Post-quantum hybrid key exchange. More...
#include "ssh/ssh.h"#include "ssh/ssh_algorithms.h"#include "ssh/ssh_transport.h"#include "ssh/ssh_kex.h"#include "ssh/ssh_kex_hybrid.h"#include "ssh/ssh_packet.h"#include "ssh/ssh_key_material.h"#include "ssh/ssh_exchange_hash.h"#include "ssh/ssh_key_verify.h"#include "ssh/ssh_cert_verify.h"#include "ssh/ssh_misc.h"#include "debug.h"Go to the source code of this file.
| Macros | |
| #define | TRACE_LEVEL SSH_TRACE_LEVEL | 
| Functions | |
| error_t | sshSendKexHybridInit (SshConnection *connection) | 
| Send SSH_MSG_KEX_HYBRID_INIT message.  More... | |
| error_t | sshSendKexHybridReply (SshConnection *connection) | 
| Send SSH_MSG_KEX_HYBRID_REPLY message.  More... | |
| error_t | sshFormatKexHybridInit (SshConnection *connection, uint8_t *p, size_t *length) | 
| Format SSH_MSG_KEX_HYBRID_INIT message.  More... | |
| error_t | sshFormatKexHybridReply (SshConnection *connection, uint8_t *p, size_t *length) | 
| Format SSH_MSG_KEX_HYBRID_REPLY message.  More... | |
| error_t | sshParseKexHybridInit (SshConnection *connection, const uint8_t *message, size_t length) | 
| Parse SSH_MSG_KEX_HYBRID_INIT message.  More... | |
| error_t | sshParseKexHybridReply (SshConnection *connection, const uint8_t *message, size_t length) | 
| Parse SSH_MSG_KEX_HYBRID_REPLY message.  More... | |
| error_t | sshParseKexHybridMessage (SshConnection *connection, uint8_t type, const uint8_t *message, size_t length) | 
| Parse PQ-hybrid specific messages.  More... | |
| error_t | sshSelectKemAlgo (SshConnection *connection) | 
| Select key encapsulation mechanism.  More... | |
| error_t | sshSelectClassicalEcdhCurve (SshConnection *connection) | 
| Select ECDH domain parameters.  More... | |
| error_t | sshGenerateClassicalEcdhKeyPair (SshConnection *connection) | 
| ECDH key pair generation.  More... | |
| error_t | sshComputeClassicalEcdhSharedSecret (SshConnection *connection) | 
| ECDH shared secret calculation.  More... | |
| error_t | sshDigestClientInit (SshConnection *connection) | 
| Update exchange hash with C_INIT (concatenation of C_PQ and C_CL)  More... | |
Detailed Description
Post-quantum hybrid key exchange.
License
SPDX-License-Identifier: GPL-2.0-or-later
Copyright (C) 2019-2025 Oryx Embedded SARL. All rights reserved.
This file is part of CycloneSSH Open.
This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
- Version
- 2.5.4
Definition in file ssh_kex_hybrid.c.
Macro Definition Documentation
◆ TRACE_LEVEL
| #define TRACE_LEVEL SSH_TRACE_LEVEL | 
Definition at line 32 of file ssh_kex_hybrid.c.
Function Documentation
◆ sshComputeClassicalEcdhSharedSecret()
| error_t sshComputeClassicalEcdhSharedSecret | ( | SshConnection * | connection | ) | 
ECDH shared secret calculation.
- Parameters
- 
  [in] connection Pointer to the SSH connection 
- Returns
- Error code
Definition at line 896 of file ssh_kex_hybrid.c.
◆ sshDigestClientInit()
| error_t sshDigestClientInit | ( | SshConnection * | connection | ) | 
Update exchange hash with C_INIT (concatenation of C_PQ and C_CL)
- Parameters
- 
  [in] connection Pointer to the SSH connection 
- Returns
- Error code
Definition at line 935 of file ssh_kex_hybrid.c.
◆ sshFormatKexHybridInit()
| error_t sshFormatKexHybridInit | ( | SshConnection * | connection, | 
| uint8_t * | p, | ||
| size_t * | length | ||
| ) | 
Format SSH_MSG_KEX_HYBRID_INIT message.
- Parameters
- 
  [in] connection Pointer to the SSH connection [out] p Buffer where to format the message [out] length Length of the resulting message, in bytes 
- Returns
- Error code
Definition at line 192 of file ssh_kex_hybrid.c.
◆ sshFormatKexHybridReply()
| error_t sshFormatKexHybridReply | ( | SshConnection * | connection, | 
| uint8_t * | p, | ||
| size_t * | length | ||
| ) | 
Format SSH_MSG_KEX_HYBRID_REPLY message.
- Parameters
- 
  [in] connection Pointer to the SSH connection [out] p Buffer where to format the message [out] length Length of the resulting message, in bytes 
- Returns
- Error code
Definition at line 246 of file ssh_kex_hybrid.c.
◆ sshGenerateClassicalEcdhKeyPair()
| error_t sshGenerateClassicalEcdhKeyPair | ( | SshConnection * | connection | ) | 
ECDH key pair generation.
- Parameters
- 
  [in] connection Pointer to the SSH connection 
- Returns
- Error code
Definition at line 854 of file ssh_kex_hybrid.c.
◆ sshParseKexHybridInit()
| error_t sshParseKexHybridInit | ( | SshConnection * | connection, | 
| const uint8_t * | message, | ||
| size_t | length | ||
| ) | 
Parse SSH_MSG_KEX_HYBRID_INIT message.
- Parameters
- 
  [in] connection Pointer to the SSH connection [in] message Pointer to message [in] length Length of the message, in bytes 
- Returns
- Error code
Definition at line 380 of file ssh_kex_hybrid.c.
◆ sshParseKexHybridMessage()
| error_t sshParseKexHybridMessage | ( | SshConnection * | connection, | 
| uint8_t | type, | ||
| const uint8_t * | message, | ||
| size_t | length | ||
| ) | 
Parse PQ-hybrid specific messages.
- Parameters
- 
  [in] connection Pointer to the SSH connection [in] type SSH message type [in] message Pointer to message [in] length Length of the message, in bytes 
- Returns
- Error code
Definition at line 678 of file ssh_kex_hybrid.c.
◆ sshParseKexHybridReply()
| error_t sshParseKexHybridReply | ( | SshConnection * | connection, | 
| const uint8_t * | message, | ||
| size_t | length | ||
| ) | 
Parse SSH_MSG_KEX_HYBRID_REPLY message.
- Parameters
- 
  [in] connection Pointer to the SSH connection [in] message Pointer to message [in] length Length of the message, in bytes 
- Returns
- Error code
Definition at line 480 of file ssh_kex_hybrid.c.
◆ sshSelectClassicalEcdhCurve()
| error_t sshSelectClassicalEcdhCurve | ( | SshConnection * | connection | ) | 
Select ECDH domain parameters.
- Parameters
- 
  [in] connection Pointer to the SSH connection 
- Returns
- Error code
Definition at line 795 of file ssh_kex_hybrid.c.
◆ sshSelectKemAlgo()
| error_t sshSelectKemAlgo | ( | SshConnection * | connection | ) | 
Select key encapsulation mechanism.
- Parameters
- 
  [in] connection Pointer to the SSH connection 
- Returns
- Error code
Definition at line 736 of file ssh_kex_hybrid.c.
◆ sshSendKexHybridInit()
| error_t sshSendKexHybridInit | ( | SshConnection * | connection | ) | 
Send SSH_MSG_KEX_HYBRID_INIT message.
- Parameters
- 
  [in] connection Pointer to the SSH connection 
- Returns
- Error code
Definition at line 58 of file ssh_kex_hybrid.c.
◆ sshSendKexHybridReply()
| error_t sshSendKexHybridReply | ( | SshConnection * | connection | ) | 
Send SSH_MSG_KEX_HYBRID_REPLY message.
- Parameters
- 
  [in] connection Pointer to the SSH connection 
- Returns
- Error code
Definition at line 137 of file ssh_kex_hybrid.c.
