULT_KEX,
	KEX_DEFAULT_PK_ALG,
	KEX_DEFAULT_ENCRYPT,
	KEX_DEFAULT_ENCRYPT,
	KEX_DEFAULT_MAC,
	KEX_DEFAULT_MAC,
	KEX_DEFAULT_COMP,
	KEX_DEFAULT_COMP,
	KEX_DEFAULT_LANG,
	KEX_DEFAULT_LANG
};
Commit	Line	Data
5262cbfb	1	/* $OpenBSD: myproposal.h,v 1.23 2009/01/23 07:58:11 djm Exp $ */
3c0ef626	2
	3	/*
	4	* Copyright (c) 2000 Markus Friedl. All rights reserved.
	5	*
	6	* Redistribution and use in source and binary forms, with or without
	7	* modification, are permitted provided that the following conditions
	8	* are met:
	9	* 1. Redistributions of source code must retain the above copyright
	10	* notice, this list of conditions and the following disclaimer.
	11	* 2. Redistributions in binary form must reproduce the above copyright
	12	* notice, this list of conditions and the following disclaimer in the
	13	* documentation and/or other materials provided with the distribution.
	14	*
	15	* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
	16	* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
	17	* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
	18	* IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
	19	* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
	20	* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
	21	* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
	22	* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
	23	* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
	24	* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
	25	*/
30460aeb	26
	27	#include <openssl/opensslv.h>
	28
	29	/* Old OpenSSL doesn't support what we need for DHGEX-sha256 */
	30	#if OPENSSL_VERSION_NUMBER < 0x00907000L
	31	# define KEX_DEFAULT_KEX \
	32	"diffie-hellman-group-exchange-sha1," \
473db5ab	33	"diffie-hellman-group14-sha1," \
473db5ab	34	"diffie-hellman-group1-sha1"
30460aeb	35	#else
	36	# define KEX_DEFAULT_KEX \
	37	"diffie-hellman-group-exchange-sha256," \
	38	"diffie-hellman-group-exchange-sha1," \
	39	"diffie-hellman-group14-sha1," \
	40	"diffie-hellman-group1-sha1"
	41	#endif
	42
3c0ef626	43	#define KEX_DEFAULT_PK_ALG "ssh-rsa,ssh-dss"
5262cbfb	44
3c0ef626	45	#define KEX_DEFAULT_ENCRYPT \
5262cbfb	46	"aes128-ctr,aes192-ctr,aes256-ctr," \
5262cbfb	47	"arcfour256,arcfour128," \
473db5ab	48	"aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc," \
5262cbfb	49	"aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se"
a7213e65	50	#define KEX_ENCRYPT_INCLUDE_NONE KEX_DEFAULT_ENCRYPT \
a7213e65	51	",none"
3c0ef626	52	#define KEX_DEFAULT_MAC \
fa0f0f45	53	"hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160," \
3c0ef626	54	"hmac-ripemd160@openssh.com," \
3c0ef626	55	"hmac-sha1-96,hmac-md5-96"
473db5ab	56	#define KEX_DEFAULT_COMP "none,zlib@openssh.com,zlib"
3c0ef626	57	#define KEX_DEFAULT_LANG ""
	58
	59
	60	static char *myproposal[PROPOSAL_MAX] = {
	61	KEX_DEFAULT_KEX,
	62	KEX_DEFAULT_PK_ALG,
	63	KEX_DEFAULT_ENCRYPT,
	64	KEX_DEFAULT_ENCRYPT,
	65	KEX_DEFAULT_MAC,
	66	KEX_DEFAULT_MAC,
	67	KEX_DEFAULT_COMP,
	68	KEX_DEFAULT_COMP,
	69	KEX_DEFAULT_LANG,
	70	KEX_DEFAULT_LANG
	71	};