summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sshkey.h
AgeCommit message (Expand)Author
2022-01-06add a helper function to match a key type to a list of signatureDamien Miller
2021-07-23Let allowed signers files used by ssh-keygen(1) signatures support keyDamien Miller
2021-01-26move check_host_cert() from sshconnect,c to sshkey.c and refactorDamien Miller
2020-11-08Replace WITH_OPENSSL ifdefs in log calls with a macro. The log callsDarren Tucker
2020-10-19Adapt XMSS to new logging infrastructure. With markus@, ok djm@.Darren Tucker
2020-08-27support for user-verified FIDO keysDamien Miller
2020-04-08add sshkey_parse_pubkey_from_private_fileblob_type()Damien Miller
2019-12-30SK API and sk-helper error/PIN passingDamien Miller
2019-12-30implement loading of resident keys in ssh-sk-helperDamien Miller
2019-12-13perform security key enrollment via ssh-sk-helper too. This meansDamien Miller
2019-12-13use ssh-sk-helper for all security key signing operationsDamien Miller
2019-11-25Add new structure for signature optionsDamien Miller
2019-11-13fix shield/unshield for xmss keys:Markus Friedl
2019-11-12enable ed25519 support; ok djmMarkus Friedl
2019-11-12implement ssh-ed25519-sk verification; ok djm@Markus Friedl
2019-10-31Refactor signing - use sshkey_sign for everything, including the newDamien Miller
2019-10-31Initial infrastructure for U2F/FIDO supportDamien Miller
2019-09-03make get_sigtype public as sshkey_get_sigtype(); ok markus@Damien Miller
2019-07-15support PKCS8 as an optional format for storage of private keys,Damien Miller
2019-06-21Add protection for private keys at rest in RAM against speculationDamien Miller
2019-01-20add support for ECDSA keys in PKCS#11 tokensDamien Miller
2018-09-14garbage-collect moribund ssh_new_private() API.Damien Miller
2018-09-13hold our collective noses and use the openssl-1.1.x API in OpenSSH;Damien Miller
2018-09-12add sshkey_check_cert_sigtype() that checks a cert->signature_typeDamien Miller
2018-09-12add cert->signature_type field and keep it in sync with certificateDamien Miller
2018-07-03some finesse to fix RSA-SHA2 certificate authentication for certsDamien Miller
2018-07-03Improve strictness and control over RSA-SHA2 signature types:Damien Miller
2018-02-23Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures)Markus Friedl
2017-12-18pass negotiated signing algorithm though to sshkey_verify() andDamien Miller
2017-12-18sshkey_sigtype() function to return the type of a signature;Damien Miller
2017-07-01remove post-SSHv1 removal dead code from rsa.c and merge theDamien Miller
2017-06-28Allow ssh-keygen to use a key held in ssh-agent as a CA when signingDamien Miller
2017-06-13missing prototype.Damien Miller
2017-05-07Refuse RSA keys <1024 bits in length. Improve reporting for keys thatDamien Miller
2017-05-03remove miscellaneous SSH1 leftovers; ok markus@Christian Weisgerber
2017-04-30remove KEY_RSA1Damien Miller
2017-03-10fix regression in 7.4 server-sig-algs, where we were accidentallyDamien Miller
2016-09-12list all supported signature algorithms in the server-sig-algsDamien Miller
2016-05-02support SHA256 and SHA512 RSA signatures in certificates;Damien Miller
2015-12-04implement SHA2-{256,512} for RSASSA-PKCS1-v1_5 signatures (user and host auth)Markus Friedl
2015-11-19move the certificate validity formatting code to sshkey.[ch]Damien Miller
2015-09-13- Fix error message: passphrase needs to be at least 5 characters, not 4.tim
2015-08-04backout SSH_RSA_MINIMUM_MODULUS_SIZE increase for this release;Damien Miller
2015-07-03another SSH_RSA_MINIMUM_MODULUS_SIZE that needed crankingDamien Miller
2015-07-03delete support for legacy v00 certificates; "sure" markus@ dtucker@Damien Miller
2015-05-21refactor: split base64 encoding of pubkey into its ownDamien Miller
2015-01-26small refactor and add some convenience functions;Damien Miller
2015-01-13add sshd_config HostbasedAcceptedKeyTypes and PubkeyAcceptedKeyTypesDamien Miller
2015-01-08deprecate key_load_private_pem() and sshkey_load_private_pem()Damien Miller
2014-12-21Add FingerprintHash option to control algorithm used for keyDamien Miller