summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sshkey.h
AgeCommit message (Expand)Author
2024-09-04be more strict in parsing key type names. Only allow shortnames (e.gDamien Miller
2024-08-15Convert RSA and ECDSA key to the libcrypto EVP_PKEY API. DSA remainsDamien Miller
2024-05-17remove prototypes with no matching function; ok djm@Jonathan Gray
2023-06-21better validate CASignatureAlgorithms in ssh_config and sshd_config.Damien Miller
2022-10-28refactor sshkey_private_deserializeDamien Miller
2022-10-28refactor sshkey_private_serialize_opt()Damien Miller
2022-10-28refactor sshkey_sign() and sshkey_verify()Damien Miller
2022-10-28refactor sshkey_from_blob_internal()Damien Miller
2022-10-28refactor sshkey_from_private()Damien Miller
2022-10-28factor out key generationDamien Miller
2022-10-28factor out public key serializationDamien Miller
2022-10-28factor out sshkey_equal_public()Damien Miller
2022-10-28begin big refactor of sshkeyDamien Miller
2022-09-17Add a sshkey_check_rsa_length() call for checking the length of anDamien Miller
2022-01-06add a helper function to match a key type to a list of signatureDamien Miller
2021-07-23Let allowed signers files used by ssh-keygen(1) signatures support keyDamien Miller
2021-01-26move check_host_cert() from sshconnect,c to sshkey.c and refactorDamien Miller
2020-11-08Replace WITH_OPENSSL ifdefs in log calls with a macro. The log callsDarren Tucker
2020-10-19Adapt XMSS to new logging infrastructure. With markus@, ok djm@.Darren Tucker
2020-08-27support for user-verified FIDO keysDamien Miller
2020-04-08add sshkey_parse_pubkey_from_private_fileblob_type()Damien Miller
2019-12-30SK API and sk-helper error/PIN passingDamien Miller
2019-12-30implement loading of resident keys in ssh-sk-helperDamien Miller
2019-12-13perform security key enrollment via ssh-sk-helper too. This meansDamien Miller
2019-12-13use ssh-sk-helper for all security key signing operationsDamien Miller
2019-11-25Add new structure for signature optionsDamien Miller
2019-11-13fix shield/unshield for xmss keys:Markus Friedl
2019-11-12enable ed25519 support; ok djmMarkus Friedl
2019-11-12implement ssh-ed25519-sk verification; ok djm@Markus Friedl
2019-10-31Refactor signing - use sshkey_sign for everything, including the newDamien Miller
2019-10-31Initial infrastructure for U2F/FIDO supportDamien Miller
2019-09-03make get_sigtype public as sshkey_get_sigtype(); ok markus@Damien Miller
2019-07-15support PKCS8 as an optional format for storage of private keys,Damien Miller
2019-06-21Add protection for private keys at rest in RAM against speculationDamien Miller
2019-01-20add support for ECDSA keys in PKCS#11 tokensDamien Miller
2018-09-14garbage-collect moribund ssh_new_private() API.Damien Miller
2018-09-13hold our collective noses and use the openssl-1.1.x API in OpenSSH;Damien Miller
2018-09-12add sshkey_check_cert_sigtype() that checks a cert->signature_typeDamien Miller
2018-09-12add cert->signature_type field and keep it in sync with certificateDamien Miller
2018-07-03some finesse to fix RSA-SHA2 certificate authentication for certsDamien Miller
2018-07-03Improve strictness and control over RSA-SHA2 signature types:Damien Miller
2018-02-23Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures)Markus Friedl
2017-12-18pass negotiated signing algorithm though to sshkey_verify() andDamien Miller
2017-12-18sshkey_sigtype() function to return the type of a signature;Damien Miller
2017-07-01remove post-SSHv1 removal dead code from rsa.c and merge theDamien Miller
2017-06-28Allow ssh-keygen to use a key held in ssh-agent as a CA when signingDamien Miller
2017-06-13missing prototype.Damien Miller
2017-05-07Refuse RSA keys <1024 bits in length. Improve reporting for keys thatDamien Miller
2017-05-03remove miscellaneous SSH1 leftovers; ok markus@Christian Weisgerber
2017-04-30remove KEY_RSA1Damien Miller