paraslash/crypt_backend.h, branch pu

Switch to SPDX identifiers.

2026-03-17T22:45:43Z

Generated with sed -i 's|Copyright.*Andre Noll.*|SPDX-License-Identifier: GPL-2.0 */|g' *.c *.h followed by manually tweaking the result a bit. No license change intended.

Remove support for PEM private keys.

2026-01-28T17:09:22Z

This gets us rid of a couple of hand-written parsers, which can only be a good thing. The shortstat says it all...

openssl: Add support for RFC4716 keys

2018-12-25T16:45:25Z

The decode_private_key() helper of gcrypt.c base64-decodes the key but does not read the RSA bignums. It is thus independent of gcrypt and openssl. To add support for RFC4716 keys to the openssl backend, we need to move it to crypt_common.c, making it a crypo backend function. That is, non-static and declared in crypt_backend.h. The patch also documents the function using doxgen comments. With decode_private_key() and find_openssh_bignum_offset() to our disposal, supporting RFC4716 keys is simple. We only need to initialize the openssl-specific rsa structure with the six bignums stored in a private RFC4716 key. This is implemented in the new read_private_rsa_params() which calls the existing read_bignum() six times. The fields of the rsa structure are exposed to applications in openssl-1.0, but the structure was made opaque in openssl-1.1. We use the existing HAVE_RSA_SET0_KEY macro to decide whether or not we must use the accessor functions of openssl-1.1 to initialize the rsa structure.

gcrypt: Add support for RFC4716 private keys.

2018-12-25T16:45:25Z

This teaches the gcrypt backend to parse private keys generated with ssh-keygen -m RFC4716. Support for the openssl backend will be implemented in a subsequent patch. The new find_openssh_bignum_offset() is independent of the gcrypt API. We put this function into crypt_common.c rather then into gcrypt.c so that openssh.c can also use it.

crypt: Rename decoding functions.

2018-12-25T16:45:24Z

decode_ssh_key() and decode_key() operate on public and private keys respectively. This should be obvious from the naming. Also, the two functions will soon be grouped together in the same file. The inconsistent naming would even increase the possible confusion, so it's better to rename the functions now.

crypt: Deduplicate get_public_key().

2018-02-25T23:10:28Z

The openssl and grypt implementations of this function share quite some code. This patch factors out the common code into the new decode_ssh_key() helper of crypt_common.c. Both implementations are changed to call the new helper. As a side effect of this change, all callers of is_ssh_rsa_key() and check_ssh_key_header() now reside in crypt_common.c, so we can make these two functions static and remove their declarations from crypt_backend.h.

Shorten copyright notice.

2017-09-22T14:35:22Z

The GPLv2 line does not add any additional information, so drop it. This leaves a single line of legalese text for most files, which is about the amount of screen real estate it deserves. This patch was created with the following script (plus some manual fixups): awk '{ if (NR <= 5) { gs = gensub(/.*Copyright.* ([0-9]+).*Andre Noll.*/, "\\1", "g") if (gs != $0) year = gs next } if (NR == 6 && year != "") printf("/* Copyright (C) %s Andre Noll , see file COPYING. */\n", year) print }'

crypt: Remove read_ssh_u32().

2017-07-23T16:01:10Z

It was just another implementation of read_u32_be(). This commit makes the crypto code use the helper of portable_io.h instead.

crypto: Rename check_key_file() -> check_private_key_file().

2017-01-06T17:53:46Z

For public keys the function only called stat(2), which is unnecessary because only an error from the subsequent open(2) call requires to fail the operation. The stat() call is needed for loading private keys though, to make sure permissions are restrictive enough. This commit renames the function as indicated in the subject and drops the second parameter. In crypt.c we now call this function for private keys only.

Move base64 implementation to own file.

2016-08-23T14:29:34Z

The base64 decoder is independent of anything else, so it should not be part of the crypto API. This patch moves the two public functions uudecode() and base64_decode() to a new file, base64.c, and introduces base64.h to declare them.