comparison Makefile.in @ 1855:35d504d59c05

Implement server-side support for sk-ecdsa U2F-backed keys (#142) * Implement server-side support for sk-ecdsa U2F-backed keys * Fix out-of-bounds read on normal ecdsa-sha2-[identifier] keys * Fix one more potential out-of-bounds read * Check if nistp256 curve is used in sk-ecdsa-sha2- key It's the only allowed curve per PROTOCOL.u2f specification * Implement server-side support for sk-ed25519 FIDO2-backed keys * Keys with type sk-* make no sense as host keys, so they should be disabled * fix typo * Make sk-ecdsa call buf_ecdsa_verify This reduces code duplication, the SK code just handles the different message format. * Reduce sk specific code The application id can be stored in signkey, then we don't need to call sk-specific functions from svr-authpubkey * Remove debugging output, which causes compilation errors with DEBUG_TRACE disabled * Proper cleanup of sk_app Co-authored-by: Matt Johnston <[email protected]>
author egor-duda <egor-duda@users.noreply.github.com>
date Sat, 22 Jan 2022 16:53:04 +0300
parents ce17be95a42a
children fc4c9ef61856
comparison
equal deleted inserted replaced
1854:cba37fe1ddc8 1855:35d504d59c05
33 COMMONOBJS=dbutil.o buffer.o dbhelpers.o \ 33 COMMONOBJS=dbutil.o buffer.o dbhelpers.o \
34 dss.o bignum.o \ 34 dss.o bignum.o \
35 signkey.o rsa.o dbrandom.o \ 35 signkey.o rsa.o dbrandom.o \
36 queue.o \ 36 queue.o \
37 atomicio.o compat.o fake-rfc2553.o \ 37 atomicio.o compat.o fake-rfc2553.o \
38 ltc_prng.o ecc.o ecdsa.o crypto_desc.o \ 38 ltc_prng.o ecc.o ecdsa.o sk-ecdsa.o crypto_desc.o \
39 curve25519.o ed25519.o \ 39 curve25519.o ed25519.o sk-ed25519.o \
40 dbmalloc.o \ 40 dbmalloc.o \
41 gensignkey.o gendss.o genrsa.o gened25519.o 41 gensignkey.o gendss.o genrsa.o gened25519.o
42 42
43 SVROBJS=svr-kex.o svr-auth.o sshpty.o \ 43 SVROBJS=svr-kex.o svr-auth.o sshpty.o \
44 svr-authpasswd.o svr-authpubkey.o svr-authpubkeyoptions.o svr-session.o svr-service.o \ 44 svr-authpasswd.o svr-authpubkey.o svr-authpubkeyoptions.o svr-session.o svr-service.o \