{"header":{"message":"Reboot because of a bad change","description":null,"timestamp":"2020-11-20T10:24:01.871248821Z","authors":[{"full_name":"Pierre-Étienne Meunier","name":"pmeunier"}]},"hash":"7FRJYUI62VW257VVFQXND6OKSAILVTHGEJCXFE6CG6FIOIUTDVYAC","authors":[],"deps":{"hashes":[["7FRJYUI62VW257VVFQXND6OKSAILVTHGEJCXFE6CG6FIOIUTDVYAC","Reboot because of a bad change"],["AA",null]],"deps":[],"known":[]},"hunks":[{"FileAdd":{"meta":{"basename":"thrussh-libsodium","metadata":1005},"context":[{"change":1,"pos":0}],"contents":[]}},{"FileAdd":{"meta":{"basename":"src","metadata":1005},"context":[{"change":0,"pos":20}],"contents":[]}},{"FileAdd":{"meta":{"basename":"lib.rs","metadata":420},"context":[{"change":0,"pos":27}],"contents":[{"Add":"extern crate libc;"},{"Add":"#[macro_use]"},{"Add":"extern crate lazy_static;"},{"Add":"use libc::c_ulonglong;"},{"Add":"use libsodium_sys::*;"},{"Add":""},{"Add":"lazy_static! {"},{"Add":" static ref SODIUM: i32 = unsafe { sodium_init() };"},{"Add":"}"},{"Add":""},{"Add":"pub mod chacha20 {"},{"Add":" use super::*;"},{"Add":" pub const NONCE_BYTES: usize = 8;"},{"Add":" pub const KEY_BYTES: usize = 32;"},{"Add":" pub struct Nonce(pub [u8; NONCE_BYTES]);"},{"Add":" pub struct Key(pub [u8; KEY_BYTES]);"},{"Add":" pub fn chacha20_xor(c: &mut [u8], n: &Nonce, k: &Key) {"},{"Add":" lazy_static::initialize(&super::SODIUM);"},{"Add":" unsafe {"},{"Add":" crypto_stream_chacha20_xor("},{"Add":" c.as_mut_ptr(),"},{"Add":" c.as_ptr(),"},{"Add":" c.len() as c_ulonglong,"},{"Add":" n.0.as_ptr(),"},{"Add":" k.0.as_ptr(),"},{"Add":" );"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn chacha20_xor_ic(c: &mut [u8], n: &Nonce, ic: u64, k: &Key) {"},{"Add":" lazy_static::initialize(&super::SODIUM);"},{"Add":" unsafe {"},{"Add":" crypto_stream_chacha20_xor_ic("},{"Add":" c.as_mut_ptr(),"},{"Add":" c.as_ptr(),"},{"Add":" c.len() as c_ulonglong,"},{"Add":" n.0.as_ptr(),"},{"Add":" ic,"},{"Add":" k.0.as_ptr(),"},{"Add":" );"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"pub mod poly1305 {"},{"Add":" use super::*;"},{"Add":" pub const KEY_BYTES: usize = 32;"},{"Add":" pub const TAG_BYTES: usize = 16;"},{"Add":" pub struct Key(pub [u8; KEY_BYTES]);"},{"Add":" pub struct Tag(pub [u8; TAG_BYTES]);"},{"Add":" pub fn poly1305_auth(m: &[u8], key: &Key) -> Tag {"},{"Add":" lazy_static::initialize(&super::SODIUM);"},{"Add":" let mut tag = Tag([0; TAG_BYTES]);"},{"Add":" unsafe {"},{"Add":" crypto_onetimeauth("},{"Add":" tag.0.as_mut_ptr(),"},{"Add":" m.as_ptr(),"},{"Add":" m.len() as c_ulonglong,"},{"Add":" key.0.as_ptr(),"},{"Add":" );"},{"Add":" }"},{"Add":" tag"},{"Add":" }"},{"Add":" pub fn poly1305_verify(tag: &[u8], m: &[u8], key: &Key) -> bool {"},{"Add":" lazy_static::initialize(&super::SODIUM);"},{"Add":" if tag.len() != TAG_BYTES {"},{"Add":" false"},{"Add":" } else {"},{"Add":" unsafe {"},{"Add":" crypto_onetimeauth_verify("},{"Add":" tag.as_ptr(),"},{"Add":" m.as_ptr(),"},{"Add":" m.len() as c_ulonglong,"},{"Add":" key.0.as_ptr(),"},{"Add":" ) == 0"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"pub mod ed25519 {"},{"Add":" use super::*;"},{"Add":" pub const PUBLICKEY_BYTES: usize = 32;"},{"Add":" pub const SECRETKEY_BYTES: usize = 64;"},{"Add":" pub const SIGNATURE_BYTES: usize = 64;"},{"Add":""},{"Add":" /// Ed25519 public key."},{"Add":" #[derive(Debug, PartialEq, Eq)]"},{"Add":" pub struct PublicKey {"},{"Add":" /// Actual key"},{"Add":" pub key: [u8; PUBLICKEY_BYTES],"},{"Add":" }"},{"Add":""},{"Add":" impl PublicKey {"},{"Add":" pub fn new_zeroed() -> Self {"},{"Add":" PublicKey {"},{"Add":" key: [0; PUBLICKEY_BYTES],"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Ed25519 secret key."},{"Add":" #[derive(Clone)]"},{"Add":" pub struct SecretKey {"},{"Add":" /// Actual key"},{"Add":" pub key: [u8; SECRETKEY_BYTES],"},{"Add":" }"},{"Add":""},{"Add":" impl SecretKey {"},{"Add":" pub fn new_zeroed() -> Self {"},{"Add":" SecretKey {"},{"Add":" key: [0; SECRETKEY_BYTES],"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub struct Signature(pub [u8; SIGNATURE_BYTES]);"},{"Add":""},{"Add":" /// Generate a key pair."},{"Add":" pub fn keypair() -> (PublicKey, SecretKey) {"},{"Add":" unsafe {"},{"Add":" lazy_static::initialize(&super::SODIUM);"},{"Add":" let mut pk = PublicKey {"},{"Add":" key: [0; PUBLICKEY_BYTES],"},{"Add":" };"},{"Add":" let mut sk = SecretKey {"},{"Add":" key: [0; SECRETKEY_BYTES],"},{"Add":" };"},{"Add":" crypto_sign_keypair(pk.key.as_mut_ptr(), sk.key.as_mut_ptr());"},{"Add":" (pk, sk)"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Verify a signature, `sig` could as well be a `Signature`."},{"Add":" pub fn verify_detached(sig: &[u8], m: &[u8], pk: &PublicKey) -> bool {"},{"Add":" lazy_static::initialize(&super::SODIUM);"},{"Add":" if sig.len() == SIGNATURE_BYTES {"},{"Add":" unsafe {"},{"Add":" crypto_sign_verify_detached("},{"Add":" sig.as_ptr(),"},{"Add":" m.as_ptr(),"},{"Add":" m.len() as c_ulonglong,"},{"Add":" pk.key.as_ptr(),"},{"Add":" ) == 0"},{"Add":" }"},{"Add":" } else {"},{"Add":" false"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Sign a message with a secret key."},{"Add":" pub fn sign_detached(m: &[u8], sk: &SecretKey) -> Signature {"},{"Add":" lazy_static::initialize(&super::SODIUM);"},{"Add":" let mut sig = Signature([0; SIGNATURE_BYTES]);"},{"Add":" let mut sig_len = 0;"},{"Add":" unsafe {"},{"Add":" crypto_sign_detached("},{"Add":" sig.0.as_mut_ptr(),"},{"Add":" &mut sig_len,"},{"Add":" m.as_ptr(),"},{"Add":" m.len() as c_ulonglong,"},{"Add":" sk.key.as_ptr(),"},{"Add":" );"},{"Add":" }"},{"Add":" sig"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"pub mod scalarmult {"},{"Add":" use super::*;"},{"Add":" pub const BYTES: usize = 32;"},{"Add":""},{"Add":" #[derive(Debug)]"},{"Add":" pub struct Scalar(pub [u8; BYTES]);"},{"Add":" #[derive(Debug)]"},{"Add":" pub struct GroupElement(pub [u8; BYTES]);"},{"Add":""},{"Add":" pub fn scalarmult_base(n: &Scalar) -> GroupElement {"},{"Add":" lazy_static::initialize(&super::SODIUM);"},{"Add":" let mut q = GroupElement([0; BYTES]);"},{"Add":" unsafe {"},{"Add":" crypto_scalarmult_curve25519_base(q.0.as_mut_ptr(), n.0.as_ptr());"},{"Add":" }"},{"Add":" q"},{"Add":" }"},{"Add":""},{"Add":" pub fn scalarmult(n: &Scalar, p: &GroupElement) -> GroupElement {"},{"Add":" lazy_static::initialize(&super::SODIUM);"},{"Add":" let mut q = GroupElement([0; BYTES]);"},{"Add":" unsafe {"},{"Add":" crypto_scalarmult_curve25519(q.0.as_mut_ptr(), n.0.as_ptr(), p.0.as_ptr());"},{"Add":" }"},{"Add":" q"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"Cargo.toml","metadata":420},"context":[{"change":0,"pos":20}],"contents":[{"Add":"[package]"},{"Add":"name = \"thrussh-libsodium\""},{"Add":"version = \"0.2.1\""},{"Add":"license = \"Apache-2.0/MIT\""},{"Add":"description = \"Straightforward bindings to libsodium\""},{"Add":"homepage = \"https://nest.pijul.com/pijul_org/thrussh\""},{"Add":"repository = \"https://nest.pijul.com/pijul_org/thrussh\""},{"Add":"authors = [\"pe@pijul.org \"]"},{"Add":"include = [ \"Cargo.toml\", \"src/lib.rs\" ]"},{"Add":"edition = \"2018\""},{"Add":""},{"Add":"[dependencies]"},{"Add":"libc = \"0.2\""},{"Add":"lazy_static = \"1.4\""},{"Add":"libsodium-sys = \"0.2\""},{"Add":""},{"Add":"[build-dependencies]"},{"Add":"pkg-config = \"0.3\""},{"Add":"vcpkg = \"0.2\""}]}},{"FileAdd":{"meta":{"basename":"thrussh-keys","metadata":1005},"context":[{"change":1,"pos":0}],"contents":[]}},{"FileAdd":{"meta":{"basename":"src","metadata":1005},"context":[{"change":0,"pos":5798}],"contents":[]}},{"FileAdd":{"meta":{"basename":"signature.rs","metadata":420},"context":[{"change":0,"pos":5805}],"contents":[{"Add":"use crate::key::SignatureHash;"},{"Add":"use crate::Error;"},{"Add":"use byteorder::{BigEndian, WriteBytesExt};"},{"Add":"use serde;"},{"Add":"use serde::de::{SeqAccess, Visitor};"},{"Add":"use serde::ser::SerializeTuple;"},{"Add":"use serde::{Deserialize, Deserializer, Serialize, Serializer};"},{"Add":"use std::fmt;"},{"Add":""},{"Add":"pub struct SignatureBytes(pub [u8; 64]);"},{"Add":""},{"Add":"/// The type of a signature, depending on the algorithm used."},{"Add":"#[derive(Serialize, Deserialize, Clone)]"},{"Add":"pub enum Signature {"},{"Add":" /// An Ed25519 signature"},{"Add":" Ed25519(SignatureBytes),"},{"Add":" /// An RSA signature"},{"Add":" RSA { hash: SignatureHash, bytes: Vec },"},{"Add":"}"},{"Add":""},{"Add":"impl Signature {"},{"Add":" pub fn to_base64(&self) -> String {"},{"Add":" use crate::encoding::Encoding;"},{"Add":" let mut bytes_ = Vec::new();"},{"Add":" match self {"},{"Add":" Signature::Ed25519(ref bytes) => {"},{"Add":" let t = b\"ssh-ed25519\";"},{"Add":" bytes_"},{"Add":" .write_u32::((t.len() + bytes.0.len() + 8) as u32)"},{"Add":" .unwrap();"},{"Add":" bytes_.extend_ssh_string(t);"},{"Add":" bytes_.extend_ssh_string(&bytes.0[..]);"},{"Add":" }"},{"Add":" Signature::RSA {"},{"Add":" ref hash,"},{"Add":" ref bytes,"},{"Add":" } => {"},{"Add":" let t = match hash {"},{"Add":" SignatureHash::SHA2_256 => &b\"rsa-sha2-256\"[..],"},{"Add":" SignatureHash::SHA2_512 => &b\"rsa-sha2-512\"[..],"},{"Add":" SignatureHash::SHA1 => &b\"ssh-rsa\"[..],"},{"Add":" };"},{"Add":" bytes_"},{"Add":" .write_u32::((t.len() + bytes.len() + 8) as u32)"},{"Add":" .unwrap();"},{"Add":" bytes_.extend_ssh_string(t);"},{"Add":" bytes_.extend_ssh_string(&bytes[..]);"},{"Add":" }"},{"Add":" }"},{"Add":" data_encoding::BASE64_NOPAD.encode(&bytes_[..])"},{"Add":" }"},{"Add":""},{"Add":" pub fn from_base64(s: &[u8]) -> Result {"},{"Add":" let bytes_ = data_encoding::BASE64_NOPAD.decode(s)?;"},{"Add":" use crate::encoding::Reader;"},{"Add":" let mut r = bytes_.reader(0);"},{"Add":" let sig = r.read_string()?;"},{"Add":" let mut r = sig.reader(0);"},{"Add":" let typ = r.read_string()?;"},{"Add":" let bytes = r.read_string()?;"},{"Add":" match typ {"},{"Add":" b\"ssh-ed25519\" => {"},{"Add":" let mut bytes_ = [0; 64];"},{"Add":" bytes_.clone_from_slice(bytes);"},{"Add":" Ok(Signature::Ed25519(SignatureBytes(bytes_)))"},{"Add":" }"},{"Add":" b\"rsa-sha2-256\" => Ok(Signature::RSA {"},{"Add":" hash: SignatureHash::SHA2_256,"},{"Add":" bytes: bytes.to_vec(),"},{"Add":" }),"},{"Add":" b\"rsa-sha2-512\" => Ok(Signature::RSA {"},{"Add":" hash: SignatureHash::SHA2_512,"},{"Add":" bytes: bytes.to_vec(),"},{"Add":" }),"},{"Add":" _ => Err((Error::UnknownSignatureType {"},{"Add":" sig_type: std::str::from_utf8(typ).unwrap_or(\"\").to_string(),"},{"Add":" })"},{"Add":" .into()),"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl AsRef<[u8]> for Signature {"},{"Add":" fn as_ref(&self) -> &[u8] {"},{"Add":" match *self {"},{"Add":" Signature::Ed25519(ref signature) => &signature.0,"},{"Add":" Signature::RSA { ref bytes, .. } => &bytes[..],"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl AsRef<[u8]> for SignatureBytes {"},{"Add":" fn as_ref(&self) -> &[u8] {"},{"Add":" &self.0"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl<'de> Deserialize<'de> for SignatureBytes {"},{"Add":" fn deserialize(deserializer: D) -> Result"},{"Add":" where"},{"Add":" D: Deserializer<'de>,"},{"Add":" {"},{"Add":" struct Vis;"},{"Add":" impl<'de> Visitor<'de> for Vis {"},{"Add":" type Value = SignatureBytes;"},{"Add":" fn expecting(&self, formatter: &mut fmt::Formatter) -> fmt::Result {"},{"Add":" formatter.write_str(\"64 bytes\")"},{"Add":" }"},{"Add":" fn visit_seq>(self, mut seq: A) -> Result {"},{"Add":" let mut result = [0; 64];"},{"Add":" for x in result.iter_mut() {"},{"Add":" if let Some(y) = seq.next_element()? {"},{"Add":" *x = y"},{"Add":" } else {"},{"Add":" return Err(serde::de::Error::invalid_length(64, &self));"},{"Add":" }"},{"Add":" }"},{"Add":" Ok(SignatureBytes(result))"},{"Add":" }"},{"Add":" }"},{"Add":" deserializer.deserialize_tuple(64, Vis)"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Serialize for SignatureBytes {"},{"Add":" fn serialize(&self, serializer: S) -> Result"},{"Add":" where"},{"Add":" S: Serializer,"},{"Add":" {"},{"Add":" let mut tup = serializer.serialize_tuple(64)?;"},{"Add":" for byte in self.0.iter() {"},{"Add":" tup.serialize_element(byte)?;"},{"Add":" }"},{"Add":" tup.end()"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl fmt::Debug for SignatureBytes {"},{"Add":" fn fmt(&self, fmt: &mut fmt::Formatter) -> fmt::Result {"},{"Add":" write!(fmt, \"{:?}\", &self.0[..])"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Clone for SignatureBytes {"},{"Add":" fn clone(&self) -> Self {"},{"Add":" let mut result = SignatureBytes([0; 64]);"},{"Add":" result.0.clone_from_slice(&self.0);"},{"Add":" result"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"pem.rs","metadata":420},"context":[{"change":0,"pos":5805}],"contents":[{"Add":"use {Error, ErrorKind, KEYTYPE_ED25519, KEYTYPE_RSA, rsa_key_from_components};"},{"Add":"use std;"},{"Add":"use thrussh::encoding::Reader;"},{"Add":"use thrussh::key;"},{"Add":"use super::is_base64_char;"},{"Add":"use hex::FromHex;"},{"Add":"use base64::{decode_config, MIME};"},{"Add":"use ring::signature;"},{"Add":"use untrusted;"},{"Add":"use yasna;"},{"Add":"use ring;"},{"Add":""},{"Add":"use openssl::symm::{encrypt, decrypt, Cipher, Mode, Crypter};"},{"Add":"use openssl::hash::{MessageDigest, Hasher};"},{"Add":"use bcrypt_pbkdf;"},{"Add":""},{"Add":""},{"Add":"const PBES2: &'static [u64] = &[1, 2, 840, 113549, 1, 5, 13];"},{"Add":"const PBKDF2: &'static [u64] = &[1, 2, 840, 113549, 1, 5, 12];"},{"Add":"const HMAC_SHA256: &'static [u64] = &[1, 2, 840, 113549, 2, 9];"},{"Add":"const AES256CBC: &'static [u64] = &[2, 16, 840, 1, 101, 3, 4, 1, 42];"},{"Add":"const ED25519: &'static [u64] = &[1, 3, 101, 112];"},{"Add":"const RSA: &'static [u64] = &[1, 2, 840, 113549, 1, 1, 1];"},{"Add":""},{"Add":"// https://tools.ietf.org/html/rfc5208"},{"Add":"fn decode_pkcs8("},{"Add":" secret: &[u8],"},{"Add":" password: Option<&[u8]>,"},{"Add":") -> Result<(key::Algorithm, super::KeyPairComponents), Error> {"},{"Add":" if let Some(pass) = password {"},{"Add":" // let mut sec = Vec::new();"},{"Add":" let secret = yasna::parse_der(&secret, |reader| {"},{"Add":" reader.read_sequence(|reader| {"},{"Add":" // Encryption parameters"},{"Add":" let parameters = reader.next().read_sequence(|reader| {"},{"Add":" let oid = reader.next().read_oid()?;"},{"Add":" debug!(\"oid = {:?} {:?}\", oid, oid.components().as_slice() == PBES2);"},{"Add":" if oid.components().as_slice() == PBES2 {"},{"Add":" asn1_read_pbes2(reader)"},{"Add":" } else {"},{"Add":" Ok(Err(ErrorKind::UnknownAlgorithm(oid).into()))"},{"Add":" }"},{"Add":" })?;"},{"Add":" // Ciphertext"},{"Add":" let ciphertext = reader.next().read_bytes()?;"},{"Add":" Ok(parameters.map(|p| p.decrypt(pass, &ciphertext)))"},{"Add":" })"},{"Add":" })???;"},{"Add":" debug!(\"secret {:?}\", secret);"},{"Add":""},{"Add":" let mut oid = None;"},{"Add":" yasna::parse_der(&secret, |reader| {"},{"Add":" reader.read_sequence(|reader| {"},{"Add":" let version = reader.next().read_u64()?;"},{"Add":" debug!(\"version = {:?}\", version);"},{"Add":" reader.next().read_sequence(|reader| {"},{"Add":" oid = Some(reader.next().read_oid()?);"},{"Add":" Ok(())"},{"Add":" }).unwrap_or(());"},{"Add":" Ok(())"},{"Add":" })"},{"Add":" }).unwrap_or(());"},{"Add":""},{"Add":" debug!(\"pkcs8 oid {:?}\", oid);"},{"Add":" let oid = if let Some(oid) = oid {"},{"Add":" oid"},{"Add":" } else {"},{"Add":" return Err(ErrorKind::CouldNotReadKey.into())"},{"Add":" };"},{"Add":" if oid.components().as_slice() == ED25519 {"},{"Add":" let components = signature::primitive::Ed25519KeyPairComponents::from_pkcs8("},{"Add":" untrusted::Input::from(&secret),"},{"Add":" )?;"},{"Add":" debug!(\"components!\");"},{"Add":" let keypair = signature::Ed25519KeyPair::from_pkcs8(untrusted::Input::from(&secret))?;"},{"Add":" debug!(\"keypair!\");"},{"Add":" Ok((key::Algorithm::Ed25519(keypair),"},{"Add":" super::KeyPairComponents::Ed25519(components)))"},{"Add":""},{"Add":" } else if oid.components().as_slice() == RSA {"},{"Add":" let components = signature::primitive::RSAKeyPairComponents::from_pkcs8("},{"Add":" untrusted::Input::from(&secret),"},{"Add":" )?;"},{"Add":""},{"Add":" let keypair = signature::RSAKeyPair::from_pkcs8(untrusted::Input::from(&secret))?;"},{"Add":" Ok(("},{"Add":" key::Algorithm::RSA("},{"Add":" std::sync::Arc::new(keypair),"},{"Add":" key::RSAPublicKey {"},{"Add":" n: components.n.as_slice_less_safe().to_vec(),"},{"Add":" e: components.e.as_slice_less_safe().to_vec(),"},{"Add":" hash: key::SignatureHash::SHA2_512,"},{"Add":" },"},{"Add":" ),"},{"Add":" super::KeyPairComponents::RSA("},{"Add":" super::RSAKeyPairComponents::from_components(&components),"},{"Add":" ),"},{"Add":" ))"},{"Add":" } else {"},{"Add":" Err(ErrorKind::CouldNotReadKey.into())"},{"Add":" }"},{"Add":" } else {"},{"Add":" Err(ErrorKind::KeyIsEncrypted.into())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[cfg(test)]"},{"Add":"use env_logger;"},{"Add":""},{"Add":"#[test]"},{"Add":"fn test_read_write_pkcs8() {"},{"Add":" env_logger::init().unwrap_or(());"},{"Add":" let r = ring::rand::SystemRandom::new();"},{"Add":" let key = ring::signature::Ed25519KeyPair::generate_pkcs8(&r).unwrap();"},{"Add":" let password = b\"blabla\";"},{"Add":" let ciphertext = encode_pkcs8(&r, &key, Some(password), 100).unwrap();"},{"Add":" let (_, comp) = decode_pkcs8(&ciphertext, Some(password)).unwrap();"},{"Add":" use super::KeyPairComponents;"},{"Add":" match comp {"},{"Add":" KeyPairComponents::Ed25519(_) => debug!(\"Ed25519\"),"},{"Add":" KeyPairComponents::RSA(_) => debug!(\"RSA\"),"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":""},{"Add":"use yasna::models::ObjectIdentifier;"},{"Add":"pub fn encode_pkcs8("},{"Add":" rand: &R,"},{"Add":" plaintext: &[u8],"},{"Add":" password: Option<&[u8]>,"},{"Add":" rounds: u32"},{"Add":") -> Result, Error> {"},{"Add":" if let Some(pass) = password {"},{"Add":""},{"Add":" let mut salt = [0; 64];"},{"Add":" rand.fill(&mut salt)?;"},{"Add":" let mut iv = [0; 16];"},{"Add":" rand.fill(&mut iv)?;"},{"Add":" let mut key = [0; 32]; // AES256-CBC"},{"Add":" ring::pbkdf2::derive(&ring::digest::SHA256, rounds, &salt, pass, &mut key[..]);"},{"Add":" debug!(\"key = {:?}\", key);"},{"Add":""},{"Add":" let mut plaintext = plaintext.to_vec();"},{"Add":" let padding_len = 32 - (plaintext.len() % 32);"},{"Add":" plaintext.extend(std::iter::repeat(padding_len as u8).take(padding_len));"},{"Add":""},{"Add":" debug!(\"plaintext {:?}\", plaintext);"},{"Add":" let ciphertext = encrypt(Cipher::aes_256_cbc(), &key, Some(&iv), &plaintext)?;"},{"Add":""},{"Add":" let v = yasna::construct_der(|writer| {"},{"Add":" writer.write_sequence(|writer| {"},{"Add":" // Encryption parameters"},{"Add":" writer.next().write_sequence(|writer| {"},{"Add":" writer.next().write_oid(&ObjectIdentifier::from_slice(PBES2));"},{"Add":" asn1_write_pbes2(writer.next(), rounds as u64, &salt, &iv)"},{"Add":" });"},{"Add":" // Ciphertext"},{"Add":" writer.next().write_bytes(&ciphertext[..])"},{"Add":" })"},{"Add":" });"},{"Add":" Ok(v)"},{"Add":" } else {"},{"Add":" Err(ErrorKind::KeyIsEncrypted.into())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"fn asn1_write_pbes2(writer: yasna::DERWriter, rounds: u64, salt: &[u8], iv: &[u8]) {"},{"Add":" writer.write_sequence(|writer| {"},{"Add":" // 1. Key generation algorithm"},{"Add":" writer.next().write_sequence(|writer| {"},{"Add":" writer.next().write_oid(&ObjectIdentifier::from_slice(PBKDF2));"},{"Add":" asn1_write_pbkdf2(writer.next(), rounds, salt)"},{"Add":" });"},{"Add":" // 2. Encryption algorithm."},{"Add":" writer.next().write_sequence(|writer| {"},{"Add":" writer.next().write_oid(&ObjectIdentifier::from_slice(AES256CBC));"},{"Add":" writer.next().write_bytes(iv)"},{"Add":" });"},{"Add":" })"},{"Add":"}"},{"Add":""},{"Add":"fn asn1_write_pbkdf2(writer: yasna::DERWriter, rounds: u64, salt: &[u8]) {"},{"Add":" writer.write_sequence(|writer| {"},{"Add":" writer.next().write_bytes(salt);"},{"Add":" writer.next().write_u64(rounds);"},{"Add":" writer.next().write_sequence(|writer| {"},{"Add":" writer.next().write_oid(&ObjectIdentifier::from_slice(HMAC_SHA256));"},{"Add":" writer.next().write_null()"},{"Add":" })"},{"Add":" })"},{"Add":"}"},{"Add":""},{"Add":"enum Algorithms {"},{"Add":" Pbes2(KeyDerivation, Encryption),"},{"Add":"}"},{"Add":""},{"Add":"impl Algorithms {"},{"Add":" fn decrypt(&self, password: &[u8], cipher: &[u8]) -> Result, Error> {"},{"Add":" match *self {"},{"Add":" Algorithms::Pbes2(ref der, ref enc) => {"},{"Add":" let mut key = enc.key();"},{"Add":" der.derive(password, &mut key);"},{"Add":" let out = enc.decrypt(&key, cipher)?;"},{"Add":" Ok(out)"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl KeyDerivation {"},{"Add":" fn derive(&self, password: &[u8], key: &mut [u8]) {"},{"Add":" match *self {"},{"Add":" KeyDerivation::Pbkdf2 {"},{"Add":" ref salt,"},{"Add":" rounds,"},{"Add":" digest,"},{"Add":" } => ring::pbkdf2::derive(digest, rounds as u32, salt, password, key),"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"enum Key {"},{"Add":" K128([u8; 16]),"},{"Add":" K256([u8; 32]),"},{"Add":"}"},{"Add":""},{"Add":"impl std::ops::Deref for Key {"},{"Add":" type Target = [u8];"},{"Add":" fn deref(&self) -> &[u8] {"},{"Add":" match *self {"},{"Add":" Key::K128(ref k) => k,"},{"Add":" Key::K256(ref k) => k,"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl std::ops::DerefMut for Key {"},{"Add":" fn deref_mut(&mut self) -> &mut [u8] {"},{"Add":" match *self {"},{"Add":" Key::K128(ref mut k) => k,"},{"Add":" Key::K256(ref mut k) => k,"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Encryption {"},{"Add":" fn key(&self) -> Key {"},{"Add":" match *self {"},{"Add":" Encryption::Aes128Cbc(_) => Key::K128([0; 16]),"},{"Add":" Encryption::Aes256Cbc(_) => Key::K256([0; 32]),"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" fn decrypt(&self, key: &[u8], ciphertext: &[u8]) -> Result, Error> {"},{"Add":" let (cipher, iv) = match *self {"},{"Add":" Encryption::Aes128Cbc(ref iv) => (Cipher::aes_128_cbc(), iv),"},{"Add":" Encryption::Aes256Cbc(ref iv) => (Cipher::aes_256_cbc(), iv),"},{"Add":" };"},{"Add":" let mut dec = decrypt("},{"Add":" cipher,"},{"Add":" &key,"},{"Add":" Some(&iv[..]),"},{"Add":" ciphertext"},{"Add":" )?;"},{"Add":" pkcs_unpad(&mut dec);"},{"Add":" Ok(dec)"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"enum KeyDerivation {"},{"Add":" Pbkdf2 {"},{"Add":" salt: Vec,"},{"Add":" rounds: u64,"},{"Add":" digest: &'static ring::digest::Algorithm,"},{"Add":" },"},{"Add":"}"},{"Add":""},{"Add":"fn asn1_read_pbes2("},{"Add":" reader: &mut yasna::BERReaderSeq,"},{"Add":") -> Result, yasna::ASN1Error> {"},{"Add":" reader.next().read_sequence(|reader| {"},{"Add":" // PBES2 has two components."},{"Add":" // 1. Key generation algorithm"},{"Add":" let keygen = reader.next().read_sequence(|reader| {"},{"Add":" let oid = reader.next().read_oid()?;"},{"Add":" if oid.components().as_slice() == PBKDF2 {"},{"Add":" asn1_read_pbkdf2(reader)"},{"Add":" } else {"},{"Add":" Ok(Err(ErrorKind::UnknownAlgorithm(oid).into()))"},{"Add":" }"},{"Add":" })?;"},{"Add":" // 2. Encryption algorithm."},{"Add":" let algorithm = reader.next().read_sequence(|reader| {"},{"Add":" let oid = reader.next().read_oid()?;"},{"Add":" if oid.components().as_slice() == AES256CBC {"},{"Add":" asn1_read_aes256cbc(reader)"},{"Add":" } else {"},{"Add":" Ok(Err(ErrorKind::UnknownAlgorithm(oid).into()))"},{"Add":" }"},{"Add":" })?;"},{"Add":" Ok(keygen.and_then(|keygen| {"},{"Add":" algorithm.map(|algo| Algorithms::Pbes2(keygen, algo))"},{"Add":" }))"},{"Add":" })"},{"Add":"}"},{"Add":""},{"Add":"fn asn1_read_pbkdf2("},{"Add":" reader: &mut yasna::BERReaderSeq,"},{"Add":") -> Result, yasna::ASN1Error> {"},{"Add":" reader.next().read_sequence(|reader| {"},{"Add":" let salt = reader.next().read_bytes()?;"},{"Add":" let rounds = reader.next().read_u64()?;"},{"Add":" let digest = reader.next().read_sequence(|reader| {"},{"Add":" let oid = reader.next().read_oid()?;"},{"Add":" if oid.components().as_slice() == HMAC_SHA256 {"},{"Add":" reader.next().read_null()?;"},{"Add":" Ok(Ok(&ring::digest::SHA256))"},{"Add":" } else {"},{"Add":" Ok(Err(ErrorKind::UnknownAlgorithm(oid).into()))"},{"Add":" }"},{"Add":" })?;"},{"Add":" Ok(digest.map(|digest| {"},{"Add":" KeyDerivation::Pbkdf2 {"},{"Add":" salt,"},{"Add":" rounds,"},{"Add":" digest,"},{"Add":" }"},{"Add":" }))"},{"Add":" })"},{"Add":"}"},{"Add":""},{"Add":"fn asn1_read_aes256cbc("},{"Add":" reader: &mut yasna::BERReaderSeq,"},{"Add":") -> Result, yasna::ASN1Error> {"},{"Add":" let iv = reader.next().read_bytes()?;"},{"Add":" let mut i = [0; 16];"},{"Add":" i.clone_from_slice(&iv);"},{"Add":" Ok(Ok(Encryption::Aes256Cbc(i)))"},{"Add":""},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"lib.rs","metadata":420},"context":[{"change":0,"pos":5805}],"contents":[{"Add":"#![deny(trivial_casts, unstable_features, unused_import_braces)]"},{"Add":"//! This crate contains methods to deal with SSH keys, as defined in"},{"Add":"//! crate Thrussh. This includes in particular various functions for"},{"Add":"//! opening key files, deciphering encrypted keys, and dealing with"},{"Add":"//! agents."},{"Add":"//!"},{"Add":"//! The following example shows how to do all these in a single"},{"Add":"//! example: start and SSH agent server, connect to it with a client,"},{"Add":"//! decipher an encrypted private key (the password is `b\"blabla\"`),"},{"Add":"//! send it to the agent, and ask the agent to sign a piece of data"},{"Add":"//! (`b\"Please sign this\", below)."},{"Add":"//!"},{"Add":"//!```"},{"Add":"//! use thrussh_keys::*;"},{"Add":"//! use futures::Future;"},{"Add":"//!"},{"Add":"//! #[derive(Clone)]"},{"Add":"//! struct X{}"},{"Add":"//! impl agent::server::Agent for X {"},{"Add":"//! fn confirm(&self, _: std::sync::Arc) -> Box + Send + Unpin> {"},{"Add":"//! Box::new(futures::future::ready(true))"},{"Add":"//! }"},{"Add":"//! }"},{"Add":"//!"},{"Add":"//! const PKCS8_ENCRYPTED: &'static str = \"-----BEGIN ENCRYPTED PRIVATE KEY-----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\\nCog3JMeTrb3LiPHgN6gU2P30MRp6L1j1J/MtlOAr5rux\\n-----END ENCRYPTED PRIVATE KEY-----\\n\";"},{"Add":"//!"},{"Add":"//! fn main() {"},{"Add":"//! env_logger::try_init().unwrap_or(());"},{"Add":"//! let dir = tempdir::TempDir::new(\"thrussh\").unwrap();"},{"Add":"//! let agent_path = dir.path().join(\"agent\");"},{"Add":"//!"},{"Add":"//! let mut core = tokio::runtime::Runtime::new().unwrap();"},{"Add":"//! let agent_path_ = agent_path.clone();"},{"Add":"//! // Starting a server"},{"Add":"//! core.spawn(async move {"},{"Add":"//! let mut listener = tokio::net::UnixListener::bind(&agent_path_)"},{"Add":"//! .unwrap();"},{"Add":"//! thrussh_keys::agent::server::serve(listener.incoming(), X {}).await"},{"Add":"//! });"},{"Add":"//! let key = decode_secret_key(PKCS8_ENCRYPTED, Some(b\"blabla\")).unwrap();"},{"Add":"//! let public = key.clone_public_key();"},{"Add":"//! core.block_on(async move {"},{"Add":"//! let stream = tokio::net::UnixStream::connect(&agent_path).await?;"},{"Add":"//! let mut client = agent::client::AgentClient::connect(stream);"},{"Add":"//! client.add_identity(&key, &[agent::Constraint::KeyLifetime { seconds: 60 }]).await?;"},{"Add":"//! client.request_identities().await?;"},{"Add":"//! let buf = b\"signed message\";"},{"Add":"//! let sig = client.sign_request(&public, buf).await?.unwrap();"},{"Add":"//! assert!(public.verify_detached(buf, sig.as_ref()));"},{"Add":"//! Ok::<(), Error>(())"},{"Add":"//! }).unwrap()"},{"Add":"//! }"},{"Add":"//!```"},{"Add":""},{"Add":"#![recursion_limit = \"128\"]"},{"Add":"extern crate thrussh_libsodium as sodium;"},{"Add":"#[macro_use]"},{"Add":"extern crate serde_derive;"},{"Add":"#[macro_use]"},{"Add":"extern crate thiserror;"},{"Add":"#[macro_use]"},{"Add":"extern crate log;"},{"Add":""},{"Add":"#[cfg(test)]"},{"Add":"extern crate env_logger;"},{"Add":""},{"Add":"use byteorder::{BigEndian, WriteBytesExt};"},{"Add":"use data_encoding::BASE64_MIME;"},{"Add":"use std::borrow::Cow;"},{"Add":"use std::fs::{File, OpenOptions};"},{"Add":"use std::io::{BufRead, BufReader, Read, Seek, SeekFrom, Write};"},{"Add":"use std::path::Path;"},{"Add":""},{"Add":"pub mod encoding;"},{"Add":"pub mod key;"},{"Add":"pub mod signature;"},{"Add":""},{"Add":"mod bcrypt_pbkdf;"},{"Add":"mod blowfish;"},{"Add":"mod format;"},{"Add":"pub use format::*;"},{"Add":""},{"Add":"/// A module to write SSH agent."},{"Add":"pub mod agent;"},{"Add":""},{"Add":"#[derive(Debug, Error)]"},{"Add":"pub enum Error {"},{"Add":" /// The key could not be read, for an unknown reason"},{"Add":" #[error(\"Could not read key\")]"},{"Add":" CouldNotReadKey,"},{"Add":" /// The type of the key is unsupported"},{"Add":" #[error(\"Unsupported key type\")]"},{"Add":" UnsupportedKeyType(Vec),"},{"Add":" /// The key is encrypted (should supply a password?)"},{"Add":" #[error(\"The key is encrypted\")]"},{"Add":" KeyIsEncrypted,"},{"Add":" /// Home directory could not be found"},{"Add":" #[error(\"No home directory found\")]"},{"Add":" NoHomeDir,"},{"Add":" /// The server key has changed"},{"Add":" #[error(\"The server key changed at line {}\", line)]"},{"Add":" KeyChanged { line: usize },"},{"Add":" /// The key uses an unsupported algorithm"},{"Add":" #[error(\"Unknown key algorithm\")]"},{"Add":" UnknownAlgorithm(yasna::models::ObjectIdentifier),"},{"Add":" /// Index out of bounds"},{"Add":" #[error(\"Index out of bounds\")]"},{"Add":" IndexOutOfBounds,"},{"Add":" /// Unknown signature type"},{"Add":" #[error(\"Unknown signature type: {}\", sig_type)]"},{"Add":" UnknownSignatureType { sig_type: String },"},{"Add":" /// Agent protocol error"},{"Add":" #[error(\"Agent protocol error\")]"},{"Add":" AgentProtocolError,"},{"Add":" #[error(\"Agent failure\")]"},{"Add":" AgentFailure,"},{"Add":"}"},{"Add":""},{"Add":"const KEYTYPE_ED25519: &'static [u8] = b\"ssh-ed25519\";"},{"Add":"const KEYTYPE_RSA: &'static [u8] = b\"ssh-rsa\";"},{"Add":""},{"Add":"/// Load a public key from a file. Ed25519 and RSA keys are supported."},{"Add":"///"},{"Add":"/// ```"},{"Add":"/// thrussh_keys::load_public_key(\"/home/pe/.ssh/id_ed25519.pub\").unwrap();"},{"Add":"/// ```"},{"Add":"pub fn load_public_key>(path: P) -> Result {"},{"Add":" let mut pubkey = String::new();"},{"Add":" let mut file = File::open(path.as_ref())?;"},{"Add":" file.read_to_string(&mut pubkey)?;"},{"Add":""},{"Add":" let mut split = pubkey.split_whitespace();"},{"Add":" match (split.next(), split.next()) {"},{"Add":" (Some(_), Some(key)) => parse_public_key_base64(key),"},{"Add":" (Some(key), None) => parse_public_key_base64(key),"},{"Add":" _ => Err(Error::CouldNotReadKey.into()),"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// Reads a public key from the standard encoding. In some cases, the"},{"Add":"/// encoding is prefixed with a key type identifier and a space (such"},{"Add":"/// as `ssh-ed25519 AAAAC3N...`)."},{"Add":"///"},{"Add":"/// ```"},{"Add":"/// thrussh_keys::parse_public_key_base64(\"AAAAC3NzaC1lZDI1NTE5AAAAIJdD7y3aLq454yWBdwLWbieU1ebz9/cu7/QEXn9OIeZJ\").is_ok();"},{"Add":"/// ```"},{"Add":"pub fn parse_public_key_base64(key: &str) -> Result {"},{"Add":" let base = BASE64_MIME.decode(key.as_bytes())?;"},{"Add":" Ok(key::parse_public_key(&base)?)"},{"Add":"}"},{"Add":""},{"Add":"pub trait PublicKeyBase64 {"},{"Add":" /// Create the base64 part of the public key blob."},{"Add":" fn public_key_bytes(&self) -> Vec;"},{"Add":" fn public_key_base64(&self) -> String {"},{"Add":" BASE64_MIME.encode(&self.public_key_bytes())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl PublicKeyBase64 for key::PublicKey {"},{"Add":" fn public_key_bytes(&self) -> Vec {"},{"Add":" let name = self.name().as_bytes();"},{"Add":" let mut s = Vec::new();"},{"Add":" s.write_u32::(name.len() as u32).unwrap();"},{"Add":" s.extend_from_slice(name);"},{"Add":" match *self {"},{"Add":" key::PublicKey::Ed25519(ref publickey) => {"},{"Add":" s.write_u32::(publickey.key.len() as u32)"},{"Add":" .unwrap();"},{"Add":" s.extend_from_slice(&publickey.key);"},{"Add":" }"},{"Add":" key::PublicKey::RSA { ref key, .. } => {"},{"Add":" use encoding::Encoding;"},{"Add":" s.extend_ssh_mpint(&key.0.rsa().unwrap().e().to_vec());"},{"Add":" s.extend_ssh_mpint(&key.0.rsa().unwrap().n().to_vec());"},{"Add":" }"},{"Add":" }"},{"Add":" s"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl PublicKeyBase64 for key::KeyPair {"},{"Add":" fn public_key_bytes(&self) -> Vec {"},{"Add":" let name = self.name().as_bytes();"},{"Add":" let mut s = Vec::new();"},{"Add":" s.write_u32::(name.len() as u32).unwrap();"},{"Add":" s.extend_from_slice(name);"},{"Add":" match *self {"},{"Add":" key::KeyPair::Ed25519(ref key) => {"},{"Add":" let public = &key.key[32..];"},{"Add":" s.write_u32::(32).unwrap();"},{"Add":" s.extend_from_slice(&public);"},{"Add":" }"},{"Add":" key::KeyPair::RSA { ref key, .. } => {"},{"Add":" use encoding::Encoding;"},{"Add":" s.extend_ssh_mpint(&key.e().to_vec());"},{"Add":" s.extend_ssh_mpint(&key.n().to_vec());"},{"Add":" }"},{"Add":" }"},{"Add":" s"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// Write a public key onto the provided `Write`, encoded in base-64."},{"Add":"pub fn write_public_key_base64("},{"Add":" mut w: W,"},{"Add":" publickey: &key::PublicKey,"},{"Add":") -> Result<(), anyhow::Error> {"},{"Add":" let name = publickey.name().as_bytes();"},{"Add":" w.write_all(name)?;"},{"Add":" w.write_all(b\" \")?;"},{"Add":" w.write_all(publickey.public_key_base64().as_bytes())?;"},{"Add":" Ok(())"},{"Add":"}"},{"Add":""},{"Add":"/// Load a secret key, deciphering it with the supplied password if necessary."},{"Add":"pub fn load_secret_key>("},{"Add":" secret_: P,"},{"Add":" password: Option<&[u8]>,"},{"Add":") -> Result {"},{"Add":" let mut secret_file = std::fs::File::open(secret_)?;"},{"Add":" let mut secret = String::new();"},{"Add":" secret_file.read_to_string(&mut secret)?;"},{"Add":" decode_secret_key(&secret, password)"},{"Add":"}"},{"Add":""},{"Add":"fn is_base64_char(c: char) -> bool {"},{"Add":" (c >= 'a' && c <= 'z')"},{"Add":" || (c >= 'A' && c <= 'Z')"},{"Add":" || (c >= '0' && c <= '9')"},{"Add":" || c == '/'"},{"Add":" || c == '+'"},{"Add":" || c == '='"},{"Add":"}"},{"Add":""},{"Add":"/// Record a host's public key into a nonstandard location."},{"Add":"pub fn learn_known_hosts_path>("},{"Add":" host: &str,"},{"Add":" port: u16,"},{"Add":" pubkey: &key::PublicKey,"},{"Add":" path: P,"},{"Add":") -> Result<(), anyhow::Error> {"},{"Add":" if let Some(parent) = path.as_ref().parent() {"},{"Add":" std::fs::create_dir_all(parent)?"},{"Add":" }"},{"Add":" let mut file = OpenOptions::new()"},{"Add":" .read(true)"},{"Add":" .append(true)"},{"Add":" .create(true)"},{"Add":" .open(path)?;"},{"Add":""},{"Add":" // Test whether the known_hosts file ends with a \\n"},{"Add":" let mut buf = [0; 1];"},{"Add":" let mut ends_in_newline = false;"},{"Add":" if file.seek(SeekFrom::End(-1)).is_ok() {"},{"Add":" file.read_exact(&mut buf)?;"},{"Add":" ends_in_newline = buf[0] == b'\\n';"},{"Add":" }"},{"Add":""},{"Add":" // Write the key."},{"Add":" file.seek(SeekFrom::Start(0))?;"},{"Add":" let mut file = std::io::BufWriter::new(file);"},{"Add":" if !ends_in_newline {"},{"Add":" file.write(b\"\\n\")?;"},{"Add":" }"},{"Add":" if port != 22 {"},{"Add":" write!(file, \"[{}]:{} \", host, port)?"},{"Add":" } else {"},{"Add":" write!(file, \"{} \", host)?"},{"Add":" }"},{"Add":" write_public_key_base64(&mut file, pubkey)?;"},{"Add":" file.write(b\"\\n\")?;"},{"Add":" Ok(())"},{"Add":"}"},{"Add":""},{"Add":"/// Check that a server key matches the one recorded in file `path`."},{"Add":"pub fn check_known_hosts_path>("},{"Add":" host: &str,"},{"Add":" port: u16,"},{"Add":" pubkey: &key::PublicKey,"},{"Add":" path: P,"},{"Add":") -> Result {"},{"Add":" let mut f = if let Ok(f) = File::open(path) {"},{"Add":" BufReader::new(f)"},{"Add":" } else {"},{"Add":" return Ok(false);"},{"Add":" };"},{"Add":" let mut buffer = String::new();"},{"Add":""},{"Add":" let host_port = if port == 22 {"},{"Add":" Cow::Borrowed(host)"},{"Add":" } else {"},{"Add":" Cow::Owned(format!(\"[{}]:{}\", host, port))"},{"Add":" };"},{"Add":" let mut line = 1;"},{"Add":" while f.read_line(&mut buffer).unwrap() > 0 {"},{"Add":" {"},{"Add":" if buffer.as_bytes()[0] == b'#' {"},{"Add":" buffer.clear();"},{"Add":" continue;"},{"Add":" }"},{"Add":" debug!(\"line = {:?}\", buffer);"},{"Add":" let mut s = buffer.split(' ');"},{"Add":" let hosts = s.next();"},{"Add":" let _ = s.next();"},{"Add":" let key = s.next();"},{"Add":" match (hosts, key) {"},{"Add":" (Some(h), Some(k)) => {"},{"Add":" debug!(\"{:?} {:?}\", h, k);"},{"Add":" let host_matches = h.split(',').any(|x| x == host_port);"},{"Add":" if host_matches {"},{"Add":" if &parse_public_key_base64(k)? == pubkey {"},{"Add":" return Ok(true);"},{"Add":" } else {"},{"Add":" return Err((Error::KeyChanged { line }).into());"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" _ => {}"},{"Add":" }"},{"Add":" }"},{"Add":" buffer.clear();"},{"Add":" line += 1;"},{"Add":" }"},{"Add":" Ok(false)"},{"Add":"}"},{"Add":""},{"Add":"/// Record a host's public key into the user's known_hosts file."},{"Add":"#[cfg(target_os = \"windows\")]"},{"Add":"pub fn learn_known_hosts(host: &str, port: u16, pubkey: &key::PublicKey) -> Result<()> {"},{"Add":" if let Some(mut known_host_file) = dirs::home_dir() {"},{"Add":" known_host_file.push(\"ssh\");"},{"Add":" known_host_file.push(\"known_hosts\");"},{"Add":" learn_known_hosts_path(host, port, pubkey, &known_host_file)"},{"Add":" } else {"},{"Add":" Err(Error::NoHomeDir.into())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// Record a host's public key into the user's known_hosts file."},{"Add":"#[cfg(not(target_os = \"windows\"))]"},{"Add":"pub fn learn_known_hosts("},{"Add":" host: &str,"},{"Add":" port: u16,"},{"Add":" pubkey: &key::PublicKey,"},{"Add":") -> Result<(), anyhow::Error> {"},{"Add":" if let Some(mut known_host_file) = dirs::home_dir() {"},{"Add":" known_host_file.push(\".ssh\");"},{"Add":" known_host_file.push(\"known_hosts\");"},{"Add":" learn_known_hosts_path(host, port, pubkey, &known_host_file)"},{"Add":" } else {"},{"Add":" Err(Error::NoHomeDir.into())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// Check whether the host is known, from its standard location."},{"Add":"#[cfg(target_os = \"windows\")]"},{"Add":"pub fn check_known_hosts("},{"Add":" host: &str,"},{"Add":" port: u16,"},{"Add":" pubkey: &key::PublicKey,"},{"Add":") -> Result {"},{"Add":" if let Some(mut known_host_file) = dirs::home_dir() {"},{"Add":" known_host_file.push(\"ssh\");"},{"Add":" known_host_file.push(\"known_hosts\");"},{"Add":" check_known_hosts_path(host, port, pubkey, &known_host_file)"},{"Add":" } else {"},{"Add":" Err(Error::NoHomeDir.into())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// Check whether the host is known, from its standard location."},{"Add":"#[cfg(not(target_os = \"windows\"))]"},{"Add":"pub fn check_known_hosts("},{"Add":" host: &str,"},{"Add":" port: u16,"},{"Add":" pubkey: &key::PublicKey,"},{"Add":") -> Result {"},{"Add":" if let Some(mut known_host_file) = dirs::home_dir() {"},{"Add":" known_host_file.push(\".ssh\");"},{"Add":" known_host_file.push(\"known_hosts\");"},{"Add":" check_known_hosts_path(host, port, pubkey, &known_host_file)"},{"Add":" } else {"},{"Add":" Err(Error::NoHomeDir.into())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[cfg(test)]"},{"Add":"mod test {"},{"Add":" extern crate tempdir;"},{"Add":" use super::*;"},{"Add":" use futures::Future;"},{"Add":" use std::fs::File;"},{"Add":" use std::io::Write;"},{"Add":""},{"Add":" const ED25519_KEY: &'static str = \"-----BEGIN OPENSSH PRIVATE KEY-----"},{"Add":"b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jYmMAAAAGYmNyeXB0AAAAGAAAABDLGyfA39"},{"Add":"J2FcJygtYqi5ISAAAAEAAAAAEAAAAzAAAAC3NzaC1lZDI1NTE5AAAAIN+Wjn4+4Fcvl2Jl"},{"Add":"KpggT+wCRxpSvtqqpVrQrKN1/A22AAAAkOHDLnYZvYS6H9Q3S3Nk4ri3R2jAZlQlBbUos5"},{"Add":"FkHpYgNw65KCWCTXtP7ye2czMC3zjn2r98pJLobsLYQgRiHIv/CUdAdsqbvMPECB+wl/UQ"},{"Add":"e+JpiSq66Z6GIt0801skPh20jxOO3F52SoX1IeO5D5PXfZrfSZlw6S8c7bwyp2FHxDewRx"},{"Add":"7/wNsnDM0T7nLv/Q=="},{"Add":"-----END OPENSSH PRIVATE KEY-----\";"},{"Add":""},{"Add":" const RSA_KEY: &'static str = \"-----BEGIN OPENSSH PRIVATE KEY-----"},{"Add":"b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAABFwAAAAdzc2gtcn"},{"Add":"NhAAAAAwEAAQAAAQEAuSvQ9m76zhRB4m0BUKPf17lwccj7KQ1Qtse63AOqP/VYItqEH8un"},{"Add":"rxPogXNBgrcCEm/ccLZZsyE3qgp3DRQkkqvJhZ6O8VBPsXxjZesRCqoFNCczy+Mf0R/Qmv"},{"Add":"Rnpu5+4DDLz0p7vrsRZW9ji/c98KzxeUonWgkplQaCBYLN875WdeUYMGtb1MLfNCEj177j"},{"Add":"gZl3CzttLRK3su6dckowXcXYv1gPTPZAwJb49J43o1QhV7+1zdwXvuFM6zuYHdu9ZHSKir"},{"Add":"6k1dXOET3/U+LWG5ofAo8oxUWv/7vs6h7MeajwkUeIBOWYtD+wGYRvVpxvj7nyOoWtg+jm"},{"Add":"0X6ndnsD+QAAA8irV+ZAq1fmQAAAAAdzc2gtcnNhAAABAQC5K9D2bvrOFEHibQFQo9/XuX"},{"Add":"BxyPspDVC2x7rcA6o/9Vgi2oQfy6evE+iBc0GCtwISb9xwtlmzITeqCncNFCSSq8mFno7x"},{"Add":"UE+xfGNl6xEKqgU0JzPL4x/RH9Ca9Gem7n7gMMvPSnu+uxFlb2OL9z3wrPF5SidaCSmVBo"},{"Add":"IFgs3zvlZ15Rgwa1vUwt80ISPXvuOBmXcLO20tErey7p1ySjBdxdi/WA9M9kDAlvj0njej"},{"Add":"VCFXv7XN3Be+4UzrO5gd271kdIqKvqTV1c4RPf9T4tYbmh8CjyjFRa//u+zqHsx5qPCRR4"},{"Add":"gE5Zi0P7AZhG9WnG+PufI6ha2D6ObRfqd2ewP5AAAAAwEAAQAAAQAdELqhI/RsSpO45eFR"},{"Add":"9hcZtnrm8WQzImrr9dfn1w9vMKSf++rHTuFIQvi48Q10ZiOGH1bbvlPAIVOqdjAPtnyzJR"},{"Add":"HhzmyjhjasJlk30zj+kod0kz63HzSMT9EfsYNfmYoCyMYFCKz52EU3xc87Vhi74XmZz0D0"},{"Add":"CgIj6TyZftmzC4YJCiwwU8K+29nxBhcbFRxpgwAksFL6PCSQsPl4y7yvXGcX+7lpZD8547"},{"Add":"v58q3jIkH1g2tBOusIuaiphDDStVJhVdKA55Z0Kju2kvCqsRIlf1efrq43blRgJFFFCxNZ"},{"Add":"8Cpolt4lOHhg+o3ucjILlCOgjDV8dB21YLxmgN5q+xFNAAAAgQC1P+eLUkHDFXnleCEVrW"},{"Add":"xL/DFxEyneLQz3IawGdw7cyAb7vxsYrGUvbVUFkxeiv397pDHLZ5U+t5cOYDBZ7G43Mt2g"},{"Add":"YfWBuRNvYhHA9Sdf38m5qPA6XCvm51f+FxInwd/kwRKH01RHJuRGsl/4Apu4DqVob8y00V"},{"Add":"WTYyV6JBNDkQAAAIEA322lj7ZJXfK/oLhMM/RS+DvaMea1g/q43mdRJFQQso4XRCL6IIVn"},{"Add":"oZXFeOxrMIRByVZBw+FSeB6OayWcZMySpJQBo70GdJOc3pJb3js0T+P2XA9+/jwXS58K9a"},{"Add":"+IkgLkv9XkfxNGNKyPEEzXC8QQzvjs1LbmO59VLko8ypwHq/cAAACBANQqaULI0qdwa0vm"},{"Add":"d3Ae1+k3YLZ0kapSQGVIMT2lkrhKV35tj7HIFpUPa4vitHzcUwtjYhqFezVF+JyPbJ/Fsp"},{"Add":"XmEc0g1fFnQp5/SkUwoN2zm8Up52GBelkq2Jk57mOMzWO0QzzNuNV/feJk02b2aE8rrAqP"},{"Add":"QR+u0AypRPmzHnOPAAAAEXJvb3RAMTQwOTExNTQ5NDBkAQ=="},{"Add":"-----END OPENSSH PRIVATE KEY-----\";"},{"Add":""},{"Add":" #[test]"},{"Add":" fn test_decode_ed25519_secret_key() {"},{"Add":" extern crate env_logger;"},{"Add":" env_logger::try_init().unwrap_or(());"},{"Add":" decode_secret_key(ED25519_KEY, Some(b\"blabla\")).unwrap();"},{"Add":" }"},{"Add":""},{"Add":" #[test]"},{"Add":" fn test_decode_rsa_secret_key() {"},{"Add":" extern crate env_logger;"},{"Add":" env_logger::try_init().unwrap_or(());"},{"Add":" decode_secret_key(RSA_KEY, None).unwrap();"},{"Add":" }"},{"Add":""},{"Add":" #[test]"},{"Add":" fn test_fingerprint() {"},{"Add":" let key = parse_public_key_base64("},{"Add":" \"AAAAC3NzaC1lZDI1NTE5AAAAILagOJFgwaMNhBWQINinKOXmqS4Gh5NgxgriXwdOoINJ\","},{"Add":" )"},{"Add":" .unwrap();"},{"Add":" assert_eq!("},{"Add":" key.fingerprint(),"},{"Add":" \"ldyiXa1JQakitNU5tErauu8DvWQ1dZ7aXu+rm7KQuog\""},{"Add":" );"},{"Add":" }"},{"Add":""},{"Add":" #[test]"},{"Add":" fn test_check_known_hosts() {"},{"Add":" env_logger::try_init().unwrap_or(());"},{"Add":" let dir = tempdir::TempDir::new(\"thrussh\").unwrap();"},{"Add":" let path = dir.path().join(\"known_hosts\");"},{"Add":" {"},{"Add":" let mut f = File::create(&path).unwrap();"},{"Add":" f.write(b\"[localhost]:13265 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJdD7y3aLq454yWBdwLWbieU1ebz9/cu7/QEXn9OIeZJ\\n#pijul.org,37.120.161.53 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA6rWI3G2sz07DnfFlrouTcysQlj2P+jpNSOEWD9OJ3X\\npijul.org,37.120.161.53 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA6rWI3G1sz07DnfFlrouTcysQlj2P+jpNSOEWD9OJ3X\\n\").unwrap();"},{"Add":" }"},{"Add":""},{"Add":" // Valid key, non-standard port."},{"Add":" let host = \"localhost\";"},{"Add":" let port = 13265;"},{"Add":" let hostkey = parse_public_key_base64("},{"Add":" \"AAAAC3NzaC1lZDI1NTE5AAAAIJdD7y3aLq454yWBdwLWbieU1ebz9/cu7/QEXn9OIeZJ\","},{"Add":" )"},{"Add":" .unwrap();"},{"Add":" assert!(check_known_hosts_path(host, port, &hostkey, &path).unwrap());"},{"Add":""},{"Add":" // Valid key, several hosts, port 22"},{"Add":" let host = \"pijul.org\";"},{"Add":" let port = 22;"},{"Add":" let hostkey = parse_public_key_base64("},{"Add":" \"AAAAC3NzaC1lZDI1NTE5AAAAIA6rWI3G1sz07DnfFlrouTcysQlj2P+jpNSOEWD9OJ3X\","},{"Add":" )"},{"Add":" .unwrap();"},{"Add":" assert!(check_known_hosts_path(host, port, &hostkey, &path).unwrap());"},{"Add":""},{"Add":" // Now with the key in a comment above, check that it's not recognized"},{"Add":" let host = \"pijul.org\";"},{"Add":" let port = 22;"},{"Add":" let hostkey = parse_public_key_base64("},{"Add":" \"AAAAC3NzaC1lZDI1NTE5AAAAIA6rWI3G2sz07DnfFlrouTcysQlj2P+jpNSOEWD9OJ3X\","},{"Add":" )"},{"Add":" .unwrap();"},{"Add":" assert!(check_known_hosts_path(host, port, &hostkey, &path).is_err());"},{"Add":" }"},{"Add":""},{"Add":" #[test]"},{"Add":" fn test_srhb() {"},{"Add":" env_logger::try_init().unwrap_or(());"},{"Add":" let key = \"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\";"},{"Add":""},{"Add":" parse_public_key_base64(key).unwrap();"},{"Add":" }"},{"Add":""},{"Add":" #[test]"},{"Add":" fn test_nikao() {"},{"Add":" env_logger::try_init().unwrap_or(());"},{"Add":" let key = \"-----BEGIN RSA PRIVATE KEY-----"},{"Add":"MIIEpQIBAAKCAQEAw/FG8YLVoXhsUVZcWaY7iZekMxQ2TAfSVh0LTnRuzsumeLhb"},{"Add":"0fh4scIt4C4MLwpGe/u3vj290C28jLkOtysqnIpB4iBUrFNRmEz2YuvjOzkFE8Ju"},{"Add":"0l1VrTZ9APhpLZvzT2N7YmTXcLz1yWopCe4KqTHczEP4lfkothxEoACXMaxezt5o"},{"Add":"wIYfagDaaH6jXJgJk1SQ5VYrROVpDjjX8/Zg01H1faFQUikYx0M8EwL1fY5B80Hd"},{"Add":"6DYSok8kUZGfkZT8HQ54DBgocjSs449CVqkVoQC1aDB+LZpMWovY15q7hFgfQmYD"},{"Add":"qulbZRWDxxogS6ui/zUR2IpX7wpQMKKkBS1qdQIDAQABAoIBAQCodpcCKfS2gSzP"},{"Add":"uapowY1KvP/FkskkEU18EDiaWWyzi1AzVn5LRo+udT6wEacUAoebLU5K2BaMF+aW"},{"Add":"Lr1CKnDWaeA/JIDoMDJk+TaU0i5pyppc5LwXTXvOEpzi6rCzL/O++88nR4AbQ7sm"},{"Add":"Uom6KdksotwtGvttJe0ktaUi058qaoFZbels5Fwk5bM5GHDdV6De8uQjSfYV813P"},{"Add":"tM/6A5rRVBjC5uY0ocBHxPXkqAdHfJuVk0uApjLrbm6k0M2dg1X5oyhDOf7ZIzAg"},{"Add":"QGPgvtsVZkQlyrD1OoCMPwzgULPXTe8SktaP9EGvKdMf5kQOqUstqfyx+E4OZa0A"},{"Add":"T82weLjBAoGBAOUChhaLQShL3Vsml/Nuhhw5LsxU7Li34QWM6P5AH0HMtsSncH8X"},{"Add":"ULYcUKGbCmmMkVb7GtsrHa4ozy0fjq0Iq9cgufolytlvC0t1vKRsOY6poC2MQgaZ"},{"Add":"bqRa05IKwhZdHTr9SUwB/ngtVNWRzzbFKLkn2W5oCpQGStAKqz3LbKstAoGBANsJ"},{"Add":"EyrXPbWbG+QWzerCIi6shQl+vzOd3cxqWyWJVaZglCXtlyySV2eKWRW7TcVvaXQr"},{"Add":"Nzm/99GNnux3pUCY6szy+9eevjFLLHbd+knzCZWKTZiWZWr503h/ztfFwrMzhoAh"},{"Add":"z4nukD/OETugPvtG01c2sxZb/F8LH9KORznhlSlpAoGBAJnqg1J9j3JU4tZTbwcG"},{"Add":"fo5ThHeCkINp2owPc70GPbvMqf4sBzjz46QyDaM//9SGzFwocplhNhaKiQvrzMnR"},{"Add":"LSVucnCEm/xdXLr/y6S6tEiFCwnx3aJv1uQRw2bBYkcDmBTAjVXPdUcyOHU+BYXr"},{"Add":"Jv6ioMlKlel8/SUsNoFWypeVAoGAXhr3Bjf1xlm+0O9PRyZjQ0RR4DN5eHbB/XpQ"},{"Add":"cL8hclsaK3V5tuek79JL1f9kOYhVeVi74G7uzTSYbCY3dJp+ftGCjDAirNEMaIGU"},{"Add":"cEMgAgSqs/0h06VESwg2WRQZQ57GkbR1E2DQzuj9FG4TwSe700OoC9o3gqon4PHJ"},{"Add":"/j9CM8kCgYEAtPJf3xaeqtbiVVzpPAGcuPyajTzU0QHPrXEl8zr/+iSK4Thc1K+c"},{"Add":"b9sblB+ssEUQD5IQkhTWcsXdslINQeL77WhIMZ2vBAH8Hcin4jgcLmwUZfpfnnFs"},{"Add":"QaChXiDsryJZwsRnruvMRX9nedtqHrgnIsJLTXjppIhGhq5Kg4RQfOU="},{"Add":"-----END RSA PRIVATE KEY-----"},{"Add":"\";"},{"Add":" decode_secret_key(key, None).unwrap();"},{"Add":" }"},{"Add":""},{"Add":" pub const PKCS8_RSA: &'static str = \"-----BEGIN RSA PRIVATE KEY-----"},{"Add":"MIIEpAIBAAKCAQEAwBGetHjW+3bDQpVktdemnk7JXgu1NBWUM+ysifYLDBvJ9ttX"},{"Add":"GNZSyQKA4v/dNr0FhAJ8I9BuOTjYCy1YfKylhl5D/DiSSXFPsQzERMmGgAlYvU2U"},{"Add":"+FTxpBC11EZg69CPVMKKevfoUD+PZA5zB7Hc1dXFfwqFc5249SdbAwD39VTbrOUI"},{"Add":"WECvWZs6/ucQxHHXP2O9qxWqhzb/ddOnqsDHUNoeceiNiCf2anNymovrIMjAqq1R"},{"Add":"t2UP3f06/Zt7Jx5AxKqS4seFkaDlMAK8JkEDuMDOdKI36raHkKanfx8CnGMSNjFQ"},{"Add":"QtvnpD8VSGkDTJN3Qs14vj2wvS477BQXkBKN1QIDAQABAoIBABb6xLMw9f+2ENyJ"},{"Add":"hTggagXsxTjkS7TElCu2OFp1PpMfTAWl7oDBO7xi+UqvdCcVbHCD35hlWpqsC2Ui"},{"Add":"8sBP46n040ts9UumK/Ox5FWaiuYMuDpF6vnfJ94KRcb0+KmeFVf9wpW9zWS0hhJh"},{"Add":"jC+yfwpyfiOZ/ad8imGCaOguGHyYiiwbRf381T/1FlaOGSae88h+O8SKTG1Oahq4"},{"Add":"0HZ/KBQf9pij0mfVQhYBzsNu2JsHNx9+DwJkrXT7K9SHBpiBAKisTTCnQmS89GtE"},{"Add":"6J2+bq96WgugiM7X6OPnmBmE/q1TgV18OhT+rlvvNi5/n8Z1ag5Xlg1Rtq/bxByP"},{"Add":"CeIVHsECgYEA9dX+LQdv/Mg/VGIos2LbpJUhJDj0XWnTRq9Kk2tVzr+9aL5VikEb"},{"Add":"09UPIEa2ToL6LjlkDOnyqIMd/WY1W0+9Zf1ttg43S/6Rvv1W8YQde0Nc7QTcuZ1K"},{"Add":"9jSSP9hzsa3KZtx0fCtvVHm+ac9fP6u80tqumbiD2F0cnCZcSxOb4+UCgYEAyAKJ"},{"Add":"70nNKegH4rTCStAqR7WGAsdPE3hBsC814jguplCpb4TwID+U78Xxu0DQF8WtVJ10"},{"Add":"SJuR0R2q4L9uYWpo0MxdawSK5s9Am27MtJL0mkFQX0QiM7hSZ3oqimsdUdXwxCGg"},{"Add":"oktxCUUHDIPJNVd4Xjg0JTh4UZT6WK9hl1zLQzECgYEAiZRCFGc2KCzVLF9m0cXA"},{"Add":"kGIZUxFAyMqBv+w3+zq1oegyk1z5uE7pyOpS9cg9HME2TAo4UPXYpLAEZ5z8vWZp"},{"Add":"45sp/BoGnlQQsudK8gzzBtnTNp5i/MnnetQ/CNYVIVnWjSxRUHBqdMdRZhv0/Uga"},{"Add":"e5KA5myZ9MtfSJA7VJTbyHUCgYBCcS13M1IXaMAt3JRqm+pftfqVs7YeJqXTrGs/"},{"Add":"AiDlGQigRk4quFR2rpAV/3rhWsawxDmb4So4iJ16Wb2GWP4G1sz1vyWRdSnmOJGC"},{"Add":"LwtYrvfPHegqvEGLpHa7UsgDpol77hvZriwXwzmLO8A8mxkeW5dfAfpeR5o+mcxW"},{"Add":"pvnTEQKBgQCKx6Ln0ku6jDyuDzA9xV2/PET5D75X61R2yhdxi8zurY/5Qon3OWzk"},{"Add":"jn/nHT3AZghGngOnzyv9wPMKt9BTHyTB6DlB6bRVLDkmNqZh5Wi8U1/IjyNYI0t2"},{"Add":"xV/JrzLAwPoKk3bkqys3bUmgo6DxVC/6RmMwPQ0rmpw78kOgEej90g=="},{"Add":"-----END RSA PRIVATE KEY-----"},{"Add":"\";"},{"Add":""},{"Add":" #[test]"},{"Add":" fn test_loewenheim() {"},{"Add":" env_logger::try_init().unwrap_or(());"},{"Add":" let key = \"-----BEGIN RSA PRIVATE KEY-----"},{"Add":"Proc-Type: 4,ENCRYPTED"},{"Add":"DEK-Info: AES-128-CBC,80E4FCAD049EE007CCE1C65D52CDB87A"},{"Add":""},{"Add":"ZKBKtex8+DA/d08TTPp4vY8RV+r+1nUC1La+r0dSiXsfunRNDPcYhHbyA/Fdr9kQ"},{"Add":"+d1/E3cEb0k2nq7xYyMzy8hpNp/uHu7UfllGdaBusiPjHR+feg6AQfbM0FWpdGzo"},{"Add":"9l/Vho5Ocw8abQq1Q9aPW5QQXBURC7HtCQXbpuYjUAQBeea1LzPCw6UIF80GUUkY"},{"Add":"1AycXxVfx1AeURAKTZR4hsxC5pqI4yhAvVNXxP+tTTa9NE8lOP0yqVNurfIqyAnp"},{"Add":"5ELMwNdHXZyUcT+EH5PsC69ocQgEZqLs0chvke62woMOjeSpsW5cIjGohW9lOD1f"},{"Add":"nJkECVZ50kE0SDvcL4Y338tHwMt7wdwdj1dkAWSUjAJT4ShjqV/TzaLAiNAyRxLl"},{"Add":"cm3mAccaFIIBZG/bPLGI0B5+mf9VExXGJrbGlvURhtE3nwmjLg1vT8lVfqbyL3a+"},{"Add":"0tFvmDYn71L97t/3hcD2tVnKLv9g8+/OCsUAk3+/0eS7D6GpmlOMRHdLLUHc4SOm"},{"Add":"bIDT/dE6MjsCSm7n/JkTb8P+Ta1Hp94dUnX4pfjzZ+O8V1H8wv7QW5KsuJhJ8cn4"},{"Add":"eS3BEgNH1I4FCCjLsZdWve9ehV3/19WXh+BF4WXFq9b3plmfJgTiZslvjy4dgThm"},{"Add":"OhEK44+fN1UhzguofxTR4Maz7lcehQxGAxp14hf1EnaAEt3LVjEPEShgK5dx1Ftu"},{"Add":"LWFz9nR4vZcMsaiszElrevqMhPQHXY7cnWqBenkMfkdcQDoZjKvV86K98kBIDMu+"},{"Add":"kf855vqRF8b2n/6HPdm3eqFh/F410nSB0bBSglUfyOZH1nS+cs79RQZEF9fNUmpH"},{"Add":"EPQtQ/PALohicj9Vh7rRaMKpsORdC8/Ahh20s01xL6siZ334ka3BLYT94UG796/C"},{"Add":"4K1S2kPdUP8POJ2HhaK2l6qaG8tcEX7HbwwZeKiEHVNvWuIGQO9TiDONLycp9x4y"},{"Add":"kNM3sv2pI7vEhs7d2NapWgNha1RcTSv0CQ6Th/qhGo73LBpVmKwombVImHAyMGAE"},{"Add":"aVF32OycVd9c9tDgW5KdhWedbeaxD6qkSs0no71083kYIS7c6iC1R3ZeufEkMhmx"},{"Add":"dwrciWTJ+ZAk6rS975onKz6mo/4PytcCY7Df/6xUxHF3iJCnuK8hNpLdJcdOiqEK"},{"Add":"zj/d5YGyw3J2r+NrlV1gs3FyvR3eMCWWH2gpIQISBpnEANY40PxA/ogH+nCUvI/O"},{"Add":"n8m437ZeLTg6lnPqsE4nlk2hUEwRdy/SVaQURbn7YlcYIt0e81r5sBXb4MXkLrf0"},{"Add":"XRWmpSggdcaaMuXi7nVSdkgCMjGP7epS7HsfP46OrTtJLHn5LxvdOEaW53nPOVQg"},{"Add":"/PlVfDbwWl8adE3i3PDQOw9jhYXnYS3sv4R8M8y2GYEXbINrTJyUGrlNggKFS6oh"},{"Add":"Hjgt0gsM2N/D8vBrQwnRtyymRnFd4dXFEYKAyt+vk0sa36eLfl0z6bWzIchkJbdu"},{"Add":"raMODVc+NiJE0Qe6bwAi4HSpJ0qw2lKwVHYB8cdnNVv13acApod326/9itdbb3lt"},{"Add":"KJaj7gc0n6gmKY6r0/Ddufy1JZ6eihBCSJ64RARBXeg2rZpyT+xxhMEZLK5meOeR"},{"Add":"-----END RSA PRIVATE KEY-----"},{"Add":"\";"},{"Add":" let key = decode_secret_key(key, Some(b\"passphrase\")).unwrap();"},{"Add":" let public = key.clone_public_key();"},{"Add":" let buf = b\"blabla\";"},{"Add":" let sig = key.sign_detached(buf).unwrap();"},{"Add":" assert!(public.verify_detached(buf, sig.as_ref()));"},{"Add":" }"},{"Add":""},{"Add":" #[test]"},{"Add":" fn test_o01eg() {"},{"Add":" env_logger::try_init().unwrap_or(());"},{"Add":""},{"Add":" let key = \"-----BEGIN RSA PRIVATE KEY-----"},{"Add":"Proc-Type: 4,ENCRYPTED"},{"Add":"DEK-Info: AES-128-CBC,EA77308AAF46981303D8C44D548D097E"},{"Add":""},{"Add":"QR18hXmAgGehm1QMMYGF34PAtBpTj+8/ZPFx2zZxir7pzDpfYoNAIf/fzLsW1ruG"},{"Add":"0xo/ZK/T3/TpMgjmLsCR6q+KU4jmCcCqWQIGWYJt9ljFI5y/CXr5uqP3DKcqtdxQ"},{"Add":"fbBAfXJ8ITF+Tj0Cljm2S1KYHor+mkil5Lf/ZNiHxcLfoI3xRnpd+2cemN9Ly9eY"},{"Add":"HNTbeWbLosfjwdfPJNWFNV5flm/j49klx/UhXhr5HNFNgp/MlTrvkH4rBt4wYPpE"},{"Add":"cZBykt4Fo1KGl95pT22inGxQEXVHF1Cfzrf5doYWxjiRTmfhpPSz/Tt0ev3+jIb8"},{"Add":"Htx6N8tNBoVxwCiQb7jj3XNim2OGohIp5vgW9sh6RDfIvr1jphVOgCTFKSo37xk0"},{"Add":"156EoCVo3VcLf+p0/QitbUHR+RGW/PvUJV/wFR5ShYqjI+N2iPhkD24kftJ/MjPt"},{"Add":"AAwCm/GYoYjGDhIzQMB+FETZKU5kz23MQtZFbYjzkcI/RE87c4fkToekNCdQrsoZ"},{"Add":"wG0Ne2CxrwwEnipHCqT4qY+lZB9EbqQgbWOXJgxA7lfznBFjdSX7uDc/mnIt9Y6B"},{"Add":"MZRXH3PTfotHlHMe+Ypt5lfPBi/nruOl5wLo3L4kY5pUyqR0cXKNycIJZb/pJAnE"},{"Add":"ryIb59pZP7njvoHzRqnC9dycnTFW3geK5LU+4+JMUS32F636aorunRCl6IBmVQHL"},{"Add":"uZ+ue714fn/Sn6H4dw6IH1HMDG1hr8ozP4sNUCiAQ05LsjDMGTdrUsr2iBBpkQhu"},{"Add":"VhUDZy9g/5XF1EgiMbZahmqi5WaJ5K75ToINHb7RjOE7MEiuZ+RPpmYLE0HXyn9X"},{"Add":"HTx0ZGr022dDI6nkvUm6OvEwLUUmmGKRHKe0y1EdICGNV+HWqnlhGDbLWeMyUcIY"},{"Add":"M6Zh9Dw3WXD3kROf5MrJ6n9MDIXx9jy7nmBh7m6zKjBVIw94TE0dsRcWb0O1IoqS"},{"Add":"zLQ6ihno+KsQHDyMVLEUz1TuE52rIpBmqexDm3PdDfCgsNdBKP6QSTcoqcfHKeex"},{"Add":"K93FWgSlvFFQQAkJumJJ+B7ZWnK+2pdjdtWwTpflAKNqc8t//WmjWZzCtbhTHCXV"},{"Add":"1dnMk7azWltBAuXnjW+OqmuAzyh3ayKgqfW66mzSuyQNa1KqFhqpJxOG7IHvxVfQ"},{"Add":"kYeSpqODnL87Zd/dU8s0lOxz3/ymtjPMHlOZ/nHNqW90IIeUwWJKJ46Kv6zXqM1t"},{"Add":"MeD1lvysBbU9rmcUdop0D3MOgGpKkinR5gy4pUsARBiz4WhIm8muZFIObWes/GDS"},{"Add":"zmmkQRO1IcfXKAHbq/OdwbLBm4vM9nk8vPfszoEQCnfOSd7aWrLRjDR+q2RnzNzh"},{"Add":"K+fodaJ864JFIfB/A+aVviVWvBSt0eEbEawhTmNPerMrAQ8tRRhmNxqlDP4gOczi"},{"Add":"iKUmK5recsXk5us5Ik7peIR/f9GAghpoJkF0HrHio47SfABuK30pzcj62uNWGljS"},{"Add":"3d9UQLCepT6RiPFhks/lgimbtSoiJHql1H9Q/3q4MuO2PuG7FXzlTnui3zGw/Vvy"},{"Add":"br8gXU8KyiY9sZVbmplRPF+ar462zcI2kt0a18mr0vbrdqp2eMjb37QDbVBJ+rPE"},{"Add":"-----END RSA PRIVATE KEY-----"},{"Add":"\";"},{"Add":" decode_secret_key(key, Some(b\"12345\")).unwrap();"},{"Add":" }"},{"Add":" #[test]"},{"Add":" fn test_pkcs8() {"},{"Add":" env_logger::try_init().unwrap_or(());"},{"Add":" println!(\"test\");"},{"Add":" decode_secret_key(PKCS8_RSA, Some(b\"blabla\")).unwrap();"},{"Add":" }"},{"Add":""},{"Add":" const PKCS8_ENCRYPTED: &'static str = \"-----BEGIN ENCRYPTED PRIVATE KEY-----"},{"Add":"MIIFLTBXBgkqhkiG9w0BBQ0wSjApBgkqhkiG9w0BBQwwHAQITo1O0b8YrS0CAggA"},{"Add":"MAwGCCqGSIb3DQIJBQAwHQYJYIZIAWUDBAEqBBBtLH4T1KOfo1GGr7salhR8BIIE"},{"Add":"0KN9ednYwcTGSX3hg7fROhTw7JAJ1D4IdT1fsoGeNu2BFuIgF3cthGHe6S5zceI2"},{"Add":"MpkfwvHbsOlDFWMUIAb/VY8/iYxhNmd5J6NStMYRC9NC0fVzOmrJqE1wITqxtORx"},{"Add":"IkzqkgFUbaaiFFQPepsh5CvQfAgGEWV329SsTOKIgyTj97RxfZIKA+TR5J5g2dJY"},{"Add":"j346SvHhSxJ4Jc0asccgMb0HGh9UUDzDSql0OIdbnZW5KzYJPOx+aDqnpbz7UzY/"},{"Add":"P8N0w/pEiGmkdkNyvGsdttcjFpOWlLnLDhtLx8dDwi/sbEYHtpMzsYC9jPn3hnds"},{"Add":"TcotqjoSZ31O6rJD4z18FOQb4iZs3MohwEdDd9XKblTfYKM62aQJWH6cVQcg+1C7"},{"Add":"jX9l2wmyK26Tkkl5Qg/qSfzrCveke5muZgZkFwL0GCcgPJ8RixSB4GOdSMa/hAMU"},{"Add":"kvFAtoV2GluIgmSe1pG5cNMhurxM1dPPf4WnD+9hkFFSsMkTAuxDZIdDk3FA8zof"},{"Add":"Yhv0ZTfvT6V+vgH3Hv7Tqcxomy5Qr3tj5vvAqqDU6k7fC4FvkxDh2mG5ovWvc4Nb"},{"Add":"Xv8sed0LGpYitIOMldu6650LoZAqJVv5N4cAA2Edqldf7S2Iz1QnA/usXkQd4tLa"},{"Add":"Z80+sDNv9eCVkfaJ6kOVLk/ghLdXWJYRLenfQZtVUXrPkaPpNXgD0dlaTN8KuvML"},{"Add":"Uw/UGa+4ybnPsdVflI0YkJKbxouhp4iB4S5ACAwqHVmsH5GRnujf10qLoS7RjDAl"},{"Add":"o/wSHxdT9BECp7TT8ID65u2mlJvH13iJbktPczGXt07nBiBse6OxsClfBtHkRLzE"},{"Add":"QF6UMEXsJnIIMRfrZQnduC8FUOkfPOSXc8r9SeZ3GhfbV/DmWZvFPCpjzKYPsM5+"},{"Add":"N8Bw/iZ7NIH4xzNOgwdp5BzjH9hRtCt4sUKVVlWfEDtTnkHNOusQGKu7HkBF87YZ"},{"Add":"RN/Nd3gvHob668JOcGchcOzcsqsgzhGMD8+G9T9oZkFCYtwUXQU2XjMN0R4VtQgZ"},{"Add":"rAxWyQau9xXMGyDC67gQ5xSn+oqMK0HmoW8jh2LG/cUowHFAkUxdzGadnjGhMOI2"},{"Add":"zwNJPIjF93eDF/+zW5E1l0iGdiYyHkJbWSvcCuvTwma9FIDB45vOh5mSR+YjjSM5"},{"Add":"nq3THSWNi7Cxqz12Q1+i9pz92T2myYKBBtu1WDh+2KOn5DUkfEadY5SsIu/Rb7ub"},{"Add":"5FBihk2RN3y/iZk+36I69HgGg1OElYjps3D+A9AjVby10zxxLAz8U28YqJZm4wA/"},{"Add":"T0HLxBiVw+rsHmLP79KvsT2+b4Diqih+VTXouPWC/W+lELYKSlqnJCat77IxgM9e"},{"Add":"YIhzD47OgWl33GJ/R10+RDoDvY4koYE+V5NLglEhbwjloo9Ryv5ywBJNS7mfXMsK"},{"Add":"/uf+l2AscZTZ1mhtL38efTQCIRjyFHc3V31DI0UdETADi+/Omz+bXu0D5VvX+7c6"},{"Add":"b1iVZKpJw8KUjzeUV8yOZhvGu3LrQbhkTPVYL555iP1KN0Eya88ra+FUKMwLgjYr"},{"Add":"JkUx4iad4dTsGPodwEP/Y9oX/Qk3ZQr+REZ8lg6IBoKKqqrQeBJ9gkm1jfKE6Xkc"},{"Add":"Cog3JMeTrb3LiPHgN6gU2P30MRp6L1j1J/MtlOAr5rux"},{"Add":"-----END ENCRYPTED PRIVATE KEY-----\";"},{"Add":""},{"Add":" #[test]"},{"Add":" fn test_gpg() {"},{"Add":" env_logger::try_init().unwrap_or(());"},{"Add":" let algo = [115, 115, 104, 45, 114, 115, 97];"},{"Add":" let key = ["},{"Add":" 0, 0, 0, 7, 115, 115, 104, 45, 114, 115, 97, 0, 0, 0, 3, 1, 0, 1, 0, 0, 1, 129, 0, 163,"},{"Add":" 72, 59, 242, 4, 248, 139, 217, 57, 126, 18, 195, 170, 3, 94, 154, 9, 150, 89, 171, 236,"},{"Add":" 192, 178, 185, 149, 73, 210, 121, 95, 126, 225, 209, 199, 208, 89, 130, 175, 229, 163,"},{"Add":" 102, 176, 155, 69, 199, 155, 71, 214, 170, 61, 202, 2, 207, 66, 198, 147, 65, 10, 176,"},{"Add":" 20, 105, 197, 133, 101, 126, 193, 252, 245, 254, 182, 14, 250, 118, 113, 18, 220, 38,"},{"Add":" 220, 75, 247, 50, 163, 39, 2, 61, 62, 28, 79, 199, 238, 189, 33, 194, 190, 22, 87, 91,"},{"Add":" 1, 215, 115, 99, 138, 124, 197, 127, 237, 228, 170, 42, 25, 117, 1, 106, 36, 54, 163,"},{"Add":" 163, 207, 129, 133, 133, 28, 185, 170, 217, 12, 37, 113, 181, 182, 180, 178, 23, 198,"},{"Add":" 233, 31, 214, 226, 114, 146, 74, 205, 177, 82, 232, 238, 165, 44, 5, 250, 150, 236, 45,"},{"Add":" 30, 189, 254, 118, 55, 154, 21, 20, 184, 235, 223, 5, 20, 132, 249, 147, 179, 88, 146,"},{"Add":" 6, 100, 229, 200, 221, 157, 135, 203, 57, 204, 43, 27, 58, 85, 54, 219, 138, 18, 37,"},{"Add":" 80, 106, 182, 95, 124, 140, 90, 29, 48, 193, 112, 19, 53, 84, 201, 153, 52, 249, 15,"},{"Add":" 41, 5, 11, 147, 18, 8, 27, 31, 114, 45, 224, 118, 111, 176, 86, 88, 23, 150, 184, 252,"},{"Add":" 128, 52, 228, 90, 30, 34, 135, 234, 123, 28, 239, 90, 202, 239, 188, 175, 8, 141, 80,"},{"Add":" 59, 194, 80, 43, 205, 34, 137, 45, 140, 244, 181, 182, 229, 247, 94, 216, 115, 173,"},{"Add":" 107, 184, 170, 102, 78, 249, 4, 186, 234, 169, 148, 98, 128, 33, 115, 232, 126, 84, 76,"},{"Add":" 222, 145, 90, 58, 1, 4, 163, 243, 93, 215, 154, 205, 152, 178, 109, 241, 197, 82, 148,"},{"Add":" 222, 78, 44, 193, 248, 212, 157, 118, 217, 75, 211, 23, 229, 121, 28, 180, 208, 173,"},{"Add":" 204, 14, 111, 226, 25, 163, 220, 95, 78, 175, 189, 168, 67, 159, 179, 176, 200, 150,"},{"Add":" 202, 248, 174, 109, 25, 89, 176, 220, 226, 208, 187, 84, 169, 157, 14, 88, 217, 221,"},{"Add":" 117, 254, 51, 45, 93, 184, 80, 225, 158, 29, 76, 38, 69, 72, 71, 76, 50, 191, 210, 95,"},{"Add":" 152, 175, 26, 207, 91, 7,"},{"Add":" ];"},{"Add":" debug!(\"algo = {:?}\", std::str::from_utf8(&algo));"},{"Add":" key::PublicKey::parse(&algo, &key).unwrap();"},{"Add":" }"},{"Add":""},{"Add":" #[test]"},{"Add":" fn test_pkcs8_encrypted() {"},{"Add":" env_logger::try_init().unwrap_or(());"},{"Add":" println!(\"test\");"},{"Add":" decode_secret_key(PKCS8_ENCRYPTED, Some(b\"blabla\")).unwrap();"},{"Add":" }"},{"Add":""},{"Add":" fn test_client_agent(key: key::KeyPair) {"},{"Add":" env_logger::try_init().unwrap_or(());"},{"Add":" use std::process::{Command, Stdio};"},{"Add":" let dir = tempdir::TempDir::new(\"thrussh\").unwrap();"},{"Add":" let agent_path = dir.path().join(\"agent\");"},{"Add":" let mut agent = Command::new(\"ssh-agent\")"},{"Add":" .arg(\"-a\")"},{"Add":" .arg(&agent_path)"},{"Add":" .arg(\"-D\")"},{"Add":" .stdout(Stdio::null())"},{"Add":" .stderr(Stdio::null())"},{"Add":" .spawn()"},{"Add":" .expect(\"failed to execute process\");"},{"Add":" std::thread::sleep(std::time::Duration::from_millis(10));"},{"Add":" let mut rt = tokio::runtime::Runtime::new().unwrap();"},{"Add":" rt.block_on(async move {"},{"Add":" let public = key.clone_public_key();"},{"Add":" let stream = tokio::net::UnixStream::connect(&agent_path).await?;"},{"Add":" let mut client = agent::client::AgentClient::connect(stream);"},{"Add":" client.add_identity(&key, &[]).await?;"},{"Add":" client.request_identities().await?;"},{"Add":" let buf = cryptovec::CryptoVec::from_slice(b\"blabla\");"},{"Add":" let len = buf.len();"},{"Add":" let (_, buf) = client.sign_request(&public, buf).await?;"},{"Add":" let (a, b) = buf.split_at(len);"},{"Add":" assert!(public.verify_detached(a, b));"},{"Add":" Ok::<(), anyhow::Error>(())"},{"Add":" })"},{"Add":" .unwrap();"},{"Add":" agent.kill().unwrap();"},{"Add":" agent.wait().unwrap();"},{"Add":" }"},{"Add":""},{"Add":" #[test]"},{"Add":" fn test_client_agent_ed25519() {"},{"Add":" let key = decode_secret_key(ED25519_KEY, Some(b\"blabla\")).unwrap();"},{"Add":" test_client_agent(key)"},{"Add":" }"},{"Add":""},{"Add":" #[test]"},{"Add":" fn test_client_agent_rsa() {"},{"Add":" let key = decode_secret_key(PKCS8_ENCRYPTED, Some(b\"blabla\")).unwrap();"},{"Add":" test_client_agent(key)"},{"Add":" }"},{"Add":""},{"Add":" #[test]"},{"Add":" fn test_client_agent_openssh_rsa() {"},{"Add":" let key = decode_secret_key(RSA_KEY, None).unwrap();"},{"Add":" test_client_agent(key)"},{"Add":" }"},{"Add":""},{"Add":" #[test]"},{"Add":" fn test_agent() {"},{"Add":" env_logger::try_init().unwrap_or(());"},{"Add":" let dir = tempdir::TempDir::new(\"thrussh\").unwrap();"},{"Add":" let agent_path = dir.path().join(\"agent\");"},{"Add":""},{"Add":" let mut core = tokio::runtime::Runtime::new().unwrap();"},{"Add":" use agent;"},{"Add":""},{"Add":" #[derive(Clone)]"},{"Add":" struct X {}"},{"Add":" impl agent::server::Agent for X {"},{"Add":" fn confirm("},{"Add":" self,"},{"Add":" _: std::sync::Arc,"},{"Add":" ) -> Box + Send + Unpin> {"},{"Add":" Box::new(futures::future::ready((self, true)))"},{"Add":" }"},{"Add":" }"},{"Add":" let agent_path_ = agent_path.clone();"},{"Add":" core.spawn(async move {"},{"Add":" let mut listener = tokio::net::UnixListener::bind(&agent_path_).unwrap();"},{"Add":""},{"Add":" agent::server::serve(listener.incoming(), X {}).await"},{"Add":" });"},{"Add":" let key = decode_secret_key(PKCS8_ENCRYPTED, Some(b\"blabla\")).unwrap();"},{"Add":" let public = key.clone_public_key();"},{"Add":" core.block_on(async move {"},{"Add":" let stream = tokio::net::UnixStream::connect(&agent_path).await?;"},{"Add":" let mut client = agent::client::AgentClient::connect(stream);"},{"Add":" client"},{"Add":" .add_identity(&key, &[agent::Constraint::KeyLifetime { seconds: 60 }])"},{"Add":" .await?;"},{"Add":" client.request_identities().await?;"},{"Add":" let buf = cryptovec::CryptoVec::from_slice(b\"blabla\");"},{"Add":" let len = buf.len();"},{"Add":" let (_, buf) = client.sign_request(&public, buf).await?;"},{"Add":" let (a, b) = buf.split_at(len);"},{"Add":" assert!(public.verify_detached(a, b));"},{"Add":" Ok::<(), anyhow::Error>(())"},{"Add":" })"},{"Add":" .unwrap()"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"key.rs","metadata":420},"context":[{"change":0,"pos":5805}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":"use crate::encoding::{Encoding, Reader};"},{"Add":"pub use crate::signature::*;"},{"Add":"use crate::Error;"},{"Add":"use cryptovec::CryptoVec;"},{"Add":"use openssl::pkey::{Private, Public};"},{"Add":""},{"Add":"/// Keys for elliptic curve Ed25519 cryptography."},{"Add":"pub mod ed25519 {"},{"Add":" pub use sodium::ed25519::{keypair, sign_detached, verify_detached, PublicKey, SecretKey};"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug, PartialEq, Eq, Copy, Clone)]"},{"Add":"/// Name of a public key algorithm."},{"Add":"pub struct Name(pub &'static str);"},{"Add":""},{"Add":"impl AsRef for Name {"},{"Add":" fn as_ref(&self) -> &str {"},{"Add":" self.0"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// The name of the Ed25519 algorithm for SSH."},{"Add":"pub const ED25519: Name = Name(\"ssh-ed25519\");"},{"Add":"/// The name of the ssh-sha2-512 algorithm for SSH."},{"Add":"pub const RSA_SHA2_512: Name = Name(\"rsa-sha2-512\");"},{"Add":"/// The name of the ssh-sha2-256 algorithm for SSH."},{"Add":"pub const RSA_SHA2_256: Name = Name(\"rsa-sha2-256\");"},{"Add":""},{"Add":"pub const SSH_RSA: Name = Name(\"ssh-rsa\");"},{"Add":""},{"Add":"impl Name {"},{"Add":" /// Base name of the private key file for a key name."},{"Add":" pub fn identity_file(&self) -> &'static str {"},{"Add":" match *self {"},{"Add":" ED25519 => \"id_ed25519\","},{"Add":" RSA_SHA2_512 => \"id_rsa\","},{"Add":" RSA_SHA2_256 => \"id_rsa\","},{"Add":" _ => unreachable!(),"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[doc(hidden)]"},{"Add":"pub trait Verify {"},{"Add":" fn verify_client_auth(&self, buffer: &[u8], sig: &[u8]) -> bool;"},{"Add":" fn verify_server_auth(&self, buffer: &[u8], sig: &[u8]) -> bool;"},{"Add":"}"},{"Add":""},{"Add":"/// The hash function used for hashing buffers."},{"Add":"#[derive(Eq, PartialEq, Clone, Copy, Debug, Hash, Serialize, Deserialize)]"},{"Add":"#[allow(non_camel_case_types)]"},{"Add":"pub enum SignatureHash {"},{"Add":" /// SHA2, 256 bits."},{"Add":" SHA2_256,"},{"Add":" /// SHA2, 512 bits."},{"Add":" SHA2_512,"},{"Add":" /// SHA1"},{"Add":" SHA1,"},{"Add":"}"},{"Add":""},{"Add":"impl SignatureHash {"},{"Add":" pub fn name(&self) -> Name {"},{"Add":" match *self {"},{"Add":" SignatureHash::SHA2_256 => RSA_SHA2_256,"},{"Add":" SignatureHash::SHA2_512 => RSA_SHA2_512,"},{"Add":" SignatureHash::SHA1 => SSH_RSA,"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" fn to_message_digest(&self) -> openssl::hash::MessageDigest {"},{"Add":" use openssl::hash::MessageDigest;"},{"Add":" match *self {"},{"Add":" SignatureHash::SHA2_256 => MessageDigest::sha256(),"},{"Add":" SignatureHash::SHA2_512 => MessageDigest::sha512(),"},{"Add":" SignatureHash::SHA1 => MessageDigest::sha1(),"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// Public key"},{"Add":"#[derive(Eq, PartialEq, Debug)]"},{"Add":"pub enum PublicKey {"},{"Add":" #[doc(hidden)]"},{"Add":" Ed25519(sodium::ed25519::PublicKey),"},{"Add":" #[doc(hidden)]"},{"Add":" RSA {"},{"Add":" key: OpenSSLPKey,"},{"Add":" hash: SignatureHash,"},{"Add":" },"},{"Add":"}"},{"Add":""},{"Add":"/// A public key from OpenSSL."},{"Add":"pub struct OpenSSLPKey(pub openssl::pkey::PKey);"},{"Add":""},{"Add":"use std::cmp::{Eq, PartialEq};"},{"Add":"impl PartialEq for OpenSSLPKey {"},{"Add":" fn eq(&self, b: &OpenSSLPKey) -> bool {"},{"Add":" self.0.public_eq(&b.0)"},{"Add":" }"},{"Add":"}"},{"Add":"impl Eq for OpenSSLPKey {}"},{"Add":"impl std::fmt::Debug for OpenSSLPKey {"},{"Add":" fn fmt(&self, f: &mut std::fmt::Formatter) -> std::fmt::Result {"},{"Add":" write!(f, \"OpenSSLPKey {{ (hidden) }}\")"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl PublicKey {"},{"Add":" /// Parse a public key in SSH format."},{"Add":" pub fn parse(algo: &[u8], pubkey: &[u8]) -> Result {"},{"Add":" match algo {"},{"Add":" b\"ssh-ed25519\" => {"},{"Add":" let mut p = pubkey.reader(0);"},{"Add":" let key_algo = p.read_string()?;"},{"Add":" let key_bytes = p.read_string()?;"},{"Add":" if key_algo != b\"ssh-ed25519\" || key_bytes.len() != sodium::ed25519::PUBLICKEY_BYTES"},{"Add":" {"},{"Add":" return Err(Error::CouldNotReadKey.into());"},{"Add":" }"},{"Add":" let mut p = sodium::ed25519::PublicKey {"},{"Add":" key: [0; sodium::ed25519::PUBLICKEY_BYTES],"},{"Add":" };"},{"Add":" p.key.clone_from_slice(key_bytes);"},{"Add":" Ok(PublicKey::Ed25519(p))"},{"Add":" }"},{"Add":" b\"ssh-rsa\" | b\"rsa-sha2-256\" | b\"rsa-sha2-512\" => {"},{"Add":" let mut p = pubkey.reader(0);"},{"Add":" let key_algo = p.read_string()?;"},{"Add":" debug!(\"{:?}\", std::str::from_utf8(key_algo));"},{"Add":" if key_algo != b\"ssh-rsa\""},{"Add":" && key_algo != b\"rsa-sha2-256\""},{"Add":" && key_algo != b\"rsa-sha2-512\""},{"Add":" {"},{"Add":" return Err(Error::CouldNotReadKey.into());"},{"Add":" }"},{"Add":" let key_e = p.read_string()?;"},{"Add":" let key_n = p.read_string()?;"},{"Add":" use openssl::bn::BigNum;"},{"Add":" use openssl::pkey::PKey;"},{"Add":" use openssl::rsa::Rsa;"},{"Add":" Ok(PublicKey::RSA {"},{"Add":" key: OpenSSLPKey(PKey::from_rsa(Rsa::from_public_components("},{"Add":" BigNum::from_slice(key_n)?,"},{"Add":" BigNum::from_slice(key_e)?,"},{"Add":" )?)?),"},{"Add":" hash: {"},{"Add":" if algo == b\"rsa-sha2-256\" {"},{"Add":" SignatureHash::SHA2_256"},{"Add":" } else if algo == b\"rsa-sha2-512\" {"},{"Add":" SignatureHash::SHA2_512"},{"Add":" } else {"},{"Add":" SignatureHash::SHA1"},{"Add":" }"},{"Add":" },"},{"Add":" })"},{"Add":" }"},{"Add":" _ => Err(Error::CouldNotReadKey.into()),"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Algorithm name for that key."},{"Add":" pub fn name(&self) -> &'static str {"},{"Add":" match *self {"},{"Add":" PublicKey::Ed25519(_) => ED25519.0,"},{"Add":" PublicKey::RSA { ref hash, .. } => hash.name().0,"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Verify a signature."},{"Add":" pub fn verify_detached(&self, buffer: &[u8], sig: &[u8]) -> bool {"},{"Add":" match self {"},{"Add":" &PublicKey::Ed25519(ref public) => {"},{"Add":" sodium::ed25519::verify_detached(&sig, buffer, &public)"},{"Add":" }"},{"Add":" &PublicKey::RSA { ref key, ref hash } => {"},{"Add":" use openssl::sign::*;"},{"Add":" let verify = || {"},{"Add":" let mut verifier = Verifier::new(hash.to_message_digest(), &key.0)?;"},{"Add":" verifier.update(buffer)?;"},{"Add":" verifier.verify(&sig)"},{"Add":" };"},{"Add":" verify().unwrap_or(false)"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Compute the key fingerprint, hashed with sha2-256."},{"Add":" pub fn fingerprint(&self) -> String {"},{"Add":" use super::PublicKeyBase64;"},{"Add":" let key = self.public_key_bytes();"},{"Add":" data_encoding::BASE64_NOPAD.encode(&openssl::sha::sha256(&key[..]))"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Verify for PublicKey {"},{"Add":" fn verify_client_auth(&self, buffer: &[u8], sig: &[u8]) -> bool {"},{"Add":" self.verify_detached(buffer, sig)"},{"Add":" }"},{"Add":" fn verify_server_auth(&self, buffer: &[u8], sig: &[u8]) -> bool {"},{"Add":" self.verify_detached(buffer, sig)"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// Public key exchange algorithms."},{"Add":"pub enum KeyPair {"},{"Add":" Ed25519(sodium::ed25519::SecretKey),"},{"Add":" RSA {"},{"Add":" key: openssl::rsa::Rsa,"},{"Add":" hash: SignatureHash,"},{"Add":" },"},{"Add":"}"},{"Add":""},{"Add":"impl std::fmt::Debug for KeyPair {"},{"Add":" fn fmt(&self, f: &mut std::fmt::Formatter) -> std::fmt::Result {"},{"Add":" match *self {"},{"Add":" KeyPair::Ed25519(ref key) => write!("},{"Add":" f,"},{"Add":" \"Ed25519 {{ public: {:?}, secret: (hidden) }}\","},{"Add":" &key.key[32..]"},{"Add":" ),"},{"Add":" KeyPair::RSA { .. } => write!(f, \"RSA {{ (hidden) }}\"),"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl<'b> crate::encoding::Bytes for &'b KeyPair {"},{"Add":" fn bytes(&self) -> &[u8] {"},{"Add":" self.name().as_bytes()"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl KeyPair {"},{"Add":" /// Copy the public key of this algorithm."},{"Add":" pub fn clone_public_key(&self) -> PublicKey {"},{"Add":" match self {"},{"Add":" &KeyPair::Ed25519(ref key) => {"},{"Add":" let mut public = sodium::ed25519::PublicKey { key: [0; 32] };"},{"Add":" public.key.clone_from_slice(&key.key[32..]);"},{"Add":" PublicKey::Ed25519(public)"},{"Add":" }"},{"Add":" &KeyPair::RSA { ref key, ref hash } => {"},{"Add":" use openssl::pkey::PKey;"},{"Add":" use openssl::rsa::Rsa;"},{"Add":" let key = Rsa::from_public_components("},{"Add":" key.n().to_owned().unwrap(),"},{"Add":" key.e().to_owned().unwrap(),"},{"Add":" )"},{"Add":" .unwrap();"},{"Add":" PublicKey::RSA {"},{"Add":" key: OpenSSLPKey(PKey::from_rsa(key).unwrap()),"},{"Add":" hash: hash.clone(),"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Name of this key algorithm."},{"Add":" pub fn name(&self) -> &'static str {"},{"Add":" match *self {"},{"Add":" KeyPair::Ed25519(_) => ED25519.0,"},{"Add":" KeyPair::RSA { ref hash, .. } => hash.name().0,"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Generate a key pair."},{"Add":" pub fn generate_ed25519() -> Option {"},{"Add":" let (public, secret) = sodium::ed25519::keypair();"},{"Add":" assert_eq!(&public.key, &secret.key[32..]);"},{"Add":" Some(KeyPair::Ed25519(secret))"},{"Add":" }"},{"Add":""},{"Add":" pub fn generate_rsa(bits: usize, hash: SignatureHash) -> Option {"},{"Add":" let key = openssl::rsa::Rsa::generate(bits as u32).ok()?;"},{"Add":" Some(KeyPair::RSA { key, hash })"},{"Add":" }"},{"Add":""},{"Add":" /// Sign a slice using this algorithm."},{"Add":" pub fn sign_detached(&self, to_sign: &[u8]) -> Result {"},{"Add":" match self {"},{"Add":" &KeyPair::Ed25519(ref secret) => Ok(Signature::Ed25519(SignatureBytes("},{"Add":" sodium::ed25519::sign_detached(to_sign.as_ref(), secret).0,"},{"Add":" ))),"},{"Add":" &KeyPair::RSA { ref key, ref hash } => Ok(Signature::RSA {"},{"Add":" bytes: rsa_signature(hash, key, to_sign.as_ref())?,"},{"Add":" hash: *hash,"},{"Add":" }),"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" #[doc(hidden)]"},{"Add":" /// This is used by the server to sign the initial DH kex"},{"Add":" /// message. Note: we are not signing the same kind of thing as in"},{"Add":" /// the function below, `add_self_signature`."},{"Add":" pub fn add_signature>("},{"Add":" &self,"},{"Add":" buffer: &mut CryptoVec,"},{"Add":" to_sign: H,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" match self {"},{"Add":" &KeyPair::Ed25519(ref secret) => {"},{"Add":" let signature = sodium::ed25519::sign_detached(to_sign.as_ref(), secret);"},{"Add":""},{"Add":" buffer.push_u32_be((ED25519.0.len() + signature.0.len() + 8) as u32);"},{"Add":" buffer.extend_ssh_string(ED25519.0.as_bytes());"},{"Add":" buffer.extend_ssh_string(&signature.0);"},{"Add":" }"},{"Add":" &KeyPair::RSA { ref key, ref hash } => {"},{"Add":" // https://tools.ietf.org/html/draft-rsa-dsa-sha2-256-02#section-2.2"},{"Add":" let signature = rsa_signature(hash, key, to_sign.as_ref())?;"},{"Add":" let name = hash.name();"},{"Add":" buffer.push_u32_be((name.0.len() + signature.len() + 8) as u32);"},{"Add":" buffer.extend_ssh_string(name.0.as_bytes());"},{"Add":" buffer.extend_ssh_string(&signature);"},{"Add":" }"},{"Add":" }"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" #[doc(hidden)]"},{"Add":" /// This is used by the client for authentication. Note: we are"},{"Add":" /// not signing the same kind of thing as in the above function,"},{"Add":" /// `add_signature`."},{"Add":" pub fn add_self_signature(&self, buffer: &mut CryptoVec) -> Result<(), anyhow::Error> {"},{"Add":" match self {"},{"Add":" &KeyPair::Ed25519(ref secret) => {"},{"Add":" let signature = sodium::ed25519::sign_detached(&buffer, secret);"},{"Add":" buffer.push_u32_be((ED25519.0.len() + signature.0.len() + 8) as u32);"},{"Add":" buffer.extend_ssh_string(ED25519.0.as_bytes());"},{"Add":" buffer.extend_ssh_string(&signature.0);"},{"Add":" }"},{"Add":" &KeyPair::RSA { ref key, ref hash } => {"},{"Add":" // https://tools.ietf.org/html/draft-rsa-dsa-sha2-256-02#section-2.2"},{"Add":" let signature = rsa_signature(hash, key, buffer)?;"},{"Add":" let name = hash.name();"},{"Add":" buffer.push_u32_be((name.0.len() + signature.len() + 8) as u32);"},{"Add":" buffer.extend_ssh_string(name.0.as_bytes());"},{"Add":" buffer.extend_ssh_string(&signature);"},{"Add":" }"},{"Add":" }"},{"Add":" Ok(())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"fn rsa_signature("},{"Add":" hash: &SignatureHash,"},{"Add":" key: &openssl::rsa::Rsa,"},{"Add":" b: &[u8],"},{"Add":") -> Result, anyhow::Error> {"},{"Add":" use openssl::pkey::*;"},{"Add":" use openssl::rsa::*;"},{"Add":" use openssl::sign::Signer;"},{"Add":" let pkey = PKey::from_rsa(Rsa::from_private_components("},{"Add":" key.n().to_owned()?,"},{"Add":" key.e().to_owned()?,"},{"Add":" key.d().to_owned()?,"},{"Add":" key.p().unwrap().to_owned()?,"},{"Add":" key.q().unwrap().to_owned()?,"},{"Add":" key.dmp1().unwrap().to_owned()?,"},{"Add":" key.dmq1().unwrap().to_owned()?,"},{"Add":" key.iqmp().unwrap().to_owned()?,"},{"Add":" )?)?;"},{"Add":" let mut signer = Signer::new(hash.to_message_digest(), &pkey)?;"},{"Add":" signer.update(b)?;"},{"Add":" Ok(signer.sign_to_vec()?)"},{"Add":"}"},{"Add":""},{"Add":"/// Parse a public key from a byte slice."},{"Add":"pub fn parse_public_key(p: &[u8]) -> Result {"},{"Add":" let mut pos = p.reader(0);"},{"Add":" let t = pos.read_string()?;"},{"Add":" if t == b\"ssh-ed25519\" {"},{"Add":" if let Ok(pubkey) = pos.read_string() {"},{"Add":" use sodium::ed25519;"},{"Add":" let mut p = ed25519::PublicKey {"},{"Add":" key: [0; ed25519::PUBLICKEY_BYTES],"},{"Add":" };"},{"Add":" p.key.clone_from_slice(pubkey);"},{"Add":" return Ok(PublicKey::Ed25519(p));"},{"Add":" }"},{"Add":" }"},{"Add":" if t == b\"ssh-rsa\" {"},{"Add":" let e = pos.read_string()?;"},{"Add":" let n = pos.read_string()?;"},{"Add":" use openssl::bn::*;"},{"Add":" use openssl::pkey::*;"},{"Add":" use openssl::rsa::*;"},{"Add":" return Ok(PublicKey::RSA {"},{"Add":" key: OpenSSLPKey(PKey::from_rsa(Rsa::from_public_components("},{"Add":" BigNum::from_slice(n)?,"},{"Add":" BigNum::from_slice(e)?,"},{"Add":" )?)?),"},{"Add":" hash: SignatureHash::SHA2_256,"},{"Add":" });"},{"Add":" }"},{"Add":" Err(Error::CouldNotReadKey.into())"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"format","metadata":1005},"context":[{"change":0,"pos":5805}],"contents":[]}},{"FileAdd":{"meta":{"basename":"pkcs8.rs","metadata":420},"context":[{"change":0,"pos":71328}],"contents":[{"Add":"use super::{pkcs_unpad, Encryption};"},{"Add":"use crate::key;"},{"Add":"use crate::key::SignatureHash;"},{"Add":"use crate::Error;"},{"Add":"use bit_vec::BitVec;"},{"Add":"use openssl::hash::MessageDigest;"},{"Add":"use openssl::pkey::Private;"},{"Add":"use openssl::rand::rand_bytes;"},{"Add":"use openssl::rsa::Rsa;"},{"Add":"use openssl::symm::{decrypt, encrypt, Cipher};"},{"Add":"use std;"},{"Add":"use std::borrow::Cow;"},{"Add":"use yasna;"},{"Add":"use yasna::BERReaderSeq;"},{"Add":""},{"Add":"const PBES2: &'static [u64] = &[1, 2, 840, 113549, 1, 5, 13];"},{"Add":"const PBKDF2: &'static [u64] = &[1, 2, 840, 113549, 1, 5, 12];"},{"Add":"const HMAC_SHA256: &'static [u64] = &[1, 2, 840, 113549, 2, 9];"},{"Add":"const AES256CBC: &'static [u64] = &[2, 16, 840, 1, 101, 3, 4, 1, 42];"},{"Add":"const ED25519: &'static [u64] = &[1, 3, 101, 112];"},{"Add":"const RSA: &'static [u64] = &[1, 2, 840, 113549, 1, 1, 1];"},{"Add":""},{"Add":"/// Decode a PKCS#8-encoded private key."},{"Add":"pub fn decode_pkcs8("},{"Add":" ciphertext: &[u8],"},{"Add":" password: Option<&[u8]>,"},{"Add":") -> Result {"},{"Add":" let secret = if let Some(pass) = password {"},{"Add":" // let mut sec = Vec::new();"},{"Add":" Cow::Owned(yasna::parse_der(&ciphertext, |reader| {"},{"Add":" reader.read_sequence(|reader| {"},{"Add":" // Encryption parameters"},{"Add":" let parameters = reader.next().read_sequence(|reader| {"},{"Add":" let oid = reader.next().read_oid()?;"},{"Add":" if oid.components().as_slice() == PBES2 {"},{"Add":" asn1_read_pbes2(reader)"},{"Add":" } else {"},{"Add":" Ok(Err(Error::UnknownAlgorithm(oid)).into())"},{"Add":" }"},{"Add":" })?;"},{"Add":" // Ciphertext"},{"Add":" let ciphertext = reader.next().read_bytes()?;"},{"Add":" Ok(parameters.map(|p| p.decrypt(pass, &ciphertext)))"},{"Add":" })"},{"Add":" })???)"},{"Add":" } else {"},{"Add":" Cow::Borrowed(ciphertext)"},{"Add":" };"},{"Add":" yasna::parse_der(&secret, |reader| {"},{"Add":" reader.read_sequence(|reader| {"},{"Add":" let version = reader.next().read_u64()?;"},{"Add":" if version == 0 {"},{"Add":" Ok(read_key_v0(reader))"},{"Add":" } else if version == 1 {"},{"Add":" Ok(read_key_v1(reader))"},{"Add":" } else {"},{"Add":" Ok(Err(Error::CouldNotReadKey.into()))"},{"Add":" }"},{"Add":" })"},{"Add":" })?"},{"Add":"}"},{"Add":""},{"Add":"fn asn1_read_pbes2("},{"Add":" reader: &mut yasna::BERReaderSeq,"},{"Add":") -> Result, yasna::ASN1Error> {"},{"Add":" reader.next().read_sequence(|reader| {"},{"Add":" // PBES2 has two components."},{"Add":" // 1. Key generation algorithm"},{"Add":" let keygen = reader.next().read_sequence(|reader| {"},{"Add":" let oid = reader.next().read_oid()?;"},{"Add":" if oid.components().as_slice() == PBKDF2 {"},{"Add":" asn1_read_pbkdf2(reader)"},{"Add":" } else {"},{"Add":" Ok(Err(Error::UnknownAlgorithm(oid)))"},{"Add":" }"},{"Add":" })?;"},{"Add":" // 2. Encryption algorithm."},{"Add":" let algorithm = reader.next().read_sequence(|reader| {"},{"Add":" let oid = reader.next().read_oid()?;"},{"Add":" if oid.components().as_slice() == AES256CBC {"},{"Add":" asn1_read_aes256cbc(reader)"},{"Add":" } else {"},{"Add":" Ok(Err(Error::UnknownAlgorithm(oid)))"},{"Add":" }"},{"Add":" })?;"},{"Add":" Ok(keygen.and_then(|keygen| algorithm.map(|algo| Algorithms::Pbes2(keygen, algo))))"},{"Add":" })"},{"Add":"}"},{"Add":""},{"Add":"fn asn1_read_pbkdf2("},{"Add":" reader: &mut yasna::BERReaderSeq,"},{"Add":") -> Result, yasna::ASN1Error> {"},{"Add":" reader.next().read_sequence(|reader| {"},{"Add":" let salt = reader.next().read_bytes()?;"},{"Add":" let rounds = reader.next().read_u64()?;"},{"Add":" let digest = reader.next().read_sequence(|reader| {"},{"Add":" let oid = reader.next().read_oid()?;"},{"Add":" if oid.components().as_slice() == HMAC_SHA256 {"},{"Add":" reader.next().read_null()?;"},{"Add":" Ok(Ok(MessageDigest::sha256()))"},{"Add":" } else {"},{"Add":" Ok(Err(Error::UnknownAlgorithm(oid)))"},{"Add":" }"},{"Add":" })?;"},{"Add":" Ok(digest.map(|digest| KeyDerivation::Pbkdf2 {"},{"Add":" salt,"},{"Add":" rounds,"},{"Add":" digest,"},{"Add":" }))"},{"Add":" })"},{"Add":"}"},{"Add":""},{"Add":"fn asn1_read_aes256cbc("},{"Add":" reader: &mut yasna::BERReaderSeq,"},{"Add":") -> Result, yasna::ASN1Error> {"},{"Add":" let iv = reader.next().read_bytes()?;"},{"Add":" let mut i = [0; 16];"},{"Add":" i.clone_from_slice(&iv);"},{"Add":" Ok(Ok(Encryption::Aes256Cbc(i)))"},{"Add":"}"},{"Add":""},{"Add":"fn write_key_v1(writer: &mut yasna::DERWriterSeq, secret: &key::ed25519::SecretKey) {"},{"Add":" writer.next().write_u32(1);"},{"Add":" // write OID"},{"Add":" writer.next().write_sequence(|writer| {"},{"Add":" writer"},{"Add":" .next()"},{"Add":" .write_oid(&ObjectIdentifier::from_slice(ED25519));"},{"Add":" });"},{"Add":" let seed = yasna::construct_der(|writer| writer.write_bytes(&secret.key));"},{"Add":" writer.next().write_bytes(&seed);"},{"Add":" writer"},{"Add":" .next()"},{"Add":" .write_tagged(yasna::Tag::context(1), |writer| {"},{"Add":" let public = &secret.key[32..];"},{"Add":" writer.write_bitvec(&BitVec::from_bytes(&public))"},{"Add":" })"},{"Add":"}"},{"Add":""},{"Add":"fn read_key_v1(reader: &mut BERReaderSeq) -> Result {"},{"Add":" let oid = reader"},{"Add":" .next()"},{"Add":" .read_sequence(|reader| reader.next().read_oid())?;"},{"Add":" if oid.components().as_slice() == ED25519 {"},{"Add":" use key::ed25519::{PublicKey, SecretKey};"},{"Add":" let secret = {"},{"Add":" let mut seed = SecretKey::new_zeroed();"},{"Add":" let s = yasna::parse_der(&reader.next().read_bytes()?, |reader| reader.read_bytes())?;"},{"Add":" clone(&s, &mut seed.key);"},{"Add":" seed"},{"Add":" };"},{"Add":" let _public = {"},{"Add":" let public = reader"},{"Add":" .next()"},{"Add":" .read_tagged(yasna::Tag::context(1), |reader| reader.read_bitvec())?"},{"Add":" .to_bytes();"},{"Add":" let mut p = PublicKey::new_zeroed();"},{"Add":" clone(&public, &mut p.key);"},{"Add":" p"},{"Add":" };"},{"Add":" Ok(key::KeyPair::Ed25519(secret))"},{"Add":" } else {"},{"Add":" Err(Error::CouldNotReadKey.into())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"fn write_key_v0(writer: &mut yasna::DERWriterSeq, key: &Rsa) {"},{"Add":" writer.next().write_u32(0);"},{"Add":" // write OID"},{"Add":" writer.next().write_sequence(|writer| {"},{"Add":" writer.next().write_oid(&ObjectIdentifier::from_slice(RSA));"},{"Add":" writer.next().write_null()"},{"Add":" });"},{"Add":" let bytes = yasna::construct_der(|writer| {"},{"Add":" writer.write_sequence(|writer| {"},{"Add":" writer.next().write_u32(0);"},{"Add":" use num_bigint::BigUint;"},{"Add":" writer"},{"Add":" .next()"},{"Add":" .write_biguint(&BigUint::from_bytes_be(&key.n().to_vec()));"},{"Add":" writer"},{"Add":" .next()"},{"Add":" .write_biguint(&BigUint::from_bytes_be(&key.e().to_vec()));"},{"Add":" writer"},{"Add":" .next()"},{"Add":" .write_biguint(&BigUint::from_bytes_be(&key.d().to_vec()));"},{"Add":" writer"},{"Add":" .next()"},{"Add":" .write_biguint(&BigUint::from_bytes_be(&key.p().unwrap().to_vec()));"},{"Add":" writer"},{"Add":" .next()"},{"Add":" .write_biguint(&BigUint::from_bytes_be(&key.q().unwrap().to_vec()));"},{"Add":" writer"},{"Add":" .next()"},{"Add":" .write_biguint(&BigUint::from_bytes_be(&key.dmp1().unwrap().to_vec()));"},{"Add":" writer"},{"Add":" .next()"},{"Add":" .write_biguint(&BigUint::from_bytes_be(&key.dmq1().unwrap().to_vec()));"},{"Add":" writer"},{"Add":" .next()"},{"Add":" .write_biguint(&BigUint::from_bytes_be(&key.iqmp().unwrap().to_vec()));"},{"Add":" })"},{"Add":" });"},{"Add":" writer.next().write_bytes(&bytes);"},{"Add":"}"},{"Add":""},{"Add":"fn read_key_v0(reader: &mut BERReaderSeq) -> Result {"},{"Add":" let oid = reader.next().read_sequence(|reader| {"},{"Add":" let oid = reader.next().read_oid()?;"},{"Add":" reader.next().read_null()?;"},{"Add":" Ok(oid)"},{"Add":" })?;"},{"Add":" if oid.components().as_slice() == RSA {"},{"Add":" let seq = &reader.next().read_bytes()?;"},{"Add":" let rsa: Result, anyhow::Error> = yasna::parse_der(seq, |reader| {"},{"Add":" reader.read_sequence(|reader| {"},{"Add":" let version = reader.next().read_u32()?;"},{"Add":" if version != 0 {"},{"Add":" return Ok(Err(Error::CouldNotReadKey.into()));"},{"Add":" }"},{"Add":" use openssl::bn::BigNum;"},{"Add":" let mut read_key = || -> Result, anyhow::Error> {"},{"Add":" Ok(Rsa::from_private_components("},{"Add":" BigNum::from_slice(&reader.next().read_biguint()?.to_bytes_be())?,"},{"Add":" BigNum::from_slice(&reader.next().read_biguint()?.to_bytes_be())?,"},{"Add":" BigNum::from_slice(&reader.next().read_biguint()?.to_bytes_be())?,"},{"Add":" BigNum::from_slice(&reader.next().read_biguint()?.to_bytes_be())?,"},{"Add":" BigNum::from_slice(&reader.next().read_biguint()?.to_bytes_be())?,"},{"Add":" BigNum::from_slice(&reader.next().read_biguint()?.to_bytes_be())?,"},{"Add":" BigNum::from_slice(&reader.next().read_biguint()?.to_bytes_be())?,"},{"Add":" BigNum::from_slice(&reader.next().read_biguint()?.to_bytes_be())?,"},{"Add":" )?)"},{"Add":" };"},{"Add":" Ok(read_key())"},{"Add":" })"},{"Add":" })?;"},{"Add":" Ok(key::KeyPair::RSA {"},{"Add":" key: rsa?,"},{"Add":" hash: SignatureHash::SHA2_256,"},{"Add":" })"},{"Add":" } else {"},{"Add":" Err(Error::CouldNotReadKey.into())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[test]"},{"Add":"fn test_read_write_pkcs8() {"},{"Add":" let (public, secret) = key::ed25519::keypair();"},{"Add":" assert_eq!(&public.key, &secret.key[32..]);"},{"Add":" let key = key::KeyPair::Ed25519(secret);"},{"Add":" let password = b\"blabla\";"},{"Add":" let ciphertext = encode_pkcs8_encrypted(password, 100, &key).unwrap();"},{"Add":" let key = decode_pkcs8(&ciphertext, Some(password)).unwrap();"},{"Add":" match key {"},{"Add":" key::KeyPair::Ed25519 { .. } => println!(\"Ed25519\"),"},{"Add":" key::KeyPair::RSA { .. } => println!(\"RSA\"),"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"use openssl::pkcs5::pbkdf2_hmac;"},{"Add":"use yasna::models::ObjectIdentifier;"},{"Add":"/// Encode a password-protected PKCS#8-encoded private key."},{"Add":"pub fn encode_pkcs8_encrypted("},{"Add":" pass: &[u8],"},{"Add":" rounds: u32,"},{"Add":" key: &key::KeyPair,"},{"Add":") -> Result, anyhow::Error> {"},{"Add":" let mut salt = [0; 64];"},{"Add":" rand_bytes(&mut salt)?;"},{"Add":" let mut iv = [0; 16];"},{"Add":" rand_bytes(&mut iv)?;"},{"Add":" let mut dkey = [0; 32]; // AES256-CBC"},{"Add":" pbkdf2_hmac("},{"Add":" pass,"},{"Add":" &salt,"},{"Add":" rounds as usize,"},{"Add":" MessageDigest::sha256(),"},{"Add":" &mut dkey,"},{"Add":" )?;"},{"Add":""},{"Add":" let mut plaintext = encode_pkcs8(key);"},{"Add":""},{"Add":" let padding_len = 32 - (plaintext.len() % 32);"},{"Add":" plaintext.extend(std::iter::repeat(padding_len as u8).take(padding_len));"},{"Add":""},{"Add":" let ciphertext = encrypt(Cipher::aes_256_cbc(), &dkey, Some(&iv), &plaintext)?;"},{"Add":""},{"Add":" Ok(yasna::construct_der(|writer| {"},{"Add":" writer.write_sequence(|writer| {"},{"Add":" // Encryption parameters"},{"Add":" writer.next().write_sequence(|writer| {"},{"Add":" writer"},{"Add":" .next()"},{"Add":" .write_oid(&ObjectIdentifier::from_slice(PBES2));"},{"Add":" asn1_write_pbes2(writer.next(), rounds as u64, &salt, &iv)"},{"Add":" });"},{"Add":" // Ciphertext"},{"Add":" writer.next().write_bytes(&ciphertext[..])"},{"Add":" })"},{"Add":" }))"},{"Add":"}"},{"Add":""},{"Add":"/// Encode a Decode a PKCS#8-encoded private key."},{"Add":"pub fn encode_pkcs8(key: &key::KeyPair) -> Vec {"},{"Add":" yasna::construct_der(|writer| {"},{"Add":" writer.write_sequence(|writer| match *key {"},{"Add":" key::KeyPair::Ed25519(ref secret) => write_key_v1(writer, secret),"},{"Add":" key::KeyPair::RSA { ref key, .. } => write_key_v0(writer, key),"},{"Add":" })"},{"Add":" })"},{"Add":"}"},{"Add":""},{"Add":"fn clone(src: &[u8], dest: &mut [u8]) {"},{"Add":" let i = src.iter().take_while(|b| **b == 0).count();"},{"Add":" let src = &src[i..];"},{"Add":" let l = dest.len();"},{"Add":" (&mut dest[l - src.len()..]).clone_from_slice(src)"},{"Add":"}"},{"Add":""},{"Add":"fn asn1_write_pbes2(writer: yasna::DERWriter, rounds: u64, salt: &[u8], iv: &[u8]) {"},{"Add":" writer.write_sequence(|writer| {"},{"Add":" // 1. Key generation algorithm"},{"Add":" writer.next().write_sequence(|writer| {"},{"Add":" writer"},{"Add":" .next()"},{"Add":" .write_oid(&ObjectIdentifier::from_slice(PBKDF2));"},{"Add":" asn1_write_pbkdf2(writer.next(), rounds, salt)"},{"Add":" });"},{"Add":" // 2. Encryption algorithm."},{"Add":" writer.next().write_sequence(|writer| {"},{"Add":" writer"},{"Add":" .next()"},{"Add":" .write_oid(&ObjectIdentifier::from_slice(AES256CBC));"},{"Add":" writer.next().write_bytes(iv)"},{"Add":" });"},{"Add":" })"},{"Add":"}"},{"Add":""},{"Add":"fn asn1_write_pbkdf2(writer: yasna::DERWriter, rounds: u64, salt: &[u8]) {"},{"Add":" writer.write_sequence(|writer| {"},{"Add":" writer.next().write_bytes(salt);"},{"Add":" writer.next().write_u64(rounds);"},{"Add":" writer.next().write_sequence(|writer| {"},{"Add":" writer"},{"Add":" .next()"},{"Add":" .write_oid(&ObjectIdentifier::from_slice(HMAC_SHA256));"},{"Add":" writer.next().write_null()"},{"Add":" })"},{"Add":" })"},{"Add":"}"},{"Add":""},{"Add":"enum Algorithms {"},{"Add":" Pbes2(KeyDerivation, Encryption),"},{"Add":"}"},{"Add":""},{"Add":"impl Algorithms {"},{"Add":" fn decrypt(&self, password: &[u8], cipher: &[u8]) -> Result, anyhow::Error> {"},{"Add":" match *self {"},{"Add":" Algorithms::Pbes2(ref der, ref enc) => {"},{"Add":" let mut key = enc.key();"},{"Add":" der.derive(password, &mut key)?;"},{"Add":" let out = enc.decrypt(&key, cipher)?;"},{"Add":" Ok(out)"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl KeyDerivation {"},{"Add":" fn derive(&self, password: &[u8], key: &mut [u8]) -> Result<(), anyhow::Error> {"},{"Add":" match *self {"},{"Add":" KeyDerivation::Pbkdf2 {"},{"Add":" ref salt,"},{"Add":" rounds,"},{"Add":" digest,"},{"Add":" } => pbkdf2_hmac(password, salt, rounds as usize, digest, key)?,"},{"Add":" }"},{"Add":" Ok(())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"enum Key {"},{"Add":" K128([u8; 16]),"},{"Add":" K256([u8; 32]),"},{"Add":"}"},{"Add":""},{"Add":"impl std::ops::Deref for Key {"},{"Add":" type Target = [u8];"},{"Add":" fn deref(&self) -> &[u8] {"},{"Add":" match *self {"},{"Add":" Key::K128(ref k) => k,"},{"Add":" Key::K256(ref k) => k,"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl std::ops::DerefMut for Key {"},{"Add":" fn deref_mut(&mut self) -> &mut [u8] {"},{"Add":" match *self {"},{"Add":" Key::K128(ref mut k) => k,"},{"Add":" Key::K256(ref mut k) => k,"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Encryption {"},{"Add":" fn key(&self) -> Key {"},{"Add":" match *self {"},{"Add":" Encryption::Aes128Cbc(_) => Key::K128([0; 16]),"},{"Add":" Encryption::Aes256Cbc(_) => Key::K256([0; 32]),"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" fn decrypt(&self, key: &[u8], ciphertext: &[u8]) -> Result, anyhow::Error> {"},{"Add":" let (cipher, iv) = match *self {"},{"Add":" Encryption::Aes128Cbc(ref iv) => (Cipher::aes_128_cbc(), iv),"},{"Add":" Encryption::Aes256Cbc(ref iv) => (Cipher::aes_256_cbc(), iv),"},{"Add":" };"},{"Add":" let mut dec = decrypt(cipher, &key, Some(&iv[..]), ciphertext)?;"},{"Add":" pkcs_unpad(&mut dec);"},{"Add":" Ok(dec)"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"enum KeyDerivation {"},{"Add":" Pbkdf2 {"},{"Add":" salt: Vec,"},{"Add":" rounds: u64,"},{"Add":" digest: MessageDigest,"},{"Add":" },"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"pkcs5.rs","metadata":420},"context":[{"change":0,"pos":71328}],"contents":[{"Add":"use super::{decode_rsa, pkcs_unpad, Encryption};"},{"Add":"use crate::key;"},{"Add":"use crate::Error;"},{"Add":""},{"Add":"use openssl::hash::{Hasher, MessageDigest};"},{"Add":"use openssl::symm::{decrypt, Cipher};"},{"Add":""},{"Add":"/// Decode a secret key in the PKCS#5 format, possible deciphering it"},{"Add":"/// using the supplied password."},{"Add":"pub fn decode_pkcs5("},{"Add":" secret: &[u8],"},{"Add":" password: Option<&[u8]>,"},{"Add":" enc: Encryption,"},{"Add":") -> Result {"},{"Add":" if let Some(pass) = password {"},{"Add":" let sec = match enc {"},{"Add":" Encryption::Aes128Cbc(ref iv) => {"},{"Add":" let mut h = Hasher::new(MessageDigest::md5()).unwrap();"},{"Add":" h.update(pass).unwrap();"},{"Add":" h.update(&iv[..8]).unwrap();"},{"Add":" let md5 = h.finish().unwrap();"},{"Add":" let mut dec = decrypt(Cipher::aes_128_cbc(), &md5, Some(&iv[..]), secret)?;"},{"Add":" pkcs_unpad(&mut dec);"},{"Add":" dec"},{"Add":" }"},{"Add":" Encryption::Aes256Cbc(_) => unimplemented!(),"},{"Add":" };"},{"Add":" decode_rsa(&sec)"},{"Add":" } else {"},{"Add":" Err(Error::KeyIsEncrypted.into())"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"openssh.rs","metadata":420},"context":[{"change":0,"pos":71328}],"contents":[{"Add":"use crate::bcrypt_pbkdf;"},{"Add":"use crate::encoding::Reader;"},{"Add":"use crate::key;"},{"Add":"use crate::{Error, KEYTYPE_ED25519, KEYTYPE_RSA};"},{"Add":"use cryptovec::CryptoVec;"},{"Add":"use openssl::bn::BigNum;"},{"Add":"use openssl::symm::{Cipher, Crypter, Mode};"},{"Add":""},{"Add":"/// Decode a secret key given in the OpenSSH format, deciphering it if"},{"Add":"/// needed using the supplied password."},{"Add":"pub fn decode_openssh("},{"Add":" secret: &[u8],"},{"Add":" password: Option<&[u8]>,"},{"Add":") -> Result {"},{"Add":" if &secret[0..15] == b\"openssh-key-v1\\0\" {"},{"Add":" let mut position = secret.reader(15);"},{"Add":""},{"Add":" let ciphername = position.read_string()?;"},{"Add":" let kdfname = position.read_string()?;"},{"Add":" let kdfoptions = position.read_string()?;"},{"Add":""},{"Add":" let nkeys = position.read_u32()?;"},{"Add":""},{"Add":" // Read all public keys"},{"Add":" for _ in 0..nkeys {"},{"Add":" position.read_string()?;"},{"Add":" }"},{"Add":""},{"Add":" // Read all secret keys"},{"Add":" let secret_ = position.read_string()?;"},{"Add":" let secret = decrypt_secret_key(ciphername, kdfname, kdfoptions, password, secret_)?;"},{"Add":" let mut position = secret.reader(0);"},{"Add":" let _check0 = position.read_u32()?;"},{"Add":" let _check1 = position.read_u32()?;"},{"Add":" for _ in 0..nkeys {"},{"Add":" let key_type = position.read_string()?;"},{"Add":" if key_type == KEYTYPE_ED25519 {"},{"Add":" let pubkey = position.read_string()?;"},{"Add":" let seckey = position.read_string()?;"},{"Add":" let _comment = position.read_string()?;"},{"Add":" assert_eq!(pubkey, &seckey[32..]);"},{"Add":" use key::ed25519::*;"},{"Add":" let mut secret = SecretKey::new_zeroed();"},{"Add":" secret.key.clone_from_slice(seckey);"},{"Add":" return Ok(key::KeyPair::Ed25519(secret));"},{"Add":" } else if key_type == KEYTYPE_RSA {"},{"Add":" let n = BigNum::from_slice(position.read_string()?)?;"},{"Add":" let e = BigNum::from_slice(position.read_string()?)?;"},{"Add":" let d = BigNum::from_slice(position.read_string()?)?;"},{"Add":" let iqmp = BigNum::from_slice(position.read_string()?)?;"},{"Add":" let p = BigNum::from_slice(position.read_string()?)?;"},{"Add":" let q = BigNum::from_slice(position.read_string()?)?;"},{"Add":""},{"Add":" let mut ctx = openssl::bn::BigNumContext::new()?;"},{"Add":" let un = openssl::bn::BigNum::from_u32(1)?;"},{"Add":" let mut p1 = openssl::bn::BigNum::new()?;"},{"Add":" let mut q1 = openssl::bn::BigNum::new()?;"},{"Add":" p1.checked_sub(&p, &un)?;"},{"Add":" q1.checked_sub(&q, &un)?;"},{"Add":" let mut dmp1 = openssl::bn::BigNum::new()?; // d mod p-1"},{"Add":" dmp1.checked_rem(&d, &p1, &mut ctx)?;"},{"Add":" let mut dmq1 = openssl::bn::BigNum::new()?; // d mod q-1"},{"Add":" dmq1.checked_rem(&d, &q1, &mut ctx)?;"},{"Add":""},{"Add":" let key = openssl::rsa::RsaPrivateKeyBuilder::new(n, e, d)?"},{"Add":" .set_factors(p, q)?"},{"Add":" .set_crt_params(dmp1, dmq1, iqmp)?"},{"Add":" .build();"},{"Add":" key.check_key().unwrap();"},{"Add":" return Ok(key::KeyPair::RSA {"},{"Add":" key,"},{"Add":" hash: key::SignatureHash::SHA2_512,"},{"Add":" });"},{"Add":" } else {"},{"Add":" return Err(Error::UnsupportedKeyType(key_type.to_vec()).into());"},{"Add":" }"},{"Add":" }"},{"Add":" Err(Error::CouldNotReadKey.into())"},{"Add":" } else {"},{"Add":" Err(Error::CouldNotReadKey.into())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"fn decrypt_secret_key("},{"Add":" ciphername: &[u8],"},{"Add":" kdfname: &[u8],"},{"Add":" kdfoptions: &[u8],"},{"Add":" password: Option<&[u8]>,"},{"Add":" secret_key: &[u8],"},{"Add":") -> Result, anyhow::Error> {"},{"Add":" if kdfname == b\"none\" {"},{"Add":" if password.is_none() {"},{"Add":" Ok(secret_key.to_vec())"},{"Add":" } else {"},{"Add":" Err(Error::CouldNotReadKey.into())"},{"Add":" }"},{"Add":" } else if let Some(password) = password {"},{"Add":" let mut key = CryptoVec::new();"},{"Add":" let cipher = match ciphername {"},{"Add":" b\"aes128-cbc\" => {"},{"Add":" key.resize(16 + 16);"},{"Add":" Cipher::aes_128_cbc()"},{"Add":" }"},{"Add":" b\"aes128-ctr\" => {"},{"Add":" key.resize(16 + 16);"},{"Add":" Cipher::aes_128_ctr()"},{"Add":" }"},{"Add":" b\"aes256-cbc\" => {"},{"Add":" key.resize(16 + 32);"},{"Add":" Cipher::aes_256_cbc()"},{"Add":" }"},{"Add":" b\"aes256-ctr\" => {"},{"Add":" key.resize(16 + 32);"},{"Add":" Cipher::aes_256_ctr()"},{"Add":" }"},{"Add":" _ => return Err(Error::CouldNotReadKey.into()),"},{"Add":" };"},{"Add":""},{"Add":" match kdfname {"},{"Add":" b\"bcrypt\" => {"},{"Add":" let mut kdfopts = kdfoptions.reader(0);"},{"Add":" let salt = kdfopts.read_string()?;"},{"Add":" let rounds = kdfopts.read_u32()?;"},{"Add":" bcrypt_pbkdf::bcrypt_pbkdf(password, salt, rounds, &mut key);"},{"Add":" }"},{"Add":" _kdfname => {"},{"Add":" return Err(Error::CouldNotReadKey.into());"},{"Add":" }"},{"Add":" };"},{"Add":" let iv = &key[32..];"},{"Add":" let key = &key[..32];"},{"Add":" let mut c = Crypter::new(cipher, Mode::Decrypt, &key, Some(&iv))?;"},{"Add":" c.pad(false);"},{"Add":" let mut dec = vec![0; secret_key.len() + 32];"},{"Add":" let n = c.update(&secret_key, &mut dec)?;"},{"Add":" let n = n + c.finalize(&mut dec[n..])?;"},{"Add":" dec.truncate(n);"},{"Add":" Ok(dec)"},{"Add":" } else {"},{"Add":" Err(Error::KeyIsEncrypted.into())"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"mod.rs","metadata":420},"context":[{"change":0,"pos":71328}],"contents":[{"Add":"use super::is_base64_char;"},{"Add":"use crate::key;"},{"Add":"use crate::Error;"},{"Add":"use data_encoding::{BASE64_MIME, HEXLOWER_PERMISSIVE};"},{"Add":"use openssl::rsa::Rsa;"},{"Add":"use std::io::Write;"},{"Add":""},{"Add":"pub mod openssh;"},{"Add":"pub use self::openssh::*;"},{"Add":""},{"Add":"pub mod pkcs5;"},{"Add":"pub use self::pkcs5::*;"},{"Add":""},{"Add":"pub mod pkcs8;"},{"Add":""},{"Add":"const AES_128_CBC: &'static str = \"DEK-Info: AES-128-CBC,\";"},{"Add":""},{"Add":"#[derive(Clone, Copy, Debug)]"},{"Add":"/// AES encryption key."},{"Add":"pub enum Encryption {"},{"Add":" /// Key for AES128"},{"Add":" Aes128Cbc([u8; 16]),"},{"Add":" /// Key for AES256"},{"Add":" Aes256Cbc([u8; 16]),"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Clone, Debug)]"},{"Add":"enum Format {"},{"Add":" Rsa,"},{"Add":" Openssh,"},{"Add":" Pkcs5Encrypted(Encryption),"},{"Add":" Pkcs8Encrypted,"},{"Add":" Pkcs8,"},{"Add":"}"},{"Add":""},{"Add":"/// Decode a secret key, possibly deciphering it with the supplied"},{"Add":"/// password."},{"Add":"pub fn decode_secret_key("},{"Add":" secret: &str,"},{"Add":" password: Option<&[u8]>,"},{"Add":") -> Result {"},{"Add":" let mut format = None;"},{"Add":" let secret = {"},{"Add":" let mut started = false;"},{"Add":" let mut sec = String::new();"},{"Add":" for l in secret.lines() {"},{"Add":" if started == true {"},{"Add":" if l.starts_with(\"-----END \") {"},{"Add":" break;"},{"Add":" }"},{"Add":" if l.chars().all(is_base64_char) {"},{"Add":" sec.push_str(l)"},{"Add":" } else if l.starts_with(AES_128_CBC) {"},{"Add":" let iv_: Vec ="},{"Add":" HEXLOWER_PERMISSIVE.decode(l.split_at(AES_128_CBC.len()).1.as_bytes())?;"},{"Add":" if iv_.len() != 16 {"},{"Add":" return Err(Error::CouldNotReadKey.into());"},{"Add":" }"},{"Add":" let mut iv = [0; 16];"},{"Add":" iv.clone_from_slice(&iv_);"},{"Add":" format = Some(Format::Pkcs5Encrypted(Encryption::Aes128Cbc(iv)))"},{"Add":" }"},{"Add":" }"},{"Add":" if l == \"-----BEGIN OPENSSH PRIVATE KEY-----\" {"},{"Add":" started = true;"},{"Add":" format = Some(Format::Openssh);"},{"Add":" } else if l == \"-----BEGIN RSA PRIVATE KEY-----\" {"},{"Add":" started = true;"},{"Add":" format = Some(Format::Rsa);"},{"Add":" } else if l == \"-----BEGIN ENCRYPTED PRIVATE KEY-----\" {"},{"Add":" started = true;"},{"Add":" format = Some(Format::Pkcs8Encrypted);"},{"Add":" } else if l == \"-----BEGIN PRIVATE KEY-----\" {"},{"Add":" started = true;"},{"Add":" format = Some(Format::Pkcs8);"},{"Add":" }"},{"Add":" }"},{"Add":" sec"},{"Add":" };"},{"Add":""},{"Add":" let secret = BASE64_MIME.decode(secret.as_bytes())?;"},{"Add":" match format {"},{"Add":" Some(Format::Openssh) => decode_openssh(&secret, password),"},{"Add":" Some(Format::Rsa) => decode_rsa(&secret),"},{"Add":" Some(Format::Pkcs5Encrypted(enc)) => decode_pkcs5(&secret, password, enc),"},{"Add":" Some(Format::Pkcs8Encrypted) | Some(Format::Pkcs8) => {"},{"Add":" self::pkcs8::decode_pkcs8(&secret, password)"},{"Add":" }"},{"Add":" None => Err(Error::CouldNotReadKey.into()),"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"pub fn encode_pkcs8_pem(key: &key::KeyPair, mut w: W) -> Result<(), anyhow::Error> {"},{"Add":" let x = self::pkcs8::encode_pkcs8(key);"},{"Add":" w.write_all(b\"-----BEGIN PRIVATE KEY-----\\n\")?;"},{"Add":" w.write_all(BASE64_MIME.encode(&x).as_bytes())?;"},{"Add":" w.write_all(b\"\\n-----END PRIVATE KEY-----\\n\")?;"},{"Add":" Ok(())"},{"Add":"}"},{"Add":""},{"Add":"pub fn encode_pkcs8_pem_encrypted("},{"Add":" key: &key::KeyPair,"},{"Add":" pass: &[u8],"},{"Add":" rounds: u32,"},{"Add":" mut w: W,"},{"Add":") -> Result<(), anyhow::Error> {"},{"Add":" let x = self::pkcs8::encode_pkcs8_encrypted(pass, rounds, key)?;"},{"Add":" w.write_all(b\"-----BEGIN ENCRYPTED PRIVATE KEY-----\\n\")?;"},{"Add":" w.write_all(BASE64_MIME.encode(&x).as_bytes())?;"},{"Add":" w.write_all(b\"\\n-----END ENCRYPTED PRIVATE KEY-----\\n\")?;"},{"Add":" Ok(())"},{"Add":"}"},{"Add":""},{"Add":"fn decode_rsa(secret: &[u8]) -> Result {"},{"Add":" Ok(key::KeyPair::RSA {"},{"Add":" key: Rsa::private_key_from_der(secret)?,"},{"Add":" hash: key::SignatureHash::SHA2_256,"},{"Add":" })"},{"Add":"}"},{"Add":""},{"Add":"fn pkcs_unpad(dec: &mut Vec) {"},{"Add":" let len = dec.len();"},{"Add":" if len > 0 {"},{"Add":" let padding_len = dec[len - 1];"},{"Add":" if dec[(len - padding_len as usize)..]"},{"Add":" .iter()"},{"Add":" .all(|&x| x == padding_len)"},{"Add":" {"},{"Add":" dec.truncate(len - padding_len as usize)"},{"Add":" }"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"encoding.rs","metadata":420},"context":[{"change":0,"pos":5805}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":""},{"Add":"use crate::Error;"},{"Add":"use byteorder::{BigEndian, ByteOrder, WriteBytesExt};"},{"Add":"use cryptovec::CryptoVec;"},{"Add":""},{"Add":"#[doc(hidden)]"},{"Add":"pub trait Bytes {"},{"Add":" fn bytes(&self) -> &[u8];"},{"Add":"}"},{"Add":""},{"Add":"impl> Bytes for A {"},{"Add":" fn bytes(&self) -> &[u8] {"},{"Add":" self.as_ref().as_bytes()"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// Encode in the SSH format."},{"Add":"pub trait Encoding {"},{"Add":" /// Push an SSH-encoded string to `self`."},{"Add":" fn extend_ssh_string(&mut self, s: &[u8]);"},{"Add":" /// Push an SSH-encoded blank string of length `s` to `self`."},{"Add":" fn extend_ssh_string_blank(&mut self, s: usize) -> &mut [u8];"},{"Add":" /// Push an SSH-encoded multiple-precision integer."},{"Add":" fn extend_ssh_mpint(&mut self, s: &[u8]);"},{"Add":" /// Push an SSH-encoded list."},{"Add":" fn extend_list>(&mut self, list: I);"},{"Add":" /// Push an SSH-encoded empty list."},{"Add":" fn write_empty_list(&mut self);"},{"Add":"}"},{"Add":""},{"Add":"/// Encoding length of the given mpint."},{"Add":"pub fn mpint_len(s: &[u8]) -> usize {"},{"Add":" let mut i = 0;"},{"Add":" while i < s.len() && s[i] == 0 {"},{"Add":" i += 1"},{"Add":" }"},{"Add":" (if s[i] & 0x80 != 0 { 5 } else { 4 }) + s.len() - i"},{"Add":"}"},{"Add":""},{"Add":"impl Encoding for Vec {"},{"Add":" fn extend_ssh_string(&mut self, s: &[u8]) {"},{"Add":" self.write_u32::(s.len() as u32).unwrap();"},{"Add":" self.extend(s);"},{"Add":" }"},{"Add":" fn extend_ssh_string_blank(&mut self, len: usize) -> &mut [u8] {"},{"Add":" self.write_u32::(len as u32).unwrap();"},{"Add":" let current = self.len();"},{"Add":" self.resize(current + len, 0u8);"},{"Add":" &mut self[current..]"},{"Add":" }"},{"Add":" fn extend_ssh_mpint(&mut self, s: &[u8]) {"},{"Add":" // Skip initial 0s."},{"Add":" let mut i = 0;"},{"Add":" while i < s.len() && s[i] == 0 {"},{"Add":" i += 1"},{"Add":" }"},{"Add":" // If the first non-zero is >= 128, write its length (u32, BE), followed by 0."},{"Add":" if s[i] & 0x80 != 0 {"},{"Add":" self.write_u32::((s.len() - i + 1) as u32)"},{"Add":" .unwrap();"},{"Add":" self.push(0)"},{"Add":" } else {"},{"Add":" self.write_u32::((s.len() - i) as u32).unwrap();"},{"Add":" }"},{"Add":" self.extend(&s[i..]);"},{"Add":" }"},{"Add":""},{"Add":" fn extend_list>(&mut self, list: I) {"},{"Add":" let len0 = self.len();"},{"Add":" self.extend(&[0, 0, 0, 0]);"},{"Add":" let mut first = true;"},{"Add":" for i in list {"},{"Add":" if !first {"},{"Add":" self.push(b',')"},{"Add":" } else {"},{"Add":" first = false;"},{"Add":" }"},{"Add":" self.extend(i.bytes())"},{"Add":" }"},{"Add":" let len = (self.len() - len0 - 4) as u32;"},{"Add":""},{"Add":" BigEndian::write_u32(&mut self[len0..], len);"},{"Add":" }"},{"Add":""},{"Add":" fn write_empty_list(&mut self) {"},{"Add":" self.extend(&[0, 0, 0, 0]);"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Encoding for CryptoVec {"},{"Add":" fn extend_ssh_string(&mut self, s: &[u8]) {"},{"Add":" self.push_u32_be(s.len() as u32);"},{"Add":" self.extend(s);"},{"Add":" }"},{"Add":" fn extend_ssh_string_blank(&mut self, len: usize) -> &mut [u8] {"},{"Add":" self.push_u32_be(len as u32);"},{"Add":" let current = self.len();"},{"Add":" self.resize(current + len);"},{"Add":" &mut self[current..]"},{"Add":" }"},{"Add":" fn extend_ssh_mpint(&mut self, s: &[u8]) {"},{"Add":" // Skip initial 0s."},{"Add":" let mut i = 0;"},{"Add":" while i < s.len() && s[i] == 0 {"},{"Add":" i += 1"},{"Add":" }"},{"Add":" // If the first non-zero is >= 128, write its length (u32, BE), followed by 0."},{"Add":" if s[i] & 0x80 != 0 {"},{"Add":" self.push_u32_be((s.len() - i + 1) as u32);"},{"Add":" self.push(0)"},{"Add":" } else {"},{"Add":" self.push_u32_be((s.len() - i) as u32);"},{"Add":" }"},{"Add":" self.extend(&s[i..]);"},{"Add":" }"},{"Add":""},{"Add":" fn extend_list>(&mut self, list: I) {"},{"Add":" let len0 = self.len();"},{"Add":" self.extend(&[0, 0, 0, 0]);"},{"Add":" let mut first = true;"},{"Add":" for i in list {"},{"Add":" if !first {"},{"Add":" self.push(b',')"},{"Add":" } else {"},{"Add":" first = false;"},{"Add":" }"},{"Add":" self.extend(i.bytes())"},{"Add":" }"},{"Add":" let len = (self.len() - len0 - 4) as u32;"},{"Add":""},{"Add":" BigEndian::write_u32(&mut self[len0..], len);"},{"Add":" }"},{"Add":""},{"Add":" fn write_empty_list(&mut self) {"},{"Add":" self.extend(&[0, 0, 0, 0]);"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// A cursor-like trait to read SSH-encoded things."},{"Add":"pub trait Reader {"},{"Add":" /// Create an SSH reader for `self`."},{"Add":" fn reader<'a>(&'a self, starting_at: usize) -> Position<'a>;"},{"Add":"}"},{"Add":""},{"Add":"impl Reader for CryptoVec {"},{"Add":" fn reader<'a>(&'a self, starting_at: usize) -> Position<'a> {"},{"Add":" Position {"},{"Add":" s: &self,"},{"Add":" position: starting_at,"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Reader for [u8] {"},{"Add":" fn reader<'a>(&'a self, starting_at: usize) -> Position<'a> {"},{"Add":" Position {"},{"Add":" s: self,"},{"Add":" position: starting_at,"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// A cursor-like type to read SSH-encoded values."},{"Add":"#[derive(Debug)]"},{"Add":"pub struct Position<'a> {"},{"Add":" s: &'a [u8],"},{"Add":" #[doc(hidden)]"},{"Add":" pub position: usize,"},{"Add":"}"},{"Add":"impl<'a> Position<'a> {"},{"Add":" /// Read one string from this reader."},{"Add":" pub fn read_string(&mut self) -> Result<&'a [u8], Error> {"},{"Add":" let len = self.read_u32()? as usize;"},{"Add":" if self.position + len <= self.s.len() {"},{"Add":" let result = &self.s[self.position..(self.position + len)];"},{"Add":" self.position += len;"},{"Add":" Ok(result)"},{"Add":" } else {"},{"Add":" Err(Error::IndexOutOfBounds)"},{"Add":" }"},{"Add":" }"},{"Add":" /// Read a `u32` from this reader."},{"Add":" pub fn read_u32(&mut self) -> Result {"},{"Add":" if self.position + 4 <= self.s.len() {"},{"Add":" let u = BigEndian::read_u32(&self.s[self.position..]);"},{"Add":" self.position += 4;"},{"Add":" Ok(u)"},{"Add":" } else {"},{"Add":" Err(Error::IndexOutOfBounds)"},{"Add":" }"},{"Add":" }"},{"Add":" /// Read one byte from this reader."},{"Add":" pub fn read_byte(&mut self) -> Result {"},{"Add":" if self.position + 1 <= self.s.len() {"},{"Add":" let u = self.s[self.position];"},{"Add":" self.position += 1;"},{"Add":" Ok(u)"},{"Add":" } else {"},{"Add":" Err(Error::IndexOutOfBounds)"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Read one byte from this reader."},{"Add":" pub fn read_mpint(&mut self) -> Result<&'a [u8], Error> {"},{"Add":" let len = self.read_u32()? as usize;"},{"Add":" if self.position + len <= self.s.len() {"},{"Add":" let result = &self.s[self.position..(self.position + len)];"},{"Add":" self.position += len;"},{"Add":" Ok(result)"},{"Add":" } else {"},{"Add":" Err(Error::IndexOutOfBounds)"},{"Add":" }"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"blowfish.rs","metadata":420},"context":[{"change":0,"pos":5805}],"contents":[{"Add":"// From the rust-crypto project."},{"Add":""},{"Add":"// Licensed under the Apache License, Version 2.0 or the MIT license"},{"Add":"// , at your"},{"Add":"// option. This file may not be copied, modified, or distributed"},{"Add":"// except according to those terms."},{"Add":""},{"Add":"#[derive(Clone, Copy)]"},{"Add":"pub struct Blowfish {"},{"Add":" s: [[u32; 256]; 4],"},{"Add":" p: [u32; 18],"},{"Add":"}"},{"Add":""},{"Add":"fn next_u32_wrap(buf: &[u8], offset: &mut usize) -> u32 {"},{"Add":" let mut v = 0;"},{"Add":" for _ in 0..4 {"},{"Add":" if *offset >= buf.len() {"},{"Add":" *offset = 0;"},{"Add":" }"},{"Add":" v = (v << 8) | buf[*offset] as u32;"},{"Add":" *offset += 1;"},{"Add":" }"},{"Add":" v"},{"Add":"}"},{"Add":""},{"Add":"impl Blowfish {"},{"Add":" // For bcrypt. Use Blowfish::new instead."},{"Add":" pub fn init_state() -> Blowfish {"},{"Add":" Blowfish {"},{"Add":" p: ["},{"Add":" 0x243f6a88, 0x85a308d3, 0x13198a2e, 0x03707344, 0xa4093822, 0x299f31d0, 0x082efa98,"},{"Add":" 0xec4e6c89, 0x452821e6, 0x38d01377, 0xbe5466cf, 0x34e90c6c, 0xc0ac29b7, 0xc97c50dd,"},{"Add":" 0x3f84d5b5, 0xb5470917, 0x9216d5d9, 0x8979fb1b,"},{"Add":" ],"},{"Add":" s: ["},{"Add":" ["},{"Add":" 0xd1310ba6, 0x98dfb5ac, 0x2ffd72db, 0xd01adfb7, 0xb8e1afed, 0x6a267e96,"},{"Add":" 0xba7c9045, 0xf12c7f99, 0x24a19947, 0xb3916cf7, 0x0801f2e2, 0x858efc16,"},{"Add":" 0x636920d8, 0x71574e69, 0xa458fea3, 0xf4933d7e, 0x0d95748f, 0x728eb658,"},{"Add":" 0x718bcd58, 0x82154aee, 0x7b54a41d, 0xc25a59b5, 0x9c30d539, 0x2af26013,"},{"Add":" 0xc5d1b023, 0x286085f0, 0xca417918, 0xb8db38ef, 0x8e79dcb0, 0x603a180e,"},{"Add":" 0x6c9e0e8b, 0xb01e8a3e, 0xd71577c1, 0xbd314b27, 0x78af2fda, 0x55605c60,"},{"Add":" 0xe65525f3, 0xaa55ab94, 0x57489862, 0x63e81440, 0x55ca396a, 0x2aab10b6,"},{"Add":" 0xb4cc5c34, 0x1141e8ce, 0xa15486af, 0x7c72e993, 0xb3ee1411, 0x636fbc2a,"},{"Add":" 0x2ba9c55d, 0x741831f6, 0xce5c3e16, 0x9b87931e, 0xafd6ba33, 0x6c24cf5c,"},{"Add":" 0x7a325381, 0x28958677, 0x3b8f4898, 0x6b4bb9af, 0xc4bfe81b, 0x66282193,"},{"Add":" 0x61d809cc, 0xfb21a991, 0x487cac60, 0x5dec8032, 0xef845d5d, 0xe98575b1,"},{"Add":" 0xdc262302, 0xeb651b88, 0x23893e81, 0xd396acc5, 0x0f6d6ff3, 0x83f44239,"},{"Add":" 0x2e0b4482, 0xa4842004, 0x69c8f04a, 0x9e1f9b5e, 0x21c66842, 0xf6e96c9a,"},{"Add":" 0x670c9c61, 0xabd388f0, 0x6a51a0d2, 0xd8542f68, 0x960fa728, 0xab5133a3,"},{"Add":" 0x6eef0b6c, 0x137a3be4, 0xba3bf050, 0x7efb2a98, 0xa1f1651d, 0x39af0176,"},{"Add":" 0x66ca593e, 0x82430e88, 0x8cee8619, 0x456f9fb4, 0x7d84a5c3, 0x3b8b5ebe,"},{"Add":" 0xe06f75d8, 0x85c12073, 0x401a449f, 0x56c16aa6, 0x4ed3aa62, 0x363f7706,"},{"Add":" 0x1bfedf72, 0x429b023d, 0x37d0d724, 0xd00a1248, 0xdb0fead3, 0x49f1c09b,"},{"Add":" 0x075372c9, 0x80991b7b, 0x25d479d8, 0xf6e8def7, 0xe3fe501a, 0xb6794c3b,"},{"Add":" 0x976ce0bd, 0x04c006ba, 0xc1a94fb6, 0x409f60c4, 0x5e5c9ec2, 0x196a2463,"},{"Add":" 0x68fb6faf, 0x3e6c53b5, 0x1339b2eb, 0x3b52ec6f, 0x6dfc511f, 0x9b30952c,"},{"Add":" 0xcc814544, 0xaf5ebd09, 0xbee3d004, 0xde334afd, 0x660f2807, 0x192e4bb3,"},{"Add":" 0xc0cba857, 0x45c8740f, 0xd20b5f39, 0xb9d3fbdb, 0x5579c0bd, 0x1a60320a,"},{"Add":" 0xd6a100c6, 0x402c7279, 0x679f25fe, 0xfb1fa3cc, 0x8ea5e9f8, 0xdb3222f8,"},{"Add":" 0x3c7516df, 0xfd616b15, 0x2f501ec8, 0xad0552ab, 0x323db5fa, 0xfd238760,"},{"Add":" 0x53317b48, 0x3e00df82, 0x9e5c57bb, 0xca6f8ca0, 0x1a87562e, 0xdf1769db,"},{"Add":" 0xd542a8f6, 0x287effc3, 0xac6732c6, 0x8c4f5573, 0x695b27b0, 0xbbca58c8,"},{"Add":" 0xe1ffa35d, 0xb8f011a0, 0x10fa3d98, 0xfd2183b8, 0x4afcb56c, 0x2dd1d35b,"},{"Add":" 0x9a53e479, 0xb6f84565, 0xd28e49bc, 0x4bfb9790, 0xe1ddf2da, 0xa4cb7e33,"},{"Add":" 0x62fb1341, 0xcee4c6e8, 0xef20cada, 0x36774c01, 0xd07e9efe, 0x2bf11fb4,"},{"Add":" 0x95dbda4d, 0xae909198, 0xeaad8e71, 0x6b93d5a0, 0xd08ed1d0, 0xafc725e0,"},{"Add":" 0x8e3c5b2f, 0x8e7594b7, 0x8ff6e2fb, 0xf2122b64, 0x8888b812, 0x900df01c,"},{"Add":" 0x4fad5ea0, 0x688fc31c, 0xd1cff191, 0xb3a8c1ad, 0x2f2f2218, 0xbe0e1777,"},{"Add":" 0xea752dfe, 0x8b021fa1, 0xe5a0cc0f, 0xb56f74e8, 0x18acf3d6, 0xce89e299,"},{"Add":" 0xb4a84fe0, 0xfd13e0b7, 0x7cc43b81, 0xd2ada8d9, 0x165fa266, 0x80957705,"},{"Add":" 0x93cc7314, 0x211a1477, 0xe6ad2065, 0x77b5fa86, 0xc75442f5, 0xfb9d35cf,"},{"Add":" 0xebcdaf0c, 0x7b3e89a0, 0xd6411bd3, 0xae1e7e49, 0x00250e2d, 0x2071b35e,"},{"Add":" 0x226800bb, 0x57b8e0af, 0x2464369b, 0xf009b91e, 0x5563911d, 0x59dfa6aa,"},{"Add":" 0x78c14389, 0xd95a537f, 0x207d5ba2, 0x02e5b9c5, 0x83260376, 0x6295cfa9,"},{"Add":" 0x11c81968, 0x4e734a41, 0xb3472dca, 0x7b14a94a, 0x1b510052, 0x9a532915,"},{"Add":" 0xd60f573f, 0xbc9bc6e4, 0x2b60a476, 0x81e67400, 0x08ba6fb5, 0x571be91f,"},{"Add":" 0xf296ec6b, 0x2a0dd915, 0xb6636521, 0xe7b9f9b6, 0xff34052e, 0xc5855664,"},{"Add":" 0x53b02d5d, 0xa99f8fa1, 0x08ba4799, 0x6e85076a,"},{"Add":" ],"},{"Add":" ["},{"Add":" 0x4b7a70e9, 0xb5b32944, 0xdb75092e, 0xc4192623, 0xad6ea6b0, 0x49a7df7d,"},{"Add":" 0x9cee60b8, 0x8fedb266, 0xecaa8c71, 0x699a17ff, 0x5664526c, 0xc2b19ee1,"},{"Add":" 0x193602a5, 0x75094c29, 0xa0591340, 0xe4183a3e, 0x3f54989a, 0x5b429d65,"},{"Add":" 0x6b8fe4d6, 0x99f73fd6, 0xa1d29c07, 0xefe830f5, 0x4d2d38e6, 0xf0255dc1,"},{"Add":" 0x4cdd2086, 0x8470eb26, 0x6382e9c6, 0x021ecc5e, 0x09686b3f, 0x3ebaefc9,"},{"Add":" 0x3c971814, 0x6b6a70a1, 0x687f3584, 0x52a0e286, 0xb79c5305, 0xaa500737,"},{"Add":" 0x3e07841c, 0x7fdeae5c, 0x8e7d44ec, 0x5716f2b8, 0xb03ada37, 0xf0500c0d,"},{"Add":" 0xf01c1f04, 0x0200b3ff, 0xae0cf51a, 0x3cb574b2, 0x25837a58, 0xdc0921bd,"},{"Add":" 0xd19113f9, 0x7ca92ff6, 0x94324773, 0x22f54701, 0x3ae5e581, 0x37c2dadc,"},{"Add":" 0xc8b57634, 0x9af3dda7, 0xa9446146, 0x0fd0030e, 0xecc8c73e, 0xa4751e41,"},{"Add":" 0xe238cd99, 0x3bea0e2f, 0x3280bba1, 0x183eb331, 0x4e548b38, 0x4f6db908,"},{"Add":" 0x6f420d03, 0xf60a04bf, 0x2cb81290, 0x24977c79, 0x5679b072, 0xbcaf89af,"},{"Add":" 0xde9a771f, 0xd9930810, 0xb38bae12, 0xdccf3f2e, 0x5512721f, 0x2e6b7124,"},{"Add":" 0x501adde6, 0x9f84cd87, 0x7a584718, 0x7408da17, 0xbc9f9abc, 0xe94b7d8c,"},{"Add":" 0xec7aec3a, 0xdb851dfa, 0x63094366, 0xc464c3d2, 0xef1c1847, 0x3215d908,"},{"Add":" 0xdd433b37, 0x24c2ba16, 0x12a14d43, 0x2a65c451, 0x50940002, 0x133ae4dd,"},{"Add":" 0x71dff89e, 0x10314e55, 0x81ac77d6, 0x5f11199b, 0x043556f1, 0xd7a3c76b,"},{"Add":" 0x3c11183b, 0x5924a509, 0xf28fe6ed, 0x97f1fbfa, 0x9ebabf2c, 0x1e153c6e,"},{"Add":" 0x86e34570, 0xeae96fb1, 0x860e5e0a, 0x5a3e2ab3, 0x771fe71c, 0x4e3d06fa,"},{"Add":" 0x2965dcb9, 0x99e71d0f, 0x803e89d6, 0x5266c825, 0x2e4cc978, 0x9c10b36a,"},{"Add":" 0xc6150eba, 0x94e2ea78, 0xa5fc3c53, 0x1e0a2df4, 0xf2f74ea7, 0x361d2b3d,"},{"Add":" 0x1939260f, 0x19c27960, 0x5223a708, 0xf71312b6, 0xebadfe6e, 0xeac31f66,"},{"Add":" 0xe3bc4595, 0xa67bc883, 0xb17f37d1, 0x018cff28, 0xc332ddef, 0xbe6c5aa5,"},{"Add":" 0x65582185, 0x68ab9802, 0xeecea50f, 0xdb2f953b, 0x2aef7dad, 0x5b6e2f84,"},{"Add":" 0x1521b628, 0x29076170, 0xecdd4775, 0x619f1510, 0x13cca830, 0xeb61bd96,"},{"Add":" 0x0334fe1e, 0xaa0363cf, 0xb5735c90, 0x4c70a239, 0xd59e9e0b, 0xcbaade14,"},{"Add":" 0xeecc86bc, 0x60622ca7, 0x9cab5cab, 0xb2f3846e, 0x648b1eaf, 0x19bdf0ca,"},{"Add":" 0xa02369b9, 0x655abb50, 0x40685a32, 0x3c2ab4b3, 0x319ee9d5, 0xc021b8f7,"},{"Add":" 0x9b540b19, 0x875fa099, 0x95f7997e, 0x623d7da8, 0xf837889a, 0x97e32d77,"},{"Add":" 0x11ed935f, 0x16681281, 0x0e358829, 0xc7e61fd6, 0x96dedfa1, 0x7858ba99,"},{"Add":" 0x57f584a5, 0x1b227263, 0x9b83c3ff, 0x1ac24696, 0xcdb30aeb, 0x532e3054,"},{"Add":" 0x8fd948e4, 0x6dbc3128, 0x58ebf2ef, 0x34c6ffea, 0xfe28ed61, 0xee7c3c73,"},{"Add":" 0x5d4a14d9, 0xe864b7e3, 0x42105d14, 0x203e13e0, 0x45eee2b6, 0xa3aaabea,"},{"Add":" 0xdb6c4f15, 0xfacb4fd0, 0xc742f442, 0xef6abbb5, 0x654f3b1d, 0x41cd2105,"},{"Add":" 0xd81e799e, 0x86854dc7, 0xe44b476a, 0x3d816250, 0xcf62a1f2, 0x5b8d2646,"},{"Add":" 0xfc8883a0, 0xc1c7b6a3, 0x7f1524c3, 0x69cb7492, 0x47848a0b, 0x5692b285,"},{"Add":" 0x095bbf00, 0xad19489d, 0x1462b174, 0x23820e00, 0x58428d2a, 0x0c55f5ea,"},{"Add":" 0x1dadf43e, 0x233f7061, 0x3372f092, 0x8d937e41, 0xd65fecf1, 0x6c223bdb,"},{"Add":" 0x7cde3759, 0xcbee7460, 0x4085f2a7, 0xce77326e, 0xa6078084, 0x19f8509e,"},{"Add":" 0xe8efd855, 0x61d99735, 0xa969a7aa, 0xc50c06c2, 0x5a04abfc, 0x800bcadc,"},{"Add":" 0x9e447a2e, 0xc3453484, 0xfdd56705, 0x0e1e9ec9, 0xdb73dbd3, 0x105588cd,"},{"Add":" 0x675fda79, 0xe3674340, 0xc5c43465, 0x713e38d8, 0x3d28f89e, 0xf16dff20,"},{"Add":" 0x153e21e7, 0x8fb03d4a, 0xe6e39f2b, 0xdb83adf7,"},{"Add":" ],"},{"Add":" ["},{"Add":" 0xe93d5a68, 0x948140f7, 0xf64c261c, 0x94692934, 0x411520f7, 0x7602d4f7,"},{"Add":" 0xbcf46b2e, 0xd4a20068, 0xd4082471, 0x3320f46a, 0x43b7d4b7, 0x500061af,"},{"Add":" 0x1e39f62e, 0x97244546, 0x14214f74, 0xbf8b8840, 0x4d95fc1d, 0x96b591af,"},{"Add":" 0x70f4ddd3, 0x66a02f45, 0xbfbc09ec, 0x03bd9785, 0x7fac6dd0, 0x31cb8504,"},{"Add":" 0x96eb27b3, 0x55fd3941, 0xda2547e6, 0xabca0a9a, 0x28507825, 0x530429f4,"},{"Add":" 0x0a2c86da, 0xe9b66dfb, 0x68dc1462, 0xd7486900, 0x680ec0a4, 0x27a18dee,"},{"Add":" 0x4f3ffea2, 0xe887ad8c, 0xb58ce006, 0x7af4d6b6, 0xaace1e7c, 0xd3375fec,"},{"Add":" 0xce78a399, 0x406b2a42, 0x20fe9e35, 0xd9f385b9, 0xee39d7ab, 0x3b124e8b,"},{"Add":" 0x1dc9faf7, 0x4b6d1856, 0x26a36631, 0xeae397b2, 0x3a6efa74, 0xdd5b4332,"},{"Add":" 0x6841e7f7, 0xca7820fb, 0xfb0af54e, 0xd8feb397, 0x454056ac, 0xba489527,"},{"Add":" 0x55533a3a, 0x20838d87, 0xfe6ba9b7, 0xd096954b, 0x55a867bc, 0xa1159a58,"},{"Add":" 0xcca92963, 0x99e1db33, 0xa62a4a56, 0x3f3125f9, 0x5ef47e1c, 0x9029317c,"},{"Add":" 0xfdf8e802, 0x04272f70, 0x80bb155c, 0x05282ce3, 0x95c11548, 0xe4c66d22,"},{"Add":" 0x48c1133f, 0xc70f86dc, 0x07f9c9ee, 0x41041f0f, 0x404779a4, 0x5d886e17,"},{"Add":" 0x325f51eb, 0xd59bc0d1, 0xf2bcc18f, 0x41113564, 0x257b7834, 0x602a9c60,"},{"Add":" 0xdff8e8a3, 0x1f636c1b, 0x0e12b4c2, 0x02e1329e, 0xaf664fd1, 0xcad18115,"},{"Add":" 0x6b2395e0, 0x333e92e1, 0x3b240b62, 0xeebeb922, 0x85b2a20e, 0xe6ba0d99,"},{"Add":" 0xde720c8c, 0x2da2f728, 0xd0127845, 0x95b794fd, 0x647d0862, 0xe7ccf5f0,"},{"Add":" 0x5449a36f, 0x877d48fa, 0xc39dfd27, 0xf33e8d1e, 0x0a476341, 0x992eff74,"},{"Add":" 0x3a6f6eab, 0xf4f8fd37, 0xa812dc60, 0xa1ebddf8, 0x991be14c, 0xdb6e6b0d,"},{"Add":" 0xc67b5510, 0x6d672c37, 0x2765d43b, 0xdcd0e804, 0xf1290dc7, 0xcc00ffa3,"},{"Add":" 0xb5390f92, 0x690fed0b, 0x667b9ffb, 0xcedb7d9c, 0xa091cf0b, 0xd9155ea3,"},{"Add":" 0xbb132f88, 0x515bad24, 0x7b9479bf, 0x763bd6eb, 0x37392eb3, 0xcc115979,"},{"Add":" 0x8026e297, 0xf42e312d, 0x6842ada7, 0xc66a2b3b, 0x12754ccc, 0x782ef11c,"},{"Add":" 0x6a124237, 0xb79251e7, 0x06a1bbe6, 0x4bfb6350, 0x1a6b1018, 0x11caedfa,"},{"Add":" 0x3d25bdd8, 0xe2e1c3c9, 0x44421659, 0x0a121386, 0xd90cec6e, 0xd5abea2a,"},{"Add":" 0x64af674e, 0xda86a85f, 0xbebfe988, 0x64e4c3fe, 0x9dbc8057, 0xf0f7c086,"},{"Add":" 0x60787bf8, 0x6003604d, 0xd1fd8346, 0xf6381fb0, 0x7745ae04, 0xd736fccc,"},{"Add":" 0x83426b33, 0xf01eab71, 0xb0804187, 0x3c005e5f, 0x77a057be, 0xbde8ae24,"},{"Add":" 0x55464299, 0xbf582e61, 0x4e58f48f, 0xf2ddfda2, 0xf474ef38, 0x8789bdc2,"},{"Add":" 0x5366f9c3, 0xc8b38e74, 0xb475f255, 0x46fcd9b9, 0x7aeb2661, 0x8b1ddf84,"},{"Add":" 0x846a0e79, 0x915f95e2, 0x466e598e, 0x20b45770, 0x8cd55591, 0xc902de4c,"},{"Add":" 0xb90bace1, 0xbb8205d0, 0x11a86248, 0x7574a99e, 0xb77f19b6, 0xe0a9dc09,"},{"Add":" 0x662d09a1, 0xc4324633, 0xe85a1f02, 0x09f0be8c, 0x4a99a025, 0x1d6efe10,"},{"Add":" 0x1ab93d1d, 0x0ba5a4df, 0xa186f20f, 0x2868f169, 0xdcb7da83, 0x573906fe,"},{"Add":" 0xa1e2ce9b, 0x4fcd7f52, 0x50115e01, 0xa70683fa, 0xa002b5c4, 0x0de6d027,"},{"Add":" 0x9af88c27, 0x773f8641, 0xc3604c06, 0x61a806b5, 0xf0177a28, 0xc0f586e0,"},{"Add":" 0x006058aa, 0x30dc7d62, 0x11e69ed7, 0x2338ea63, 0x53c2dd94, 0xc2c21634,"},{"Add":" 0xbbcbee56, 0x90bcb6de, 0xebfc7da1, 0xce591d76, 0x6f05e409, 0x4b7c0188,"},{"Add":" 0x39720a3d, 0x7c927c24, 0x86e3725f, 0x724d9db9, 0x1ac15bb4, 0xd39eb8fc,"},{"Add":" 0xed545578, 0x08fca5b5, 0xd83d7cd3, 0x4dad0fc4, 0x1e50ef5e, 0xb161e6f8,"},{"Add":" 0xa28514d9, 0x6c51133c, 0x6fd5c7e7, 0x56e14ec4, 0x362abfce, 0xddc6c837,"},{"Add":" 0xd79a3234, 0x92638212, 0x670efa8e, 0x406000e0,"},{"Add":" ],"},{"Add":" ["},{"Add":" 0x3a39ce37, 0xd3faf5cf, 0xabc27737, 0x5ac52d1b, 0x5cb0679e, 0x4fa33742,"},{"Add":" 0xd3822740, 0x99bc9bbe, 0xd5118e9d, 0xbf0f7315, 0xd62d1c7e, 0xc700c47b,"},{"Add":" 0xb78c1b6b, 0x21a19045, 0xb26eb1be, 0x6a366eb4, 0x5748ab2f, 0xbc946e79,"},{"Add":" 0xc6a376d2, 0x6549c2c8, 0x530ff8ee, 0x468dde7d, 0xd5730a1d, 0x4cd04dc6,"},{"Add":" 0x2939bbdb, 0xa9ba4650, 0xac9526e8, 0xbe5ee304, 0xa1fad5f0, 0x6a2d519a,"},{"Add":" 0x63ef8ce2, 0x9a86ee22, 0xc089c2b8, 0x43242ef6, 0xa51e03aa, 0x9cf2d0a4,"},{"Add":" 0x83c061ba, 0x9be96a4d, 0x8fe51550, 0xba645bd6, 0x2826a2f9, 0xa73a3ae1,"},{"Add":" 0x4ba99586, 0xef5562e9, 0xc72fefd3, 0xf752f7da, 0x3f046f69, 0x77fa0a59,"},{"Add":" 0x80e4a915, 0x87b08601, 0x9b09e6ad, 0x3b3ee593, 0xe990fd5a, 0x9e34d797,"},{"Add":" 0x2cf0b7d9, 0x022b8b51, 0x96d5ac3a, 0x017da67d, 0xd1cf3ed6, 0x7c7d2d28,"},{"Add":" 0x1f9f25cf, 0xadf2b89b, 0x5ad6b472, 0x5a88f54c, 0xe029ac71, 0xe019a5e6,"},{"Add":" 0x47b0acfd, 0xed93fa9b, 0xe8d3c48d, 0x283b57cc, 0xf8d56629, 0x79132e28,"},{"Add":" 0x785f0191, 0xed756055, 0xf7960e44, 0xe3d35e8c, 0x15056dd4, 0x88f46dba,"},{"Add":" 0x03a16125, 0x0564f0bd, 0xc3eb9e15, 0x3c9057a2, 0x97271aec, 0xa93a072a,"},{"Add":" 0x1b3f6d9b, 0x1e6321f5, 0xf59c66fb, 0x26dcf319, 0x7533d928, 0xb155fdf5,"},{"Add":" 0x03563482, 0x8aba3cbb, 0x28517711, 0xc20ad9f8, 0xabcc5167, 0xccad925f,"},{"Add":" 0x4de81751, 0x3830dc8e, 0x379d5862, 0x9320f991, 0xea7a90c2, 0xfb3e7bce,"},{"Add":" 0x5121ce64, 0x774fbe32, 0xa8b6e37e, 0xc3293d46, 0x48de5369, 0x6413e680,"},{"Add":" 0xa2ae0810, 0xdd6db224, 0x69852dfd, 0x09072166, 0xb39a460a, 0x6445c0dd,"},{"Add":" 0x586cdecf, 0x1c20c8ae, 0x5bbef7dd, 0x1b588d40, 0xccd2017f, 0x6bb4e3bb,"},{"Add":" 0xdda26a7e, 0x3a59ff45, 0x3e350a44, 0xbcb4cdd5, 0x72eacea8, 0xfa6484bb,"},{"Add":" 0x8d6612ae, 0xbf3c6f47, 0xd29be463, 0x542f5d9e, 0xaec2771b, 0xf64e6370,"},{"Add":" 0x740e0d8d, 0xe75b1357, 0xf8721671, 0xaf537d5d, 0x4040cb08, 0x4eb4e2cc,"},{"Add":" 0x34d2466a, 0x0115af84, 0xe1b00428, 0x95983a1d, 0x06b89fb4, 0xce6ea048,"},{"Add":" 0x6f3f3b82, 0x3520ab82, 0x011a1d4b, 0x277227f8, 0x611560b1, 0xe7933fdc,"},{"Add":" 0xbb3a792b, 0x344525bd, 0xa08839e1, 0x51ce794b, 0x2f32c9b7, 0xa01fbac9,"},{"Add":" 0xe01cc87e, 0xbcc7d1f6, 0xcf0111c3, 0xa1e8aac7, 0x1a908749, 0xd44fbd9a,"},{"Add":" 0xd0dadecb, 0xd50ada38, 0x0339c32a, 0xc6913667, 0x8df9317c, 0xe0b12b4f,"},{"Add":" 0xf79e59b7, 0x43f5bb3a, 0xf2d519ff, 0x27d9459c, 0xbf97222c, 0x15e6fc2a,"},{"Add":" 0x0f91fc71, 0x9b941525, 0xfae59361, 0xceb69ceb, 0xc2a86459, 0x12baa8d1,"},{"Add":" 0xb6c1075e, 0xe3056a0c, 0x10d25065, 0xcb03a442, 0xe0ec6e0e, 0x1698db3b,"},{"Add":" 0x4c98a0be, 0x3278e964, 0x9f1f9532, 0xe0d392df, 0xd3a0342b, 0x8971f21e,"},{"Add":" 0x1b0a7441, 0x4ba3348c, 0xc5be7120, 0xc37632d8, 0xdf359f8d, 0x9b992f2e,"},{"Add":" 0xe60b6f47, 0x0fe3f11d, 0xe54cda54, 0x1edad891, 0xce6279cf, 0xcd3e7e6f,"},{"Add":" 0x1618b166, 0xfd2c1d05, 0x848fd2c5, 0xf6fb2299, 0xf523f357, 0xa6327623,"},{"Add":" 0x93a83531, 0x56cccd02, 0xacf08162, 0x5a75ebb5, 0x6e163697, 0x88d273cc,"},{"Add":" 0xde966292, 0x81b949d0, 0x4c50901b, 0x71c65614, 0xe6c6c7bd, 0x327a140a,"},{"Add":" 0x45e1d006, 0xc3f27b9a, 0xc9aa53fd, 0x62a80f00, 0xbb25bfe2, 0x35bdd2f6,"},{"Add":" 0x71126905, 0xb2040222, 0xb6cbcf7c, 0xcd769c2b, 0x53113ec0, 0x1640e3d3,"},{"Add":" 0x38abbd60, 0x2547adf0, 0xba38209c, 0xf746ce76, 0x77afa1c5, 0x20756060,"},{"Add":" 0x85cbfe4e, 0x8ae88dd8, 0x7aaaf9b0, 0x4cf9aa7e, 0x1948c25c, 0x02fb8a8c,"},{"Add":" 0x01c36ae4, 0xd6ebe1f9, 0x90d4f869, 0xa65cdea0, 0x3f09252d, 0xc208e69f,"},{"Add":" 0xb74e6132, 0xce77e25b, 0x578fdfe3, 0x3ac372e6,"},{"Add":" ],"},{"Add":" ],"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" // For bcrypt. Use Blowfish::new instead."},{"Add":" pub fn expand_key(&mut self, key: &[u8]) {"},{"Add":" let mut key_pos = 0;"},{"Add":" for i in 0..18 {"},{"Add":" self.p[i] ^= next_u32_wrap(key, &mut key_pos);"},{"Add":" }"},{"Add":" let mut l = 0u32;"},{"Add":" let mut r = 0u32;"},{"Add":" let mut i = 0;"},{"Add":" while i < 18 {"},{"Add":" let (new_l, new_r) = self.encrypt(l, r);"},{"Add":" l = new_l;"},{"Add":" r = new_r;"},{"Add":" self.p[i] = l;"},{"Add":" self.p[i + 1] = r;"},{"Add":" i += 2"},{"Add":" }"},{"Add":" for i in 0..4 {"},{"Add":" let mut j = 0;"},{"Add":" while j < 256 {"},{"Add":" let (new_l, new_r) = self.encrypt(l, r);"},{"Add":" l = new_l;"},{"Add":" r = new_r;"},{"Add":" self.s[i][j] = l;"},{"Add":" self.s[i][j + 1] = r;"},{"Add":" j += 2"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" // Bcrypt key schedule."},{"Add":" pub fn salted_expand_key(&mut self, salt: &[u8], key: &[u8]) {"},{"Add":" let mut key_pos = 0;"},{"Add":" for i in 0..18 {"},{"Add":" self.p[i] ^= next_u32_wrap(key, &mut key_pos);"},{"Add":" }"},{"Add":" let mut l = 0u32;"},{"Add":" let mut r = 0u32;"},{"Add":" let mut salt_pos = 0;"},{"Add":" let mut i = 0;"},{"Add":" while i < 18 {"},{"Add":" let (new_l, new_r) = self.encrypt("},{"Add":" l ^ next_u32_wrap(salt, &mut salt_pos),"},{"Add":" r ^ next_u32_wrap(salt, &mut salt_pos),"},{"Add":" );"},{"Add":" l = new_l;"},{"Add":" r = new_r;"},{"Add":" self.p[i] = l;"},{"Add":" self.p[i + 1] = r;"},{"Add":" i += 2"},{"Add":" }"},{"Add":" for i in 0..4 {"},{"Add":" let mut j = 0;"},{"Add":" while j < 256 {"},{"Add":" let (new_l, new_r) = self.encrypt("},{"Add":" l ^ next_u32_wrap(salt, &mut salt_pos),"},{"Add":" r ^ next_u32_wrap(salt, &mut salt_pos),"},{"Add":" );"},{"Add":" l = new_l;"},{"Add":" r = new_r;"},{"Add":" self.s[i][j] = l;"},{"Add":" self.s[i][j + 1] = r;"},{"Add":""},{"Add":" let (new_l, new_r) = self.encrypt("},{"Add":" l ^ next_u32_wrap(salt, &mut salt_pos),"},{"Add":" r ^ next_u32_wrap(salt, &mut salt_pos),"},{"Add":" );"},{"Add":" l = new_l;"},{"Add":" r = new_r;"},{"Add":" self.s[i][j + 2] = l;"},{"Add":" self.s[i][j + 3] = r;"},{"Add":" j += 4"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" fn round_function(&self, x: u32) -> u32 {"},{"Add":" ((self.s[0][(x >> 24) as usize].wrapping_add(self.s[1][((x >> 16) & 0xff) as usize]))"},{"Add":" ^ self.s[2][((x >> 8) & 0xff) as usize])"},{"Add":" .wrapping_add(self.s[3][(x & 0xff) as usize])"},{"Add":" }"},{"Add":""},{"Add":" // Public for bcrypt."},{"Add":" pub fn encrypt(&self, mut l: u32, mut r: u32) -> (u32, u32) {"},{"Add":" let mut i = 0;"},{"Add":" while i < 16 {"},{"Add":" l ^= self.p[i];"},{"Add":" r ^= self.round_function(l);"},{"Add":" r ^= self.p[i + 1];"},{"Add":" l ^= self.round_function(r);"},{"Add":" i += 2"},{"Add":" }"},{"Add":" l ^= self.p[16];"},{"Add":" r ^= self.p[17];"},{"Add":" (r, l)"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"bcrypt_pbkdf.rs","metadata":420},"context":[{"change":0,"pos":5805}],"contents":[{"Add":"// From the rust-crypto project."},{"Add":""},{"Add":"// Licensed under the Apache License, Version 2.0 or the MIT license"},{"Add":"// , at your"},{"Add":"// option. This file may not be copied, modified, or distributed"},{"Add":"// except according to those terms."},{"Add":""},{"Add":"use crate::blowfish::*;"},{"Add":"use byteorder::{BigEndian, ByteOrder, LittleEndian};"},{"Add":"use openssl::sha::Sha512;"},{"Add":""},{"Add":"fn bcrypt_hash(hpass: &[u8], hsalt: &[u8], output: &mut [u8; 32]) {"},{"Add":" let mut bf = Blowfish::init_state();"},{"Add":" bf.salted_expand_key(hsalt, hpass);"},{"Add":""},{"Add":" for _ in 0..64 {"},{"Add":" bf.expand_key(hsalt);"},{"Add":" bf.expand_key(hpass);"},{"Add":" }"},{"Add":""},{"Add":" // b\"OxychromaticBlowfishSwatDynamite\""},{"Add":" let mut buf: [u32; 8] = ["},{"Add":" 1333295459, 1752330093, 1635019107, 1114402679, 1718186856, 1400332660, 1148808801,"},{"Add":" 1835627621,"},{"Add":" ];"},{"Add":" let mut i = 0;"},{"Add":" while i < 8 {"},{"Add":" for _ in 0..64 {"},{"Add":" let (l, r) = bf.encrypt(buf[i], buf[i + 1]);"},{"Add":" buf[i] = l;"},{"Add":" buf[i + 1] = r;"},{"Add":" }"},{"Add":" i += 2"},{"Add":" }"},{"Add":""},{"Add":" for i in 0..8 {"},{"Add":" LittleEndian::write_u32(&mut output[i * 4..(i + 1) * 4], buf[i]);"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"pub fn bcrypt_pbkdf(password: &[u8], salt: &[u8], rounds: u32, output: &mut [u8]) {"},{"Add":" assert!(password.len() > 0);"},{"Add":" assert!(salt.len() > 0);"},{"Add":" assert!(rounds > 0);"},{"Add":" assert!(output.len() > 0);"},{"Add":" assert!(output.len() <= 1024);"},{"Add":""},{"Add":" let nblocks = (output.len() + 31) / 32;"},{"Add":""},{"Add":" let hpass = {"},{"Add":" let mut hasher = Sha512::new();"},{"Add":" hasher.update(password);"},{"Add":" hasher.finish()"},{"Add":" };"},{"Add":""},{"Add":" for block in 1..(nblocks + 1) {"},{"Add":" let mut count = [0u8; 4];"},{"Add":" let mut out = [0u8; 32];"},{"Add":" BigEndian::write_u32(&mut count, block as u32);"},{"Add":""},{"Add":" let mut hasher = Sha512::new();"},{"Add":" hasher.update(salt);"},{"Add":" hasher.update(&count);"},{"Add":" let hsalt = hasher.finish();"},{"Add":""},{"Add":" bcrypt_hash(hpass.as_ref(), hsalt.as_ref(), &mut out);"},{"Add":" let mut tmp = out;"},{"Add":""},{"Add":" for _ in 1..rounds {"},{"Add":" let mut hasher = Sha512::new();"},{"Add":" hasher.update(&tmp);"},{"Add":" let hsalt = hasher.finish();"},{"Add":""},{"Add":" bcrypt_hash(hpass.as_ref(), hsalt.as_ref(), &mut tmp);"},{"Add":" for i in 0..out.len() {"},{"Add":" out[i] ^= tmp[i];"},{"Add":" }"},{"Add":""},{"Add":" for i in 0..out.len() {"},{"Add":" let idx = i * nblocks + (block - 1);"},{"Add":" if idx < output.len() {"},{"Add":" output[idx] = out[i];"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"agent","metadata":1005},"context":[{"change":0,"pos":5805}],"contents":[]}},{"FileAdd":{"meta":{"basename":"server.rs","metadata":420},"context":[{"change":0,"pos":125224}],"contents":[{"Add":"use crate::encoding::{Encoding, Position, Reader};"},{"Add":"use crate::key;"},{"Add":"use crate::key::SignatureHash;"},{"Add":"use byteorder::{BigEndian, ByteOrder};"},{"Add":"use cryptovec::CryptoVec;"},{"Add":"use futures::future::Future;"},{"Add":"use std;"},{"Add":"use std::collections::HashMap;"},{"Add":"use std::sync::{Arc, RwLock};"},{"Add":"use std::time::Duration;"},{"Add":"use std::time::SystemTime;"},{"Add":"use tokio;"},{"Add":"use tokio::io::{AsyncRead, AsyncReadExt, AsyncWrite, AsyncWriteExt};"},{"Add":"use tokio::stream::{Stream, StreamExt};"},{"Add":"use tokio::time::delay_for;"},{"Add":""},{"Add":"use super::msg;"},{"Add":"use super::Constraint;"},{"Add":"use crate::Error;"},{"Add":""},{"Add":"#[derive(Clone)]"},{"Add":"struct KeyStore(Arc, (Arc, SystemTime, Vec)>>>);"},{"Add":""},{"Add":"#[derive(Clone)]"},{"Add":"struct Lock(Arc>);"},{"Add":""},{"Add":"#[allow(missing_docs)]"},{"Add":"#[derive(Debug)]"},{"Add":"pub enum ServerError {"},{"Add":" E(E),"},{"Add":" Error(Error),"},{"Add":"}"},{"Add":""},{"Add":"pub trait Agent: Clone + Send + 'static {"},{"Add":" fn confirm("},{"Add":" self,"},{"Add":" _pk: Arc,"},{"Add":" ) -> Box + Unpin + Send> {"},{"Add":" Box::new(futures::future::ready((self, true)))"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"pub async fn serve(mut listener: L, agent: A) -> Result<(), Error>"},{"Add":"where"},{"Add":" S: AsyncRead + AsyncWrite + Send + Sync + Unpin + 'static,"},{"Add":" L: Stream> + Unpin,"},{"Add":" A: Agent + Send + Sync + 'static,"},{"Add":"{"},{"Add":" let keys = KeyStore(Arc::new(RwLock::new(HashMap::new())));"},{"Add":" let lock = Lock(Arc::new(RwLock::new(CryptoVec::new())));"},{"Add":" while let Some(Ok(stream)) = listener.next().await {"},{"Add":" let mut buf = CryptoVec::new();"},{"Add":" buf.resize(4);"},{"Add":" tokio::spawn("},{"Add":" (Connection {"},{"Add":" lock: lock.clone(),"},{"Add":" keys: keys.clone(),"},{"Add":" agent: Some(agent.clone()),"},{"Add":" s: stream,"},{"Add":" buf: CryptoVec::new(),"},{"Add":" })"},{"Add":" .run(),"},{"Add":" );"},{"Add":" }"},{"Add":" Ok(())"},{"Add":"}"},{"Add":""},{"Add":"impl Agent for () {"},{"Add":" fn confirm("},{"Add":" self,"},{"Add":" _: Arc,"},{"Add":" ) -> Box + Unpin + Send> {"},{"Add":" Box::new(futures::future::ready((self, true)))"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"struct Connection {"},{"Add":" lock: Lock,"},{"Add":" keys: KeyStore,"},{"Add":" agent: Option,"},{"Add":" s: S,"},{"Add":" buf: CryptoVec,"},{"Add":"}"},{"Add":""},{"Add":"impl"},{"Add":" Connection"},{"Add":"{"},{"Add":" async fn run(mut self) -> Result<(), anyhow::Error> {"},{"Add":" let mut writebuf = CryptoVec::new();"},{"Add":" loop {"},{"Add":" // Reading the length"},{"Add":" self.buf.clear();"},{"Add":" self.buf.resize(4);"},{"Add":" self.s.read_exact(&mut self.buf).await?;"},{"Add":" // Reading the rest of the buffer"},{"Add":" let len = BigEndian::read_u32(&self.buf) as usize;"},{"Add":" self.buf.clear();"},{"Add":" self.buf.resize(len);"},{"Add":" self.s.read_exact(&mut self.buf).await?;"},{"Add":" // respond"},{"Add":" writebuf.clear();"},{"Add":" self.respond(&mut writebuf).await?;"},{"Add":" self.s.write_all(&writebuf).await?;"},{"Add":" self.s.flush().await?"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" async fn respond(&mut self, writebuf: &mut CryptoVec) -> Result<(), anyhow::Error> {"},{"Add":" let is_locked = {"},{"Add":" if let Ok(password) = self.lock.0.read() {"},{"Add":" !password.is_empty()"},{"Add":" } else {"},{"Add":" true"},{"Add":" }"},{"Add":" };"},{"Add":" writebuf.extend(&[0, 0, 0, 0]);"},{"Add":" let mut r = self.buf.reader(0);"},{"Add":" match r.read_byte() {"},{"Add":" Ok(11) if !is_locked => {"},{"Add":" // request identities"},{"Add":" if let Ok(keys) = self.keys.0.read() {"},{"Add":" writebuf.push(msg::IDENTITIES_ANSWER);"},{"Add":" writebuf.push_u32_be(keys.len() as u32);"},{"Add":" for (k, _) in keys.iter() {"},{"Add":" writebuf.extend_ssh_string(k);"},{"Add":" writebuf.extend_ssh_string(b\"\");"},{"Add":" }"},{"Add":" } else {"},{"Add":" writebuf.push(msg::FAILURE)"},{"Add":" }"},{"Add":" }"},{"Add":" Ok(13) if !is_locked => {"},{"Add":" // sign request"},{"Add":" let agent = self.agent.take().unwrap();"},{"Add":" let (agent, signed) = self.try_sign(agent, r, writebuf).await?;"},{"Add":" self.agent = Some(agent);"},{"Add":" if signed {"},{"Add":" return Ok(());"},{"Add":" } else {"},{"Add":" writebuf.resize(4);"},{"Add":" writebuf.push(msg::FAILURE)"},{"Add":" }"},{"Add":" }"},{"Add":" Ok(17) if !is_locked => {"},{"Add":" // add identity"},{"Add":" if let Ok(true) = self.add_key(r, false, writebuf).await {"},{"Add":" } else {"},{"Add":" writebuf.push(msg::FAILURE)"},{"Add":" }"},{"Add":" }"},{"Add":" Ok(18) if !is_locked => {"},{"Add":" // remove identity"},{"Add":" if let Ok(true) = self.remove_identity(r) {"},{"Add":" writebuf.push(msg::SUCCESS)"},{"Add":" } else {"},{"Add":" writebuf.push(msg::FAILURE)"},{"Add":" }"},{"Add":" }"},{"Add":" Ok(19) if !is_locked => {"},{"Add":" // remove all identities"},{"Add":" if let Ok(mut keys) = self.keys.0.write() {"},{"Add":" keys.clear();"},{"Add":" writebuf.push(msg::SUCCESS)"},{"Add":" } else {"},{"Add":" writebuf.push(msg::FAILURE)"},{"Add":" }"},{"Add":" }"},{"Add":" Ok(22) if !is_locked => {"},{"Add":" // lock"},{"Add":" if let Ok(()) = self.lock(r) {"},{"Add":" writebuf.push(msg::SUCCESS)"},{"Add":" } else {"},{"Add":" writebuf.push(msg::FAILURE)"},{"Add":" }"},{"Add":" }"},{"Add":" Ok(23) if is_locked => {"},{"Add":" // unlock"},{"Add":" if let Ok(true) = self.unlock(r) {"},{"Add":" writebuf.push(msg::SUCCESS)"},{"Add":" } else {"},{"Add":" writebuf.push(msg::FAILURE)"},{"Add":" }"},{"Add":" }"},{"Add":" Ok(25) if !is_locked => {"},{"Add":" // add identity constrained"},{"Add":" if let Ok(true) = self.add_key(r, true, writebuf).await {"},{"Add":" } else {"},{"Add":" writebuf.push(msg::FAILURE)"},{"Add":" }"},{"Add":" }"},{"Add":" _ => {"},{"Add":" // Message not understood"},{"Add":" writebuf.push(msg::FAILURE)"},{"Add":" }"},{"Add":" }"},{"Add":" let len = writebuf.len() - 4;"},{"Add":" BigEndian::write_u32(&mut writebuf[0..], len as u32);"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" fn lock(&self, mut r: Position) -> Result<(), anyhow::Error> {"},{"Add":" let password = r.read_string()?;"},{"Add":" let mut lock = self.lock.0.write().unwrap();"},{"Add":" lock.extend(password);"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" fn unlock(&self, mut r: Position) -> Result {"},{"Add":" let password = r.read_string()?;"},{"Add":" let mut lock = self.lock.0.write().unwrap();"},{"Add":" if &lock[0..] == password {"},{"Add":" lock.clear();"},{"Add":" Ok(true)"},{"Add":" } else {"},{"Add":" Ok(false)"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" fn remove_identity(&self, mut r: Position) -> Result {"},{"Add":" if let Ok(mut keys) = self.keys.0.write() {"},{"Add":" if keys.remove(r.read_string()?).is_some() {"},{"Add":" Ok(true)"},{"Add":" } else {"},{"Add":" Ok(false)"},{"Add":" }"},{"Add":" } else {"},{"Add":" Ok(false)"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" async fn add_key<'a>("},{"Add":" &self,"},{"Add":" mut r: Position<'a>,"},{"Add":" constrained: bool,"},{"Add":" writebuf: &mut CryptoVec,"},{"Add":" ) -> Result {"},{"Add":" let pos0 = r.position;"},{"Add":" let t = r.read_string()?;"},{"Add":" let (blob, key) = match t {"},{"Add":" b\"ssh-ed25519\" => {"},{"Add":" let public_ = r.read_string()?;"},{"Add":" let pos1 = r.position;"},{"Add":" let concat = r.read_string()?;"},{"Add":" let _comment = r.read_string()?;"},{"Add":" if &concat[32..64] != public_ {"},{"Add":" return Ok(false);"},{"Add":" }"},{"Add":" use key::ed25519::*;"},{"Add":" let mut public = PublicKey::new_zeroed();"},{"Add":" let mut secret = SecretKey::new_zeroed();"},{"Add":" public.key.clone_from_slice(&public_[..32]);"},{"Add":" secret.key.clone_from_slice(&concat[..]);"},{"Add":" writebuf.push(msg::SUCCESS);"},{"Add":" (self.buf[pos0..pos1].to_vec(), key::KeyPair::Ed25519(secret))"},{"Add":" }"},{"Add":" b\"ssh-rsa\" => {"},{"Add":" use openssl::bn::{BigNum, BigNumContext};"},{"Add":" use openssl::rsa::Rsa;"},{"Add":" let n = r.read_mpint()?;"},{"Add":" let e = r.read_mpint()?;"},{"Add":" let d = BigNum::from_slice(r.read_mpint()?)?;"},{"Add":" let q_inv = r.read_mpint()?;"},{"Add":" let p = BigNum::from_slice(r.read_mpint()?)?;"},{"Add":" let q = BigNum::from_slice(r.read_mpint()?)?;"},{"Add":" let (dp, dq) = {"},{"Add":" let one = BigNum::from_u32(1)?;"},{"Add":" let p1 = p.as_ref() - one.as_ref();"},{"Add":" let q1 = q.as_ref() - one.as_ref();"},{"Add":" let mut context = BigNumContext::new()?;"},{"Add":" let mut dp = BigNum::new()?;"},{"Add":" let mut dq = BigNum::new()?;"},{"Add":" dp.checked_rem(&d, &p1, &mut context)?;"},{"Add":" dq.checked_rem(&d, &q1, &mut context)?;"},{"Add":" (dp, dq)"},{"Add":" };"},{"Add":" let _comment = r.read_string()?;"},{"Add":" let key = Rsa::from_private_components("},{"Add":" BigNum::from_slice(n)?,"},{"Add":" BigNum::from_slice(e)?,"},{"Add":" d,"},{"Add":" p,"},{"Add":" q,"},{"Add":" dp,"},{"Add":" dq,"},{"Add":" BigNum::from_slice(&q_inv)?,"},{"Add":" )?;"},{"Add":""},{"Add":" let len0 = writebuf.len();"},{"Add":" writebuf.extend_ssh_string(b\"ssh-rsa\");"},{"Add":" writebuf.extend_ssh_mpint(&e);"},{"Add":" writebuf.extend_ssh_mpint(&n);"},{"Add":" let blob = writebuf[len0..].to_vec();"},{"Add":" writebuf.resize(len0);"},{"Add":" writebuf.push(msg::SUCCESS);"},{"Add":" ("},{"Add":" blob,"},{"Add":" key::KeyPair::RSA {"},{"Add":" key,"},{"Add":" hash: SignatureHash::SHA2_256,"},{"Add":" },"},{"Add":" )"},{"Add":" }"},{"Add":" _ => return Ok(false),"},{"Add":" };"},{"Add":" let mut w = self.keys.0.write().unwrap();"},{"Add":" let now = SystemTime::now();"},{"Add":" if constrained {"},{"Add":" let n = r.read_u32()?;"},{"Add":" let mut c = Vec::new();"},{"Add":" for _ in 0..n {"},{"Add":" let t = r.read_byte()?;"},{"Add":" if t == msg::CONSTRAIN_LIFETIME {"},{"Add":" let seconds = r.read_u32()?;"},{"Add":" c.push(Constraint::KeyLifetime { seconds });"},{"Add":" let blob = blob.clone();"},{"Add":" let keys = self.keys.clone();"},{"Add":" tokio::spawn(async move {"},{"Add":" delay_for(Duration::from_secs(seconds as u64)).await;"},{"Add":" let mut keys = keys.0.write().unwrap();"},{"Add":" let delete = if let Some(&(_, time, _)) = keys.get(&blob) {"},{"Add":" time == now"},{"Add":" } else {"},{"Add":" false"},{"Add":" };"},{"Add":" if delete {"},{"Add":" keys.remove(&blob);"},{"Add":" }"},{"Add":" });"},{"Add":" } else if t == msg::CONSTRAIN_CONFIRM {"},{"Add":" c.push(Constraint::Confirm)"},{"Add":" } else {"},{"Add":" return Ok(false);"},{"Add":" }"},{"Add":" }"},{"Add":" w.insert(blob, (Arc::new(key), now, Vec::new()));"},{"Add":" } else {"},{"Add":" w.insert(blob, (Arc::new(key), now, Vec::new()));"},{"Add":" }"},{"Add":" Ok(true)"},{"Add":" }"},{"Add":""},{"Add":" async fn try_sign<'a>("},{"Add":" &self,"},{"Add":" agent: A,"},{"Add":" mut r: Position<'a>,"},{"Add":" writebuf: &mut CryptoVec,"},{"Add":" ) -> Result<(A, bool), anyhow::Error> {"},{"Add":" let mut needs_confirm = false;"},{"Add":" let key = {"},{"Add":" let blob = r.read_string()?;"},{"Add":" let k = self.keys.0.read().unwrap();"},{"Add":" if let Some(&(ref key, _, ref constraints)) = k.get(blob) {"},{"Add":" if constraints.iter().any(|c| *c == Constraint::Confirm) {"},{"Add":" needs_confirm = true;"},{"Add":" }"},{"Add":" key.clone()"},{"Add":" } else {"},{"Add":" return Ok((agent, false));"},{"Add":" }"},{"Add":" };"},{"Add":" let agent = if needs_confirm {"},{"Add":" let (agent, ok) = agent.confirm(key.clone()).await;"},{"Add":" if !ok {"},{"Add":" return Ok((agent, false));"},{"Add":" }"},{"Add":" agent"},{"Add":" } else {"},{"Add":" agent"},{"Add":" };"},{"Add":" writebuf.push(msg::SIGN_RESPONSE);"},{"Add":" let data = r.read_string()?;"},{"Add":" key.add_signature(writebuf, data)?;"},{"Add":" let len = writebuf.len();"},{"Add":" BigEndian::write_u32(writebuf, (len - 4) as u32);"},{"Add":""},{"Add":" Ok((agent, true))"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"msg.rs","metadata":420},"context":[{"change":0,"pos":125224}],"contents":[{"Add":"pub const FAILURE: u8 = 5;"},{"Add":"pub const SUCCESS: u8 = 6;"},{"Add":"pub const IDENTITIES_ANSWER: u8 = 12;"},{"Add":"pub const SIGN_RESPONSE: u8 = 14;"},{"Add":"// pub const EXTENSION_FAILURE: u8 = 28;"},{"Add":""},{"Add":"pub const REQUEST_IDENTITIES: u8 = 11;"},{"Add":"pub const SIGN_REQUEST: u8 = 13;"},{"Add":"pub const ADD_IDENTITY: u8 = 17;"},{"Add":"pub const REMOVE_IDENTITY: u8 = 18;"},{"Add":"pub const REMOVE_ALL_IDENTITIES: u8 = 19;"},{"Add":"pub const ADD_ID_CONSTRAINED: u8 = 25;"},{"Add":"pub const ADD_SMARTCARD_KEY: u8 = 20;"},{"Add":"pub const REMOVE_SMARTCARD_KEY: u8 = 21;"},{"Add":"pub const LOCK: u8 = 22;"},{"Add":"pub const UNLOCK: u8 = 23;"},{"Add":"pub const ADD_SMARTCARD_KEY_CONSTRAINED: u8 = 26;"},{"Add":"pub const EXTENSION: u8 = 27;"},{"Add":""},{"Add":"pub const CONSTRAIN_LIFETIME: u8 = 1;"},{"Add":"pub const CONSTRAIN_CONFIRM: u8 = 2;"},{"Add":"pub const CONSTRAIN_EXTENSION: u8 = 3;"}]}},{"FileAdd":{"meta":{"basename":"mod.rs","metadata":420},"context":[{"change":0,"pos":125224}],"contents":[{"Add":"/// Write clients for SSH agents."},{"Add":"pub mod client;"},{"Add":"mod msg;"},{"Add":"/// Write servers for SSH agents."},{"Add":"pub mod server;"},{"Add":""},{"Add":"/// Constraints on how keys can be used"},{"Add":"#[derive(Debug, PartialEq, Eq)]"},{"Add":"pub enum Constraint {"},{"Add":" /// The key shall disappear from the agent's memory after that many seconds."},{"Add":" KeyLifetime { seconds: u32 },"},{"Add":" /// Signatures need to be confirmed by the agent (for instance using a dialog)."},{"Add":" Confirm,"},{"Add":" /// Custom constraints"},{"Add":" Extensions { name: Vec, details: Vec },"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"client.rs","metadata":420},"context":[{"change":0,"pos":125224}],"contents":[{"Add":"use super::msg;"},{"Add":"use super::Constraint;"},{"Add":"use crate::encoding::{Encoding, Reader};"},{"Add":"use crate::key;"},{"Add":"use crate::key::{PublicKey, SignatureHash};"},{"Add":"use crate::Error;"},{"Add":"use byteorder::{BigEndian, ByteOrder};"},{"Add":"use cryptovec::CryptoVec;"},{"Add":"use tokio;"},{"Add":"use tokio::io::{AsyncRead, AsyncReadExt, AsyncWrite, AsyncWriteExt};"},{"Add":""},{"Add":"/// SSH agent client."},{"Add":"pub struct AgentClient {"},{"Add":" stream: S,"},{"Add":" buf: CryptoVec,"},{"Add":"}"},{"Add":""},{"Add":"// https://tools.ietf.org/html/draft-miller-ssh-agent-00#section-4.1"},{"Add":"impl AgentClient {"},{"Add":" /// Build a future that connects to an SSH agent via the provided"},{"Add":" /// stream (on Unix, usually a Unix-domain socket)."},{"Add":" pub fn connect(stream: S) -> Self {"},{"Add":" AgentClient {"},{"Add":" stream,"},{"Add":" buf: CryptoVec::new(),"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl AgentClient {"},{"Add":" /// Build a future that connects to an SSH agent via the provided"},{"Add":" /// stream (on Unix, usually a Unix-domain socket)."},{"Add":" pub async fn connect_uds>(path: P) -> Result {"},{"Add":" let stream = tokio::net::UnixStream::connect(path).await?;"},{"Add":" Ok(AgentClient {"},{"Add":" stream,"},{"Add":" buf: CryptoVec::new(),"},{"Add":" })"},{"Add":" }"},{"Add":""},{"Add":" /// Build a future that connects to an SSH agent via the provided"},{"Add":" /// stream (on Unix, usually a Unix-domain socket)."},{"Add":" pub async fn connect_env() -> Result {"},{"Add":" let var = std::env::var(\"SSH_AUTH_SOCK\")?;"},{"Add":" Self::connect_uds(var).await"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl AgentClient {"},{"Add":" async fn read_response(&mut self) -> Result<(), anyhow::Error> {"},{"Add":" // Writing the message"},{"Add":" self.stream.write_all(&self.buf).await?;"},{"Add":" self.stream.flush().await?;"},{"Add":""},{"Add":" // Reading the length"},{"Add":" self.buf.clear();"},{"Add":" self.buf.resize(4);"},{"Add":" self.stream.read_exact(&mut self.buf).await?;"},{"Add":""},{"Add":" // Reading the rest of the buffer"},{"Add":" let len = BigEndian::read_u32(&self.buf) as usize;"},{"Add":" self.buf.clear();"},{"Add":" self.buf.resize(len);"},{"Add":" self.stream.read_exact(&mut self.buf).await?;"},{"Add":""},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Send a key to the agent, with a (possibly empty) slice of"},{"Add":" /// constraints to apply when using the key to sign."},{"Add":" pub async fn add_identity("},{"Add":" &mut self,"},{"Add":" key: &key::KeyPair,"},{"Add":" constraints: &[Constraint],"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" self.buf.clear();"},{"Add":" self.buf.resize(4);"},{"Add":" if constraints.is_empty() {"},{"Add":" self.buf.push(msg::ADD_IDENTITY)"},{"Add":" } else {"},{"Add":" self.buf.push(msg::ADD_ID_CONSTRAINED)"},{"Add":" }"},{"Add":" match *key {"},{"Add":" key::KeyPair::Ed25519(ref secret) => {"},{"Add":" self.buf.extend_ssh_string(b\"ssh-ed25519\");"},{"Add":" let public = &secret.key[32..];"},{"Add":" self.buf.extend_ssh_string(public);"},{"Add":" self.buf.push_u32_be(64);"},{"Add":" self.buf.extend(&secret.key);"},{"Add":" self.buf.extend_ssh_string(b\"\");"},{"Add":" }"},{"Add":" key::KeyPair::RSA { ref key, .. } => {"},{"Add":" self.buf.extend_ssh_string(b\"ssh-rsa\");"},{"Add":" self.buf.extend_ssh_mpint(&key.n().to_vec());"},{"Add":" self.buf.extend_ssh_mpint(&key.e().to_vec());"},{"Add":" self.buf.extend_ssh_mpint(&key.d().to_vec());"},{"Add":" if let Some(iqmp) = key.iqmp() {"},{"Add":" self.buf.extend_ssh_mpint(&iqmp.to_vec());"},{"Add":" } else {"},{"Add":" let mut ctx = openssl::bn::BigNumContext::new()?;"},{"Add":" let mut iqmp = openssl::bn::BigNum::new()?;"},{"Add":" iqmp.mod_inverse(key.p().unwrap(), key.q().unwrap(), &mut ctx)?;"},{"Add":" self.buf.extend_ssh_mpint(&iqmp.to_vec());"},{"Add":" }"},{"Add":" self.buf.extend_ssh_mpint(&key.p().unwrap().to_vec());"},{"Add":" self.buf.extend_ssh_mpint(&key.q().unwrap().to_vec());"},{"Add":" self.buf.extend_ssh_string(b\"\");"},{"Add":" }"},{"Add":" }"},{"Add":" if !constraints.is_empty() {"},{"Add":" self.buf.push_u32_be(constraints.len() as u32);"},{"Add":" for cons in constraints {"},{"Add":" match *cons {"},{"Add":" Constraint::KeyLifetime { seconds } => {"},{"Add":" self.buf.push(msg::CONSTRAIN_LIFETIME);"},{"Add":" self.buf.push_u32_be(seconds)"},{"Add":" }"},{"Add":" Constraint::Confirm => self.buf.push(msg::CONSTRAIN_CONFIRM),"},{"Add":" Constraint::Extensions {"},{"Add":" ref name,"},{"Add":" ref details,"},{"Add":" } => {"},{"Add":" self.buf.push(msg::CONSTRAIN_EXTENSION);"},{"Add":" self.buf.extend_ssh_string(name);"},{"Add":" self.buf.extend_ssh_string(details);"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" let len = self.buf.len() - 4;"},{"Add":" BigEndian::write_u32(&mut self.buf[..], len as u32);"},{"Add":""},{"Add":" self.read_response().await?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Add a smart card to the agent, with a (possibly empty) set of"},{"Add":" /// constraints to apply when signing."},{"Add":" pub async fn add_smartcard_key("},{"Add":" &mut self,"},{"Add":" id: &str,"},{"Add":" pin: &[u8],"},{"Add":" constraints: &[Constraint],"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" self.buf.clear();"},{"Add":" self.buf.resize(4);"},{"Add":" if constraints.is_empty() {"},{"Add":" self.buf.push(msg::ADD_SMARTCARD_KEY)"},{"Add":" } else {"},{"Add":" self.buf.push(msg::ADD_SMARTCARD_KEY_CONSTRAINED)"},{"Add":" }"},{"Add":" self.buf.extend_ssh_string(id.as_bytes());"},{"Add":" self.buf.extend_ssh_string(pin);"},{"Add":" if !constraints.is_empty() {"},{"Add":" self.buf.push_u32_be(constraints.len() as u32);"},{"Add":" for cons in constraints {"},{"Add":" match *cons {"},{"Add":" Constraint::KeyLifetime { seconds } => {"},{"Add":" self.buf.push(msg::CONSTRAIN_LIFETIME);"},{"Add":" self.buf.push_u32_be(seconds)"},{"Add":" }"},{"Add":" Constraint::Confirm => self.buf.push(msg::CONSTRAIN_CONFIRM),"},{"Add":" Constraint::Extensions {"},{"Add":" ref name,"},{"Add":" ref details,"},{"Add":" } => {"},{"Add":" self.buf.push(msg::CONSTRAIN_EXTENSION);"},{"Add":" self.buf.extend_ssh_string(name);"},{"Add":" self.buf.extend_ssh_string(details);"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" let len = self.buf.len() - 4;"},{"Add":" BigEndian::write_u32(&mut self.buf[0..], len as u32);"},{"Add":" self.read_response().await?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Lock the agent, making it refuse to sign until unlocked."},{"Add":" pub async fn lock(&mut self, passphrase: &[u8]) -> Result<(), anyhow::Error> {"},{"Add":" self.buf.clear();"},{"Add":" self.buf.resize(4);"},{"Add":" self.buf.push(msg::LOCK);"},{"Add":" self.buf.extend_ssh_string(passphrase);"},{"Add":" let len = self.buf.len() - 4;"},{"Add":" BigEndian::write_u32(&mut self.buf[0..], len as u32);"},{"Add":" self.read_response().await?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Unlock the agent, allowing it to sign again."},{"Add":" pub async fn unlock(&mut self, passphrase: &[u8]) -> Result<(), anyhow::Error> {"},{"Add":" self.buf.clear();"},{"Add":" self.buf.resize(4);"},{"Add":" self.buf.push(msg::UNLOCK);"},{"Add":" self.buf.extend_ssh_string(passphrase);"},{"Add":" let len = self.buf.len() - 4;"},{"Add":" BigEndian::write_u32(&mut self.buf[0..], len as u32);"},{"Add":" self.read_response().await?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Ask the agent for a list of the currently registered secret"},{"Add":" /// keys."},{"Add":" pub async fn request_identities(&mut self) -> Result, anyhow::Error> {"},{"Add":" self.buf.clear();"},{"Add":" self.buf.resize(4);"},{"Add":" self.buf.push(msg::REQUEST_IDENTITIES);"},{"Add":" let len = self.buf.len() - 4;"},{"Add":" BigEndian::write_u32(&mut self.buf[0..], len as u32);"},{"Add":""},{"Add":" self.read_response().await?;"},{"Add":" debug!(\"identities: {:?}\", &self.buf[..]);"},{"Add":" let mut keys = Vec::new();"},{"Add":" if self.buf[0] == msg::IDENTITIES_ANSWER {"},{"Add":" let mut r = self.buf.reader(1);"},{"Add":" let n = r.read_u32()?;"},{"Add":" for _ in 0..n {"},{"Add":" let key = r.read_string()?;"},{"Add":" let _ = r.read_string()?;"},{"Add":" let mut r = key.reader(0);"},{"Add":" let t = r.read_string()?;"},{"Add":" debug!(\"t = {:?}\", std::str::from_utf8(t));"},{"Add":" match t {"},{"Add":" b\"ssh-rsa\" => {"},{"Add":" let e = r.read_mpint()?;"},{"Add":" let n = r.read_mpint()?;"},{"Add":" use openssl::bn::BigNum;"},{"Add":" use openssl::pkey::PKey;"},{"Add":" use openssl::rsa::Rsa;"},{"Add":" keys.push(PublicKey::RSA {"},{"Add":" key: key::OpenSSLPKey(PKey::from_rsa(Rsa::from_public_components("},{"Add":" BigNum::from_slice(n)?,"},{"Add":" BigNum::from_slice(e)?,"},{"Add":" )?)?),"},{"Add":" hash: SignatureHash::SHA2_512,"},{"Add":" })"},{"Add":" }"},{"Add":" b\"ssh-ed25519\" => {"},{"Add":" let mut p = key::ed25519::PublicKey::new_zeroed();"},{"Add":" p.key.clone_from_slice(r.read_string()?);"},{"Add":" keys.push(PublicKey::Ed25519(p))"},{"Add":" }"},{"Add":" t => return Err(Error::UnsupportedKeyType(t.to_vec()).into()),"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" Ok(keys)"},{"Add":" }"},{"Add":""},{"Add":" /// Ask the agent to sign the supplied piece of data."},{"Add":" pub fn sign_request("},{"Add":" mut self,"},{"Add":" public: &key::PublicKey,"},{"Add":" mut data: CryptoVec,"},{"Add":" ) -> impl futures::Future)> {"},{"Add":" debug!(\"sign_request: {:?}\", data);"},{"Add":" let hash = self.prepare_sign_request(public, &data);"},{"Add":" async move {"},{"Add":" let resp = self.read_response().await;"},{"Add":" debug!(\"resp = {:?}\", &self.buf[..]);"},{"Add":" if let Err(e) = resp {"},{"Add":" return (self, Err(e));"},{"Add":" }"},{"Add":""},{"Add":" if !self.buf.is_empty() && self.buf[0] == msg::SIGN_RESPONSE {"},{"Add":" let resp = self.write_signature(hash, &mut data);"},{"Add":" if let Err(e) = resp {"},{"Add":" return (self, Err(e));"},{"Add":" }"},{"Add":" (self, Ok(data))"},{"Add":" } else if self.buf[0] == msg::FAILURE {"},{"Add":" (self, Err(Error::AgentFailure.into()))"},{"Add":" } else {"},{"Add":" debug!(\"self.buf = {:?}\", &self.buf[..]);"},{"Add":" (self, Ok(data))"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" fn prepare_sign_request(&mut self, public: &key::PublicKey, data: &[u8]) -> u32 {"},{"Add":" self.buf.clear();"},{"Add":" self.buf.resize(4);"},{"Add":" self.buf.push(msg::SIGN_REQUEST);"},{"Add":" key_blob(&public, &mut self.buf);"},{"Add":" self.buf.extend_ssh_string(data);"},{"Add":" debug!(\"public = {:?}\", public);"},{"Add":" let hash = match public {"},{"Add":" PublicKey::RSA { hash, .. } => match hash {"},{"Add":" SignatureHash::SHA2_256 => 2,"},{"Add":" SignatureHash::SHA2_512 => 4,"},{"Add":" SignatureHash::SHA1 => 0,"},{"Add":" },"},{"Add":" _ => 0,"},{"Add":" };"},{"Add":" self.buf.push_u32_be(hash);"},{"Add":" let len = self.buf.len() - 4;"},{"Add":" BigEndian::write_u32(&mut self.buf[0..], len as u32);"},{"Add":" hash"},{"Add":" }"},{"Add":""},{"Add":" fn write_signature(&self, hash: u32, data: &mut CryptoVec) -> Result<(), anyhow::Error> {"},{"Add":" let mut r = self.buf.reader(1);"},{"Add":" let mut resp = r.read_string()?.reader(0);"},{"Add":" let t = resp.read_string()?;"},{"Add":" if (hash == 2 && t == b\"rsa-sha2-256\") || (hash == 4 && t == b\"rsa-sha2-512\") || hash == 0 {"},{"Add":" let sig = resp.read_string()?;"},{"Add":" data.push_u32_be((t.len() + sig.len() + 8) as u32);"},{"Add":" data.extend_ssh_string(t);"},{"Add":" data.extend_ssh_string(sig);"},{"Add":" }"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Ask the agent to sign the supplied piece of data."},{"Add":" pub fn sign_request_base64("},{"Add":" mut self,"},{"Add":" public: &key::PublicKey,"},{"Add":" data: &[u8],"},{"Add":" ) -> impl futures::Future)> {"},{"Add":" debug!(\"sign_request: {:?}\", data);"},{"Add":" self.prepare_sign_request(public, &data);"},{"Add":" async move {"},{"Add":" let resp = self.read_response().await;"},{"Add":" if let Err(e) = resp {"},{"Add":" return (self, Err(e));"},{"Add":" }"},{"Add":""},{"Add":" if !self.buf.is_empty() && self.buf[0] == msg::SIGN_RESPONSE {"},{"Add":" let base64 = data_encoding::BASE64_NOPAD.encode(&self.buf[1..]);"},{"Add":" (self, Ok(base64))"},{"Add":" } else {"},{"Add":" (self, Ok(String::new()))"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Ask the agent to sign the supplied piece of data, and return a `Signature`."},{"Add":" pub fn sign_request_signature("},{"Add":" mut self,"},{"Add":" public: &key::PublicKey,"},{"Add":" data: &[u8],"},{"Add":" ) -> impl futures::Future>"},{"Add":" {"},{"Add":" debug!(\"sign_request: {:?}\", data);"},{"Add":" self.prepare_sign_request(public, data);"},{"Add":""},{"Add":" async move {"},{"Add":" self.read_response().await?;"},{"Add":" if !self.buf.is_empty() && self.buf[0] == msg::SIGN_RESPONSE {"},{"Add":" let sig: Result = {"},{"Add":" let mut r = self.buf.reader(1);"},{"Add":" let mut resp = r.read_string()?.reader(0);"},{"Add":" let typ = resp.read_string()?;"},{"Add":" let sig = resp.read_string()?;"},{"Add":" use crate::signature::Signature;"},{"Add":" match typ {"},{"Add":" b\"rsa-sha2-256\" => Ok(Signature::RSA {"},{"Add":" bytes: sig.to_vec(),"},{"Add":" hash: SignatureHash::SHA2_256,"},{"Add":" }),"},{"Add":" b\"rsa-sha2-512\" => Ok(Signature::RSA {"},{"Add":" bytes: sig.to_vec(),"},{"Add":" hash: SignatureHash::SHA2_512,"},{"Add":" }),"},{"Add":" b\"ssh-ed25519\" => {"},{"Add":" let mut sig_bytes = [0; 64];"},{"Add":" sig_bytes.clone_from_slice(sig);"},{"Add":" Ok(Signature::Ed25519(crate::signature::SignatureBytes("},{"Add":" sig_bytes,"},{"Add":" )))"},{"Add":" }"},{"Add":" _ => Err((Error::UnknownSignatureType {"},{"Add":" sig_type: std::str::from_utf8(typ).unwrap_or(\"\").to_string(),"},{"Add":" })"},{"Add":" .into()),"},{"Add":" }"},{"Add":" };"},{"Add":" Ok((self, sig?))"},{"Add":" } else {"},{"Add":" Err(Error::AgentProtocolError.into())"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Ask the agent to remove a key from its memory."},{"Add":" pub async fn remove_identity(&mut self, public: &key::PublicKey) -> Result<(), anyhow::Error> {"},{"Add":" self.buf.clear();"},{"Add":" self.buf.resize(4);"},{"Add":" self.buf.push(msg::REMOVE_IDENTITY);"},{"Add":" key_blob(public, &mut self.buf);"},{"Add":" let len = self.buf.len() - 4;"},{"Add":" BigEndian::write_u32(&mut self.buf[0..], len as u32);"},{"Add":" self.read_response().await?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Ask the agent to remove a smartcard from its memory."},{"Add":" pub async fn remove_smartcard_key("},{"Add":" &mut self,"},{"Add":" id: &str,"},{"Add":" pin: &[u8],"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" self.buf.clear();"},{"Add":" self.buf.resize(4);"},{"Add":" self.buf.push(msg::REMOVE_SMARTCARD_KEY);"},{"Add":" self.buf.extend_ssh_string(id.as_bytes());"},{"Add":" self.buf.extend_ssh_string(pin);"},{"Add":" let len = self.buf.len() - 4;"},{"Add":" BigEndian::write_u32(&mut self.buf[0..], len as u32);"},{"Add":" self.read_response().await?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Ask the agent to forget all known keys."},{"Add":" pub async fn remove_all_identities(&mut self) -> Result<(), anyhow::Error> {"},{"Add":" self.buf.clear();"},{"Add":" self.buf.resize(4);"},{"Add":" self.buf.push(msg::REMOVE_ALL_IDENTITIES);"},{"Add":" BigEndian::write_u32(&mut self.buf[0..], 5);"},{"Add":" self.read_response().await?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Send a custom message to the agent."},{"Add":" pub async fn extension(&mut self, typ: &[u8], ext: &[u8]) -> Result<(), anyhow::Error> {"},{"Add":" self.buf.clear();"},{"Add":" self.buf.resize(4);"},{"Add":" self.buf.push(msg::EXTENSION);"},{"Add":" self.buf.extend_ssh_string(typ);"},{"Add":" self.buf.extend_ssh_string(ext);"},{"Add":" let len = self.buf.len() - 4;"},{"Add":" BigEndian::write_u32(&mut self.buf[0..], len as u32);"},{"Add":" self.read_response().await?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Ask the agent what extensions about supported extensions."},{"Add":" pub async fn query_extension("},{"Add":" &mut self,"},{"Add":" typ: &[u8],"},{"Add":" mut ext: CryptoVec,"},{"Add":" ) -> Result {"},{"Add":" self.buf.clear();"},{"Add":" self.buf.resize(4);"},{"Add":" self.buf.push(msg::EXTENSION);"},{"Add":" self.buf.extend_ssh_string(typ);"},{"Add":" let len = self.buf.len() - 4;"},{"Add":" BigEndian::write_u32(&mut self.buf[0..], len as u32);"},{"Add":" self.read_response().await?;"},{"Add":""},{"Add":" let mut r = self.buf.reader(1);"},{"Add":" ext.extend(r.read_string()?);"},{"Add":""},{"Add":" Ok(!self.buf.is_empty() && self.buf[0] == msg::SUCCESS)"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"fn key_blob(public: &key::PublicKey, buf: &mut CryptoVec) {"},{"Add":" match *public {"},{"Add":" PublicKey::RSA { ref key, .. } => {"},{"Add":" buf.extend(&[0, 0, 0, 0]);"},{"Add":" let len0 = buf.len();"},{"Add":" buf.extend_ssh_string(b\"ssh-rsa\");"},{"Add":" let rsa = key.0.rsa().unwrap();"},{"Add":" buf.extend_ssh_mpint(&rsa.e().to_vec());"},{"Add":" buf.extend_ssh_mpint(&rsa.n().to_vec());"},{"Add":" let len1 = buf.len();"},{"Add":" BigEndian::write_u32(&mut buf[5..], (len1 - len0) as u32);"},{"Add":" }"},{"Add":" PublicKey::Ed25519(ref p) => {"},{"Add":" buf.extend(&[0, 0, 0, 0]);"},{"Add":" let len0 = buf.len();"},{"Add":" buf.extend_ssh_string(b\"ssh-ed25519\");"},{"Add":" buf.extend_ssh_string(&p.key[0..]);"},{"Add":" let len1 = buf.len();"},{"Add":" BigEndian::write_u32(&mut buf[5..], (len1 - len0) as u32);"},{"Add":" }"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"Cargo.toml","metadata":420},"context":[{"change":0,"pos":5798}],"contents":[{"Add":"[package]"},{"Add":"name = \"thrussh-keys\""},{"Add":"version = \"0.18.3\""},{"Add":"edition = \"2018\""},{"Add":"authors = [\"Pierre-Étienne Meunier \"]"},{"Add":"description = \"Deal with SSH keys: load them, decrypt them, call an SSH agent.\""},{"Add":"keywords = [\"ssh\"]"},{"Add":"repository = \"https://nest.pijul.com/pijul_org/thrussh\""},{"Add":"homepage = \"https://pijul.org/thrussh\""},{"Add":"documentation = \"https://docs.rs/thrussh-keys\""},{"Add":"license = \"Apache-2.0\""},{"Add":"include = ["},{"Add":"\"Cargo.toml\","},{"Add":"\"src/lib.rs\","},{"Add":"\"src/pem.rs\","},{"Add":"\"src/agent/mod.rs\","},{"Add":"\"src/agent/msg.rs\","},{"Add":"\"src/agent/server.rs\","},{"Add":"\"src/agent/client.rs\","},{"Add":"\"src/bcrypt_pbkdf.rs\","},{"Add":"\"src/blowfish.rs\","},{"Add":"\"src/encoding.rs\","},{"Add":"\"src/format/mod.rs\","},{"Add":"\"src/format/openssh.rs\","},{"Add":"\"src/format/pkcs5.rs\","},{"Add":"\"src/format/pkcs8.rs\","},{"Add":"\"src/key.rs\","},{"Add":"\"src/signature.rs\""},{"Add":"]"},{"Add":""},{"Add":"[dependencies]"},{"Add":"data-encoding = \"2.1\""},{"Add":"byteorder = \"1.3\""},{"Add":"tokio = { version = \"0.2\", features = [ \"io-util\", \"rt-threaded\", \"time\", \"uds\", \"stream\" ] }"},{"Add":"futures = \"0.3\""},{"Add":"cryptovec = \"0.6.0\""},{"Add":"yasna = { version = \"0.3.1\", features = [ \"bit-vec\", \"num-bigint\" ] }"},{"Add":"num-bigint = \"0.2\""},{"Add":"num-integer = \"0.1\""},{"Add":"openssl = \"0.10\""},{"Add":"bit-vec = \"0.6\""},{"Add":"thrussh-libsodium = \"0.2.0\""},{"Add":"serde_derive = \"1.0\""},{"Add":"serde = \"1.0\""},{"Add":"dirs = \"2.0\""},{"Add":"log = \"0.4\""},{"Add":"anyhow = \"1.0\""},{"Add":"thiserror = \"1.0\""},{"Add":""},{"Add":"[dev-dependencies]"},{"Add":"env_logger = \"0.7\""},{"Add":"tempdir=\"0.3\""}]}},{"FileAdd":{"meta":{"basename":"thrussh-config","metadata":1005},"context":[{"change":1,"pos":0}],"contents":[]}},{"FileAdd":{"meta":{"basename":"src","metadata":1005},"context":[{"change":0,"pos":158258}],"contents":[]}},{"FileAdd":{"meta":{"basename":"proxy.rs","metadata":420},"context":[{"change":0,"pos":158265}],"contents":[{"Add":"use futures::task::*;"},{"Add":"use std;"},{"Add":"use std::io::Read;"},{"Add":"use std::io::Write;"},{"Add":"use std::net::SocketAddr;"},{"Add":"use std::pin::Pin;"},{"Add":"use std::process::{Command, Stdio};"},{"Add":"use tokio;"},{"Add":"use tokio::net::TcpStream;"},{"Add":""},{"Add":"/// A type to implement either a TCP socket, or proxying through an external command."},{"Add":"pub enum Stream {"},{"Add":" #[allow(missing_docs)]"},{"Add":" Child(std::process::Child),"},{"Add":" #[allow(missing_docs)]"},{"Add":" Tcp(TcpStream),"},{"Add":"}"},{"Add":""},{"Add":"impl Stream {"},{"Add":" /// Connect a direct TCP stream (as opposed to a proxied one)."},{"Add":" pub async fn tcp_connect(addr: &SocketAddr) -> Result {"},{"Add":" Ok(Stream::Tcp(tokio::net::TcpStream::connect(addr).await?))"},{"Add":" }"},{"Add":" /// Connect through a proxy command."},{"Add":" pub async fn proxy_command(cmd: &str, args: &[&str]) -> Result {"},{"Add":" Ok(Stream::Child("},{"Add":" Command::new(cmd)"},{"Add":" .stdin(Stdio::piped())"},{"Add":" .stdout(Stdio::piped())"},{"Add":" .args(args)"},{"Add":" .spawn()"},{"Add":" .unwrap(),"},{"Add":" ))"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl tokio::io::AsyncRead for Stream {"},{"Add":" fn poll_read("},{"Add":" mut self: Pin<&mut Self>,"},{"Add":" cx: &mut Context,"},{"Add":" buf: &mut [u8],"},{"Add":" ) -> Poll> {"},{"Add":" match *self {"},{"Add":" Stream::Child(ref mut c) => Poll::Ready(c.stdout.as_mut().unwrap().read(buf)),"},{"Add":" Stream::Tcp(ref mut t) => Pin::new(t).poll_read(cx, buf),"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl tokio::io::AsyncWrite for Stream {"},{"Add":" fn poll_write("},{"Add":" mut self: Pin<&mut Self>,"},{"Add":" cx: &mut Context,"},{"Add":" buf: &[u8],"},{"Add":" ) -> Poll> {"},{"Add":" match *self {"},{"Add":" Stream::Child(ref mut c) => match c.stdin.as_mut().unwrap().write(buf) {"},{"Add":" Ok(n) => Poll::Ready(Ok(n)),"},{"Add":" Err(ref e) if e.kind() == std::io::ErrorKind::WouldBlock => Poll::Pending,"},{"Add":" Err(e) => Poll::Ready(Err(e)),"},{"Add":" },"},{"Add":" Stream::Tcp(ref mut t) => Pin::new(t).poll_write(cx, buf),"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" fn poll_flush(mut self: Pin<&mut Self>, cx: &mut Context) -> Poll> {"},{"Add":" match *self {"},{"Add":" Stream::Child(ref mut c) => match c.stdin.as_mut().unwrap().flush() {"},{"Add":" Ok(_) => Poll::Ready(Ok(())),"},{"Add":" Err(ref e) if e.kind() == std::io::ErrorKind::WouldBlock => Poll::Pending,"},{"Add":" Err(e) => Poll::Ready(Err(e)),"},{"Add":" },"},{"Add":" Stream::Tcp(ref mut t) => Pin::new(t).poll_flush(cx),"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" fn poll_shutdown("},{"Add":" mut self: Pin<&mut Self>,"},{"Add":" cx: &mut Context,"},{"Add":" ) -> Poll> {"},{"Add":" match *self {"},{"Add":" Stream::Child(ref mut c) => {"},{"Add":" c.stdin.take();"},{"Add":" Poll::Ready(Ok(()))"},{"Add":" }"},{"Add":" Stream::Tcp(ref mut t) => Pin::new(t).poll_shutdown(cx),"},{"Add":" }"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"lib.rs","metadata":420},"context":[{"change":0,"pos":158265}],"contents":[{"Add":"extern crate regex;"},{"Add":"#[macro_use]"},{"Add":"extern crate log;"},{"Add":"#[macro_use]"},{"Add":"extern crate thiserror;"},{"Add":""},{"Add":"use std::io::Read;"},{"Add":"use std::path::Path;"},{"Add":""},{"Add":"#[derive(Debug, Error)]"},{"Add":"/// anyhow::Errors."},{"Add":"pub enum Error {"},{"Add":" #[error(\"Host not found\")]"},{"Add":" HostNotFound,"},{"Add":" #[error(\"No home directory\")]"},{"Add":" NoHome,"},{"Add":" #[error(\"{}\", source)]"},{"Add":" Io {"},{"Add":" #[from]"},{"Add":" source: std::io::Error,"},{"Add":" },"},{"Add":"}"},{"Add":""},{"Add":"mod proxy;"},{"Add":"pub use proxy::*;"},{"Add":""},{"Add":"#[derive(Debug, Default)]"},{"Add":"pub struct Config {"},{"Add":" pub user: Option,"},{"Add":" pub host_name: Option,"},{"Add":" pub port: Option,"},{"Add":" pub identity_file: Option,"},{"Add":" pub proxy_command: Option,"},{"Add":" pub add_keys_to_agent: AddKeysToAgent,"},{"Add":"}"},{"Add":""},{"Add":"impl Config {"},{"Add":" pub fn update_proxy_command(&mut self) {"},{"Add":" if let Some(ref h) = self.host_name {"},{"Add":" if let Some(ref mut prox) = self.proxy_command {"},{"Add":" *prox = prox.replace(\"%h\", h);"},{"Add":" }"},{"Add":" }"},{"Add":" if let Some(ref p) = self.port {"},{"Add":" if let Some(ref mut prox) = self.proxy_command {"},{"Add":" *prox = prox.replace(\"%p\", &format!(\"{}\", p));"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"pub fn parse_home(host: &str) -> Result {"},{"Add":" let mut home = if let Some(home) = dirs_next::home_dir() {"},{"Add":" home"},{"Add":" } else {"},{"Add":" return Err(Error::NoHome);"},{"Add":" };"},{"Add":" home.push(\".ssh\");"},{"Add":" home.push(\"config\");"},{"Add":" parse_path(&home, host)"},{"Add":"}"},{"Add":""},{"Add":"pub fn parse_path>(path: P, host: &str) -> Result {"},{"Add":" let mut s = String::new();"},{"Add":" let mut b = std::fs::File::open(path)?;"},{"Add":" b.read_to_string(&mut s)?;"},{"Add":" parse(&s, host)"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug, Clone, Copy, PartialEq, Eq)]"},{"Add":"pub enum AddKeysToAgent {"},{"Add":" Yes,"},{"Add":" Confirm,"},{"Add":" Ask,"},{"Add":" No,"},{"Add":"}"},{"Add":""},{"Add":"impl Default for AddKeysToAgent {"},{"Add":" fn default() -> Self {"},{"Add":" AddKeysToAgent::No"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"pub fn parse(file: &str, host: &str) -> Result {"},{"Add":" let mut config: Option = None;"},{"Add":" for line in file.lines() {"},{"Add":" let line = line.trim();"},{"Add":" if let Some(n) = line.find(' ') {"},{"Add":" let (key, value) = line.split_at(n);"},{"Add":" let lower = key.to_lowercase();"},{"Add":" if let Some(ref mut config) = config {"},{"Add":" match lower.as_str() {"},{"Add":" \"host\" => break,"},{"Add":" \"user\" => config.user = Some(value.trim_start().to_string()),"},{"Add":" \"hostname\" => config.host_name = Some(value.trim_start().to_string()),"},{"Add":" \"port\" => config.port = value.trim_start().parse().ok(),"},{"Add":" \"identityfile\" => config.identity_file = Some(value.trim_start().to_string()),"},{"Add":" \"proxycommand\" => config.proxy_command = Some(value.trim_start().to_string()),"},{"Add":" \"addkeystoagent\" => match value.to_lowercase().as_str() {"},{"Add":" \"yes\" => config.add_keys_to_agent = AddKeysToAgent::Yes,"},{"Add":" \"confirm\" => config.add_keys_to_agent = AddKeysToAgent::Confirm,"},{"Add":" \"ask\" => config.add_keys_to_agent = AddKeysToAgent::Ask,"},{"Add":" _ => config.add_keys_to_agent = AddKeysToAgent::No,"},{"Add":" },"},{"Add":" key => {"},{"Add":" debug!(\"{:?}\", key);"},{"Add":" }"},{"Add":" }"},{"Add":" } else {"},{"Add":" match lower.as_str() {"},{"Add":" \"host\" => {"},{"Add":" if value.trim_start() == host {"},{"Add":" config = Some(Config::default())"},{"Add":" }"},{"Add":" }"},{"Add":" _ => {}"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" if let Some(config) = config {"},{"Add":" Ok(config)"},{"Add":" } else {"},{"Add":" Err(Error::HostNotFound)"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"Cargo.toml","metadata":420},"context":[{"change":0,"pos":158258}],"contents":[{"Add":"[package]"},{"Add":"name = \"thrussh-config\""},{"Add":"description = \"Utilities to parse .ssh/config files, including helpers to implement ProxyCommand in Thrussh.\""},{"Add":"version = \"0.2.1\""},{"Add":"authors = [\"Pierre-Étienne Meunier \"]"},{"Add":"include = [ \"Cargo.toml\", \"src/lib.rs\", \"src/proxy.rs\" ]"},{"Add":"license = \"Apache-2.0\""},{"Add":"documentation = \"https://docs.rs/thrussh-config\""},{"Add":"repository = \"https://nest.pijul.com/pijul/thrussh\""},{"Add":"edition = \"2018\""},{"Add":""},{"Add":"[dependencies]"},{"Add":"regex = \"1.0\""},{"Add":"lazy_static = \"1.0\""},{"Add":"log = \"0.4\""},{"Add":"dirs-next = \"2.0\""},{"Add":"tokio = { version = \"0.2\", features = [ \"io-util\" ] }"},{"Add":"thrussh = \"0.29.3\""},{"Add":"futures = \"0.3\""},{"Add":"thiserror = \"*\""}]}},{"FileAdd":{"meta":{"basename":"thrussh","metadata":1005},"context":[{"change":1,"pos":0}],"contents":[]}},{"FileAdd":{"meta":{"basename":"src","metadata":1005},"context":[{"change":0,"pos":165397}],"contents":[]}},{"FileAdd":{"meta":{"basename":"sshbuffer.rs","metadata":420},"context":[{"change":0,"pos":165404}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":""},{"Add":"use super::*;"},{"Add":"use std::num::Wrapping;"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"pub struct SSHBuffer {"},{"Add":" pub buffer: CryptoVec,"},{"Add":" pub len: usize, // next packet length."},{"Add":" pub bytes: usize,"},{"Add":" // Sequence numbers are on 32 bits and wrap."},{"Add":" // https://tools.ietf.org/html/rfc4253#section-6.4"},{"Add":" pub seqn: Wrapping,"},{"Add":"}"},{"Add":""},{"Add":"impl SSHBuffer {"},{"Add":" pub fn new() -> Self {"},{"Add":" SSHBuffer {"},{"Add":" buffer: CryptoVec::new(),"},{"Add":" len: 0,"},{"Add":" bytes: 0,"},{"Add":" seqn: Wrapping(0),"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn send_ssh_id(&mut self, id: &[u8]) {"},{"Add":" self.buffer.extend(id);"},{"Add":" self.buffer.push(b'\\r');"},{"Add":" self.buffer.push(b'\\n');"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"ssh_read.rs","metadata":420},"context":[{"change":0,"pos":165404}],"contents":[{"Add":"use crate::Error;"},{"Add":"use cryptovec::CryptoVec;"},{"Add":"use futures::task::*;"},{"Add":"use std;"},{"Add":"use std::pin::Pin;"},{"Add":"use tokio::io::{AsyncRead, AsyncReadExt, AsyncWrite};"},{"Add":""},{"Add":"/// The buffer to read the identification string (first line in the"},{"Add":"/// protocol)."},{"Add":"struct ReadSshIdBuffer {"},{"Add":" pub buf: CryptoVec,"},{"Add":" pub total: usize,"},{"Add":" pub bytes_read: usize,"},{"Add":" pub sshid_len: usize,"},{"Add":"}"},{"Add":""},{"Add":"impl ReadSshIdBuffer {"},{"Add":" pub fn id(&self) -> &[u8] {"},{"Add":" &self.buf[..self.sshid_len]"},{"Add":" }"},{"Add":""},{"Add":" pub fn new() -> ReadSshIdBuffer {"},{"Add":" let mut buf = CryptoVec::new();"},{"Add":" buf.resize(256);"},{"Add":" ReadSshIdBuffer {"},{"Add":" buf: buf,"},{"Add":" sshid_len: 0,"},{"Add":" bytes_read: 0,"},{"Add":" total: 0,"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl std::fmt::Debug for ReadSshIdBuffer {"},{"Add":" fn fmt(&self, fmt: &mut std::fmt::Formatter) -> std::fmt::Result {"},{"Add":" write!(fmt, \"ReadSshId {:?}\", self.id())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// SshRead is the same as R, plus a small buffer in the beginning to"},{"Add":"/// read the identification string. After the first line in the"},{"Add":"/// connection, the `id` parameter is never used again."},{"Add":"pub struct SshRead {"},{"Add":" id: Option,"},{"Add":" r: R,"},{"Add":"}"},{"Add":""},{"Add":"impl AsyncRead for SshRead {"},{"Add":" fn poll_read("},{"Add":" mut self: Pin<&mut Self>,"},{"Add":" cx: &mut Context,"},{"Add":" buf: &mut [u8],"},{"Add":" ) -> Poll> {"},{"Add":" if let Some(mut id) = self.id.take() {"},{"Add":" debug!(\"id {:?} {:?}\", id.total, id.bytes_read);"},{"Add":" if id.total > id.bytes_read {"},{"Add":" let result = {"},{"Add":" let mut readable = &id.buf[id.bytes_read..id.total];"},{"Add":" std::io::Read::read(&mut readable, buf).unwrap()"},{"Add":" };"},{"Add":" debug!(\"read {:?} bytes from id.buf\", result);"},{"Add":" id.bytes_read += result;"},{"Add":" self.id = Some(id);"},{"Add":" return Poll::Ready(Ok(result));"},{"Add":" }"},{"Add":" }"},{"Add":" AsyncRead::poll_read(Pin::new(&mut self.get_mut().r), cx, buf)"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl std::io::Write for SshRead {"},{"Add":" fn write(&mut self, buf: &[u8]) -> Result {"},{"Add":" self.r.write(buf)"},{"Add":" }"},{"Add":" fn flush(&mut self) -> Result<(), std::io::Error> {"},{"Add":" self.r.flush()"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl AsyncWrite for SshRead {"},{"Add":" fn poll_write("},{"Add":" mut self: Pin<&mut Self>,"},{"Add":" cx: &mut Context,"},{"Add":" buf: &[u8],"},{"Add":" ) -> Poll> {"},{"Add":" AsyncWrite::poll_write(Pin::new(&mut self.r), cx, buf)"},{"Add":" }"},{"Add":""},{"Add":" fn poll_flush(mut self: Pin<&mut Self>, cx: &mut Context) -> Poll> {"},{"Add":" AsyncWrite::poll_flush(Pin::new(&mut self.r), cx)"},{"Add":" }"},{"Add":""},{"Add":" fn poll_shutdown("},{"Add":" mut self: Pin<&mut Self>,"},{"Add":" cx: &mut Context,"},{"Add":" ) -> Poll> {"},{"Add":" AsyncWrite::poll_shutdown(Pin::new(&mut self.r), cx)"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl SshRead {"},{"Add":" pub fn new(r: R) -> Self {"},{"Add":" SshRead {"},{"Add":" id: Some(ReadSshIdBuffer::new()),"},{"Add":" r,"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub async fn read_ssh_id(&mut self) -> Result<&[u8], anyhow::Error> {"},{"Add":" let ssh_id = self.id.as_mut().unwrap();"},{"Add":" loop {"},{"Add":" let mut i = 0;"},{"Add":" debug!(\"read_ssh_id: reading\");"},{"Add":" let n = AsyncReadExt::read(&mut self.r, &mut ssh_id.buf[ssh_id.total..]).await?;"},{"Add":" debug!(\"read {:?}\", n);"},{"Add":""},{"Add":" ssh_id.total += n;"},{"Add":" debug!(\"{:?}\", std::str::from_utf8(&ssh_id.buf[..ssh_id.total]));"},{"Add":" if n == 0 {"},{"Add":" return Err(Error::Disconnect.into());"},{"Add":" }"},{"Add":" loop {"},{"Add":" if i >= ssh_id.total - 1 {"},{"Add":" break;"},{"Add":" }"},{"Add":" if ssh_id.buf[i] == b'\\r' && ssh_id.buf[i + 1] == b'\\n' {"},{"Add":" ssh_id.bytes_read = i + 2;"},{"Add":" break;"},{"Add":" } else if ssh_id.buf[i + 1] == b'\\n' {"},{"Add":" // This is really wrong, but OpenSSH 7.4 uses"},{"Add":" // it."},{"Add":" ssh_id.bytes_read = i + 2;"},{"Add":" i += 1;"},{"Add":" break;"},{"Add":" } else {"},{"Add":" i += 1;"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" if ssh_id.bytes_read > 0 {"},{"Add":" // If we have a full line, handle it."},{"Add":" if i >= 8 {"},{"Add":" if &ssh_id.buf[0..8] == b\"SSH-2.0-\" {"},{"Add":" // Either the line starts with \"SSH-2.0-\""},{"Add":" ssh_id.sshid_len = i;"},{"Add":" return Ok(&ssh_id.buf[..ssh_id.sshid_len]);"},{"Add":" }"},{"Add":" }"},{"Add":" // Else, it is a \"preliminary\" (see"},{"Add":" // https://tools.ietf.org/html/rfc4253#section-4.2),"},{"Add":" // and we can discard it and read the next one."},{"Add":" ssh_id.total = 0;"},{"Add":" ssh_id.bytes_read = 0;"},{"Add":" }"},{"Add":" debug!(\"bytes_read: {:?}\", ssh_id.bytes_read);"},{"Add":" }"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"session.rs","metadata":420},"context":[{"change":0,"pos":165404}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":""},{"Add":"use crate::sshbuffer::SSHBuffer;"},{"Add":"use crate::{auth, cipher, kex, msg, negotiation};"},{"Add":"use crate::{Channel, ChannelId, Disconnect, Limits};"},{"Add":"use byteorder::{BigEndian, ByteOrder};"},{"Add":"use cryptovec::CryptoVec;"},{"Add":"use openssl::hash;"},{"Add":"use std::collections::HashMap;"},{"Add":"use std::num::Wrapping;"},{"Add":"use std::sync::Arc;"},{"Add":"use thrussh_keys::encoding::Encoding;"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"pub(crate) struct Encrypted {"},{"Add":" pub state: EncryptedState,"},{"Add":""},{"Add":" // It's always Some, except when we std::mem::replace it temporarily."},{"Add":" pub exchange: Option,"},{"Add":" pub kex: kex::Algorithm,"},{"Add":" pub key: usize,"},{"Add":" pub mac: Option<&'static str>,"},{"Add":" pub session_id: hash::DigestBytes,"},{"Add":" pub rekey: Option,"},{"Add":" pub channels: HashMap,"},{"Add":" pub last_channel_id: Wrapping,"},{"Add":" pub wants_reply: bool,"},{"Add":" pub write: CryptoVec,"},{"Add":" pub write_cursor: usize,"},{"Add":" pub last_rekey: std::time::Instant,"},{"Add":" pub server_compression: crate::compression::Compression,"},{"Add":" pub client_compression: crate::compression::Compression,"},{"Add":" pub compress: crate::compression::Compress,"},{"Add":" pub decompress: crate::compression::Decompress,"},{"Add":" pub compress_buffer: CryptoVec,"},{"Add":"}"},{"Add":""},{"Add":"pub(crate) struct CommonSession {"},{"Add":" pub auth_user: String,"},{"Add":" pub config: Config,"},{"Add":" pub encrypted: Option,"},{"Add":" pub auth_method: Option,"},{"Add":" pub write_buffer: SSHBuffer,"},{"Add":" pub kex: Option,"},{"Add":" pub cipher: Arc,"},{"Add":" pub wants_reply: bool,"},{"Add":" pub disconnected: bool,"},{"Add":" pub buffer: CryptoVec,"},{"Add":"}"},{"Add":""},{"Add":"impl CommonSession {"},{"Add":" pub fn newkeys(&mut self, newkeys: NewKeys) {"},{"Add":" if let Some(ref mut enc) = self.encrypted {"},{"Add":" enc.exchange = Some(newkeys.exchange);"},{"Add":" enc.kex = newkeys.kex;"},{"Add":" enc.key = newkeys.key;"},{"Add":" enc.mac = newkeys.names.mac;"},{"Add":" self.cipher = Arc::new(newkeys.cipher);"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn encrypted(&mut self, state: EncryptedState, newkeys: NewKeys) {"},{"Add":" self.encrypted = Some(Encrypted {"},{"Add":" exchange: Some(newkeys.exchange),"},{"Add":" kex: newkeys.kex,"},{"Add":" key: newkeys.key,"},{"Add":" mac: newkeys.names.mac,"},{"Add":" session_id: newkeys.session_id,"},{"Add":" state,"},{"Add":" rekey: None,"},{"Add":" channels: HashMap::new(),"},{"Add":" last_channel_id: Wrapping(1),"},{"Add":" wants_reply: false,"},{"Add":" write: CryptoVec::new(),"},{"Add":" write_cursor: 0,"},{"Add":" last_rekey: std::time::Instant::now(),"},{"Add":" server_compression: newkeys.names.server_compression,"},{"Add":" client_compression: newkeys.names.client_compression,"},{"Add":" compress: crate::compression::Compress::None,"},{"Add":" compress_buffer: CryptoVec::new(),"},{"Add":" decompress: crate::compression::Decompress::None,"},{"Add":" });"},{"Add":" self.cipher = Arc::new(newkeys.cipher);"},{"Add":" }"},{"Add":""},{"Add":" /// Send a disconnect message."},{"Add":" pub fn disconnect(&mut self, reason: Disconnect, description: &str, language_tag: &str) {"},{"Add":" let disconnect = |buf: &mut CryptoVec| {"},{"Add":" push_packet!(buf, {"},{"Add":" buf.push(msg::DISCONNECT);"},{"Add":" buf.push_u32_be(reason as u32);"},{"Add":" buf.extend_ssh_string(description.as_bytes());"},{"Add":" buf.extend_ssh_string(language_tag.as_bytes());"},{"Add":" });"},{"Add":" };"},{"Add":" if !self.disconnected {"},{"Add":" self.disconnected = true;"},{"Add":" if let Some(ref mut enc) = self.encrypted {"},{"Add":" disconnect(&mut enc.write)"},{"Add":" } else {"},{"Add":" disconnect(&mut self.write_buffer.buffer)"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Send a single byte message onto the channel."},{"Add":" pub fn byte(&mut self, channel: ChannelId, msg: u8) {"},{"Add":" if let Some(ref mut enc) = self.encrypted {"},{"Add":" enc.byte(channel, msg)"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Encrypted {"},{"Add":" pub fn byte(&mut self, channel: ChannelId, msg: u8) {"},{"Add":" if let Some(channel) = self.channels.get(&channel) {"},{"Add":" push_packet!(self.write, {"},{"Add":" self.write.push(msg);"},{"Add":" self.write.push_u32_be(channel.recipient_channel);"},{"Add":" });"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /*"},{"Add":" pub fn authenticated(&mut self) {"},{"Add":" self.server_compression.init_compress(&mut self.compress);"},{"Add":" self.state = EncryptedState::Authenticated;"},{"Add":" }"},{"Add":" */"},{"Add":""},{"Add":" pub fn eof(&mut self, channel: ChannelId) {"},{"Add":" self.byte(channel, msg::CHANNEL_EOF);"},{"Add":" }"},{"Add":""},{"Add":" pub fn sender_window_size(&self, channel: ChannelId) -> usize {"},{"Add":" if let Some(ref channel) = self.channels.get(&channel) {"},{"Add":" channel.sender_window_size as usize"},{"Add":" } else {"},{"Add":" 0"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn adjust_window_size(&mut self, channel: ChannelId, data: &[u8], target: u32) -> bool {"},{"Add":" debug!(\"adjust_window_size\");"},{"Add":" if let Some(ref mut channel) = self.channels.get_mut(&channel) {"},{"Add":" debug!(\"channel {:?}\", channel);"},{"Add":" // Ignore extra data."},{"Add":" // https://tools.ietf.org/html/rfc4254#section-5.2"},{"Add":" if data.len() as u32 <= channel.sender_window_size {"},{"Add":" channel.sender_window_size -= data.len() as u32;"},{"Add":" }"},{"Add":" if channel.sender_window_size < target / 2 {"},{"Add":" debug!("},{"Add":" \"sender_window_size {:?}, target {:?}\","},{"Add":" channel.sender_window_size, target"},{"Add":" );"},{"Add":" push_packet!(self.write, {"},{"Add":" self.write.push(msg::CHANNEL_WINDOW_ADJUST);"},{"Add":" self.write.push_u32_be(channel.recipient_channel);"},{"Add":" self.write.push_u32_be(target - channel.sender_window_size);"},{"Add":" });"},{"Add":" channel.sender_window_size = target;"},{"Add":" return true;"},{"Add":" }"},{"Add":" }"},{"Add":" false"},{"Add":" }"},{"Add":""},{"Add":" pub fn flush_pending(&mut self, channel: ChannelId) -> usize {"},{"Add":" let mut pending_size = 0;"},{"Add":" if let Some(channel) = self.channels.get_mut(&channel) {"},{"Add":" while let Some((buf, a, size)) = channel.pending_data.pop_front() {"},{"Add":" let (buf, size_) = Self::data_noqueue(&mut self.write, channel, buf, size);"},{"Add":" pending_size += size_;"},{"Add":" if size_ < buf.len() {"},{"Add":" channel.pending_data.push_front((buf, a, size_));"},{"Add":" break;"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" pending_size"},{"Add":" }"},{"Add":""},{"Add":" pub fn has_pending_data(&self, channel: ChannelId) -> bool {"},{"Add":" if let Some(channel) = self.channels.get(&channel) {"},{"Add":" !channel.pending_data.is_empty()"},{"Add":" } else {"},{"Add":" false"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" fn data_noqueue("},{"Add":" write: &mut CryptoVec,"},{"Add":" channel: &mut Channel,"},{"Add":" buf0: CryptoVec,"},{"Add":" from: usize,"},{"Add":" ) -> (CryptoVec, usize) {"},{"Add":" use std::ops::Deref;"},{"Add":" let mut buf = if buf0.len() as u32 > channel.recipient_window_size {"},{"Add":" &buf0[from..channel.recipient_window_size as usize]"},{"Add":" } else {"},{"Add":" &buf0[from..]"},{"Add":" };"},{"Add":" let buf_len = buf.len();"},{"Add":""},{"Add":" while buf.len() > 0 {"},{"Add":" // Compute the length we're allowed to send."},{"Add":" let off = std::cmp::min(buf.len(), channel.recipient_maximum_packet_size as usize);"},{"Add":" push_packet!(write, {"},{"Add":" write.push(msg::CHANNEL_DATA);"},{"Add":" write.push_u32_be(channel.recipient_channel);"},{"Add":" write.extend_ssh_string(&buf[..off]);"},{"Add":" });"},{"Add":" debug!(\"buffer: {:?}\", write.deref().len());"},{"Add":" channel.recipient_window_size -= off as u32;"},{"Add":" buf = &buf[off..]"},{"Add":" }"},{"Add":" debug!(\"buf.len() = {:?}, buf_len = {:?}\", buf.len(), buf_len);"},{"Add":" (buf0, buf_len)"},{"Add":" }"},{"Add":""},{"Add":" pub fn data(&mut self, channel: ChannelId, buf0: CryptoVec) {"},{"Add":" if let Some(channel) = self.channels.get_mut(&channel) {"},{"Add":" assert!(channel.confirmed);"},{"Add":" if !channel.pending_data.is_empty() {"},{"Add":" channel.pending_data.push_back((buf0, None, 0));"},{"Add":" return;"},{"Add":" }"},{"Add":" let (buf0, buf_len) = Self::data_noqueue(&mut self.write, channel, buf0, 0);"},{"Add":" if buf_len < buf0.len() {"},{"Add":" channel.pending_data.push_back((buf0, None, buf_len))"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn extended_data(&mut self, channel: ChannelId, ext: u32, buf0: CryptoVec) {"},{"Add":" use std::ops::Deref;"},{"Add":" if let Some(channel) = self.channels.get_mut(&channel) {"},{"Add":" assert!(channel.confirmed);"},{"Add":" if !channel.pending_data.is_empty() {"},{"Add":" channel.pending_data.push_back((buf0, Some(ext), 0));"},{"Add":" return;"},{"Add":" }"},{"Add":" let mut buf = if buf0.len() as u32 > channel.recipient_window_size {"},{"Add":" &buf0[0..channel.recipient_window_size as usize]"},{"Add":" } else {"},{"Add":" &buf0"},{"Add":" };"},{"Add":" let buf_len = buf.len();"},{"Add":""},{"Add":" while buf.len() > 0 {"},{"Add":" // Compute the length we're allowed to send."},{"Add":" let off = std::cmp::min(buf.len(), channel.recipient_maximum_packet_size as usize);"},{"Add":" push_packet!(self.write, {"},{"Add":" self.write.push(msg::CHANNEL_EXTENDED_DATA);"},{"Add":" self.write.push_u32_be(channel.recipient_channel);"},{"Add":" self.write.push_u32_be(ext);"},{"Add":" self.write.extend_ssh_string(&buf[..off]);"},{"Add":" });"},{"Add":" debug!(\"buffer: {:?}\", self.write.deref().len());"},{"Add":" channel.recipient_window_size -= off as u32;"},{"Add":" buf = &buf[off..]"},{"Add":" }"},{"Add":" debug!(\"buf.len() = {:?}, buf_len = {:?}\", buf.len(), buf_len);"},{"Add":" if buf_len < buf0.len() {"},{"Add":" channel.pending_data.push_back((buf0, Some(ext), buf_len))"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn flush("},{"Add":" &mut self,"},{"Add":" limits: &Limits,"},{"Add":" cipher: &cipher::CipherPair,"},{"Add":" write_buffer: &mut SSHBuffer,"},{"Add":" ) -> bool {"},{"Add":" // If there are pending packets (and we've not started to rekey), flush them."},{"Add":" {"},{"Add":" while self.write_cursor < self.write.len() {"},{"Add":" // Read a single packet, encrypt and send it."},{"Add":" let len = BigEndian::read_u32(&self.write[self.write_cursor..]) as usize;"},{"Add":" let packet = self"},{"Add":" .compress"},{"Add":" .compress("},{"Add":" &self.write[(self.write_cursor + 4)..(self.write_cursor + 4 + len)],"},{"Add":" &mut self.compress_buffer,"},{"Add":" )"},{"Add":" .unwrap();"},{"Add":" cipher.write(packet, write_buffer);"},{"Add":" self.write_cursor += 4 + len"},{"Add":" }"},{"Add":" }"},{"Add":" if self.write_cursor >= self.write.len() {"},{"Add":" // If all packets have been written, clear."},{"Add":" self.write_cursor = 0;"},{"Add":" self.write.clear();"},{"Add":" }"},{"Add":" let now = std::time::Instant::now();"},{"Add":" let dur = now.duration_since(self.last_rekey);"},{"Add":" write_buffer.bytes >= limits.rekey_write_limit || dur >= limits.rekey_time_limit"},{"Add":" }"},{"Add":" pub fn new_channel_id(&mut self) -> ChannelId {"},{"Add":" self.last_channel_id += Wrapping(1);"},{"Add":" while self"},{"Add":" .channels"},{"Add":" .contains_key(&ChannelId(self.last_channel_id.0))"},{"Add":" {"},{"Add":" self.last_channel_id += Wrapping(1)"},{"Add":" }"},{"Add":" ChannelId(self.last_channel_id.0)"},{"Add":" }"},{"Add":" pub fn new_channel(&mut self, window_size: u32, maxpacket: u32) -> ChannelId {"},{"Add":" loop {"},{"Add":" self.last_channel_id += Wrapping(1);"},{"Add":" if let std::collections::hash_map::Entry::Vacant(vacant_entry) ="},{"Add":" self.channels.entry(ChannelId(self.last_channel_id.0))"},{"Add":" {"},{"Add":" vacant_entry.insert(Channel {"},{"Add":" recipient_channel: 0,"},{"Add":" sender_channel: ChannelId(self.last_channel_id.0),"},{"Add":" sender_window_size: window_size,"},{"Add":" recipient_window_size: 0,"},{"Add":" sender_maximum_packet_size: maxpacket,"},{"Add":" recipient_maximum_packet_size: 0,"},{"Add":" confirmed: false,"},{"Add":" wants_reply: false,"},{"Add":" pending_data: std::collections::VecDeque::new(),"},{"Add":" });"},{"Add":" return ChannelId(self.last_channel_id.0);"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"pub enum EncryptedState {"},{"Add":" WaitingServiceRequest { sent: bool, accepted: bool },"},{"Add":" WaitingAuthRequest(auth::AuthRequest),"},{"Add":" InitCompression,"},{"Add":" Authenticated,"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"pub struct Exchange {"},{"Add":" pub client_id: CryptoVec,"},{"Add":" pub server_id: CryptoVec,"},{"Add":" pub client_kex_init: CryptoVec,"},{"Add":" pub server_kex_init: CryptoVec,"},{"Add":" pub client_ephemeral: CryptoVec,"},{"Add":" pub server_ephemeral: CryptoVec,"},{"Add":"}"},{"Add":""},{"Add":"impl Exchange {"},{"Add":" pub fn new() -> Self {"},{"Add":" Exchange {"},{"Add":" client_id: CryptoVec::new(),"},{"Add":" server_id: CryptoVec::new(),"},{"Add":" client_kex_init: CryptoVec::new(),"},{"Add":" server_kex_init: CryptoVec::new(),"},{"Add":" client_ephemeral: CryptoVec::new(),"},{"Add":" server_ephemeral: CryptoVec::new(),"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"pub enum Kex {"},{"Add":" /// Version number sent. `algo` and `sent` tell wether kexinit has"},{"Add":" /// been received, and sent, respectively."},{"Add":" KexInit(KexInit),"},{"Add":""},{"Add":" /// Algorithms have been determined, the DH algorithm should run."},{"Add":" KexDh(KexDh),"},{"Add":""},{"Add":" /// The kex has run."},{"Add":" KexDhDone(KexDhDone),"},{"Add":""},{"Add":" /// The DH is over, we've sent the NEWKEYS packet, and are waiting"},{"Add":" /// the NEWKEYS from the other side."},{"Add":" NewKeys(NewKeys),"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"pub struct KexInit {"},{"Add":" pub algo: Option,"},{"Add":" pub exchange: Exchange,"},{"Add":" pub session_id: Option,"},{"Add":" pub sent: bool,"},{"Add":"}"},{"Add":""},{"Add":"impl KexInit {"},{"Add":" pub fn received_rekey("},{"Add":" ex: Exchange,"},{"Add":" algo: negotiation::Names,"},{"Add":" session_id: &hash::DigestBytes,"},{"Add":" ) -> Self {"},{"Add":" let mut kexinit = KexInit {"},{"Add":" exchange: ex,"},{"Add":" algo: Some(algo),"},{"Add":" sent: false,"},{"Add":" session_id: Some(session_id.clone()),"},{"Add":" };"},{"Add":" kexinit.exchange.client_kex_init.clear();"},{"Add":" kexinit.exchange.server_kex_init.clear();"},{"Add":" kexinit.exchange.client_ephemeral.clear();"},{"Add":" kexinit.exchange.server_ephemeral.clear();"},{"Add":" kexinit"},{"Add":" }"},{"Add":""},{"Add":" pub fn initiate_rekey(ex: Exchange, session_id: &hash::DigestBytes) -> Self {"},{"Add":" let mut kexinit = KexInit {"},{"Add":" exchange: ex,"},{"Add":" algo: None,"},{"Add":" sent: true,"},{"Add":" session_id: Some(session_id.clone()),"},{"Add":" };"},{"Add":" kexinit.exchange.client_kex_init.clear();"},{"Add":" kexinit.exchange.server_kex_init.clear();"},{"Add":" kexinit.exchange.client_ephemeral.clear();"},{"Add":" kexinit.exchange.server_ephemeral.clear();"},{"Add":" kexinit"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"pub struct KexDh {"},{"Add":" pub exchange: Exchange,"},{"Add":" pub names: negotiation::Names,"},{"Add":" pub key: usize,"},{"Add":" pub session_id: Option,"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"pub struct KexDhDone {"},{"Add":" pub exchange: Exchange,"},{"Add":" pub kex: kex::Algorithm,"},{"Add":" pub key: usize,"},{"Add":" pub session_id: Option,"},{"Add":" pub names: negotiation::Names,"},{"Add":"}"},{"Add":""},{"Add":"impl KexDhDone {"},{"Add":" pub fn compute_keys("},{"Add":" self,"},{"Add":" hash: hash::DigestBytes,"},{"Add":" is_server: bool,"},{"Add":" ) -> Result {"},{"Add":" let session_id = if let Some(session_id) = self.session_id {"},{"Add":" session_id"},{"Add":" } else {"},{"Add":" hash.clone()"},{"Add":" };"},{"Add":" // Now computing keys."},{"Add":" let c = self"},{"Add":" .kex"},{"Add":" .compute_keys(&session_id, &hash, self.names.cipher, is_server)?;"},{"Add":" Ok(NewKeys {"},{"Add":" exchange: self.exchange,"},{"Add":" names: self.names,"},{"Add":" kex: self.kex,"},{"Add":" key: self.key,"},{"Add":" cipher: c,"},{"Add":" session_id: session_id,"},{"Add":" received: false,"},{"Add":" sent: false,"},{"Add":" })"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"pub struct NewKeys {"},{"Add":" pub exchange: Exchange,"},{"Add":" pub names: negotiation::Names,"},{"Add":" pub kex: kex::Algorithm,"},{"Add":" pub key: usize,"},{"Add":" pub cipher: cipher::CipherPair,"},{"Add":" pub session_id: hash::DigestBytes,"},{"Add":" pub received: bool,"},{"Add":" pub sent: bool,"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"server","metadata":1005},"context":[{"change":0,"pos":165404}],"contents":[]}},{"FileAdd":{"meta":{"basename":"session.rs","metadata":420},"context":[{"change":0,"pos":188178}],"contents":[{"Add":"use super::*;"},{"Add":"use crate::msg;"},{"Add":"use std::sync::Arc;"},{"Add":"use thrussh_keys::encoding::Encoding;"},{"Add":"use tokio::sync::mpsc::{Receiver, Sender};"},{"Add":""},{"Add":"/// A connected server session. This type is unique to a client."},{"Add":"pub struct Session {"},{"Add":" pub(crate) common: CommonSession>,"},{"Add":" pub(crate) sender: Handle,"},{"Add":" pub(crate) receiver: Receiver<(ChannelId, ChannelMsg)>,"},{"Add":" pub(crate) target_window_size: u32,"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Clone)]"},{"Add":"/// Handle to a session, used to send messages to a client outside of"},{"Add":"/// the request/response cycle."},{"Add":"pub struct Handle {"},{"Add":" pub(crate) sender: Sender<(ChannelId, ChannelMsg)>,"},{"Add":"}"},{"Add":""},{"Add":"impl Handle {"},{"Add":" /// Send data to the session referenced by this handler."},{"Add":" pub async fn data(&mut self, id: ChannelId, data: CryptoVec) -> Result<(), CryptoVec> {"},{"Add":" self.sender"},{"Add":" .send((id, ChannelMsg::Data { data }))"},{"Add":" .await"},{"Add":" .map_err(|e| match e.0 {"},{"Add":" (_, ChannelMsg::Data { data }) => data,"},{"Add":" _ => unreachable!(),"},{"Add":" })"},{"Add":" }"},{"Add":""},{"Add":" /// Send data to the session referenced by this handler."},{"Add":" pub async fn extended_data("},{"Add":" &mut self,"},{"Add":" id: ChannelId,"},{"Add":" ext: u32,"},{"Add":" data: CryptoVec,"},{"Add":" ) -> Result<(), CryptoVec> {"},{"Add":" self.sender"},{"Add":" .send((id, ChannelMsg::ExtendedData { ext, data }))"},{"Add":" .await"},{"Add":" .map_err(|e| match e.0 {"},{"Add":" (_, ChannelMsg::ExtendedData { data, .. }) => data,"},{"Add":" _ => unreachable!(),"},{"Add":" })"},{"Add":" }"},{"Add":""},{"Add":" /// Send EOF to the session referenced by this handler."},{"Add":" pub async fn eof(&mut self, id: ChannelId) -> Result<(), ()> {"},{"Add":" self.sender"},{"Add":" .send((id, ChannelMsg::Eof))"},{"Add":" .await"},{"Add":" .map_err(|_| ())"},{"Add":" }"},{"Add":""},{"Add":" /// Inform the client of whether they may perform"},{"Add":" /// control-S/control-Q flow control. See"},{"Add":" /// [RFC4254](https://tools.ietf.org/html/rfc4254#section-6.8)."},{"Add":" pub async fn xon_xoff_request(&mut self, id: ChannelId, client_can_do: bool) -> Result<(), ()> {"},{"Add":" self.sender"},{"Add":" .send((id, ChannelMsg::XonXoff { client_can_do }))"},{"Add":" .await"},{"Add":" .map_err(|_| ())"},{"Add":" }"},{"Add":""},{"Add":" /// Send the exit status of a program."},{"Add":" pub async fn exit_status_request(&mut self, id: ChannelId, exit_status: u32) -> Result<(), ()> {"},{"Add":" self.sender"},{"Add":" .send((id, ChannelMsg::ExitStatus { exit_status }))"},{"Add":" .await"},{"Add":" .map_err(|_| ())"},{"Add":" }"},{"Add":""},{"Add":" /// If the program was killed by a signal, send the details about the signal to the client."},{"Add":" pub async fn exit_signal_request("},{"Add":" &mut self,"},{"Add":" id: ChannelId,"},{"Add":" signal_name: Sig,"},{"Add":" core_dumped: bool,"},{"Add":" error_message: String,"},{"Add":" lang_tag: String,"},{"Add":" ) -> Result<(), ()> {"},{"Add":" self.sender"},{"Add":" .send(("},{"Add":" id,"},{"Add":" ChannelMsg::ExitSignal {"},{"Add":" signal_name,"},{"Add":" core_dumped,"},{"Add":" error_message,"},{"Add":" lang_tag,"},{"Add":" },"},{"Add":" ))"},{"Add":" .await"},{"Add":" .map_err(|_| ())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Session {"},{"Add":" pub(crate) fn is_rekeying(&self) -> bool {"},{"Add":" if let Some(ref enc) = self.common.encrypted {"},{"Add":" enc.rekey.is_some()"},{"Add":" } else {"},{"Add":" true"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Get a handle to this session."},{"Add":" pub fn handle(&self) -> Handle {"},{"Add":" self.sender.clone()"},{"Add":" }"},{"Add":""},{"Add":" pub fn writable_packet_size(&self, channel: &ChannelId) -> u32 {"},{"Add":" if let Some(ref enc) = self.common.encrypted {"},{"Add":" if let Some(channel) = enc.channels.get(&channel) {"},{"Add":" return channel"},{"Add":" .sender_window_size"},{"Add":" .min(channel.sender_maximum_packet_size);"},{"Add":" }"},{"Add":" }"},{"Add":" 0"},{"Add":" }"},{"Add":""},{"Add":" pub fn window_size(&self, channel: &ChannelId) -> u32 {"},{"Add":" if let Some(ref enc) = self.common.encrypted {"},{"Add":" if let Some(channel) = enc.channels.get(&channel) {"},{"Add":" return channel.sender_window_size;"},{"Add":" }"},{"Add":" }"},{"Add":" 0"},{"Add":" }"},{"Add":""},{"Add":" pub fn max_packet_size(&self, channel: &ChannelId) -> u32 {"},{"Add":" if let Some(ref enc) = self.common.encrypted {"},{"Add":" if let Some(channel) = enc.channels.get(&channel) {"},{"Add":" return channel.sender_maximum_packet_size;"},{"Add":" }"},{"Add":" }"},{"Add":" 0"},{"Add":" }"},{"Add":""},{"Add":" /// Flush the session, i.e. encrypt the pending buffer."},{"Add":" pub fn flush(&mut self) -> Result<(), anyhow::Error> {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if enc.flush("},{"Add":" &self.common.config.as_ref().limits,"},{"Add":" &self.common.cipher,"},{"Add":" &mut self.common.write_buffer,"},{"Add":" ) {"},{"Add":" if enc.rekey.is_none() {"},{"Add":" if let Some(exchange) = enc.exchange.take() {"},{"Add":" let mut kexinit = KexInit::initiate_rekey(exchange, &enc.session_id);"},{"Add":" kexinit.server_write("},{"Add":" &self.common.config.as_ref(),"},{"Add":" &mut self.common.cipher,"},{"Add":" &mut self.common.write_buffer,"},{"Add":" )?;"},{"Add":" enc.rekey = Some(Kex::KexInit(kexinit))"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" pub fn flush_pending(&mut self, channel: ChannelId) -> usize {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" enc.flush_pending(channel)"},{"Add":" } else {"},{"Add":" 0"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn sender_window_size(&self, channel: ChannelId) -> usize {"},{"Add":" if let Some(ref enc) = self.common.encrypted {"},{"Add":" enc.sender_window_size(channel)"},{"Add":" } else {"},{"Add":" 0"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn has_pending_data(&self, channel: ChannelId) -> bool {"},{"Add":" if let Some(ref enc) = self.common.encrypted {"},{"Add":" enc.has_pending_data(channel)"},{"Add":" } else {"},{"Add":" false"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Retrieves the configuration of this session."},{"Add":" pub fn config(&self) -> &Config {"},{"Add":" &self.common.config"},{"Add":" }"},{"Add":""},{"Add":" /// Sends a disconnect message."},{"Add":" pub fn disconnect(&mut self, reason: Disconnect, description: &str, language_tag: &str) {"},{"Add":" self.common.disconnect(reason, description, language_tag);"},{"Add":" }"},{"Add":""},{"Add":" /// Send a \"success\" reply to a /global/ request (requests without"},{"Add":" /// a channel number, such as TCP/IP forwarding or"},{"Add":" /// cancelling). Always call this function if the request was"},{"Add":" /// successful (it checks whether the client expects an answer)."},{"Add":" pub fn request_success(&mut self) {"},{"Add":" if self.common.wants_reply {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" self.common.wants_reply = false;"},{"Add":" push_packet!(enc.write, enc.write.push(msg::REQUEST_SUCCESS))"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Send a \"failure\" reply to a global request."},{"Add":" pub fn request_failure(&mut self) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" self.common.wants_reply = false;"},{"Add":" push_packet!(enc.write, enc.write.push(msg::REQUEST_FAILURE))"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Send a \"success\" reply to a channel request. Always call this"},{"Add":" /// function if the request was successful (it checks whether the"},{"Add":" /// client expects an answer)."},{"Add":" pub fn channel_success(&mut self, channel: ChannelId) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let Some(channel) = enc.channels.get_mut(&channel) {"},{"Add":" assert!(channel.confirmed);"},{"Add":" if channel.wants_reply {"},{"Add":" channel.wants_reply = false;"},{"Add":" debug!(\"channel_success {:?}\", channel);"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_SUCCESS);"},{"Add":" enc.write.push_u32_be(channel.recipient_channel);"},{"Add":" })"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Send a \"failure\" reply to a global request."},{"Add":" pub fn channel_failure(&mut self, channel: ChannelId) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let Some(channel) = enc.channels.get_mut(&channel) {"},{"Add":" assert!(channel.confirmed);"},{"Add":" if channel.wants_reply {"},{"Add":" channel.wants_reply = false;"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_FAILURE);"},{"Add":" enc.write.push_u32_be(channel.recipient_channel);"},{"Add":" })"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Send a \"failure\" reply to a request to open a channel open."},{"Add":" pub fn channel_open_failure("},{"Add":" &mut self,"},{"Add":" channel: ChannelId,"},{"Add":" reason: ChannelOpenFailure,"},{"Add":" description: &str,"},{"Add":" language: &str,"},{"Add":" ) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_OPEN_FAILURE);"},{"Add":" enc.write.push_u32_be(channel.0);"},{"Add":" enc.write.push_u32_be(reason as u32);"},{"Add":" enc.write.extend_ssh_string(description.as_bytes());"},{"Add":" enc.write.extend_ssh_string(language.as_bytes());"},{"Add":" })"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Close a channel."},{"Add":" pub fn close(&mut self, channel: ChannelId) {"},{"Add":" self.common.byte(channel, msg::CHANNEL_CLOSE);"},{"Add":" }"},{"Add":""},{"Add":" /// Send EOF to a channel"},{"Add":" pub fn eof(&mut self, channel: ChannelId) {"},{"Add":" self.common.byte(channel, msg::CHANNEL_EOF);"},{"Add":" }"},{"Add":""},{"Add":" /// Send data to a channel. On session channels, `extended` can be"},{"Add":" /// used to encode standard error by passing `Some(1)`, and stdout"},{"Add":" /// by passing `None`."},{"Add":" ///"},{"Add":" /// The number of bytes added to the \"sending pipeline\" (to be"},{"Add":" /// processed by the event loop) is returned."},{"Add":" pub fn data(&mut self, channel: ChannelId, data: CryptoVec) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" enc.data(channel, data)"},{"Add":" } else {"},{"Add":" unreachable!()"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Send data to a channel. On session channels, `extended` can be"},{"Add":" /// used to encode standard error by passing `Some(1)`, and stdout"},{"Add":" /// by passing `None`."},{"Add":" ///"},{"Add":" /// The number of bytes added to the \"sending pipeline\" (to be"},{"Add":" /// processed by the event loop) is returned."},{"Add":" pub fn extended_data(&mut self, channel: ChannelId, extended: u32, data: CryptoVec) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" enc.extended_data(channel, extended, data)"},{"Add":" } else {"},{"Add":" unreachable!()"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Inform the client of whether they may perform"},{"Add":" /// control-S/control-Q flow control. See"},{"Add":" /// [RFC4254](https://tools.ietf.org/html/rfc4254#section-6.8)."},{"Add":" pub fn xon_xoff_request(&mut self, channel: ChannelId, client_can_do: bool) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let Some(channel) = enc.channels.get(&channel) {"},{"Add":" assert!(channel.confirmed);"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_REQUEST);"},{"Add":""},{"Add":" enc.write.push_u32_be(channel.recipient_channel);"},{"Add":" enc.write.extend_ssh_string(b\"xon-xoff\");"},{"Add":" enc.write.push(0);"},{"Add":" enc.write.push(if client_can_do { 1 } else { 0 });"},{"Add":" })"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Send the exit status of a program."},{"Add":" pub fn exit_status_request(&mut self, channel: ChannelId, exit_status: u32) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let Some(channel) = enc.channels.get(&channel) {"},{"Add":" assert!(channel.confirmed);"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_REQUEST);"},{"Add":""},{"Add":" enc.write.push_u32_be(channel.recipient_channel);"},{"Add":" enc.write.extend_ssh_string(b\"exit-status\");"},{"Add":" enc.write.push(0);"},{"Add":" enc.write.push_u32_be(exit_status)"},{"Add":" })"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// If the program was killed by a signal, send the details about the signal to the client."},{"Add":" pub fn exit_signal_request("},{"Add":" &mut self,"},{"Add":" channel: ChannelId,"},{"Add":" signal: Sig,"},{"Add":" core_dumped: bool,"},{"Add":" error_message: &str,"},{"Add":" language_tag: &str,"},{"Add":" ) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let Some(channel) = enc.channels.get(&channel) {"},{"Add":" assert!(channel.confirmed);"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_REQUEST);"},{"Add":""},{"Add":" enc.write.push_u32_be(channel.recipient_channel);"},{"Add":" enc.write.extend_ssh_string(b\"exit-signal\");"},{"Add":" enc.write.push(0);"},{"Add":" enc.write.extend_ssh_string(signal.name().as_bytes());"},{"Add":" enc.write.push(if core_dumped { 1 } else { 0 });"},{"Add":" enc.write.extend_ssh_string(error_message.as_bytes());"},{"Add":" enc.write.extend_ssh_string(language_tag.as_bytes());"},{"Add":" })"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Open a TCP/IP forwarding channel, when a connection comes to a"},{"Add":" /// local port for which forwarding has been requested. See"},{"Add":" /// [RFC4254](https://tools.ietf.org/html/rfc4254#section-7). The"},{"Add":" /// TCP/IP packets can then be tunneled through the channel using"},{"Add":" /// `.data()`."},{"Add":" pub fn channel_open_forwarded_tcpip("},{"Add":" &mut self,"},{"Add":" connected_address: &str,"},{"Add":" connected_port: u32,"},{"Add":" originator_address: &str,"},{"Add":" originator_port: u32,"},{"Add":" ) -> Result {"},{"Add":" let result = if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" match enc.state {"},{"Add":" EncryptedState::Authenticated => {"},{"Add":" debug!(\"sending open request\");"},{"Add":""},{"Add":" let sender_channel = enc.new_channel("},{"Add":" self.common.config.window_size,"},{"Add":" self.common.config.maximum_packet_size,"},{"Add":" );"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_OPEN);"},{"Add":" enc.write.extend_ssh_string(b\"forwarded-tcpip\");"},{"Add":""},{"Add":" // sender channel id."},{"Add":" enc.write.push_u32_be(sender_channel.0);"},{"Add":""},{"Add":" // window."},{"Add":" enc.write"},{"Add":" .push_u32_be(self.common.config.as_ref().window_size);"},{"Add":""},{"Add":" // max packet size."},{"Add":" enc.write"},{"Add":" .push_u32_be(self.common.config.as_ref().maximum_packet_size);"},{"Add":""},{"Add":" enc.write.extend_ssh_string(connected_address.as_bytes());"},{"Add":" enc.write.push_u32_be(connected_port); // sender channel id."},{"Add":" enc.write.extend_ssh_string(originator_address.as_bytes());"},{"Add":" enc.write.push_u32_be(originator_port); // sender channel id."},{"Add":" });"},{"Add":" sender_channel"},{"Add":" }"},{"Add":" _ => return Err(Error::Inconsistent),"},{"Add":" }"},{"Add":" } else {"},{"Add":" return Err(Error::Inconsistent);"},{"Add":" };"},{"Add":" Ok(result)"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"mod.rs","metadata":420},"context":[{"change":0,"pos":188178}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":""},{"Add":"use std;"},{"Add":"use std::net::ToSocketAddrs;"},{"Add":"use std::sync::Arc;"},{"Add":""},{"Add":"use futures::future::Future;"},{"Add":"use futures::stream::TryStreamExt;"},{"Add":"use thrussh_keys::key;"},{"Add":"use tokio::io::{AsyncRead, AsyncWrite, AsyncWriteExt};"},{"Add":"use tokio::net::TcpListener;"},{"Add":""},{"Add":"use crate::session::*;"},{"Add":"use crate::ssh_read::*;"},{"Add":"use crate::sshbuffer::*;"},{"Add":"use crate::*;"},{"Add":""},{"Add":"mod kex;"},{"Add":"mod session;"},{"Add":"pub use self::kex::*;"},{"Add":"pub use self::session::*;"},{"Add":"mod encrypted;"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"/// Configuration of a server."},{"Add":"pub struct Config {"},{"Add":" /// The server ID string sent at the beginning of the protocol."},{"Add":" pub server_id: String,"},{"Add":" /// Authentication methods proposed to the client."},{"Add":" pub methods: auth::MethodSet,"},{"Add":" /// The authentication banner, usually a warning message shown to the client."},{"Add":" pub auth_banner: Option<&'static str>,"},{"Add":" /// Authentication rejections must happen in constant time for"},{"Add":" /// security reasons. Thrussh does not handle this by default."},{"Add":" pub auth_rejection_time: std::time::Duration,"},{"Add":" /// The server's keys. The first key pair in the client's preference order will be chosen."},{"Add":" pub keys: Vec,"},{"Add":" /// The bytes and time limits before key re-exchange."},{"Add":" pub limits: Limits,"},{"Add":" /// The initial size of a channel (used for flow control)."},{"Add":" pub window_size: u32,"},{"Add":" /// The maximal size of a single packet."},{"Add":" pub maximum_packet_size: u32,"},{"Add":" /// Lists of preferred algorithms."},{"Add":" pub preferred: Preferred,"},{"Add":" /// Maximal number of allowed authentication attempts."},{"Add":" pub max_auth_attempts: usize,"},{"Add":" /// Time after which the connection is garbage-collected."},{"Add":" pub connection_timeout: Option,"},{"Add":"}"},{"Add":""},{"Add":"impl Default for Config {"},{"Add":" fn default() -> Config {"},{"Add":" Config {"},{"Add":" server_id: format!("},{"Add":" \"SSH-2.0-{}_{}\","},{"Add":" env!(\"CARGO_PKG_NAME\"),"},{"Add":" env!(\"CARGO_PKG_VERSION\")"},{"Add":" ),"},{"Add":" methods: auth::MethodSet::all(),"},{"Add":" auth_banner: None,"},{"Add":" auth_rejection_time: std::time::Duration::from_secs(1),"},{"Add":" keys: Vec::new(),"},{"Add":" window_size: 2097152,"},{"Add":" maximum_packet_size: 32768,"},{"Add":" limits: Limits::default(),"},{"Add":" preferred: Default::default(),"},{"Add":" max_auth_attempts: 10,"},{"Add":" connection_timeout: Some(std::time::Duration::from_secs(600)),"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// A client's response in a challenge-response authentication."},{"Add":"#[derive(Debug)]"},{"Add":"pub struct Response<'a> {"},{"Add":" pos: thrussh_keys::encoding::Position<'a>,"},{"Add":" n: u32,"},{"Add":"}"},{"Add":""},{"Add":"impl<'a> Iterator for Response<'a> {"},{"Add":" type Item = &'a [u8];"},{"Add":" fn next(&mut self) -> Option {"},{"Add":" if self.n == 0 {"},{"Add":" None"},{"Add":" } else {"},{"Add":" self.n -= 1;"},{"Add":" self.pos.read_string().ok()"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"use std::borrow::Cow;"},{"Add":"/// An authentication result, in a challenge-response authentication."},{"Add":"#[derive(Debug, PartialEq, Eq)]"},{"Add":"pub enum Auth {"},{"Add":" /// Reject the authentication request."},{"Add":" Reject,"},{"Add":" /// Accept the authentication request."},{"Add":" Accept,"},{"Add":""},{"Add":" /// Method was not accepted, but no other check was performed."},{"Add":" UnsupportedMethod,"},{"Add":""},{"Add":" /// Partially accept the challenge-response authentication"},{"Add":" /// request, providing more instructions for the client to follow."},{"Add":" Partial {"},{"Add":" /// Name of this challenge."},{"Add":" name: Cow<'static, str>,"},{"Add":" /// Instructions for this challenge."},{"Add":" instructions: Cow<'static, str>,"},{"Add":" /// A number of prompts to the user. Each prompt has a `bool`"},{"Add":" /// indicating whether the terminal must echo the characters"},{"Add":" /// typed by the user."},{"Add":" prompts: Cow<'static, [(Cow<'static, str>, bool)]>,"},{"Add":" },"},{"Add":"}"},{"Add":""},{"Add":"/// Server handler. Each client will have their own handler."},{"Add":"pub trait Handler: Sized {"},{"Add":" /// The type of authentications, which can be a future ultimately"},{"Add":" /// resolving to"},{"Add":" type FutureAuth: Future> + Send;"},{"Add":""},{"Add":" /// The type of units returned by some parts of this handler."},{"Add":" type FutureUnit: Future> + Send;"},{"Add":""},{"Add":" /// The type of future bools returned by some parts of this handler."},{"Add":" type FutureBool: Future> + Send;"},{"Add":""},{"Add":" /// Convert an `Auth` to `Self::FutureAuth`. This is used to"},{"Add":" /// produce the default handlers."},{"Add":" fn finished_auth(self, auth: Auth) -> Self::FutureAuth;"},{"Add":""},{"Add":" /// Convert a `bool` to `Self::FutureBool`. This is used to"},{"Add":" /// produce the default handlers."},{"Add":" fn finished_bool(self, b: bool, session: Session) -> Self::FutureBool;"},{"Add":""},{"Add":" /// Produce a `Self::FutureUnit`. This is used to produce the"},{"Add":" /// default handlers."},{"Add":" fn finished(self, session: Session) -> Self::FutureUnit;"},{"Add":""},{"Add":" /// Check authentication using the \"none\" method. Thrussh makes"},{"Add":" /// sure rejection happens in time `config.auth_rejection_time`,"},{"Add":" /// except if this method takes more than that."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn auth_none(self, user: &str) -> Self::FutureAuth {"},{"Add":" self.finished_auth(Auth::Reject)"},{"Add":" }"},{"Add":""},{"Add":" /// Check authentication using the \"password\" method. Thrussh"},{"Add":" /// makes sure rejection happens in time"},{"Add":" /// `config.auth_rejection_time`, except if this method takes more"},{"Add":" /// than that."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn auth_password(self, user: &str, password: &str) -> Self::FutureAuth {"},{"Add":" self.finished_auth(Auth::Reject)"},{"Add":" }"},{"Add":""},{"Add":" /// Check authentication using the \"publickey\" method. This method"},{"Add":" /// should just check whether the public key matches the"},{"Add":" /// authorized ones. Thrussh then checks the signature. If the key"},{"Add":" /// is unknown, or the signature is invalid, Thrussh guarantees"},{"Add":" /// that rejection happens in constant time"},{"Add":" /// `config.auth_rejection_time`, except if this method takes more"},{"Add":" /// time than that."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn auth_publickey(self, user: &str, public_key: &key::PublicKey) -> Self::FutureAuth {"},{"Add":" self.finished_auth(Auth::Reject)"},{"Add":" }"},{"Add":""},{"Add":" /// Check authentication using the \"keyboard-interactive\""},{"Add":" /// method. Thrussh makes sure rejection happens in time"},{"Add":" /// `config.auth_rejection_time`, except if this method takes more"},{"Add":" /// than that."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn auth_keyboard_interactive("},{"Add":" self,"},{"Add":" user: &str,"},{"Add":" submethods: &str,"},{"Add":" response: Option,"},{"Add":" ) -> Self::FutureAuth {"},{"Add":" self.finished_auth(Auth::Reject)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when the client closes a channel."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn channel_close(self, channel: ChannelId, session: Session) -> Self::FutureUnit {"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when the client sends EOF to a channel."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn channel_eof(self, channel: ChannelId, session: Session) -> Self::FutureUnit {"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when a new session channel is created."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn channel_open_session(self, channel: ChannelId, session: Session) -> Self::FutureUnit {"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when a new X11 channel is created."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn channel_open_x11("},{"Add":" self,"},{"Add":" channel: ChannelId,"},{"Add":" originator_address: &str,"},{"Add":" originator_port: u32,"},{"Add":" session: Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when a new channel is created."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn channel_open_direct_tcpip("},{"Add":" self,"},{"Add":" channel: ChannelId,"},{"Add":" host_to_connect: &str,"},{"Add":" port_to_connect: u32,"},{"Add":" originator_address: &str,"},{"Add":" originator_port: u32,"},{"Add":" session: Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when a data packet is received. A response can be"},{"Add":" /// written to the `response` argument."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn data(self, channel: ChannelId, data: &[u8], session: Session) -> Self::FutureUnit {"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when an extended data packet is received. Code 1 means"},{"Add":" /// that this packet comes from stderr, other codes are not"},{"Add":" /// defined (see"},{"Add":" /// [RFC4254](https://tools.ietf.org/html/rfc4254#section-5.2))."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn extended_data("},{"Add":" self,"},{"Add":" channel: ChannelId,"},{"Add":" code: u32,"},{"Add":" data: &[u8],"},{"Add":" session: Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when the network window is adjusted, meaning that we"},{"Add":" /// can send more bytes."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn window_adjusted("},{"Add":" self,"},{"Add":" channel: ChannelId,"},{"Add":" new_window_size: usize,"},{"Add":" mut session: Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" if let Some(ref mut enc) = session.common.encrypted {"},{"Add":" enc.flush_pending(channel);"},{"Add":" }"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when this server adjusts the network window. Return the"},{"Add":" /// next target window."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn adjust_window(&mut self, channel: ChannelId, current: u32) -> u32 {"},{"Add":" current"},{"Add":" }"},{"Add":""},{"Add":" /// The client requests a pseudo-terminal with the given"},{"Add":" /// specifications."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn pty_request("},{"Add":" self,"},{"Add":" channel: ChannelId,"},{"Add":" term: &str,"},{"Add":" col_width: u32,"},{"Add":" row_height: u32,"},{"Add":" pix_width: u32,"},{"Add":" pix_height: u32,"},{"Add":" modes: &[(Pty, u32)],"},{"Add":" session: Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// The client requests an X11 connection."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn x11_request("},{"Add":" self,"},{"Add":" channel: ChannelId,"},{"Add":" single_connection: bool,"},{"Add":" x11_auth_protocol: &str,"},{"Add":" x11_auth_cookie: &str,"},{"Add":" x11_screen_number: u32,"},{"Add":" session: Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// The client wants to set the given environment variable. Check"},{"Add":" /// these carefully, as it is dangerous to allow any variable"},{"Add":" /// environment to be set."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn env_request("},{"Add":" self,"},{"Add":" channel: ChannelId,"},{"Add":" variable_name: &str,"},{"Add":" variable_value: &str,"},{"Add":" session: Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// The client requests a shell."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn shell_request(self, channel: ChannelId, session: Session) -> Self::FutureUnit {"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// The client sends a command to execute, to be passed to a"},{"Add":" /// shell. Make sure to check the command before doing so."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn exec_request(self, channel: ChannelId, data: &[u8], session: Session) -> Self::FutureUnit {"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// The client asks to start the subsystem with the given name"},{"Add":" /// (such as sftp)."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn subsystem_request("},{"Add":" self,"},{"Add":" channel: ChannelId,"},{"Add":" name: &str,"},{"Add":" session: Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// The client's pseudo-terminal window size has changed."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn window_change_request("},{"Add":" self,"},{"Add":" channel: ChannelId,"},{"Add":" col_width: u32,"},{"Add":" row_height: u32,"},{"Add":" pix_width: u32,"},{"Add":" pix_height: u32,"},{"Add":" session: Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// The client is sending a signal (usually to pass to the"},{"Add":" /// currently running process)."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn signal(self, channel: ChannelId, signal_name: Sig, session: Session) -> Self::FutureUnit {"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Used for reverse-forwarding ports, see"},{"Add":" /// [RFC4254](https://tools.ietf.org/html/rfc4254#section-7)."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn tcpip_forward(self, address: &str, port: u32, session: Session) -> Self::FutureBool {"},{"Add":" self.finished_bool(false, session)"},{"Add":" }"},{"Add":" /// Used to stop the reverse-forwarding of a port, see"},{"Add":" /// [RFC4254](https://tools.ietf.org/html/rfc4254#section-7)."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn cancel_tcpip_forward(self, address: &str, port: u32, session: Session) -> Self::FutureBool {"},{"Add":" self.finished_bool(false, session)"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// Trait used to create new handlers when clients connect."},{"Add":"pub trait Server {"},{"Add":" /// The type of handlers."},{"Add":" type Handler: Handler + Send;"},{"Add":" /// Called when a new client connects."},{"Add":" fn new(&mut self, peer_addr: Option) -> Self::Handler;"},{"Add":"}"},{"Add":""},{"Add":"/// Run a server."},{"Add":"/// Create a new `Connection` from the server's configuration, a"},{"Add":"/// stream and a [`Handler`](trait.Handler.html)."},{"Add":"pub async fn run("},{"Add":" config: Arc,"},{"Add":" addr: &str,"},{"Add":" mut server: H,"},{"Add":") -> Result<(), std::io::Error> {"},{"Add":" let addr = addr.to_socket_addrs().unwrap().next().unwrap();"},{"Add":" let mut socket = TcpListener::bind(&addr).await?;"},{"Add":" if config.maximum_packet_size > 65535 {"},{"Add":" error!("},{"Add":" \"Maximum packet size ({:?}) should not larger than a TCP packet (65535)\","},{"Add":" config.maximum_packet_size"},{"Add":" );"},{"Add":" }"},{"Add":" socket"},{"Add":" .incoming()"},{"Add":" .try_for_each(move |socket| {"},{"Add":" let config = config.clone();"},{"Add":" let server = server.new(socket.peer_addr().ok());"},{"Add":" async move {"},{"Add":" tokio::spawn(run_stream(config, socket, server));"},{"Add":" Ok(())"},{"Add":" }"},{"Add":" })"},{"Add":" .await?;"},{"Add":" Ok(())"},{"Add":"}"},{"Add":""},{"Add":"use std::cell::RefCell;"},{"Add":"thread_local! {"},{"Add":" static B1: RefCell = RefCell::new(CryptoVec::new());"},{"Add":" static B2: RefCell = RefCell::new(CryptoVec::new());"},{"Add":"}"},{"Add":""},{"Add":"pub async fn timeout(delay: Option) {"},{"Add":" if let Some(delay) = delay {"},{"Add":" tokio::time::delay_for(delay).await"},{"Add":" } else {"},{"Add":" futures::future::pending().await"},{"Add":" };"},{"Add":"}"},{"Add":""},{"Add":"pub async fn run_stream("},{"Add":" config: Arc,"},{"Add":" mut stream: R,"},{"Add":" handler: H,"},{"Add":") -> Result"},{"Add":"where"},{"Add":" R: AsyncRead + AsyncWrite + Unpin,"},{"Add":"{"},{"Add":" let mut handler = Some(handler);"},{"Add":" let delay = config.connection_timeout;"},{"Add":" // Writing SSH id."},{"Add":" let mut decomp = CryptoVec::new();"},{"Add":" let mut write_buffer = SSHBuffer::new();"},{"Add":" write_buffer.send_ssh_id(config.as_ref().server_id.as_bytes());"},{"Add":" stream.write_all(&write_buffer.buffer[..]).await?;"},{"Add":""},{"Add":" // Reading SSH id and allocating a session."},{"Add":" let mut stream = SshRead::new(&mut stream);"},{"Add":" let common = read_ssh_id(config, &mut stream).await?;"},{"Add":" let (sender, receiver) = tokio::sync::mpsc::channel(10);"},{"Add":" let mut session = Session {"},{"Add":" target_window_size: common.config.window_size,"},{"Add":" common,"},{"Add":" receiver,"},{"Add":" sender: server::session::Handle { sender },"},{"Add":" };"},{"Add":" session.flush()?;"},{"Add":" stream"},{"Add":" .write_all(&session.common.write_buffer.buffer)"},{"Add":" .await?;"},{"Add":" session.common.write_buffer.buffer.clear();"},{"Add":" let mut buffer = SSHBuffer::new();"},{"Add":""},{"Add":" while !session.common.disconnected {"},{"Add":" tokio::select! {"},{"Add":" _ = cipher::read(&mut stream, &mut buffer, &session.common.cipher) => {"},{"Add":" if buffer.buffer.len() < 5 {"},{"Add":" break"},{"Add":" }"},{"Add":" let buf = if let Some(ref mut enc) = session.common.encrypted {"},{"Add":" let d = enc.decompress.decompress("},{"Add":" &buffer.buffer[5..],"},{"Add":" &mut decomp,"},{"Add":" );"},{"Add":" if let Ok(buf) = d {"},{"Add":" buf"},{"Add":" } else {"},{"Add":" debug!(\"err = {:?}\", d);"},{"Add":" break"},{"Add":" }"},{"Add":" } else {"},{"Add":" &buffer.buffer[5..]"},{"Add":" };"},{"Add":" if buf.is_empty() {"},{"Add":" continue"},{"Add":" }"},{"Add":" if buf[0] == crate::msg::DISCONNECT {"},{"Add":" debug!(\"break\");"},{"Add":" break;"},{"Add":" } else if buf[0] <= 4 {"},{"Add":" continue;"},{"Add":" }"},{"Add":" match reply(session, &mut handler, &buf[..]).await {"},{"Add":" Ok(s) => session = s,"},{"Add":" Err(e) => {"},{"Add":" error!(\"{:?}\", e);"},{"Add":" return Err(e)"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" _ = timeout(delay) => {"},{"Add":" debug!(\"timeout\");"},{"Add":" break"},{"Add":" },"},{"Add":" msg = session.receiver.recv(), if !session.is_rekeying() => {"},{"Add":" match msg {"},{"Add":" Some((id, ChannelMsg::Data { data })) => {"},{"Add":" session.data(id, data);"},{"Add":" }"},{"Add":" Some((id, ChannelMsg::ExtendedData { ext, data })) => {"},{"Add":" session.extended_data(id, ext, data);"},{"Add":" }"},{"Add":" Some((id, ChannelMsg::Eof)) => {"},{"Add":" session.eof(id);"},{"Add":" }"},{"Add":" Some((id, ChannelMsg::XonXoff { client_can_do })) => {"},{"Add":" session.xon_xoff_request(id, client_can_do);"},{"Add":" }"},{"Add":" Some((id, ChannelMsg::ExitStatus { exit_status })) => {"},{"Add":" session.exit_status_request(id, exit_status);"},{"Add":" }"},{"Add":" Some((id, ChannelMsg::ExitSignal { signal_name, core_dumped, error_message, lang_tag })) => {"},{"Add":" session.exit_signal_request(id, signal_name, core_dumped, &error_message, &lang_tag);"},{"Add":" }"},{"Add":" Some((id, ChannelMsg::WindowAdjusted { new_size })) => {"},{"Add":" debug!(\"window adjusted to {:?} for channel {:?}\", new_size, id);"},{"Add":" }"},{"Add":" Some((id, ChannelMsg::Success)) => {"},{"Add":" debug!(\"channel success {:?}\", id);"},{"Add":" }"},{"Add":" None => {"},{"Add":" debug!(\"session.receiver: received None\");"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" session.flush()?;"},{"Add":" stream"},{"Add":" .write_all(&session.common.write_buffer.buffer)"},{"Add":" .await?;"},{"Add":" buffer.buffer.clear();"},{"Add":" session.common.write_buffer.buffer.clear();"},{"Add":" }"},{"Add":" debug!(\"disconnected\");"},{"Add":" // Shutdown"},{"Add":" stream.shutdown().await?;"},{"Add":" buffer.buffer.clear();"},{"Add":" while cipher::read(&mut stream, &mut buffer, &session.common.cipher).await? != 0 {"},{"Add":" buffer.buffer.clear();"},{"Add":" }"},{"Add":" Ok(handler.unwrap())"},{"Add":"}"},{"Add":""},{"Add":"async fn read_ssh_id("},{"Add":" config: Arc,"},{"Add":" read: &mut SshRead,"},{"Add":") -> Result>, anyhow::Error> {"},{"Add":" let sshid = if let Some(t) = config.connection_timeout {"},{"Add":" tokio::time::timeout(t, read.read_ssh_id()).await??"},{"Add":" } else {"},{"Add":" read.read_ssh_id().await?"},{"Add":" };"},{"Add":" let mut exchange = Exchange::new();"},{"Add":" exchange.client_id.extend(sshid);"},{"Add":" // Preparing the response"},{"Add":" exchange"},{"Add":" .server_id"},{"Add":" .extend(config.as_ref().server_id.as_bytes());"},{"Add":" let mut kexinit = KexInit {"},{"Add":" exchange: exchange,"},{"Add":" algo: None,"},{"Add":" sent: false,"},{"Add":" session_id: None,"},{"Add":" };"},{"Add":" let cipher = Arc::new(cipher::CLEAR_PAIR);"},{"Add":" let mut write_buffer = SSHBuffer::new();"},{"Add":" kexinit.server_write(config.as_ref(), cipher.as_ref(), &mut write_buffer)?;"},{"Add":" Ok(CommonSession {"},{"Add":" write_buffer,"},{"Add":" kex: Some(Kex::KexInit(kexinit)),"},{"Add":" auth_user: String::new(),"},{"Add":" auth_method: None, // Client only."},{"Add":" cipher,"},{"Add":" encrypted: None,"},{"Add":" config: config,"},{"Add":" wants_reply: false,"},{"Add":" disconnected: false,"},{"Add":" buffer: CryptoVec::new(),"},{"Add":" })"},{"Add":"}"},{"Add":""},{"Add":"async fn reply("},{"Add":" mut session: Session,"},{"Add":" handler: &mut Option,"},{"Add":" buf: &[u8],"},{"Add":") -> Result {"},{"Add":" // Handle key exchange/re-exchange."},{"Add":" if session.common.encrypted.is_none() {"},{"Add":" match session.common.kex.take() {"},{"Add":" Some(Kex::KexInit(kexinit)) => {"},{"Add":" if kexinit.algo.is_some() || buf[0] == msg::KEXINIT {"},{"Add":" session.common.kex = Some(kexinit.server_parse("},{"Add":" session.common.config.as_ref(),"},{"Add":" &session.common.cipher,"},{"Add":" &buf,"},{"Add":" &mut session.common.write_buffer,"},{"Add":" )?);"},{"Add":" return Ok(session);"},{"Add":" } else {"},{"Add":" // Else, i.e. if the other side has not started"},{"Add":" // the key exchange, process its packets by simple"},{"Add":" // not returning."},{"Add":" session.common.kex = Some(Kex::KexInit(kexinit))"},{"Add":" }"},{"Add":" }"},{"Add":" Some(Kex::KexDh(kexdh)) => {"},{"Add":" session.common.kex = Some(kexdh.parse("},{"Add":" session.common.config.as_ref(),"},{"Add":" &session.common.cipher,"},{"Add":" buf,"},{"Add":" &mut session.common.write_buffer,"},{"Add":" )?);"},{"Add":" return Ok(session);"},{"Add":" }"},{"Add":" Some(Kex::NewKeys(newkeys)) => {"},{"Add":" if buf[0] != msg::NEWKEYS {"},{"Add":" return Err(Error::Kex.into());"},{"Add":" }"},{"Add":" // Ok, NEWKEYS received, now encrypted."},{"Add":" session.common.encrypted("},{"Add":" EncryptedState::WaitingServiceRequest {"},{"Add":" sent: false,"},{"Add":" accepted: false,"},{"Add":" },"},{"Add":" newkeys,"},{"Add":" );"},{"Add":" return Ok(session);"},{"Add":" }"},{"Add":" Some(kex) => {"},{"Add":" session.common.kex = Some(kex);"},{"Add":" return Ok(session);"},{"Add":" }"},{"Add":" None => {}"},{"Add":" }"},{"Add":" Ok(session)"},{"Add":" } else {"},{"Add":" Ok(session.server_read_encrypted(handler, buf).await?)"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"kex.rs","metadata":420},"context":[{"change":0,"pos":188178}],"contents":[{"Add":"use super::*;"},{"Add":"use crate::cipher::CipherPair;"},{"Add":"use crate::key::PubKey;"},{"Add":"use crate::negotiation::Select;"},{"Add":"use crate::{kex, msg, negotiation};"},{"Add":"use std::cell::RefCell;"},{"Add":"use thrussh_keys::encoding::{Encoding, Reader};"},{"Add":""},{"Add":"thread_local! {"},{"Add":" static HASH_BUF: RefCell = RefCell::new(CryptoVec::new());"},{"Add":"}"},{"Add":""},{"Add":"impl KexInit {"},{"Add":" pub fn server_parse("},{"Add":" mut self,"},{"Add":" config: &Config,"},{"Add":" cipher: &CipherPair,"},{"Add":" buf: &[u8],"},{"Add":" write_buffer: &mut SSHBuffer,"},{"Add":" ) -> Result {"},{"Add":" if buf[0] == msg::KEXINIT {"},{"Add":" let algo = {"},{"Add":" // read algorithms from packet."},{"Add":" self.exchange.client_kex_init.extend(buf);"},{"Add":" super::negotiation::Server::read_kex(buf, &config.preferred)?"},{"Add":" };"},{"Add":" if !self.sent {"},{"Add":" self.server_write(config, cipher, write_buffer)?"},{"Add":" }"},{"Add":" let mut key = 0;"},{"Add":" while key < config.keys.len() && config.keys[key].name() != algo.key.as_ref() {"},{"Add":" key += 1"},{"Add":" }"},{"Add":" let next_kex = if key < config.keys.len() {"},{"Add":" Kex::KexDh(KexDh {"},{"Add":" exchange: self.exchange,"},{"Add":" key: key,"},{"Add":" names: algo,"},{"Add":" session_id: self.session_id,"},{"Add":" })"},{"Add":" } else {"},{"Add":" return Err(Error::UnknownKey.into());"},{"Add":" };"},{"Add":""},{"Add":" Ok(next_kex)"},{"Add":" } else {"},{"Add":" Ok(Kex::KexInit(self))"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn server_write("},{"Add":" &mut self,"},{"Add":" config: &Config,"},{"Add":" cipher: &CipherPair,"},{"Add":" write_buffer: &mut SSHBuffer,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" self.exchange.server_kex_init.clear();"},{"Add":" negotiation::write_kex(&config.preferred, &mut self.exchange.server_kex_init)?;"},{"Add":" debug!(\"server kex init: {:?}\", &self.exchange.server_kex_init[..]);"},{"Add":" self.sent = true;"},{"Add":" cipher.write(&self.exchange.server_kex_init, write_buffer);"},{"Add":" Ok(())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl KexDh {"},{"Add":" pub fn parse("},{"Add":" mut self,"},{"Add":" config: &Config,"},{"Add":" cipher: &CipherPair,"},{"Add":" buf: &[u8],"},{"Add":" write_buffer: &mut SSHBuffer,"},{"Add":" ) -> Result {"},{"Add":" if self.names.ignore_guessed {"},{"Add":" // If we need to ignore this packet."},{"Add":" self.names.ignore_guessed = false;"},{"Add":" Ok(Kex::KexDh(self))"},{"Add":" } else {"},{"Add":" // Else, process it."},{"Add":" assert!(buf[0] == msg::KEX_ECDH_INIT);"},{"Add":" let mut r = buf.reader(1);"},{"Add":" self.exchange.client_ephemeral.extend(r.read_string()?);"},{"Add":" let kex = kex::Algorithm::server_dh(self.names.kex, &mut self.exchange, buf)?;"},{"Add":" // Then, we fill the write buffer right away, so that we"},{"Add":" // can output it immediately when the time comes."},{"Add":" let kexdhdone = KexDhDone {"},{"Add":" exchange: self.exchange,"},{"Add":" kex: kex,"},{"Add":" key: self.key,"},{"Add":" names: self.names,"},{"Add":" session_id: self.session_id,"},{"Add":" };"},{"Add":" let hash: Result = HASH_BUF.with(|buffer| {"},{"Add":" let mut buffer = buffer.borrow_mut();"},{"Add":" buffer.clear();"},{"Add":" debug!(\"server kexdhdone.exchange = {:?}\", kexdhdone.exchange);"},{"Add":" let hash = kexdhdone.kex.compute_exchange_hash("},{"Add":" &config.keys[kexdhdone.key],"},{"Add":" &kexdhdone.exchange,"},{"Add":" &mut buffer,"},{"Add":" )?;"},{"Add":" debug!(\"exchange hash: {:?}\", hash);"},{"Add":" buffer.clear();"},{"Add":" buffer.push(msg::KEX_ECDH_REPLY);"},{"Add":" config.keys[kexdhdone.key].push_to(&mut buffer);"},{"Add":" // Server ephemeral"},{"Add":" buffer.extend_ssh_string(&kexdhdone.exchange.server_ephemeral);"},{"Add":" // Hash signature"},{"Add":" debug!(\"signing with key {:?}\", kexdhdone.key);"},{"Add":" debug!(\"hash: {:?}\", hash);"},{"Add":" debug!(\"key: {:?}\", config.keys[kexdhdone.key]);"},{"Add":" config.keys[kexdhdone.key].add_signature(&mut buffer, &hash)?;"},{"Add":" cipher.write(&buffer, write_buffer);"},{"Add":" cipher.write(&[msg::NEWKEYS], write_buffer);"},{"Add":" Ok(hash)"},{"Add":" });"},{"Add":""},{"Add":" Ok(Kex::NewKeys(kexdhdone.compute_keys(hash?, true)?))"},{"Add":" }"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"encrypted.rs","metadata":420},"context":[{"change":0,"pos":188178}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":"use super::super::*;"},{"Add":"use super::*;"},{"Add":"use auth::*;"},{"Add":"use byteorder::{BigEndian, ByteOrder};"},{"Add":"use msg;"},{"Add":"use negotiation;"},{"Add":"use negotiation::Select;"},{"Add":"use std::cell::RefCell;"},{"Add":"use thrussh_keys::encoding::{Encoding, Position, Reader};"},{"Add":"use thrussh_keys::key;"},{"Add":"use thrussh_keys::key::Verify;"},{"Add":"use tokio::time::Instant;"},{"Add":""},{"Add":"impl Session {"},{"Add":" /// Returns false iff a request was rejected."},{"Add":" pub(in crate) async fn server_read_encrypted("},{"Add":" mut self,"},{"Add":" handler: &mut Option,"},{"Add":" buf: &[u8],"},{"Add":" ) -> Result {"},{"Add":" let instant = tokio::time::Instant::now() + self.common.config.auth_rejection_time;"},{"Add":" debug!(\"read_encrypted\");"},{"Add":" // Either this packet is a KEXINIT, in which case we start a key re-exchange."},{"Add":""},{"Add":" let mut enc = self.common.encrypted.as_mut().unwrap();"},{"Add":" if buf[0] == msg::KEXINIT {"},{"Add":" debug!(\"Received rekeying request\");"},{"Add":" // If we're not currently rekeying, but `buf` is a rekey request"},{"Add":" if let Some(Kex::KexInit(kexinit)) = enc.rekey.take() {"},{"Add":" enc.rekey = Some(kexinit.server_parse("},{"Add":" self.common.config.as_ref(),"},{"Add":" &self.common.cipher,"},{"Add":" buf,"},{"Add":" &mut self.common.write_buffer,"},{"Add":" )?);"},{"Add":" self.flush()?;"},{"Add":" } else if let Some(exchange) = enc.exchange.take() {"},{"Add":" let kexinit = KexInit::received_rekey("},{"Add":" exchange,"},{"Add":" negotiation::Server::read_kex(buf, &self.common.config.as_ref().preferred)?,"},{"Add":" &enc.session_id,"},{"Add":" );"},{"Add":" enc.rekey = Some(kexinit.server_parse("},{"Add":" self.common.config.as_ref(),"},{"Add":" &mut self.common.cipher,"},{"Add":" buf,"},{"Add":" &mut self.common.write_buffer,"},{"Add":" )?);"},{"Add":" }"},{"Add":" return Ok(self);"},{"Add":" }"},{"Add":""},{"Add":" match enc.rekey.take() {"},{"Add":" Some(Kex::KexDh(kexdh)) => {"},{"Add":" enc.rekey = Some(kexdh.parse("},{"Add":" self.common.config.as_ref(),"},{"Add":" &self.common.cipher,"},{"Add":" buf,"},{"Add":" &mut self.common.write_buffer,"},{"Add":" )?);"},{"Add":" return Ok(self);"},{"Add":" }"},{"Add":" Some(Kex::NewKeys(newkeys)) => {"},{"Add":" if buf[0] != msg::NEWKEYS {"},{"Add":" return Err(Error::Kex.into());"},{"Add":" }"},{"Add":" // Ok, NEWKEYS received, now encrypted."},{"Add":" self.common.newkeys(newkeys);"},{"Add":" return Ok(self);"},{"Add":" }"},{"Add":" rek => enc.rekey = rek,"},{"Add":" }"},{"Add":""},{"Add":" // If we've successfully read a packet."},{"Add":" match enc.state {"},{"Add":" EncryptedState::WaitingServiceRequest {"},{"Add":" ref mut accepted, .."},{"Add":" } if buf[0] == msg::SERVICE_REQUEST => {"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let request = r.read_string()?;"},{"Add":" debug!(\"request: {:?}\", std::str::from_utf8(request));"},{"Add":" if request == b\"ssh-userauth\" {"},{"Add":" let auth_request = server_accept_service("},{"Add":" self.common.config.as_ref().auth_banner,"},{"Add":" self.common.config.as_ref().methods,"},{"Add":" &mut enc.write,"},{"Add":" );"},{"Add":" *accepted = true;"},{"Add":" enc.state = EncryptedState::WaitingAuthRequest(auth_request);"},{"Add":" }"},{"Add":" Ok(self)"},{"Add":" }"},{"Add":" EncryptedState::WaitingAuthRequest(_) if buf[0] == msg::USERAUTH_REQUEST => {"},{"Add":" enc.server_read_auth_request(instant, handler, buf, &mut self.common.auth_user)"},{"Add":" .await?;"},{"Add":" if let EncryptedState::InitCompression = enc.state {"},{"Add":" enc.client_compression.init_decompress(&mut enc.decompress);"},{"Add":" }"},{"Add":" Ok(self)"},{"Add":" }"},{"Add":" EncryptedState::WaitingAuthRequest(ref mut auth)"},{"Add":" if buf[0] == msg::USERAUTH_INFO_RESPONSE =>"},{"Add":" {"},{"Add":" if read_userauth_info_response("},{"Add":" instant,"},{"Add":" handler,"},{"Add":" &mut enc.write,"},{"Add":" auth,"},{"Add":" &mut self.common.auth_user,"},{"Add":" buf,"},{"Add":" )"},{"Add":" .await?"},{"Add":" {"},{"Add":" if let EncryptedState::InitCompression = enc.state {"},{"Add":" enc.client_compression.init_decompress(&mut enc.decompress);"},{"Add":" }"},{"Add":" }"},{"Add":" Ok(self)"},{"Add":" }"},{"Add":" EncryptedState::InitCompression => {"},{"Add":" enc.server_compression.init_compress(&mut enc.compress);"},{"Add":" enc.state = EncryptedState::Authenticated;"},{"Add":" self.server_read_authenticated(handler, buf).await"},{"Add":" }"},{"Add":" EncryptedState::Authenticated => self.server_read_authenticated(handler, buf).await,"},{"Add":" _ => Ok(self),"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"fn server_accept_service("},{"Add":" banner: Option<&str>,"},{"Add":" methods: MethodSet,"},{"Add":" buffer: &mut CryptoVec,"},{"Add":") -> AuthRequest {"},{"Add":" push_packet!(buffer, {"},{"Add":" buffer.push(msg::SERVICE_ACCEPT);"},{"Add":" buffer.extend_ssh_string(b\"ssh-userauth\");"},{"Add":" });"},{"Add":""},{"Add":" if let Some(ref banner) = banner {"},{"Add":" push_packet!(buffer, {"},{"Add":" buffer.push(msg::USERAUTH_BANNER);"},{"Add":" buffer.extend_ssh_string(banner.as_bytes());"},{"Add":" buffer.extend_ssh_string(b\"\");"},{"Add":" })"},{"Add":" }"},{"Add":""},{"Add":" AuthRequest {"},{"Add":" methods: methods,"},{"Add":" partial_success: false, // not used immediately anway."},{"Add":" current: None,"},{"Add":" rejection_count: 0,"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Encrypted {"},{"Add":" /// Returns false iff the request was rejected."},{"Add":" async fn server_read_auth_request("},{"Add":" &mut self,"},{"Add":" until: Instant,"},{"Add":" handler: &mut Option,"},{"Add":" buf: &[u8],"},{"Add":" auth_user: &mut String,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" // https://tools.ietf.org/html/rfc4252#section-5"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let user = r.read_string()?;"},{"Add":" let user = std::str::from_utf8(user)?;"},{"Add":" let service_name = r.read_string()?;"},{"Add":" let method = r.read_string()?;"},{"Add":" debug!("},{"Add":" \"name: {:?} {:?} {:?}\","},{"Add":" user,"},{"Add":" std::str::from_utf8(service_name),"},{"Add":" std::str::from_utf8(method)"},{"Add":" );"},{"Add":""},{"Add":" if service_name == b\"ssh-connection\" {"},{"Add":" if method == b\"password\" {"},{"Add":" let auth_request = if let EncryptedState::WaitingAuthRequest(ref mut a) = self.state"},{"Add":" {"},{"Add":" a"},{"Add":" } else {"},{"Add":" unreachable!()"},{"Add":" };"},{"Add":" auth_user.clear();"},{"Add":" auth_user.push_str(user);"},{"Add":" r.read_byte()?;"},{"Add":" let password = r.read_string()?;"},{"Add":" let password = std::str::from_utf8(password)?;"},{"Add":" let handler_ = handler.take().unwrap();"},{"Add":" let (handler_, auth) = handler_.auth_password(user, password).await?;"},{"Add":" *handler = Some(handler_);"},{"Add":" if let Auth::Accept = auth {"},{"Add":" server_auth_request_success(&mut self.write);"},{"Add":" self.state = EncryptedState::InitCompression;"},{"Add":" } else {"},{"Add":" auth_user.clear();"},{"Add":" auth_request.methods = auth_request.methods - MethodSet::PASSWORD;"},{"Add":" auth_request.partial_success = false;"},{"Add":" reject_auth_request(until, &mut self.write, auth_request).await;"},{"Add":" }"},{"Add":" Ok(())"},{"Add":" } else if method == b\"publickey\" {"},{"Add":" self.server_read_auth_request_pk(until, handler, buf, auth_user, user, r)"},{"Add":" .await"},{"Add":" } else if method == b\"keyboard-interactive\" {"},{"Add":" let auth_request = if let EncryptedState::WaitingAuthRequest(ref mut a) = self.state"},{"Add":" {"},{"Add":" a"},{"Add":" } else {"},{"Add":" unreachable!()"},{"Add":" };"},{"Add":" auth_user.clear();"},{"Add":" auth_user.push_str(user);"},{"Add":" let _ = r.read_string()?; // language_tag, deprecated."},{"Add":" let submethods = std::str::from_utf8(r.read_string()?)?;"},{"Add":" debug!(\"{:?}\", submethods);"},{"Add":" auth_request.current = Some(CurrentRequest::KeyboardInteractive {"},{"Add":" submethods: submethods.to_string(),"},{"Add":" });"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, auth) = h.auth_keyboard_interactive(user, submethods, None).await?;"},{"Add":" *handler = Some(h);"},{"Add":" if reply_userauth_info_response(until, auth_request, &mut self.write, auth).await? {"},{"Add":" self.state = EncryptedState::InitCompression"},{"Add":" }"},{"Add":" Ok(())"},{"Add":" } else {"},{"Add":" // Other methods of the base specification are insecure or optional."},{"Add":" let auth_request = if let EncryptedState::WaitingAuthRequest(ref mut a) = self.state"},{"Add":" {"},{"Add":" a"},{"Add":" } else {"},{"Add":" unreachable!()"},{"Add":" };"},{"Add":" reject_auth_request(until, &mut self.write, auth_request).await;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":" } else {"},{"Add":" // Unknown service"},{"Add":" Err(Error::Inconsistent.into())"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"thread_local! {"},{"Add":" static SIGNATURE_BUFFER: RefCell = RefCell::new(CryptoVec::new());"},{"Add":"}"},{"Add":""},{"Add":"impl Encrypted {"},{"Add":" async fn server_read_auth_request_pk<'a, H: Handler>("},{"Add":" &mut self,"},{"Add":" until: Instant,"},{"Add":" handler: &mut Option,"},{"Add":" buf: &[u8],"},{"Add":" auth_user: &mut String,"},{"Add":" user: &str,"},{"Add":" mut r: Position<'a>,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" let auth_request = if let EncryptedState::WaitingAuthRequest(ref mut a) = self.state {"},{"Add":" a"},{"Add":" } else {"},{"Add":" unreachable!()"},{"Add":" };"},{"Add":" let is_real = r.read_byte()?;"},{"Add":" let pubkey_algo = r.read_string()?;"},{"Add":" let pubkey_key = r.read_string()?;"},{"Add":" debug!(\"algo: {:?}, key: {:?}\", pubkey_algo, pubkey_key);"},{"Add":" match key::PublicKey::parse(pubkey_algo, pubkey_key) {"},{"Add":" Ok(pubkey) => {"},{"Add":" debug!(\"is_real = {:?}\", is_real);"},{"Add":""},{"Add":" if is_real != 0 {"},{"Add":" let pos0 = r.position;"},{"Add":" let sent_pk_ok = if let Some(CurrentRequest::PublicKey { sent_pk_ok, .. }) ="},{"Add":" auth_request.current"},{"Add":" {"},{"Add":" sent_pk_ok"},{"Add":" } else {"},{"Add":" false"},{"Add":" };"},{"Add":""},{"Add":" let signature = r.read_string()?;"},{"Add":" debug!(\"signature = {:?}\", signature);"},{"Add":" let mut s = signature.reader(0);"},{"Add":" let algo_ = s.read_string()?;"},{"Add":" debug!(\"algo_: {:?}\", algo_);"},{"Add":" let sig = s.read_string()?;"},{"Add":" let init = &buf[0..pos0];"},{"Add":""},{"Add":" let is_valid = if sent_pk_ok && user == auth_user {"},{"Add":" true"},{"Add":" } else if auth_user.len() == 0 {"},{"Add":" auth_user.clear();"},{"Add":" auth_user.push_str(user);"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, auth) = h.auth_publickey(user, &pubkey).await?;"},{"Add":" *handler = Some(h);"},{"Add":" auth == Auth::Accept"},{"Add":" } else {"},{"Add":" false"},{"Add":" };"},{"Add":" if is_valid {"},{"Add":" let session_id = self.session_id.as_ref();"},{"Add":" if SIGNATURE_BUFFER.with(|buf| {"},{"Add":" let mut buf = buf.borrow_mut();"},{"Add":" buf.clear();"},{"Add":" buf.extend_ssh_string(session_id);"},{"Add":" buf.extend(init);"},{"Add":" // Verify signature."},{"Add":" pubkey.verify_client_auth(&buf, sig)"},{"Add":" }) {"},{"Add":" debug!(\"signature verified\");"},{"Add":" server_auth_request_success(&mut self.write);"},{"Add":" self.state = EncryptedState::InitCompression;"},{"Add":" } else {"},{"Add":" debug!(\"signature wrong\");"},{"Add":" reject_auth_request(until, &mut self.write, auth_request).await;"},{"Add":" }"},{"Add":" } else {"},{"Add":" reject_auth_request(until, &mut self.write, auth_request).await;"},{"Add":" }"},{"Add":" Ok(())"},{"Add":" } else {"},{"Add":" auth_user.clear();"},{"Add":" auth_user.push_str(user);"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, auth) = h.auth_publickey(user, &pubkey).await?;"},{"Add":" *handler = Some(h);"},{"Add":" if auth == Auth::Accept {"},{"Add":" let mut public_key = CryptoVec::new();"},{"Add":" public_key.extend(pubkey_key);"},{"Add":""},{"Add":" let mut algo = CryptoVec::new();"},{"Add":" algo.extend(pubkey_algo);"},{"Add":" debug!(\"pubkey_key: {:?}\", pubkey_key);"},{"Add":" push_packet!(self.write, {"},{"Add":" self.write.push(msg::USERAUTH_PK_OK);"},{"Add":" self.write.extend_ssh_string(&pubkey_algo);"},{"Add":" self.write.extend_ssh_string(&pubkey_key);"},{"Add":" });"},{"Add":""},{"Add":" auth_request.current = Some(CurrentRequest::PublicKey {"},{"Add":" key: public_key,"},{"Add":" algo: algo,"},{"Add":" sent_pk_ok: true,"},{"Add":" });"},{"Add":" } else {"},{"Add":" debug!(\"signature wrong\");"},{"Add":" auth_request.partial_success = false;"},{"Add":" auth_user.clear();"},{"Add":" reject_auth_request(until, &mut self.write, auth_request).await;"},{"Add":" }"},{"Add":" Ok(())"},{"Add":" }"},{"Add":" }"},{"Add":" Err(e) => {"},{"Add":" if let Some(thrussh_keys::Error::CouldNotReadKey) = e.downcast_ref() {"},{"Add":" reject_auth_request(until, &mut self.write, auth_request).await;"},{"Add":" Ok(())"},{"Add":" } else {"},{"Add":" Err(e)"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"async fn reject_auth_request("},{"Add":" until: Instant,"},{"Add":" write: &mut CryptoVec,"},{"Add":" auth_request: &mut AuthRequest,"},{"Add":") {"},{"Add":" debug!(\"rejecting {:?}\", auth_request);"},{"Add":" push_packet!(write, {"},{"Add":" write.push(msg::USERAUTH_FAILURE);"},{"Add":" write.extend_list(auth_request.methods);"},{"Add":" write.push(if auth_request.partial_success { 1 } else { 0 });"},{"Add":" });"},{"Add":" auth_request.current = None;"},{"Add":" auth_request.rejection_count += 1;"},{"Add":" debug!(\"packet pushed\");"},{"Add":" tokio::time::delay_until(until).await"},{"Add":"}"},{"Add":""},{"Add":"fn server_auth_request_success(buffer: &mut CryptoVec) {"},{"Add":" push_packet!(buffer, {"},{"Add":" buffer.push(msg::USERAUTH_SUCCESS);"},{"Add":" })"},{"Add":"}"},{"Add":""},{"Add":"async fn read_userauth_info_response("},{"Add":" until: Instant,"},{"Add":" handler: &mut Option,"},{"Add":" write: &mut CryptoVec,"},{"Add":" auth_request: &mut AuthRequest,"},{"Add":" user: &mut String,"},{"Add":" b: &[u8],"},{"Add":") -> Result {"},{"Add":" if let Some(CurrentRequest::KeyboardInteractive { ref submethods }) = auth_request.current {"},{"Add":" let mut r = b.reader(1);"},{"Add":" let n = r.read_u32()?;"},{"Add":" let response = Response { pos: r, n: n };"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, auth) = h"},{"Add":" .auth_keyboard_interactive(user, submethods, Some(response))"},{"Add":" .await?;"},{"Add":" *handler = Some(h);"},{"Add":" reply_userauth_info_response(until, auth_request, write, auth).await"},{"Add":" } else {"},{"Add":" reject_auth_request(until, write, auth_request).await;"},{"Add":" Ok(false)"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"async fn reply_userauth_info_response("},{"Add":" until: Instant,"},{"Add":" auth_request: &mut AuthRequest,"},{"Add":" write: &mut CryptoVec,"},{"Add":" auth: Auth,"},{"Add":") -> Result {"},{"Add":" match auth {"},{"Add":" Auth::Accept => {"},{"Add":" server_auth_request_success(write);"},{"Add":" Ok(true)"},{"Add":" }"},{"Add":" Auth::Reject => {"},{"Add":" auth_request.partial_success = false;"},{"Add":" reject_auth_request(until, write, auth_request).await;"},{"Add":" Ok(false)"},{"Add":" }"},{"Add":" Auth::Partial {"},{"Add":" name,"},{"Add":" instructions,"},{"Add":" prompts,"},{"Add":" } => {"},{"Add":" push_packet!(write, {"},{"Add":" write.push(msg::USERAUTH_INFO_REQUEST);"},{"Add":" write.extend_ssh_string(name.as_bytes());"},{"Add":" write.extend_ssh_string(instructions.as_bytes());"},{"Add":" write.extend_ssh_string(b\"\"); // lang, should be empty"},{"Add":" write.push_u32_be(prompts.len() as u32);"},{"Add":" for &(ref a, b) in prompts.iter() {"},{"Add":" write.extend_ssh_string(a.as_bytes());"},{"Add":" write.push(if b { 1 } else { 0 });"},{"Add":" }"},{"Add":" });"},{"Add":" Ok(false)"},{"Add":" }"},{"Add":" Auth::UnsupportedMethod => unreachable!(),"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Session {"},{"Add":" async fn server_read_authenticated("},{"Add":" mut self,"},{"Add":" handler: &mut Option,"},{"Add":" buf: &[u8],"},{"Add":" ) -> Result {"},{"Add":" debug!("},{"Add":" \"authenticated buf = {:?}\","},{"Add":" &buf[..std::cmp::min(buf.len(), 100)]"},{"Add":" );"},{"Add":" match buf[0] {"},{"Add":" msg::CHANNEL_OPEN => self.server_handle_channel_open(handler, buf).await,"},{"Add":" msg::CHANNEL_CLOSE => {"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let channel_num = ChannelId(r.read_u32()?);"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" enc.channels.remove(&channel_num);"},{"Add":" }"},{"Add":" debug!(\"handler.channel_close {:?}\", channel_num);"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, s) = h.channel_close(channel_num, self).await?;"},{"Add":" *handler = Some(h);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" msg::CHANNEL_EOF => {"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let channel_num = ChannelId(r.read_u32()?);"},{"Add":" debug!(\"handler.channel_eof {:?}\", channel_num);"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, s) = h.channel_eof(channel_num, self).await?;"},{"Add":" *handler = Some(h);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" msg::CHANNEL_EXTENDED_DATA | msg::CHANNEL_DATA => {"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let channel_num = ChannelId(r.read_u32()?);"},{"Add":""},{"Add":" let ext = if buf[0] == msg::CHANNEL_DATA {"},{"Add":" None"},{"Add":" } else {"},{"Add":" Some(r.read_u32()?)"},{"Add":" };"},{"Add":" debug!(\"handler.data {:?} {:?}\", ext, channel_num);"},{"Add":" let data = r.read_string()?;"},{"Add":" let target = self.target_window_size;"},{"Add":""},{"Add":" let mut h = handler.take().unwrap();"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if enc.adjust_window_size(channel_num, data, target) {"},{"Add":" let window = h.adjust_window(channel_num, self.target_window_size);"},{"Add":" if window > 0 {"},{"Add":" self.target_window_size = window"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" self.flush()?;"},{"Add":" let (h, s) = if let Some(ext) = ext {"},{"Add":" h.extended_data(channel_num, ext, &data, self).await?"},{"Add":" } else {"},{"Add":" h.data(channel_num, &data, self).await?"},{"Add":" };"},{"Add":" *handler = Some(h);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":""},{"Add":" msg::CHANNEL_WINDOW_ADJUST => {"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let channel_num = ChannelId(r.read_u32()?);"},{"Add":" let amount = r.read_u32()?;"},{"Add":" let mut new_value = 0;"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let Some(channel) = enc.channels.get_mut(&channel_num) {"},{"Add":" channel.recipient_window_size += amount;"},{"Add":" new_value = channel.recipient_window_size;"},{"Add":" } else {"},{"Add":" return Err(Error::WrongChannel.into());"},{"Add":" }"},{"Add":" }"},{"Add":" debug!(\"handler.window_adjusted {:?}\", channel_num);"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, s) = h"},{"Add":" .window_adjusted(channel_num, new_value as usize, self)"},{"Add":" .await?;"},{"Add":" *handler = Some(h);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":""},{"Add":" msg::CHANNEL_REQUEST => {"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let channel_num = ChannelId(r.read_u32()?);"},{"Add":" let req_type = r.read_string()?;"},{"Add":" let wants_reply = r.read_byte()?;"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let Some(channel) = enc.channels.get_mut(&channel_num) {"},{"Add":" channel.wants_reply = wants_reply != 0;"},{"Add":" }"},{"Add":" }"},{"Add":" match req_type {"},{"Add":" b\"pty-req\" => {"},{"Add":" let term = std::str::from_utf8(r.read_string()?)?;"},{"Add":" let col_width = r.read_u32()?;"},{"Add":" let row_height = r.read_u32()?;"},{"Add":" let pix_width = r.read_u32()?;"},{"Add":" let pix_height = r.read_u32()?;"},{"Add":" let mut modes = [(Pty::TTY_OP_END, 0); 130];"},{"Add":" let mut i = 0;"},{"Add":" {"},{"Add":" let mode_string = r.read_string()?;"},{"Add":" while 5 * i < mode_string.len() {"},{"Add":" let code = mode_string[5 * i];"},{"Add":" if code == 0 {"},{"Add":" break;"},{"Add":" }"},{"Add":" let num = BigEndian::read_u32(&mode_string[5 * i + 1..]);"},{"Add":" debug!(\"code = {:?}\", code);"},{"Add":" if let Some(code) = Pty::from_u8(code) {"},{"Add":" modes[i] = (code, num);"},{"Add":" } else {"},{"Add":" info!(\"pty-req: unknown pty code {:?}\", code);"},{"Add":" }"},{"Add":" i += 1"},{"Add":" }"},{"Add":" }"},{"Add":" debug!(\"handler.pty_request {:?}\", channel_num);"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, s) = h"},{"Add":" .pty_request("},{"Add":" channel_num,"},{"Add":" term,"},{"Add":" col_width,"},{"Add":" row_height,"},{"Add":" pix_width,"},{"Add":" pix_height,"},{"Add":" &modes[0..i],"},{"Add":" self,"},{"Add":" )"},{"Add":" .await?;"},{"Add":" *handler = Some(h);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" b\"x11-req\" => {"},{"Add":" let single_connection = r.read_byte()? != 0;"},{"Add":" let x11_auth_protocol = std::str::from_utf8(r.read_string()?)?;"},{"Add":" let x11_auth_cookie = std::str::from_utf8(r.read_string()?)?;"},{"Add":" let x11_screen_number = r.read_u32()?;"},{"Add":" debug!(\"handler.x11_request {:?}\", channel_num);"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, s) = h"},{"Add":" .x11_request("},{"Add":" channel_num,"},{"Add":" single_connection,"},{"Add":" x11_auth_protocol,"},{"Add":" x11_auth_cookie,"},{"Add":" x11_screen_number,"},{"Add":" self,"},{"Add":" )"},{"Add":" .await?;"},{"Add":" *handler = Some(h);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" b\"env\" => {"},{"Add":" let env_variable = std::str::from_utf8(r.read_string()?)?;"},{"Add":" let env_value = std::str::from_utf8(r.read_string()?)?;"},{"Add":" debug!(\"handler.env_request {:?}\", channel_num);"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, s) = h"},{"Add":" .env_request(channel_num, env_variable, env_value, self)"},{"Add":" .await?;"},{"Add":" *handler = Some(h);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" b\"shell\" => {"},{"Add":" debug!(\"handler.shell_request {:?}\", channel_num);"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, s) = h.shell_request(channel_num, self).await?;"},{"Add":" *handler = Some(h);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" b\"exec\" => {"},{"Add":" let req = r.read_string()?;"},{"Add":" debug!(\"handler.exec_request {:?}\", channel_num);"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, s) = h.exec_request(channel_num, req, self).await?;"},{"Add":" *handler = Some(h);"},{"Add":" debug!(\"executed\");"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" b\"subsystem\" => {"},{"Add":" let name = std::str::from_utf8(r.read_string()?)?;"},{"Add":" debug!(\"handler.subsystem_request {:?}\", channel_num);"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, s) = h.subsystem_request(channel_num, name, self).await?;"},{"Add":" *handler = Some(h);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" b\"window-change\" => {"},{"Add":" let col_width = r.read_u32()?;"},{"Add":" let row_height = r.read_u32()?;"},{"Add":" let pix_width = r.read_u32()?;"},{"Add":" let pix_height = r.read_u32()?;"},{"Add":" debug!(\"handler.window_change {:?}\", channel_num);"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, s) = h"},{"Add":" .window_change_request("},{"Add":" channel_num,"},{"Add":" col_width,"},{"Add":" row_height,"},{"Add":" pix_width,"},{"Add":" pix_height,"},{"Add":" self,"},{"Add":" )"},{"Add":" .await?;"},{"Add":" *handler = Some(h);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" b\"signal\" => {"},{"Add":" r.read_byte()?; // should be 0."},{"Add":" let signal_name = Sig::from_name(r.read_string()?)?;"},{"Add":" debug!(\"handler.signal {:?} {:?}\", channel_num, signal_name);"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, s) = h.signal(channel_num, signal_name, self).await?;"},{"Add":" *handler = Some(h);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" x => {"},{"Add":" debug!("},{"Add":" \"{:?}, line {:?} req_type = {:?}\","},{"Add":" file!(),"},{"Add":" line!(),"},{"Add":" std::str::from_utf8(x)"},{"Add":" );"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_FAILURE);"},{"Add":" });"},{"Add":" }"},{"Add":" Ok(self)"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" msg::GLOBAL_REQUEST => {"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let req_type = r.read_string()?;"},{"Add":" self.common.wants_reply = r.read_byte()? != 0;"},{"Add":" match req_type {"},{"Add":" b\"tcpip-forward\" => {"},{"Add":" let address = std::str::from_utf8(r.read_string()?)?;"},{"Add":" let port = r.read_u32()?;"},{"Add":" debug!(\"handler.tcpip_forward {:?} {:?}\", address, port);"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, mut s, result) = h.tcpip_forward(address, port, self).await?;"},{"Add":" *handler = Some(h);"},{"Add":" if let Some(ref mut enc) = s.common.encrypted {"},{"Add":" if result {"},{"Add":" push_packet!(enc.write, enc.write.push(msg::REQUEST_SUCCESS))"},{"Add":" } else {"},{"Add":" push_packet!(enc.write, enc.write.push(msg::REQUEST_FAILURE))"},{"Add":" }"},{"Add":" }"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" b\"cancel-tcpip-forward\" => {"},{"Add":" let address = std::str::from_utf8(r.read_string()?)?;"},{"Add":" let port = r.read_u32()?;"},{"Add":" debug!(\"handler.cancel_tcpip_forward {:?} {:?}\", address, port);"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, mut s, result) ="},{"Add":" h.cancel_tcpip_forward(address, port, self).await?;"},{"Add":" *handler = Some(h);"},{"Add":" if let Some(ref mut enc) = s.common.encrypted {"},{"Add":" if result {"},{"Add":" push_packet!(enc.write, enc.write.push(msg::REQUEST_SUCCESS))"},{"Add":" } else {"},{"Add":" push_packet!(enc.write, enc.write.push(msg::REQUEST_FAILURE))"},{"Add":" }"},{"Add":" }"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" _ => {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::REQUEST_FAILURE);"},{"Add":" });"},{"Add":" }"},{"Add":" Ok(self)"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" m => {"},{"Add":" debug!(\"unknown message received: {:?}\", m);"},{"Add":" Ok(self)"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" async fn server_handle_channel_open("},{"Add":" mut self,"},{"Add":" handler: &mut Option,"},{"Add":" buf: &[u8],"},{"Add":" ) -> Result {"},{"Add":" // https://tools.ietf.org/html/rfc4254#section-5.1"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let typ = r.read_string()?;"},{"Add":" let sender = r.read_u32()?;"},{"Add":" let window = r.read_u32()?;"},{"Add":" let maxpacket = r.read_u32()?;"},{"Add":""},{"Add":" let sender_channel = if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" enc.new_channel_id()"},{"Add":" } else {"},{"Add":" unreachable!()"},{"Add":" };"},{"Add":" let channel = Channel {"},{"Add":" recipient_channel: sender,"},{"Add":""},{"Add":" // \"sender\" is the local end, i.e. we're the sender, the remote is the recipient."},{"Add":" sender_channel: sender_channel,"},{"Add":""},{"Add":" recipient_window_size: window,"},{"Add":" sender_window_size: self.common.config.window_size,"},{"Add":" recipient_maximum_packet_size: maxpacket,"},{"Add":" sender_maximum_packet_size: self.common.config.maximum_packet_size,"},{"Add":" confirmed: true,"},{"Add":" wants_reply: false,"},{"Add":" pending_data: std::collections::VecDeque::new(),"},{"Add":" };"},{"Add":" match typ {"},{"Add":" b\"session\" => {"},{"Add":" self.confirm_channel_open(channel);"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, s) = h.channel_open_session(sender_channel, self).await?;"},{"Add":" *handler = Some(h);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" b\"x11\" => {"},{"Add":" self.confirm_channel_open(channel);"},{"Add":" let a = std::str::from_utf8(r.read_string()?)?;"},{"Add":" let b = r.read_u32()?;"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, s) = h.channel_open_x11(sender_channel, a, b, self).await?;"},{"Add":" *handler = Some(h);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" b\"direct-tcpip\" => {"},{"Add":" self.confirm_channel_open(channel);"},{"Add":" let a = std::str::from_utf8(r.read_string()?)?;"},{"Add":" let b = r.read_u32()?;"},{"Add":" let c = std::str::from_utf8(r.read_string()?)?;"},{"Add":" let d = r.read_u32()?;"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, s) = h"},{"Add":" .channel_open_direct_tcpip(sender_channel, a, b, c, d, self)"},{"Add":" .await?;"},{"Add":" *handler = Some(h);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" t => {"},{"Add":" debug!(\"unknown channel type: {:?}\", t);"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_OPEN_FAILURE);"},{"Add":" enc.write.push_u32_be(sender);"},{"Add":" enc.write.push_u32_be(3); // SSH_OPEN_UNKNOWN_CHANNEL_TYPE"},{"Add":" enc.write.extend_ssh_string(b\"Unknown channel type\");"},{"Add":" enc.write.extend_ssh_string(b\"en\");"},{"Add":" });"},{"Add":" }"},{"Add":" Ok(self)"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" fn confirm_channel_open(&mut self, channel: Channel) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" server_confirm_channel_open(&mut enc.write, &channel, self.common.config.as_ref());"},{"Add":" enc.channels.insert(channel.sender_channel, channel);"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"fn server_confirm_channel_open(buffer: &mut CryptoVec, channel: &Channel, config: &Config) {"},{"Add":" push_packet!(buffer, {"},{"Add":" buffer.push(msg::CHANNEL_OPEN_CONFIRMATION);"},{"Add":" buffer.push_u32_be(channel.recipient_channel); // remote channel number."},{"Add":" buffer.push_u32_be(channel.sender_channel.0); // our channel number."},{"Add":" buffer.push_u32_be(config.window_size);"},{"Add":" buffer.push_u32_be(config.maximum_packet_size);"},{"Add":" });"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"pty.rs","metadata":493},"context":[{"change":0,"pos":165404}],"contents":[{"Add":"#[allow(non_camel_case_types, missing_docs)]"},{"Add":"#[derive(Debug, Copy, Clone, PartialEq)]"},{"Add":"/// Standard pseudo-terminal codes."},{"Add":"pub enum Pty {"},{"Add":" TTY_OP_END = 0,"},{"Add":" VINTR = 1,"},{"Add":" VQUIT = 2,"},{"Add":" VERASE = 3,"},{"Add":" VKILL = 4,"},{"Add":" VEOF = 5,"},{"Add":" VEOL = 6,"},{"Add":" VEOL2 = 7,"},{"Add":" VSTART = 8,"},{"Add":" VSTOP = 9,"},{"Add":" VSUSP = 10,"},{"Add":" VDSUSP = 11,"},{"Add":""},{"Add":" VREPRINT = 12,"},{"Add":" VWERASE = 13,"},{"Add":" VLNEXT = 14,"},{"Add":" VFLUSH = 15,"},{"Add":" VSWTCH = 16,"},{"Add":" VSTATUS = 17,"},{"Add":" VDISCARD = 18,"},{"Add":" IGNPAR = 30,"},{"Add":" PARMRK = 31,"},{"Add":" INPCK = 32,"},{"Add":" ISTRIP = 33,"},{"Add":" INLCR = 34,"},{"Add":" IGNCR = 35,"},{"Add":" ICRNL = 36,"},{"Add":" IUCLC = 37,"},{"Add":" IXON = 38,"},{"Add":" IXANY = 39,"},{"Add":" IXOFF = 40,"},{"Add":" IMAXBEL = 41,"},{"Add":" ISIG = 50,"},{"Add":" ICANON = 51,"},{"Add":" XCASE = 52,"},{"Add":" ECHO = 53,"},{"Add":" ECHOE = 54,"},{"Add":" ECHOK = 55,"},{"Add":" ECHONL = 56,"},{"Add":" NOFLSH = 57,"},{"Add":" TOSTOP = 58,"},{"Add":" IEXTEN = 59,"},{"Add":" ECHOCTL = 60,"},{"Add":" ECHOKE = 61,"},{"Add":" PENDIN = 62,"},{"Add":" OPOST = 70,"},{"Add":" OLCUC = 71,"},{"Add":" ONLCR = 72,"},{"Add":" OCRNL = 73,"},{"Add":" ONOCR = 74,"},{"Add":" ONLRET = 75,"},{"Add":""},{"Add":" CS7 = 90,"},{"Add":" CS8 = 91,"},{"Add":" PARENB = 92,"},{"Add":" PARODD = 93,"},{"Add":""},{"Add":" TTY_OP_ISPEED = 128,"},{"Add":" TTY_OP_OSPEED = 129,"},{"Add":"}"},{"Add":""},{"Add":"impl Pty {"},{"Add":" #[doc(hidden)]"},{"Add":" pub fn from_u8(x: u8) -> Option {"},{"Add":" match x {"},{"Add":" 0 => None,"},{"Add":" 1 => Some(Pty::VINTR),"},{"Add":" 2 => Some(Pty::VQUIT),"},{"Add":" 3 => Some(Pty::VERASE),"},{"Add":" 4 => Some(Pty::VKILL),"},{"Add":" 5 => Some(Pty::VEOF),"},{"Add":" 6 => Some(Pty::VEOL),"},{"Add":" 7 => Some(Pty::VEOL2),"},{"Add":" 8 => Some(Pty::VSTART),"},{"Add":" 9 => Some(Pty::VSTOP),"},{"Add":" 10 => Some(Pty::VSUSP),"},{"Add":" 11 => Some(Pty::VDSUSP),"},{"Add":""},{"Add":" 12 => Some(Pty::VREPRINT),"},{"Add":" 13 => Some(Pty::VWERASE),"},{"Add":" 14 => Some(Pty::VLNEXT),"},{"Add":" 15 => Some(Pty::VFLUSH),"},{"Add":" 16 => Some(Pty::VSWTCH),"},{"Add":" 17 => Some(Pty::VSTATUS),"},{"Add":" 18 => Some(Pty::VDISCARD),"},{"Add":" 30 => Some(Pty::IGNPAR),"},{"Add":" 31 => Some(Pty::PARMRK),"},{"Add":" 32 => Some(Pty::INPCK),"},{"Add":" 33 => Some(Pty::ISTRIP),"},{"Add":" 34 => Some(Pty::INLCR),"},{"Add":" 35 => Some(Pty::IGNCR),"},{"Add":" 36 => Some(Pty::ICRNL),"},{"Add":" 37 => Some(Pty::IUCLC),"},{"Add":" 38 => Some(Pty::IXON),"},{"Add":" 39 => Some(Pty::IXANY),"},{"Add":" 40 => Some(Pty::IXOFF),"},{"Add":" 41 => Some(Pty::IMAXBEL),"},{"Add":" 50 => Some(Pty::ISIG),"},{"Add":" 51 => Some(Pty::ICANON),"},{"Add":" 52 => Some(Pty::XCASE),"},{"Add":" 53 => Some(Pty::ECHO),"},{"Add":" 54 => Some(Pty::ECHOE),"},{"Add":" 55 => Some(Pty::ECHOK),"},{"Add":" 56 => Some(Pty::ECHONL),"},{"Add":" 57 => Some(Pty::NOFLSH),"},{"Add":" 58 => Some(Pty::TOSTOP),"},{"Add":" 59 => Some(Pty::IEXTEN),"},{"Add":" 60 => Some(Pty::ECHOCTL),"},{"Add":" 61 => Some(Pty::ECHOKE),"},{"Add":" 62 => Some(Pty::PENDIN),"},{"Add":" 70 => Some(Pty::OPOST),"},{"Add":" 71 => Some(Pty::OLCUC),"},{"Add":" 72 => Some(Pty::ONLCR),"},{"Add":" 73 => Some(Pty::OCRNL),"},{"Add":" 74 => Some(Pty::ONOCR),"},{"Add":" 75 => Some(Pty::ONLRET),"},{"Add":""},{"Add":" 90 => Some(Pty::CS7),"},{"Add":" 91 => Some(Pty::CS8),"},{"Add":" 92 => Some(Pty::PARENB),"},{"Add":" 93 => Some(Pty::PARODD),"},{"Add":""},{"Add":" 128 => Some(Pty::TTY_OP_ISPEED),"},{"Add":" 129 => Some(Pty::TTY_OP_OSPEED),"},{"Add":" _ => None,"},{"Add":" }"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"negotiation.rs","metadata":420},"context":[{"change":0,"pos":165404}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":"use crate::{cipher, kex, msg, Error};"},{"Add":"use std::str::from_utf8;"},{"Add":"use thrussh_keys::key;"},{"Add":"// use super::mac; // unimplemented"},{"Add":"use crate::compression::*;"},{"Add":"use cryptovec::CryptoVec;"},{"Add":"use openssl::rand;"},{"Add":"use thrussh_keys::encoding::{Encoding, Reader};"},{"Add":"use thrussh_keys::key::{KeyPair, PublicKey};"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"pub struct Names {"},{"Add":" pub kex: kex::Name,"},{"Add":" pub key: key::Name,"},{"Add":" pub cipher: cipher::Name,"},{"Add":" pub mac: Option<&'static str>,"},{"Add":" pub server_compression: Compression,"},{"Add":" pub client_compression: Compression,"},{"Add":" pub ignore_guessed: bool,"},{"Add":"}"},{"Add":""},{"Add":"/// Lists of preferred algorithms. This is normally hard-coded into implementations."},{"Add":"#[derive(Debug)]"},{"Add":"pub struct Preferred {"},{"Add":" /// Preferred key exchange algorithms."},{"Add":" pub kex: &'static [kex::Name],"},{"Add":" /// Preferred public key algorithms."},{"Add":" pub key: &'static [key::Name],"},{"Add":" /// Preferred symmetric ciphers."},{"Add":" pub cipher: &'static [cipher::Name],"},{"Add":" /// Preferred MAC algorithms."},{"Add":" pub mac: &'static [&'static str],"},{"Add":" /// Preferred compression algorithms."},{"Add":" pub compression: &'static [&'static str],"},{"Add":"}"},{"Add":""},{"Add":"impl Preferred {"},{"Add":" pub const DEFAULT: Preferred = Preferred {"},{"Add":" kex: &[kex::CURVE25519],"},{"Add":" key: &[key::ED25519, key::RSA_SHA2_256, key::RSA_SHA2_512],"},{"Add":" cipher: &[cipher::chacha20poly1305::NAME],"},{"Add":" mac: &[\"none\"],"},{"Add":" compression: &[\"none\", \"zlib\", \"zlib@openssh.com\"],"},{"Add":" };"},{"Add":""},{"Add":" pub const COMPRESSED: Preferred = Preferred {"},{"Add":" kex: &[kex::CURVE25519],"},{"Add":" key: &[key::ED25519, key::RSA_SHA2_256, key::RSA_SHA2_512],"},{"Add":" cipher: &[cipher::chacha20poly1305::NAME],"},{"Add":" mac: &[\"none\"],"},{"Add":" compression: &[\"zlib\", \"zlib@openssh.com\", \"none\"],"},{"Add":" };"},{"Add":"}"},{"Add":""},{"Add":"impl Default for Preferred {"},{"Add":" fn default() -> Preferred {"},{"Add":" Preferred::DEFAULT"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// Named algorithms."},{"Add":"pub trait Named {"},{"Add":" /// The name of this algorithm."},{"Add":" fn name(&self) -> &'static str;"},{"Add":"}"},{"Add":""},{"Add":"impl Named for () {"},{"Add":" fn name(&self) -> &'static str {"},{"Add":" \"\""},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"use thrussh_keys::key::{ED25519, SSH_RSA};"},{"Add":""},{"Add":"impl Named for PublicKey {"},{"Add":" fn name(&self) -> &'static str {"},{"Add":" match self {"},{"Add":" &PublicKey::Ed25519(_) => ED25519.0,"},{"Add":" &PublicKey::RSA { .. } => SSH_RSA.0,"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Named for KeyPair {"},{"Add":" fn name(&self) -> &'static str {"},{"Add":" match self {"},{"Add":" &KeyPair::Ed25519 { .. } => ED25519.0,"},{"Add":" &KeyPair::RSA { ref hash, .. } => hash.name().0,"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"pub trait Select {"},{"Add":" fn select + Copy>(a: &[S], b: &[u8]) -> Option<(bool, S)>;"},{"Add":""},{"Add":" fn read_kex(buffer: &[u8], pref: &Preferred) -> Result {"},{"Add":" let mut r = buffer.reader(17);"},{"Add":" let kex_string = r.read_string()?;"},{"Add":" let (kex_both_first, kex_algorithm) = if let Some(x) = Self::select(pref.kex, kex_string) {"},{"Add":" x"},{"Add":" } else {"},{"Add":" debug!("},{"Add":" \"Could not find common kex algorithm, other side only supports {:?}, we only support {:?}\","},{"Add":" from_utf8(kex_string),"},{"Add":" pref.kex"},{"Add":" );"},{"Add":" return Err(Error::NoCommonKexAlgo.into());"},{"Add":" };"},{"Add":""},{"Add":" let key_string = r.read_string()?;"},{"Add":" let (key_both_first, key_algorithm) = if let Some(x) = Self::select(pref.key, key_string) {"},{"Add":" x"},{"Add":" } else {"},{"Add":" debug!("},{"Add":" \"Could not find common key algorithm, other side only supports {:?}, we only support {:?}\","},{"Add":" from_utf8(key_string),"},{"Add":" pref.key"},{"Add":" );"},{"Add":" return Err(Error::NoCommonKeyAlgo.into());"},{"Add":" };"},{"Add":""},{"Add":" let cipher_string = r.read_string()?;"},{"Add":" let cipher = Self::select(pref.cipher, cipher_string);"},{"Add":" if cipher.is_none() {"},{"Add":" debug!("},{"Add":" \"Could not find common cipher, other side only supports {:?}, we only support {:?}\","},{"Add":" from_utf8(cipher_string),"},{"Add":" pref.cipher"},{"Add":" );"},{"Add":" return Err(Error::NoCommonCipher.into());"},{"Add":" }"},{"Add":" r.read_string()?; // cipher server-to-client."},{"Add":" debug!(\"kex {}\", line!());"},{"Add":" let mac = Self::select(pref.mac, r.read_string()?);"},{"Add":" let mac = mac.and_then(|(_, x)| Some(x));"},{"Add":" r.read_string()?; // mac server-to-client."},{"Add":""},{"Add":" debug!(\"kex {}\", line!());"},{"Add":" // client-to-server compression."},{"Add":" let client_compression ="},{"Add":" if let Some((_, c)) = Self::select(pref.compression, r.read_string()?) {"},{"Add":" Compression::from_string(c)"},{"Add":" } else {"},{"Add":" return Err(Error::NoCommonCompression.into());"},{"Add":" };"},{"Add":" debug!(\"kex {}\", line!());"},{"Add":" // server-to-client compression."},{"Add":" let server_compression ="},{"Add":" if let Some((_, c)) = Self::select(pref.compression, r.read_string()?) {"},{"Add":" Compression::from_string(c)"},{"Add":" } else {"},{"Add":" return Err(Error::NoCommonCompression.into());"},{"Add":" };"},{"Add":" debug!(\"client_compression = {:?}\", client_compression);"},{"Add":" r.read_string()?; // languages client-to-server"},{"Add":" r.read_string()?; // languages server-to-client"},{"Add":""},{"Add":" let follows = r.read_byte()? != 0;"},{"Add":" match (cipher, mac, follows) {"},{"Add":" (Some((_, cipher)), mac, fol) => {"},{"Add":" Ok(Names {"},{"Add":" kex: kex_algorithm,"},{"Add":" key: key_algorithm,"},{"Add":" cipher,"},{"Add":" mac,"},{"Add":" client_compression,"},{"Add":" server_compression,"},{"Add":" // Ignore the next packet if (1) it follows and (2) it's not the correct guess."},{"Add":" ignore_guessed: fol && !(kex_both_first && key_both_first),"},{"Add":" })"},{"Add":" }"},{"Add":" _ => Err(Error::KexInit.into()),"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"pub struct Server;"},{"Add":"pub struct Client;"},{"Add":""},{"Add":"impl Select for Server {"},{"Add":" fn select + Copy>(server_list: &[S], client_list: &[u8]) -> Option<(bool, S)> {"},{"Add":" let mut both_first_choice = true;"},{"Add":" for c in client_list.split(|&x| x == b',') {"},{"Add":" for &s in server_list {"},{"Add":" if c == s.as_ref().as_bytes() {"},{"Add":" return Some((both_first_choice, s));"},{"Add":" }"},{"Add":" both_first_choice = false"},{"Add":" }"},{"Add":" }"},{"Add":" None"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Select for Client {"},{"Add":" fn select + Copy>(client_list: &[S], server_list: &[u8]) -> Option<(bool, S)> {"},{"Add":" let mut both_first_choice = true;"},{"Add":" for &c in client_list {"},{"Add":" for s in server_list.split(|&x| x == b',') {"},{"Add":" if s == c.as_ref().as_bytes() {"},{"Add":" return Some((both_first_choice, c));"},{"Add":" }"},{"Add":" both_first_choice = false"},{"Add":" }"},{"Add":" }"},{"Add":" None"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"pub fn write_kex(prefs: &Preferred, buf: &mut CryptoVec) -> Result<(), anyhow::Error> {"},{"Add":" // buf.clear();"},{"Add":" buf.push(msg::KEXINIT);"},{"Add":""},{"Add":" let mut cookie = [0; 16];"},{"Add":" rand::rand_bytes(&mut cookie)?;"},{"Add":""},{"Add":" buf.extend(&cookie); // cookie"},{"Add":" buf.extend_list(prefs.kex.iter()); // kex algo"},{"Add":""},{"Add":" buf.extend_list(prefs.key.iter());"},{"Add":""},{"Add":" buf.extend_list(prefs.cipher.iter()); // cipher client to server"},{"Add":" buf.extend_list(prefs.cipher.iter()); // cipher server to client"},{"Add":""},{"Add":" buf.extend_list(prefs.mac.iter()); // mac client to server"},{"Add":" buf.extend_list(prefs.mac.iter()); // mac server to client"},{"Add":" buf.extend_list(prefs.compression.iter()); // compress client to server"},{"Add":" buf.extend_list(prefs.compression.iter()); // compress server to client"},{"Add":""},{"Add":" buf.write_empty_list(); // languages client to server"},{"Add":" buf.write_empty_list(); // languagesserver to client"},{"Add":""},{"Add":" buf.push(0); // doesn't follow"},{"Add":" buf.extend(&[0, 0, 0, 0]); // reserved"},{"Add":" Ok(())"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"msg.rs","metadata":420},"context":[{"change":0,"pos":165404}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":"// https://tools.ietf.org/html/rfc4253#section-12"},{"Add":"pub const DISCONNECT: u8 = 1;"},{"Add":"#[allow(dead_code)]"},{"Add":"pub const IGNORE: u8 = 2;"},{"Add":"#[allow(dead_code)]"},{"Add":"pub const UNIMPLEMENTED: u8 = 3;"},{"Add":"#[allow(dead_code)]"},{"Add":"pub const DEBUG: u8 = 4;"},{"Add":""},{"Add":"pub const SERVICE_REQUEST: u8 = 5;"},{"Add":"pub const SERVICE_ACCEPT: u8 = 6;"},{"Add":"pub const KEXINIT: u8 = 20;"},{"Add":"pub const NEWKEYS: u8 = 21;"},{"Add":""},{"Add":"// http://tools.ietf.org/html/rfc5656#section-7.1"},{"Add":"pub const KEX_ECDH_INIT: u8 = 30;"},{"Add":"pub const KEX_ECDH_REPLY: u8 = 31;"},{"Add":""},{"Add":"// https://tools.ietf.org/html/rfc4250#section-4.1.2"},{"Add":"pub const USERAUTH_REQUEST: u8 = 50;"},{"Add":"pub const USERAUTH_FAILURE: u8 = 51;"},{"Add":"pub const USERAUTH_SUCCESS: u8 = 52;"},{"Add":"pub const USERAUTH_BANNER: u8 = 53;"},{"Add":"pub const USERAUTH_PK_OK: u8 = 60;"},{"Add":""},{"Add":"// https://tools.ietf.org/html/rfc4256#section-5"},{"Add":"pub const USERAUTH_INFO_REQUEST: u8 = 60;"},{"Add":"pub const USERAUTH_INFO_RESPONSE: u8 = 61;"},{"Add":""},{"Add":"// https://tools.ietf.org/html/rfc4254#section-9"},{"Add":"pub const GLOBAL_REQUEST: u8 = 80;"},{"Add":"pub const REQUEST_SUCCESS: u8 = 81;"},{"Add":"pub const REQUEST_FAILURE: u8 = 82;"},{"Add":""},{"Add":"pub const CHANNEL_OPEN: u8 = 90;"},{"Add":"pub const CHANNEL_OPEN_CONFIRMATION: u8 = 91;"},{"Add":"pub const CHANNEL_OPEN_FAILURE: u8 = 92;"},{"Add":"pub const CHANNEL_WINDOW_ADJUST: u8 = 93;"},{"Add":"pub const CHANNEL_DATA: u8 = 94;"},{"Add":"pub const CHANNEL_EXTENDED_DATA: u8 = 95;"},{"Add":"pub const CHANNEL_EOF: u8 = 96;"},{"Add":"pub const CHANNEL_CLOSE: u8 = 97;"},{"Add":"pub const CHANNEL_REQUEST: u8 = 98;"},{"Add":"pub const CHANNEL_SUCCESS: u8 = 99;"},{"Add":"pub const CHANNEL_FAILURE: u8 = 100;"}]}},{"FileAdd":{"meta":{"basename":"lib.rs","metadata":420},"context":[{"change":0,"pos":165404}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":""},{"Add":"//! Server and client SSH asynchronous library, based on tokio/futures."},{"Add":"//!"},{"Add":"//! The normal way to use this library, both for clients and for"},{"Add":"//! servers, is by creating *handlers*, i.e. types that implement"},{"Add":"//! `client::Handler` for clients and `server::Handler` for"},{"Add":"//! servers."},{"Add":"//!"},{"Add":"//! # Writing servers"},{"Add":"//!"},{"Add":"//! In the specific case of servers, a server must implement"},{"Add":"//! `server::Server`, a trait for creating new `server::Handler`. The"},{"Add":"//! main type to look at in the `server` module is `Session` (and"},{"Add":"//! `Config`, of course)."},{"Add":"//!"},{"Add":"//! Here is an example server, which forwards input from each client"},{"Add":"//! to all other clients:"},{"Add":"//!"},{"Add":"//! ```"},{"Add":"//! extern crate thrussh;"},{"Add":"//! extern crate thrussh_keys;"},{"Add":"//! extern crate futures;"},{"Add":"//! extern crate tokio;"},{"Add":"//! use std::sync::{Mutex, Arc};"},{"Add":"//! use thrussh::*;"},{"Add":"//! use thrussh::server::{Auth, Session};"},{"Add":"//! use thrussh_keys::*;"},{"Add":"//! use std::collections::HashMap;"},{"Add":"//! use futures::Future;"},{"Add":"//!"},{"Add":"//! #[tokio::main]"},{"Add":"//! async fn main() {"},{"Add":"//! let client_key = thrussh_keys::key::KeyPair::generate_ed25519().unwrap();"},{"Add":"//! let client_pubkey = Arc::new(client_key.clone_public_key());"},{"Add":"//! let mut config = thrussh::server::Config::default();"},{"Add":"//! config.connection_timeout = Some(std::time::Duration::from_secs(3));"},{"Add":"//! config.auth_rejection_time = std::time::Duration::from_secs(3);"},{"Add":"//! config.keys.push(thrussh_keys::key::KeyPair::generate_ed25519().unwrap());"},{"Add":"//! let config = Arc::new(config);"},{"Add":"//! let sh = Server{"},{"Add":"//! client_pubkey,"},{"Add":"//! clients: Arc::new(Mutex::new(HashMap::new())),"},{"Add":"//! id: 0"},{"Add":"//! };"},{"Add":"//! tokio::time::timeout("},{"Add":"//! std::time::Duration::from_secs(1),"},{"Add":"//! thrussh::server::run(config, \"0.0.0.0:2222\", sh)"},{"Add":"//! ).await.unwrap_or(Ok(()));"},{"Add":"//! }"},{"Add":"//!"},{"Add":"//! #[derive(Clone)]"},{"Add":"//! struct Server {"},{"Add":"//! client_pubkey: Arc,"},{"Add":"//! clients: Arc>>,"},{"Add":"//! id: usize,"},{"Add":"//! }"},{"Add":"//!"},{"Add":"//! impl server::Server for Server {"},{"Add":"//! type Handler = Self;"},{"Add":"//! fn new(&mut self, _: Option) -> Self {"},{"Add":"//! let s = self.clone();"},{"Add":"//! self.id += 1;"},{"Add":"//! s"},{"Add":"//! }"},{"Add":"//! }"},{"Add":"//!"},{"Add":"//! impl server::Handler for Server {"},{"Add":"//! type FutureAuth = futures::future::Ready>;"},{"Add":"//! type FutureUnit = futures::future::Ready>;"},{"Add":"//! type FutureBool = futures::future::Ready>;"},{"Add":"//!"},{"Add":"//! fn finished_auth(mut self, auth: Auth) -> Self::FutureAuth {"},{"Add":"//! futures::future::ready(Ok((self, auth)))"},{"Add":"//! }"},{"Add":"//! fn finished_bool(self, b: bool, s: Session) -> Self::FutureBool {"},{"Add":"//! futures::future::ready(Ok((self, s, b)))"},{"Add":"//! }"},{"Add":"//! fn finished(self, s: Session) -> Self::FutureUnit {"},{"Add":"//! futures::future::ready(Ok((self, s)))"},{"Add":"//! }"},{"Add":"//! fn channel_open_session(self, channel: ChannelId, session: Session) -> Self::FutureUnit {"},{"Add":"//! {"},{"Add":"//! let mut clients = self.clients.lock().unwrap();"},{"Add":"//! clients.insert((self.id, channel), session.handle());"},{"Add":"//! }"},{"Add":"//! self.finished(session)"},{"Add":"//! }"},{"Add":"//! fn auth_publickey(self, _: &str, _: &key::PublicKey) -> Self::FutureAuth {"},{"Add":"//! self.finished_auth(server::Auth::Accept)"},{"Add":"//! }"},{"Add":"//! fn data(self, channel: ChannelId, data: &[u8], mut session: Session) -> Self::FutureUnit {"},{"Add":"//! {"},{"Add":"//! let mut clients = self.clients.lock().unwrap();"},{"Add":"//! for ((id, channel), ref mut s) in clients.iter_mut() {"},{"Add":"//! if *id != self.id {"},{"Add":"//! s.data(*channel, CryptoVec::from_slice(data));"},{"Add":"//! }"},{"Add":"//! }"},{"Add":"//! }"},{"Add":"//! session.data(channel, CryptoVec::from_slice(data));"},{"Add":"//! self.finished(session)"},{"Add":"//! }"},{"Add":"//! }"},{"Add":"//! ```"},{"Add":"//!"},{"Add":"//! Note the call to `session.handle()`, which allows to keep a handle"},{"Add":"//! to a client outside the event loop. This feature is internally"},{"Add":"//! implemented using `futures::sync::mpsc` channels."},{"Add":"//!"},{"Add":"//! Note that this is just a toy server. In particular:"},{"Add":"//!"},{"Add":"//! - It doesn't handle errors when `s.data` returns an error,"},{"Add":"//! i.e. when the client has disappeared"},{"Add":"//!"},{"Add":"//! - Each new connection increments the `id` field. Even though we"},{"Add":"//! would need a lot of connections per second for a very long time to"},{"Add":"//! saturate it, there are probably better ways to handle this to"},{"Add":"//! avoid collisions."},{"Add":"//!"},{"Add":"//!"},{"Add":"//! # Implementing clients"},{"Add":"//!"},{"Add":"//! Maybe surprisingly, the data types used by Thrussh to implement"},{"Add":"//! clients are relatively more complicated than for servers. This is"},{"Add":"//! mostly related to the fact that clients are generally used both in"},{"Add":"//! a synchronous way (in the case of SSH, we can think of sending a"},{"Add":"//! shell command), and asynchronously (because the server may send"},{"Add":"//! unsollicited messages), and hence need to handle multiple"},{"Add":"//! interfaces."},{"Add":"//!"},{"Add":"//! The important types in the `client` module are `Session` and"},{"Add":"//! `Connection`. A `Connection` is typically used to send commands to"},{"Add":"//! the server and wait for responses, and contains a `Session`. The"},{"Add":"//! `Session` is passed to the `Handler` when the client receives"},{"Add":"//! data."},{"Add":"//!"},{"Add":"//! ```"},{"Add":"//!extern crate thrussh;"},{"Add":"//!extern crate thrussh_keys;"},{"Add":"//!extern crate futures;"},{"Add":"//!extern crate tokio;"},{"Add":"//!extern crate env_logger;"},{"Add":"//!use std::sync::Arc;"},{"Add":"//!use thrussh::*;"},{"Add":"//!use thrussh::server::{Auth, Session};"},{"Add":"//!use thrussh_keys::*;"},{"Add":"//!use futures::Future;"},{"Add":"//!use std::io::Read;"},{"Add":"//!"},{"Add":"//!"},{"Add":"//!struct Client {"},{"Add":"//!}"},{"Add":"//!"},{"Add":"//!impl client::Handler for Client {"},{"Add":"//! type FutureUnit = futures::future::Ready>;"},{"Add":"//! type FutureBool = futures::future::Ready>;"},{"Add":"//!"},{"Add":"//! fn finished_bool(self, b: bool) -> Self::FutureBool {"},{"Add":"//! futures::future::ready(Ok((self, b)))"},{"Add":"//! }"},{"Add":"//! fn finished(self, session: client::Session) -> Self::FutureUnit {"},{"Add":"//! futures::future::ready(Ok((self, session)))"},{"Add":"//! }"},{"Add":"//! fn check_server_key(self, server_public_key: &key::PublicKey) -> Self::FutureBool {"},{"Add":"//! println!(\"check_server_key: {:?}\", server_public_key);"},{"Add":"//! self.finished_bool(true)"},{"Add":"//! }"},{"Add":"//! fn channel_open_confirmation(self, channel: ChannelId, max_packet_size: u32, window_size: u32, session: client::Session) -> Self::FutureUnit {"},{"Add":"//! println!(\"channel_open_confirmation: {:?}\", channel);"},{"Add":"//! self.finished(session)"},{"Add":"//! }"},{"Add":"//! fn data(self, channel: ChannelId, data: &[u8], session: client::Session) -> Self::FutureUnit {"},{"Add":"//! println!(\"data on channel {:?}: {:?}\", channel, std::str::from_utf8(data));"},{"Add":"//! self.finished(session)"},{"Add":"//! }"},{"Add":"//!}"},{"Add":"//!"},{"Add":"//! #[tokio::main]"},{"Add":"//! async fn main() {"},{"Add":"//! let config = thrussh::client::Config::COMPRESSED;"},{"Add":"//! let config = Arc::new(config);"},{"Add":"//! let sh = Client{};"},{"Add":"//!"},{"Add":"//! let key = thrussh_keys::key::KeyPair::generate_ed25519().unwrap();"},{"Add":"//! let mut agent = thrussh_keys::agent::client::AgentClient::connect_env().await.unwrap();"},{"Add":"//! agent.add_identity(&key, &[]).await.unwrap();"},{"Add":"//! let mut session = thrussh::client::connect(config, \"localhost:22\", sh).await.unwrap();"},{"Add":"//! if session.authenticate_future(std::env::var(\"USER\").unwrap(), key.clone_public_key(), agent).await.unwrap().1 {"},{"Add":"//! let mut channel = session.channel_open_session().await.unwrap();"},{"Add":"//! channel.data(b\"Hello, world!\").await.unwrap();"},{"Add":"//! if let Some(msg) = channel.wait().await {"},{"Add":"//! println!(\"{:?}\", msg)"},{"Add":"//! }"},{"Add":"//! }"},{"Add":"//! }"},{"Add":"//! ```"},{"Add":"//! # Using non-socket IO / writing tunnels"},{"Add":"//!"},{"Add":"//! The easy way to implement SSH tunnels, like `ProxyCommand` for"},{"Add":"//! OpenSSH, is to use the `thrussh-config` crate, and use the"},{"Add":"//! `Stream::tcp_connect` or `Stream::proxy_command` methods of that"},{"Add":"//! crate. That crate is a very lightweight layer above Thrussh, only"},{"Add":"//! implementing for external commands the traits used for sockets."},{"Add":"//!"},{"Add":"//! # The SSH protocol"},{"Add":"//!"},{"Add":"//! If we exclude the key exchange and authentication phases, handled"},{"Add":"//! by Thrussh behind the scenes, the rest of the SSH protocol is"},{"Add":"//! relatively simple: clients and servers open *channels*, which are"},{"Add":"//! just integers used to handle multiple requests in parallel in a"},{"Add":"//! single connection. Once a client has obtained a `ChannelId` by"},{"Add":"//! calling one the many `channel_open_…` methods of"},{"Add":"//! `client::Connection`, the client may send exec requests and data"},{"Add":"//! to the server."},{"Add":"//!"},{"Add":"//! A simple client just asking the server to run one command will"},{"Add":"//! usually start by calling"},{"Add":"//! `client::Connection::channel_open_session`, then"},{"Add":"//! `client::Connection::exec`, then possibly"},{"Add":"//! `client::Connection::data` a number of times to send data to the"},{"Add":"//! command's standard input, and finally `Connection::channel_eof`"},{"Add":"//! and `Connection::channel_close`."},{"Add":"//!"},{"Add":"//! # Design principles"},{"Add":"//!"},{"Add":"//! The main goal of this library is conciseness, and reduced size and"},{"Add":"//! readability of the library's code. Moreover, this library is split"},{"Add":"//! between Thrussh, which implements the main logic of SSH clients"},{"Add":"//! and servers, and Thrussh-keys, which implements calls to"},{"Add":"//! cryptographic primitives."},{"Add":"//!"},{"Add":"//! One non-goal is to implement all possible cryptographic algorithms"},{"Add":"//! published since the initial release of SSH. Technical debt is"},{"Add":"//! easily acquired, and we would need a very strong reason to go"},{"Add":"//! against this principle. If you are designing a system from"},{"Add":"//! scratch, we urge you to consider recent cryptographic primitives"},{"Add":"//! such as Ed25519 for public key cryptography, and Chacha20-Poly1305"},{"Add":"//! for symmetric cryptography and MAC."},{"Add":"//!"},{"Add":"//! # Internal details of the event loop"},{"Add":"//!"},{"Add":"//! It might seem a little odd that the read/write methods for server"},{"Add":"//! or client sessions often return neither `Result` nor"},{"Add":"//! `Future`. This is because the data sent to the remote side is"},{"Add":"//! buffered, because it needs to be encrypted first, and encryption"},{"Add":"//! works on buffers, and for many algorithms, not in place."},{"Add":"//!"},{"Add":"//! Hence, the event loop keeps waiting for incoming packets, reacts"},{"Add":"//! to them by calling the provided `Handler`, which fills some"},{"Add":"//! buffers. If the buffers are non-empty, the event loop then sends"},{"Add":"//! them to the socket, flushes the socket, empties the buffers and"},{"Add":"//! starts again. In the special case of the server, unsollicited"},{"Add":"//! messages sent through a `server::Handle` are processed when there"},{"Add":"//! is no incoming packet to read."},{"Add":"//!"},{"Add":"#[macro_use]"},{"Add":"extern crate bitflags;"},{"Add":"#[macro_use]"},{"Add":"extern crate log;"},{"Add":"extern crate thrussh_libsodium as sodium;"},{"Add":"#[macro_use]"},{"Add":"extern crate thiserror;"},{"Add":""},{"Add":"pub use cryptovec::CryptoVec;"},{"Add":"mod auth;"},{"Add":"mod cipher;"},{"Add":"mod compression;"},{"Add":"mod kex;"},{"Add":"mod key;"},{"Add":"mod msg;"},{"Add":"mod negotiation;"},{"Add":"mod ssh_read;"},{"Add":"mod sshbuffer;"},{"Add":""},{"Add":"pub use negotiation::{Named, Preferred};"},{"Add":"mod pty;"},{"Add":"pub use pty::Pty;"},{"Add":""},{"Add":"macro_rules! push_packet {"},{"Add":" ( $buffer:expr, $x:expr ) => {{"},{"Add":" use byteorder::{BigEndian, ByteOrder};"},{"Add":" let i0 = $buffer.len();"},{"Add":" $buffer.extend(b\"\\0\\0\\0\\0\");"},{"Add":" let x = $x;"},{"Add":" let i1 = $buffer.len();"},{"Add":" use std::ops::DerefMut;"},{"Add":" let buf = $buffer.deref_mut();"},{"Add":" BigEndian::write_u32(&mut buf[i0..], (i1 - i0 - 4) as u32);"},{"Add":" x"},{"Add":" }};"},{"Add":"}"},{"Add":"mod session;"},{"Add":""},{"Add":"/// Server side of this library."},{"Add":"pub mod server;"},{"Add":""},{"Add":"/// Client side of this library."},{"Add":"pub mod client;"},{"Add":""},{"Add":"#[derive(Debug, Error)]"},{"Add":"/// anyhow::Errors."},{"Add":"pub enum Error {"},{"Add":" /// The key file could not be parsed."},{"Add":" #[error(\"Could not read key\")]"},{"Add":" CouldNotReadKey,"},{"Add":""},{"Add":" /// Unspecified problem with the beginning of key exchange."},{"Add":" #[error(\"Key exchange init failed\")]"},{"Add":" KexInit,"},{"Add":""},{"Add":" /// No common key exchange algorithm."},{"Add":" #[error(\"No common key exchange algorithm\")]"},{"Add":" NoCommonKexAlgo,"},{"Add":""},{"Add":" /// No common signature algorithm."},{"Add":" #[error(\"No common key algorithm\")]"},{"Add":" NoCommonKeyAlgo,"},{"Add":""},{"Add":" /// No common cipher."},{"Add":" #[error(\"No common key cipher\")]"},{"Add":" NoCommonCipher,"},{"Add":""},{"Add":" /// No common compression algorithm."},{"Add":" #[error(\"No common compression algorithm\")]"},{"Add":" NoCommonCompression,"},{"Add":""},{"Add":" /// Invalid SSH version string."},{"Add":" #[error(\"invalid SSH version string\")]"},{"Add":" Version,"},{"Add":""},{"Add":" /// anyhow::Error during key exchange."},{"Add":" #[error(\"Key exchange failed\")]"},{"Add":" Kex,"},{"Add":""},{"Add":" /// Invalid packet authentication code."},{"Add":" #[error(\"Wrong packet authentication code\")]"},{"Add":" PacketAuth,"},{"Add":""},{"Add":" /// The protocol is in an inconsistent state."},{"Add":" #[error(\"Inconsistent state of the protocol\")]"},{"Add":" Inconsistent,"},{"Add":""},{"Add":" /// The client is not yet authenticated."},{"Add":" #[error(\"Not yet authenticated\")]"},{"Add":" NotAuthenticated,"},{"Add":""},{"Add":" /// Index out of bounds."},{"Add":" #[error(\"Index out of bounds\")]"},{"Add":" IndexOutOfBounds,"},{"Add":""},{"Add":" /// Unknown server key."},{"Add":" #[error(\"Unknown server key\")]"},{"Add":" UnknownKey,"},{"Add":""},{"Add":" /// The server provided a wrong signature."},{"Add":" #[error(\"Wrong server signature\")]"},{"Add":" WrongServerSig,"},{"Add":""},{"Add":" /// Message received/sent on unopened channel."},{"Add":" #[error(\"Channel not open\")]"},{"Add":" WrongChannel,"},{"Add":""},{"Add":" /// Disconnected"},{"Add":" #[error(\"Disconnected\")]"},{"Add":" Disconnect,"},{"Add":""},{"Add":" /// No home directory found when trying to learn new host key."},{"Add":" #[error(\"No home directory when saving host key\")]"},{"Add":" NoHomeDir,"},{"Add":""},{"Add":" /// Remote key changed, this could mean a man-in-the-middle attack"},{"Add":" /// is being performed on the connection."},{"Add":" #[error(\"Key changed, line {}\", line)]"},{"Add":" KeyChanged { line: usize },"},{"Add":""},{"Add":" /// Connection closed by the remote side."},{"Add":" #[error(\"Connection closed by the remote side\")]"},{"Add":" HUP,"},{"Add":""},{"Add":" /// Connection timeout."},{"Add":" #[error(\"Connection timeout\")]"},{"Add":" ConnectionTimeout,"},{"Add":""},{"Add":" /// Missing authentication method."},{"Add":" #[error(\"No authentication method\")]"},{"Add":" NoAuthMethod,"},{"Add":""},{"Add":" #[error(\"Channel send error\")]"},{"Add":" SendError,"},{"Add":"}"},{"Add":""},{"Add":"/// Since handlers are large, their associated future types must implement this trait to provide reasonable default implementations (basically, rejecting all requests)."},{"Add":"pub trait FromFinished: futures::Future> {"},{"Add":" /// Turns type `T` into `Self`, a future yielding `T`."},{"Add":" fn finished(t: T) -> Self;"},{"Add":"}"},{"Add":""},{"Add":"impl FromFinished for futures::future::Ready> {"},{"Add":" fn finished(t: T) -> Self {"},{"Add":" futures::future::ready(Ok(t))"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl FromFinished"},{"Add":" for Box> + Unpin>"},{"Add":"{"},{"Add":" fn finished(t: T) -> Self {"},{"Add":" Box::new(futures::future::ready(Ok(t)))"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"// mod mac;"},{"Add":"// use mac::*;"},{"Add":"// mod compression;"},{"Add":""},{"Add":"/// The number of bytes read/written, and the number of seconds before a key re-exchange is requested."},{"Add":"#[derive(Debug, Clone)]"},{"Add":"pub struct Limits {"},{"Add":" pub rekey_write_limit: usize,"},{"Add":" pub rekey_read_limit: usize,"},{"Add":" pub rekey_time_limit: std::time::Duration,"},{"Add":"}"},{"Add":""},{"Add":"impl Limits {"},{"Add":" /// Create a new `Limits`, checking that the given bounds cannot lead to nonce reuse."},{"Add":" pub fn new(write_limit: usize, read_limit: usize, time_limit: std::time::Duration) -> Limits {"},{"Add":" assert!(write_limit <= 1 << 30 && read_limit <= 1 << 30);"},{"Add":" Limits {"},{"Add":" rekey_write_limit: write_limit,"},{"Add":" rekey_read_limit: read_limit,"},{"Add":" rekey_time_limit: time_limit,"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Default for Limits {"},{"Add":" fn default() -> Self {"},{"Add":" // Following the recommendations of"},{"Add":" // https://tools.ietf.org/html/rfc4253#section-9"},{"Add":" Limits {"},{"Add":" rekey_write_limit: 1 << 30, // 1 Gb"},{"Add":" rekey_read_limit: 1 << 30, // 1 Gb"},{"Add":" rekey_time_limit: std::time::Duration::from_secs(3600),"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"pub use auth::MethodSet;"},{"Add":""},{"Add":"/// A reason for disconnection."},{"Add":"#[allow(missing_docs)] // This should be relatively self-explanatory."},{"Add":"#[derive(Debug)]"},{"Add":"pub enum Disconnect {"},{"Add":" HostNotAllowedToConnect = 1,"},{"Add":" ProtocolError = 2,"},{"Add":" KeyExchangeFailed = 3,"},{"Add":" #[doc(hidden)]"},{"Add":" Reserved = 4,"},{"Add":" MACError = 5,"},{"Add":" CompressionError = 6,"},{"Add":" ServiceNotAvailable = 7,"},{"Add":" ProtocolVersionNotSupported = 8,"},{"Add":" HostKeyNotVerifiable = 9,"},{"Add":" ConnectionLost = 10,"},{"Add":" ByApplication = 11,"},{"Add":" TooManyConnections = 12,"},{"Add":" AuthCancelledByUser = 13,"},{"Add":" NoMoreAuthMethodsAvailable = 14,"},{"Add":" IllegalUserName = 15,"},{"Add":"}"},{"Add":""},{"Add":"/// The type of signals that can be sent to a remote process. If you"},{"Add":"/// plan to use custom signals, read [the"},{"Add":"/// RFC](https://tools.ietf.org/html/rfc4254#section-6.10) to"},{"Add":"/// understand the encoding."},{"Add":"#[allow(missing_docs)]"},{"Add":"// This should be relatively self-explanatory."},{"Add":"#[derive(Debug, Clone)]"},{"Add":"pub enum Sig {"},{"Add":" ABRT,"},{"Add":" ALRM,"},{"Add":" FPE,"},{"Add":" HUP,"},{"Add":" ILL,"},{"Add":" INT,"},{"Add":" KILL,"},{"Add":" PIPE,"},{"Add":" QUIT,"},{"Add":" SEGV,"},{"Add":" TERM,"},{"Add":" USR1,"},{"Add":" Custom(String),"},{"Add":"}"},{"Add":""},{"Add":"impl Sig {"},{"Add":" fn name(&self) -> &str {"},{"Add":" match *self {"},{"Add":" Sig::ABRT => \"ABRT\","},{"Add":" Sig::ALRM => \"ALRM\","},{"Add":" Sig::FPE => \"FPE\","},{"Add":" Sig::HUP => \"HUP\","},{"Add":" Sig::ILL => \"ILL\","},{"Add":" Sig::INT => \"INT\","},{"Add":" Sig::KILL => \"KILL\","},{"Add":" Sig::PIPE => \"PIPE\","},{"Add":" Sig::QUIT => \"QUIT\","},{"Add":" Sig::SEGV => \"SEGV\","},{"Add":" Sig::TERM => \"TERM\","},{"Add":" Sig::USR1 => \"USR1\","},{"Add":" Sig::Custom(ref c) => c,"},{"Add":" }"},{"Add":" }"},{"Add":" fn from_name(name: &[u8]) -> Result {"},{"Add":" match name {"},{"Add":" b\"ABRT\" => Ok(Sig::ABRT),"},{"Add":" b\"ALRM\" => Ok(Sig::ALRM),"},{"Add":" b\"FPE\" => Ok(Sig::FPE),"},{"Add":" b\"HUP\" => Ok(Sig::HUP),"},{"Add":" b\"ILL\" => Ok(Sig::ILL),"},{"Add":" b\"INT\" => Ok(Sig::INT),"},{"Add":" b\"KILL\" => Ok(Sig::KILL),"},{"Add":" b\"PIPE\" => Ok(Sig::PIPE),"},{"Add":" b\"QUIT\" => Ok(Sig::QUIT),"},{"Add":" b\"SEGV\" => Ok(Sig::SEGV),"},{"Add":" b\"TERM\" => Ok(Sig::TERM),"},{"Add":" b\"USR1\" => Ok(Sig::USR1),"},{"Add":" x => Ok(Sig::Custom(std::str::from_utf8(x)?.to_string())),"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// Reason for not being able to open a channel."},{"Add":"#[derive(Debug, Copy, Clone, PartialEq)]"},{"Add":"#[allow(missing_docs)]"},{"Add":"pub enum ChannelOpenFailure {"},{"Add":" AdministrativelyProhibited = 1,"},{"Add":" ConnectFailed = 2,"},{"Add":" UnknownChannelType = 3,"},{"Add":" ResourceShortage = 4,"},{"Add":"}"},{"Add":""},{"Add":"impl ChannelOpenFailure {"},{"Add":" fn from_u32(x: u32) -> Option {"},{"Add":" match x {"},{"Add":" 1 => Some(ChannelOpenFailure::AdministrativelyProhibited),"},{"Add":" 2 => Some(ChannelOpenFailure::ConnectFailed),"},{"Add":" 3 => Some(ChannelOpenFailure::UnknownChannelType),"},{"Add":" 4 => Some(ChannelOpenFailure::ResourceShortage),"},{"Add":" _ => None,"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug, Clone, Copy, PartialEq, Eq, Hash)]"},{"Add":"/// The identifier of a channel."},{"Add":"pub struct ChannelId(u32);"},{"Add":""},{"Add":"/// The parameters of a channel."},{"Add":"#[derive(Debug)]"},{"Add":"pub(crate) struct Channel {"},{"Add":" recipient_channel: u32,"},{"Add":" sender_channel: ChannelId,"},{"Add":" recipient_window_size: u32,"},{"Add":" sender_window_size: u32,"},{"Add":" recipient_maximum_packet_size: u32,"},{"Add":" sender_maximum_packet_size: u32,"},{"Add":" /// Has the other side confirmed the channel?"},{"Add":" pub confirmed: bool,"},{"Add":" wants_reply: bool,"},{"Add":" pending_data: std::collections::VecDeque<(CryptoVec, Option, usize)>,"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"pub enum ChannelMsg {"},{"Add":" Data {"},{"Add":" data: CryptoVec,"},{"Add":" },"},{"Add":" ExtendedData {"},{"Add":" data: CryptoVec,"},{"Add":" ext: u32,"},{"Add":" },"},{"Add":" Eof,"},{"Add":" XonXoff {"},{"Add":" client_can_do: bool,"},{"Add":" },"},{"Add":" ExitStatus {"},{"Add":" exit_status: u32,"},{"Add":" },"},{"Add":" ExitSignal {"},{"Add":" signal_name: Sig,"},{"Add":" core_dumped: bool,"},{"Add":" error_message: String,"},{"Add":" lang_tag: String,"},{"Add":" },"},{"Add":" WindowAdjusted {"},{"Add":" new_size: u32,"},{"Add":" },"},{"Add":" Success,"},{"Add":"}"},{"Add":""},{"Add":"#[cfg(test)]"},{"Add":"mod test_compress {"},{"Add":" use super::server::{Auth, Session};"},{"Add":" use super::*;"},{"Add":" use std::collections::HashMap;"},{"Add":" use std::sync::{Arc, Mutex};"},{"Add":""},{"Add":" #[tokio::test(threaded_scheduler)]"},{"Add":" async fn compress_local_test() {"},{"Add":" test_compress(true).await"},{"Add":" }"},{"Add":""},{"Add":" #[tokio::test(threaded_scheduler)]"},{"Add":" async fn compress_test() {"},{"Add":" test_compress(false).await"},{"Add":" }"},{"Add":""},{"Add":" async fn test_compress(local: bool) {"},{"Add":" env_logger::try_init().unwrap_or(());"},{"Add":" let (client_key, addr) = if local {"},{"Add":" let client_key = thrussh_keys::key::KeyPair::generate_ed25519().unwrap();"},{"Add":" let client_pubkey = Arc::new(client_key.clone_public_key());"},{"Add":" let mut config = super::server::Config::default();"},{"Add":" config.preferred = super::Preferred::COMPRESSED;"},{"Add":" config.auth_rejection_time = std::time::Duration::from_secs(0);"},{"Add":" config.connection_timeout = None; // Some(std::time::Duration::from_secs(3));"},{"Add":" config.auth_rejection_time = std::time::Duration::from_secs(3);"},{"Add":" config"},{"Add":" .keys"},{"Add":" .push(thrussh_keys::key::KeyPair::generate_ed25519().unwrap());"},{"Add":" let config = Arc::new(config);"},{"Add":" let sh = Server {"},{"Add":" client_pubkey,"},{"Add":" clients: Arc::new(Mutex::new(HashMap::new())),"},{"Add":" id: 0,"},{"Add":" };"},{"Add":" tokio::spawn(super::server::run(config, \"0.0.0.0:2222\", sh));"},{"Add":" std::thread::sleep(std::time::Duration::from_millis(100));"},{"Add":" (client_key, \"127.0.0.1:2222\")"},{"Add":" } else {"},{"Add":" let client_key = thrussh_keys::load_secret_key(\"id_ed25519\", None).unwrap();"},{"Add":" (client_key, \"127.0.0.1:2222\")"},{"Add":" };"},{"Add":""},{"Add":" let mut config = super::client::Config::default();"},{"Add":" config.preferred = super::Preferred::COMPRESSED;"},{"Add":" let config = Arc::new(config);"},{"Add":" let sh = Client {};"},{"Add":""},{"Add":" let mut session = super::client::connect(config, addr, sh).await.unwrap();"},{"Add":" debug!(\"connected\");"},{"Add":" if session"},{"Add":" .authenticate_publickey(std::env::var(\"USER\").unwrap(), Arc::new(client_key))"},{"Add":" .await"},{"Add":" .unwrap()"},{"Add":" {"},{"Add":" debug!(\"authenticated\");"},{"Add":" if let Ok(mut channel) = session.channel_open_session().await {"},{"Add":" channel.data(&b\"Hello, world!\"[..]).await.unwrap();"},{"Add":" if let Some(msg) = channel.wait().await {"},{"Add":" println!(\"{:?}\", msg)"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" if local {"},{"Add":" std::thread::sleep(std::time::Duration::from_secs(40));"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" #[derive(Clone)]"},{"Add":" struct Server {"},{"Add":" client_pubkey: Arc,"},{"Add":" clients: Arc>>,"},{"Add":" id: usize,"},{"Add":" }"},{"Add":""},{"Add":" impl server::Server for Server {"},{"Add":" type Handler = Self;"},{"Add":" fn new(&mut self, _: Option) -> Self {"},{"Add":" let s = self.clone();"},{"Add":" self.id += 1;"},{"Add":" s"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" impl server::Handler for Server {"},{"Add":" type FutureAuth = futures::future::Ready>;"},{"Add":" type FutureUnit = futures::future::Ready>;"},{"Add":" type FutureBool = futures::future::Ready>;"},{"Add":""},{"Add":" fn finished_auth(self, auth: Auth) -> Self::FutureAuth {"},{"Add":" futures::future::ready(Ok((self, auth)))"},{"Add":" }"},{"Add":" fn finished_bool(self, b: bool, s: Session) -> Self::FutureBool {"},{"Add":" futures::future::ready(Ok((self, s, b)))"},{"Add":" }"},{"Add":" fn finished(self, s: Session) -> Self::FutureUnit {"},{"Add":" futures::future::ready(Ok((self, s)))"},{"Add":" }"},{"Add":" fn channel_open_session(self, channel: ChannelId, session: Session) -> Self::FutureUnit {"},{"Add":" {"},{"Add":" let mut clients = self.clients.lock().unwrap();"},{"Add":" clients.insert((self.id, channel), session.handle());"},{"Add":" }"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":" fn auth_publickey(self, _: &str, _: &thrussh_keys::key::PublicKey) -> Self::FutureAuth {"},{"Add":" debug!(\"auth_publickey\");"},{"Add":" self.finished_auth(server::Auth::Accept)"},{"Add":" }"},{"Add":" fn data(self, _channel: ChannelId, data: &[u8], session: Session) -> Self::FutureUnit {"},{"Add":" debug!(\"server data = {:?}\", std::str::from_utf8(data));"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" struct Client {}"},{"Add":""},{"Add":" impl client::Handler for Client {"},{"Add":" type FutureUnit = futures::future::Ready>;"},{"Add":" type FutureBool = futures::future::Ready>;"},{"Add":""},{"Add":" fn finished_bool(self, b: bool) -> Self::FutureBool {"},{"Add":" futures::future::ready(Ok((self, b)))"},{"Add":" }"},{"Add":" fn finished(self, session: client::Session) -> Self::FutureUnit {"},{"Add":" futures::future::ready(Ok((self, session)))"},{"Add":" }"},{"Add":" fn check_server_key("},{"Add":" self,"},{"Add":" server_public_key: &thrussh_keys::key::PublicKey,"},{"Add":" ) -> Self::FutureBool {"},{"Add":" println!(\"check_server_key: {:?}\", server_public_key);"},{"Add":" self.finished_bool(true)"},{"Add":" }"},{"Add":" fn channel_open_confirmation("},{"Add":" self,"},{"Add":" channel: ChannelId,"},{"Add":" _: u32,"},{"Add":" _: u32,"},{"Add":" session: client::Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" println!(\"channel_open_confirmation: {:?}\", channel);"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":" fn data("},{"Add":" self,"},{"Add":" channel: ChannelId,"},{"Add":" data: &[u8],"},{"Add":" session: client::Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" debug!("},{"Add":" \"client data on channel {:?}: {:?}\","},{"Add":" channel,"},{"Add":" std::str::from_utf8(data)"},{"Add":" );"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"key.rs","metadata":420},"context":[{"change":0,"pos":165404}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":"use cryptovec::CryptoVec;"},{"Add":"use thrussh_keys::encoding::*;"},{"Add":"use thrussh_keys::key::*;"},{"Add":""},{"Add":"#[doc(hidden)]"},{"Add":"pub trait PubKey {"},{"Add":" fn push_to(&self, buffer: &mut CryptoVec);"},{"Add":"}"},{"Add":""},{"Add":"impl PubKey for PublicKey {"},{"Add":" fn push_to(&self, buffer: &mut CryptoVec) {"},{"Add":" match self {"},{"Add":" &PublicKey::Ed25519(ref public) => {"},{"Add":" buffer.push_u32_be((ED25519.0.len() + public.key.len() + 8) as u32);"},{"Add":" buffer.extend_ssh_string(ED25519.0.as_bytes());"},{"Add":" buffer.extend_ssh_string(&public.key);"},{"Add":" }"},{"Add":" &PublicKey::RSA { ref key, .. } => {"},{"Add":" let rsa = key.0.rsa().unwrap();"},{"Add":" let e = rsa.e().to_vec();"},{"Add":" let n = rsa.n().to_vec();"},{"Add":" buffer.push_u32_be((4 + SSH_RSA.0.len() + mpint_len(&n) + mpint_len(&e)) as u32);"},{"Add":" buffer.extend_ssh_string(SSH_RSA.0.as_bytes());"},{"Add":" buffer.extend_ssh_mpint(&e);"},{"Add":" buffer.extend_ssh_mpint(&n);"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl PubKey for KeyPair {"},{"Add":" fn push_to(&self, buffer: &mut CryptoVec) {"},{"Add":" match self {"},{"Add":" &KeyPair::Ed25519(ref key) => {"},{"Add":" let public = &key.key[32..];"},{"Add":" buffer.push_u32_be((ED25519.0.len() + public.len() + 8) as u32);"},{"Add":" buffer.extend_ssh_string(ED25519.0.as_bytes());"},{"Add":" buffer.extend_ssh_string(public);"},{"Add":" }"},{"Add":" &KeyPair::RSA { ref key, .. } => {"},{"Add":" let e = key.e().to_vec();"},{"Add":" let n = key.n().to_vec();"},{"Add":" buffer.push_u32_be((4 + SSH_RSA.0.len() + mpint_len(&n) + mpint_len(&e)) as u32);"},{"Add":" buffer.extend_ssh_string(SSH_RSA.0.as_bytes());"},{"Add":" buffer.extend_ssh_mpint(&e);"},{"Add":" buffer.extend_ssh_mpint(&n);"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"kex.rs","metadata":420},"context":[{"change":0,"pos":165404}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":"use crate::{cipher, key, msg};"},{"Add":"use byteorder::{BigEndian, ByteOrder};"},{"Add":""},{"Add":"use crate::session::Exchange;"},{"Add":"use cryptovec::CryptoVec;"},{"Add":"use openssl;"},{"Add":"use sodium;"},{"Add":"use std::cell::RefCell;"},{"Add":"use thrussh_keys::encoding::Encoding;"},{"Add":""},{"Add":"#[doc(hidden)]"},{"Add":"pub struct Algorithm {"},{"Add":" local_secret: Option,"},{"Add":" shared_secret: Option,"},{"Add":"}"},{"Add":""},{"Add":"impl std::fmt::Debug for Algorithm {"},{"Add":" fn fmt(&self, f: &mut std::fmt::Formatter) -> std::fmt::Result {"},{"Add":" write!("},{"Add":" f,"},{"Add":" \"Algorithm {{ local_secret: [hidden], shared_secret: [hidden] }}\","},{"Add":" )"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug, PartialEq, Eq, Copy, Clone)]"},{"Add":"pub struct Name(&'static str);"},{"Add":"impl AsRef for Name {"},{"Add":" fn as_ref(&self) -> &str {"},{"Add":" self.0"},{"Add":" }"},{"Add":"}"},{"Add":"pub const CURVE25519: Name = Name(\"curve25519-sha256@libssh.org\");"},{"Add":""},{"Add":"thread_local! {"},{"Add":" static KEY_BUF: RefCell = RefCell::new(CryptoVec::new());"},{"Add":" static BUFFER: RefCell = RefCell::new(CryptoVec::new());"},{"Add":"}"},{"Add":""},{"Add":"// We used to support curve \"NIST P-256\" here, but the security of"},{"Add":"// that curve is controversial, see"},{"Add":"// http://safecurves.cr.yp.to/rigid.html"},{"Add":""},{"Add":"impl Algorithm {"},{"Add":" #[doc(hidden)]"},{"Add":" pub fn server_dh("},{"Add":" _name: Name,"},{"Add":" exchange: &mut Exchange,"},{"Add":" payload: &[u8],"},{"Add":" ) -> Result {"},{"Add":" debug!(\"server_dh\");"},{"Add":""},{"Add":" assert_eq!(payload[0], msg::KEX_ECDH_INIT);"},{"Add":" let mut client_pubkey = GroupElement([0; 32]);"},{"Add":" {"},{"Add":" let pubkey_len = BigEndian::read_u32(&payload[1..]) as usize;"},{"Add":" client_pubkey"},{"Add":" .0"},{"Add":" .clone_from_slice(&payload[5..(5 + pubkey_len)])"},{"Add":" };"},{"Add":" debug!(\"client_pubkey: {:?}\", client_pubkey);"},{"Add":" use openssl::rand::*;"},{"Add":" use sodium::scalarmult::*;"},{"Add":" let mut server_secret = Scalar([0; 32]);"},{"Add":" rand_bytes(&mut server_secret.0)?;"},{"Add":" let server_pubkey = scalarmult_base(&server_secret);"},{"Add":""},{"Add":" // fill exchange."},{"Add":" exchange.server_ephemeral.clear();"},{"Add":" exchange.server_ephemeral.extend(&server_pubkey.0);"},{"Add":" let shared = scalarmult(&server_secret, &client_pubkey);"},{"Add":" Ok(Algorithm {"},{"Add":" local_secret: None,"},{"Add":" shared_secret: Some(shared),"},{"Add":" })"},{"Add":" }"},{"Add":""},{"Add":" #[doc(hidden)]"},{"Add":" pub fn client_dh("},{"Add":" _name: Name,"},{"Add":" client_ephemeral: &mut CryptoVec,"},{"Add":" buf: &mut CryptoVec,"},{"Add":" ) -> Result {"},{"Add":" use openssl::rand::*;"},{"Add":" use sodium::scalarmult::*;"},{"Add":" let mut client_secret = Scalar([0; 32]);"},{"Add":" rand_bytes(&mut client_secret.0)?;"},{"Add":" let client_pubkey = scalarmult_base(&client_secret);"},{"Add":""},{"Add":" // fill exchange."},{"Add":" client_ephemeral.clear();"},{"Add":" client_ephemeral.extend(&client_pubkey.0);"},{"Add":""},{"Add":" buf.push(msg::KEX_ECDH_INIT);"},{"Add":" buf.extend_ssh_string(&client_pubkey.0);"},{"Add":""},{"Add":" Ok(Algorithm {"},{"Add":" local_secret: Some(client_secret),"},{"Add":" shared_secret: None,"},{"Add":" })"},{"Add":" }"},{"Add":""},{"Add":" pub fn compute_shared_secret(&mut self, remote_pubkey_: &[u8]) -> Result<(), anyhow::Error> {"},{"Add":" let local_secret = std::mem::replace(&mut self.local_secret, None).unwrap();"},{"Add":""},{"Add":" use sodium::scalarmult::*;"},{"Add":" let mut remote_pubkey = GroupElement([0; 32]);"},{"Add":" remote_pubkey.0.clone_from_slice(remote_pubkey_);"},{"Add":" let shared = scalarmult(&local_secret, &remote_pubkey);"},{"Add":" self.shared_secret = Some(shared);"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" pub fn compute_exchange_hash("},{"Add":" &self,"},{"Add":" key: &K,"},{"Add":" exchange: &Exchange,"},{"Add":" buffer: &mut CryptoVec,"},{"Add":" ) -> Result {"},{"Add":" // Computing the exchange hash, see page 7 of RFC 5656."},{"Add":" buffer.clear();"},{"Add":" buffer.extend_ssh_string(&exchange.client_id);"},{"Add":" buffer.extend_ssh_string(&exchange.server_id);"},{"Add":" buffer.extend_ssh_string(&exchange.client_kex_init);"},{"Add":" buffer.extend_ssh_string(&exchange.server_kex_init);"},{"Add":""},{"Add":" key.push_to(buffer);"},{"Add":" buffer.extend_ssh_string(&exchange.client_ephemeral);"},{"Add":" buffer.extend_ssh_string(&exchange.server_ephemeral);"},{"Add":""},{"Add":" if let Some(ref shared) = self.shared_secret {"},{"Add":" buffer.extend_ssh_mpint(&shared.0);"},{"Add":" }"},{"Add":" use openssl::hash::*;"},{"Add":" let hash = {"},{"Add":" let mut hasher = Hasher::new(MessageDigest::sha256())?;"},{"Add":" hasher.update(&buffer)?;"},{"Add":" hasher.finish()?"},{"Add":" };"},{"Add":" Ok(hash)"},{"Add":" }"},{"Add":""},{"Add":" pub fn compute_keys("},{"Add":" &self,"},{"Add":" session_id: &openssl::hash::DigestBytes,"},{"Add":" exchange_hash: &openssl::hash::DigestBytes,"},{"Add":" cipher: cipher::Name,"},{"Add":" is_server: bool,"},{"Add":" ) -> Result {"},{"Add":" let cipher = match cipher {"},{"Add":" super::cipher::chacha20poly1305::NAME => &super::cipher::chacha20poly1305::CIPHER,"},{"Add":" _ => unreachable!(),"},{"Add":" };"},{"Add":""},{"Add":" // https://tools.ietf.org/html/rfc4253#section-7.2"},{"Add":" BUFFER.with(|buffer| {"},{"Add":" KEY_BUF.with(|key| {"},{"Add":" let compute_key = |c, key: &mut CryptoVec, len| -> Result<(), anyhow::Error> {"},{"Add":" let mut buffer = buffer.borrow_mut();"},{"Add":" buffer.clear();"},{"Add":" key.clear();"},{"Add":""},{"Add":" if let Some(ref shared) = self.shared_secret {"},{"Add":" buffer.extend_ssh_mpint(&shared.0);"},{"Add":" }"},{"Add":""},{"Add":" buffer.extend(exchange_hash.as_ref());"},{"Add":" buffer.push(c);"},{"Add":" buffer.extend(session_id.as_ref());"},{"Add":" use openssl::hash::*;"},{"Add":" let hash = {"},{"Add":" let mut hasher = Hasher::new(MessageDigest::sha256())?;"},{"Add":" hasher.update(&buffer)?;"},{"Add":" hasher.finish()?"},{"Add":" };"},{"Add":" key.extend(hash.as_ref());"},{"Add":""},{"Add":" while key.len() < len {"},{"Add":" // extend."},{"Add":" buffer.clear();"},{"Add":" if let Some(ref shared) = self.shared_secret {"},{"Add":" buffer.extend_ssh_mpint(&shared.0);"},{"Add":" }"},{"Add":" buffer.extend(exchange_hash.as_ref());"},{"Add":" buffer.extend(key);"},{"Add":" let hash = {"},{"Add":" let mut hasher = Hasher::new(MessageDigest::sha256())?;"},{"Add":" hasher.update(&buffer)?;"},{"Add":" hasher.finish()?"},{"Add":" };"},{"Add":" key.extend(&hash.as_ref());"},{"Add":" }"},{"Add":" Ok(())"},{"Add":" };"},{"Add":""},{"Add":" let (local_to_remote, remote_to_local) = if is_server {"},{"Add":" (b'D', b'C')"},{"Add":" } else {"},{"Add":" (b'C', b'D')"},{"Add":" };"},{"Add":""},{"Add":" let mut key = key.borrow_mut();"},{"Add":" compute_key(local_to_remote, &mut key, cipher.key_len)?;"},{"Add":" let local_to_remote = (cipher.make_sealing_cipher)(&key);"},{"Add":""},{"Add":" compute_key(remote_to_local, &mut key, cipher.key_len)?;"},{"Add":" let remote_to_local = (cipher.make_opening_cipher)(&key);"},{"Add":""},{"Add":" Ok(super::cipher::CipherPair {"},{"Add":" local_to_remote: local_to_remote,"},{"Add":" remote_to_local: remote_to_local,"},{"Add":" })"},{"Add":" })"},{"Add":" })"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"compression.rs","metadata":420},"context":[{"change":0,"pos":165404}],"contents":[{"Add":"#[derive(Debug)]"},{"Add":"pub enum Compression {"},{"Add":" None,"},{"Add":" #[cfg(feature = \"flate2\")]"},{"Add":" Zlib,"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"pub enum Compress {"},{"Add":" None,"},{"Add":" #[cfg(feature = \"flate2\")]"},{"Add":" Zlib(flate2::Compress),"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"pub enum Decompress {"},{"Add":" None,"},{"Add":" #[cfg(feature = \"flate2\")]"},{"Add":" Zlib(flate2::Decompress),"},{"Add":"}"},{"Add":""},{"Add":"#[cfg(feature = \"flate2\")]"},{"Add":"impl Compression {"},{"Add":" pub fn from_string(s: &str) -> Self {"},{"Add":" if s == \"zlib\" || s == \"zlib@openssh.com\" {"},{"Add":" Compression::Zlib"},{"Add":" } else {"},{"Add":" Compression::None"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn init_compress(&self, comp: &mut Compress) {"},{"Add":" if let Compression::Zlib = *self {"},{"Add":" if let Compress::Zlib(ref mut c) = *comp {"},{"Add":" c.reset()"},{"Add":" } else {"},{"Add":" *comp = Compress::Zlib(flate2::Compress::new(flate2::Compression::fast(), true))"},{"Add":" }"},{"Add":" } else {"},{"Add":" *comp = Compress::None"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn init_decompress(&self, comp: &mut Decompress) {"},{"Add":" if let Compression::Zlib = *self {"},{"Add":" if let Decompress::Zlib(ref mut c) = *comp {"},{"Add":" c.reset(true)"},{"Add":" } else {"},{"Add":" *comp = Decompress::Zlib(flate2::Decompress::new(true))"},{"Add":" }"},{"Add":" } else {"},{"Add":" *comp = Decompress::None"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[cfg(not(feature = \"flate2\"))]"},{"Add":"impl Compression {"},{"Add":" pub fn from_string(_: &str) -> Self {"},{"Add":" Compression::None"},{"Add":" }"},{"Add":""},{"Add":" pub fn init_compress(&self, _: &mut Compress) {}"},{"Add":""},{"Add":" pub fn init_decompress(&self, _: &mut Decompress) {}"},{"Add":"}"},{"Add":""},{"Add":"#[cfg(not(feature = \"flate2\"))]"},{"Add":"impl Compress {"},{"Add":" pub fn compress<'a>("},{"Add":" &mut self,"},{"Add":" input: &'a [u8],"},{"Add":" _: &'a mut cryptovec::CryptoVec,"},{"Add":" ) -> Result<&'a [u8], anyhow::Error> {"},{"Add":" Ok(input)"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[cfg(not(feature = \"flate2\"))]"},{"Add":"impl Decompress {"},{"Add":" pub fn decompress<'a>("},{"Add":" &mut self,"},{"Add":" input: &'a [u8],"},{"Add":" _: &'a mut cryptovec::CryptoVec,"},{"Add":" ) -> Result<&'a [u8], anyhow::Error> {"},{"Add":" Ok(input)"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[cfg(feature = \"flate2\")]"},{"Add":"impl Compress {"},{"Add":" pub fn compress<'a>("},{"Add":" &mut self,"},{"Add":" input: &'a [u8],"},{"Add":" output: &'a mut cryptovec::CryptoVec,"},{"Add":" ) -> Result<&'a [u8], anyhow::Error> {"},{"Add":" match *self {"},{"Add":" Compress::None => Ok(input),"},{"Add":" Compress::Zlib(ref mut z) => {"},{"Add":" output.clear();"},{"Add":" let n_in = z.total_in() as usize;"},{"Add":" let n_out = z.total_out() as usize;"},{"Add":" output.resize(input.len() + 10);"},{"Add":" let flush = flate2::FlushCompress::Partial;"},{"Add":" loop {"},{"Add":" let n_in_ = z.total_in() as usize - n_in;"},{"Add":" let n_out_ = z.total_out() as usize - n_out;"},{"Add":" let c = z.compress(&input[n_in_..], &mut output[n_out_..], flush)?;"},{"Add":" match c {"},{"Add":" flate2::Status::BufError => {"},{"Add":" output.resize(output.len() * 2);"},{"Add":" }"},{"Add":" _ => break,"},{"Add":" }"},{"Add":" }"},{"Add":" let n_out_ = z.total_out() as usize - n_out;"},{"Add":" Ok(&output[..n_out_])"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[cfg(feature = \"flate2\")]"},{"Add":"impl Decompress {"},{"Add":" pub fn decompress<'a>("},{"Add":" &mut self,"},{"Add":" input: &'a [u8],"},{"Add":" output: &'a mut cryptovec::CryptoVec,"},{"Add":" ) -> Result<&'a [u8], anyhow::Error> {"},{"Add":" match *self {"},{"Add":" Decompress::None => Ok(input),"},{"Add":" Decompress::Zlib(ref mut z) => {"},{"Add":" output.clear();"},{"Add":" let n_in = z.total_in() as usize;"},{"Add":" let n_out = z.total_out() as usize;"},{"Add":" output.resize(input.len());"},{"Add":" let flush = flate2::FlushDecompress::None;"},{"Add":" loop {"},{"Add":" let n_in_ = z.total_in() as usize - n_in;"},{"Add":" let n_out_ = z.total_out() as usize - n_out;"},{"Add":" let d = z.decompress(&input[n_in_..], &mut output[n_out_..], flush);"},{"Add":" match d? {"},{"Add":" flate2::Status::Ok => {"},{"Add":" output.resize(output.len() * 2);"},{"Add":" }"},{"Add":" _ => break,"},{"Add":" }"},{"Add":" }"},{"Add":" let n_out_ = z.total_out() as usize - n_out;"},{"Add":" Ok(&output[..n_out_])"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"client","metadata":1005},"context":[{"change":0,"pos":165404}],"contents":[]}},{"FileAdd":{"meta":{"basename":"session.rs","metadata":420},"context":[{"change":0,"pos":319192}],"contents":[{"Add":"use super::*;"},{"Add":""},{"Add":"impl Session {"},{"Add":" pub fn channel_open_session(&mut self) -> Result {"},{"Add":" let result = if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" match enc.state {"},{"Add":" EncryptedState::Authenticated => {"},{"Add":" let sender_channel = enc.new_channel("},{"Add":" self.common.config.window_size,"},{"Add":" self.common.config.maximum_packet_size,"},{"Add":" );"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_OPEN);"},{"Add":" enc.write.extend_ssh_string(b\"session\");"},{"Add":""},{"Add":" // sender channel id."},{"Add":" enc.write.push_u32_be(sender_channel.0);"},{"Add":""},{"Add":" // window."},{"Add":" enc.write"},{"Add":" .push_u32_be(self.common.config.as_ref().window_size);"},{"Add":""},{"Add":" // max packet size."},{"Add":" enc.write"},{"Add":" .push_u32_be(self.common.config.as_ref().maximum_packet_size);"},{"Add":" });"},{"Add":" sender_channel"},{"Add":" }"},{"Add":" _ => return Err(Error::NotAuthenticated.into()),"},{"Add":" }"},{"Add":" } else {"},{"Add":" return Err(Error::Inconsistent.into());"},{"Add":" };"},{"Add":" Ok(result)"},{"Add":" }"},{"Add":""},{"Add":" pub fn channel_open_x11("},{"Add":" &mut self,"},{"Add":" originator_address: &str,"},{"Add":" originator_port: u32,"},{"Add":" ) -> Result {"},{"Add":" let result = if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" match enc.state {"},{"Add":" EncryptedState::Authenticated => {"},{"Add":" let sender_channel = enc.new_channel("},{"Add":" self.common.config.window_size,"},{"Add":" self.common.config.maximum_packet_size,"},{"Add":" );"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_OPEN);"},{"Add":" enc.write.extend_ssh_string(b\"x11\");"},{"Add":""},{"Add":" // sender channel id."},{"Add":" enc.write.push_u32_be(sender_channel.0);"},{"Add":""},{"Add":" // window."},{"Add":" enc.write"},{"Add":" .push_u32_be(self.common.config.as_ref().window_size);"},{"Add":""},{"Add":" // max packet size."},{"Add":" enc.write"},{"Add":" .push_u32_be(self.common.config.as_ref().maximum_packet_size);"},{"Add":""},{"Add":" enc.write.extend_ssh_string(originator_address.as_bytes());"},{"Add":" enc.write.push_u32_be(originator_port); // sender channel id."},{"Add":" });"},{"Add":" sender_channel"},{"Add":" }"},{"Add":" _ => return Err(Error::NotAuthenticated.into()),"},{"Add":" }"},{"Add":" } else {"},{"Add":" return Err(Error::Inconsistent.into());"},{"Add":" };"},{"Add":" Ok(result)"},{"Add":" }"},{"Add":""},{"Add":" pub fn channel_open_direct_tcpip("},{"Add":" &mut self,"},{"Add":" host_to_connect: &str,"},{"Add":" port_to_connect: u32,"},{"Add":" originator_address: &str,"},{"Add":" originator_port: u32,"},{"Add":" ) -> Result {"},{"Add":" let result = if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" match enc.state {"},{"Add":" EncryptedState::Authenticated => {"},{"Add":" let sender_channel = enc.new_channel("},{"Add":" self.common.config.window_size,"},{"Add":" self.common.config.maximum_packet_size,"},{"Add":" );"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_OPEN);"},{"Add":" enc.write.extend_ssh_string(b\"direct-tcpip\");"},{"Add":""},{"Add":" // sender channel id."},{"Add":" enc.write.push_u32_be(sender_channel.0);"},{"Add":""},{"Add":" // window."},{"Add":" enc.write"},{"Add":" .push_u32_be(self.common.config.as_ref().window_size);"},{"Add":""},{"Add":" // max packet size."},{"Add":" enc.write"},{"Add":" .push_u32_be(self.common.config.as_ref().maximum_packet_size);"},{"Add":""},{"Add":" enc.write.extend_ssh_string(host_to_connect.as_bytes());"},{"Add":" enc.write.push_u32_be(port_to_connect); // sender channel id."},{"Add":" enc.write.extend_ssh_string(originator_address.as_bytes());"},{"Add":" enc.write.push_u32_be(originator_port); // sender channel id."},{"Add":" });"},{"Add":" sender_channel"},{"Add":" }"},{"Add":" _ => return Err(Error::NotAuthenticated.into()),"},{"Add":" }"},{"Add":" } else {"},{"Add":" return Err(Error::Inconsistent.into());"},{"Add":" };"},{"Add":" Ok(result)"},{"Add":" }"},{"Add":""},{"Add":" pub fn request_pty("},{"Add":" &mut self,"},{"Add":" channel: ChannelId,"},{"Add":" want_reply: bool,"},{"Add":" term: &str,"},{"Add":" col_width: u32,"},{"Add":" row_height: u32,"},{"Add":" pix_width: u32,"},{"Add":" pix_height: u32,"},{"Add":" terminal_modes: &[(Pty, u32)],"},{"Add":" ) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let Some(channel) = enc.channels.get(&channel) {"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_REQUEST);"},{"Add":""},{"Add":" enc.write.push_u32_be(channel.recipient_channel);"},{"Add":" enc.write.extend_ssh_string(b\"pty-req\");"},{"Add":" enc.write.push(if want_reply { 1 } else { 0 });"},{"Add":""},{"Add":" enc.write.extend_ssh_string(term.as_bytes());"},{"Add":" enc.write.push_u32_be(col_width);"},{"Add":" enc.write.push_u32_be(row_height);"},{"Add":" enc.write.push_u32_be(pix_width);"},{"Add":" enc.write.push_u32_be(pix_height);"},{"Add":""},{"Add":" enc.write.push_u32_be((1 + 5 * terminal_modes.len()) as u32);"},{"Add":" for &(code, value) in terminal_modes {"},{"Add":" enc.write.push(code as u8);"},{"Add":" enc.write.push_u32_be(value)"},{"Add":" }"},{"Add":" // 0 code (to terminate the list)"},{"Add":" enc.write.push(0);"},{"Add":" });"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn request_x11("},{"Add":" &mut self,"},{"Add":" channel: ChannelId,"},{"Add":" want_reply: bool,"},{"Add":" single_connection: bool,"},{"Add":" x11_authentication_protocol: &str,"},{"Add":" x11_authentication_cookie: &str,"},{"Add":" x11_screen_number: u32,"},{"Add":" ) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let Some(channel) = enc.channels.get(&channel) {"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_REQUEST);"},{"Add":""},{"Add":" enc.write.push_u32_be(channel.recipient_channel);"},{"Add":" enc.write.extend_ssh_string(b\"x11-req\");"},{"Add":" enc.write.push(if want_reply { 1 } else { 0 });"},{"Add":" enc.write.push(if single_connection { 1 } else { 0 });"},{"Add":" enc.write"},{"Add":" .extend_ssh_string(x11_authentication_protocol.as_bytes());"},{"Add":" enc.write"},{"Add":" .extend_ssh_string(x11_authentication_cookie.as_bytes());"},{"Add":" enc.write.push_u32_be(x11_screen_number);"},{"Add":" });"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn set_env("},{"Add":" &mut self,"},{"Add":" channel: ChannelId,"},{"Add":" want_reply: bool,"},{"Add":" variable_name: &str,"},{"Add":" variable_value: &str,"},{"Add":" ) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let Some(channel) = enc.channels.get(&channel) {"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_REQUEST);"},{"Add":""},{"Add":" enc.write.push_u32_be(channel.recipient_channel);"},{"Add":" enc.write.extend_ssh_string(b\"env\");"},{"Add":" enc.write.push(if want_reply { 1 } else { 0 });"},{"Add":" enc.write.extend_ssh_string(variable_name.as_bytes());"},{"Add":" enc.write.extend_ssh_string(variable_value.as_bytes());"},{"Add":" });"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn request_shell(&mut self, want_reply: bool, channel: ChannelId) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let Some(channel) = enc.channels.get(&channel) {"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_REQUEST);"},{"Add":""},{"Add":" enc.write.push_u32_be(channel.recipient_channel);"},{"Add":" enc.write.extend_ssh_string(b\"shell\");"},{"Add":" enc.write.push(if want_reply { 1 } else { 0 });"},{"Add":" });"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn exec(&mut self, channel: ChannelId, want_reply: bool, command: &str) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let Some(channel) = enc.channels.get(&channel) {"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_REQUEST);"},{"Add":""},{"Add":" enc.write.push_u32_be(channel.recipient_channel);"},{"Add":" enc.write.extend_ssh_string(b\"exec\");"},{"Add":" enc.write.push(if want_reply { 1 } else { 0 });"},{"Add":" enc.write.extend_ssh_string(command.as_bytes());"},{"Add":" });"},{"Add":" return;"},{"Add":" }"},{"Add":" }"},{"Add":" error!(\"exec\");"},{"Add":" }"},{"Add":""},{"Add":" pub fn signal(&mut self, channel: ChannelId, signal: Sig) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let Some(channel) = enc.channels.get(&channel) {"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_REQUEST);"},{"Add":""},{"Add":" enc.write.push_u32_be(channel.recipient_channel);"},{"Add":" enc.write.extend_ssh_string(b\"signal\");"},{"Add":" enc.write.push(0);"},{"Add":" enc.write.extend_ssh_string(signal.name().as_bytes());"},{"Add":" });"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn request_subsystem(&mut self, want_reply: bool, channel: ChannelId, name: &str) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let Some(channel) = enc.channels.get(&channel) {"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_REQUEST);"},{"Add":""},{"Add":" enc.write.push_u32_be(channel.recipient_channel);"},{"Add":" enc.write.extend_ssh_string(b\"subsystem\");"},{"Add":" enc.write.push(if want_reply { 1 } else { 0 });"},{"Add":" enc.write.extend_ssh_string(name.as_bytes());"},{"Add":" });"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn window_change("},{"Add":" &mut self,"},{"Add":" channel: ChannelId,"},{"Add":" col_width: u32,"},{"Add":" row_height: u32,"},{"Add":" pix_width: u32,"},{"Add":" pix_height: u32,"},{"Add":" ) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let Some(channel) = enc.channels.get(&channel) {"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::CHANNEL_REQUEST);"},{"Add":""},{"Add":" enc.write.push_u32_be(channel.recipient_channel);"},{"Add":" enc.write.extend_ssh_string(b\"window-change\");"},{"Add":" enc.write.push(0); // this packet never wants reply"},{"Add":" enc.write.push_u32_be(col_width);"},{"Add":" enc.write.push_u32_be(row_height);"},{"Add":" enc.write.push_u32_be(pix_width);"},{"Add":" enc.write.push_u32_be(pix_height);"},{"Add":" });"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn tcpip_forward(&mut self, want_reply: bool, address: &str, port: u32) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::GLOBAL_REQUEST);"},{"Add":" enc.write.extend_ssh_string(b\"tcpip-forward\");"},{"Add":" enc.write.push(if want_reply { 1 } else { 0 });"},{"Add":" enc.write.extend_ssh_string(address.as_bytes());"},{"Add":" enc.write.push_u32_be(port);"},{"Add":" });"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn cancel_tcpip_forward(&mut self, want_reply: bool, address: &str, port: u32) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.push(msg::GLOBAL_REQUEST);"},{"Add":" enc.write.extend_ssh_string(b\"cancel-tcpip-forward\");"},{"Add":" enc.write.push(if want_reply { 1 } else { 0 });"},{"Add":" enc.write.extend_ssh_string(address.as_bytes());"},{"Add":" enc.write.push_u32_be(port);"},{"Add":" });"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn data(&mut self, channel: ChannelId, data: CryptoVec) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" enc.data(channel, data)"},{"Add":" } else {"},{"Add":" unreachable!()"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn eof(&mut self, channel: ChannelId) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" enc.eof(channel)"},{"Add":" } else {"},{"Add":" unreachable!()"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn extended_data(&mut self, channel: ChannelId, ext: u32, data: CryptoVec) {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" enc.extended_data(channel, ext, data)"},{"Add":" } else {"},{"Add":" unreachable!()"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn disconnect(&mut self, reason: Disconnect, description: &str, language_tag: &str) {"},{"Add":" self.common.disconnect(reason, description, language_tag);"},{"Add":" }"},{"Add":""},{"Add":" pub fn has_pending_data(&self, channel: ChannelId) -> bool {"},{"Add":" if let Some(ref enc) = self.common.encrypted {"},{"Add":" enc.has_pending_data(channel)"},{"Add":" } else {"},{"Add":" false"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub fn sender_window_size(&self, channel: ChannelId) -> usize {"},{"Add":" if let Some(ref enc) = self.common.encrypted {"},{"Add":" enc.sender_window_size(channel)"},{"Add":" } else {"},{"Add":" 0"},{"Add":" }"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"proxy.rs","metadata":420},"context":[{"change":0,"pos":319192}],"contents":[{"Add":"use futures::task::{Context, Poll};"},{"Add":"use std::io::{Read, Write};"},{"Add":"use std::net::SocketAddr;"},{"Add":"use std::pin::Pin;"},{"Add":"use std::process::Command;"},{"Add":"use tokio;"},{"Add":"use tokio::io::{AsyncRead, AsyncWrite};"},{"Add":"use tokio::net::TcpStream;"},{"Add":""},{"Add":"/// A type to implement either a TCP socket, or proxying through an external command."},{"Add":"pub enum Stream {"},{"Add":" #[allow(missing_docs)]"},{"Add":" Child(std::process::Child),"},{"Add":" #[allow(missing_docs)]"},{"Add":" Tcp(TcpStream),"},{"Add":"}"},{"Add":""},{"Add":"impl Stream {"},{"Add":" /// Connect a direct TCP stream (as opposed to a proxied one)."},{"Add":" pub async fn tcp_connect(addr: &SocketAddr) -> Result {"},{"Add":" TcpStream::connect(addr).await.map(Stream::Tcp)"},{"Add":" }"},{"Add":" /// Connect through a proxy command."},{"Add":" pub fn proxy_connect(cmd: &str, args: &[&str]) -> Result {"},{"Add":" Ok(Stream::Child(Command::new(cmd).args(args).spawn()?))"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl AsyncRead for Stream {"},{"Add":" fn poll_read("},{"Add":" mut self: Pin<&mut Self>,"},{"Add":" cx: &mut Context,"},{"Add":" buf: &mut [u8],"},{"Add":" ) -> Poll> {"},{"Add":" match *self {"},{"Add":" Stream::Child(ref mut c) => Poll::Ready(c.stdout.as_mut().unwrap().read(buf)),"},{"Add":" Stream::Tcp(ref mut t) => AsyncRead::poll_read(Pin::new(t), cx, buf),"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl AsyncWrite for Stream {"},{"Add":" fn poll_write("},{"Add":" mut self: Pin<&mut Self>,"},{"Add":" cx: &mut Context,"},{"Add":" buf: &[u8],"},{"Add":" ) -> Poll> {"},{"Add":" match *self {"},{"Add":" Stream::Child(ref mut c) => Poll::Ready(c.stdin.as_mut().unwrap().write(buf)),"},{"Add":" Stream::Tcp(ref mut t) => AsyncWrite::poll_write(Pin::new(t), cx, buf),"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" fn poll_flush("},{"Add":" mut self: Pin<&mut Self>,"},{"Add":" cx: &mut Context,"},{"Add":" ) -> Poll> {"},{"Add":" match *self {"},{"Add":" Stream::Child(_) => Poll::Ready(Ok(())),"},{"Add":" Stream::Tcp(ref mut t) => AsyncWrite::poll_flush(Pin::new(t), cx),"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" fn poll_shutdown("},{"Add":" mut self: Pin<&mut Self>,"},{"Add":" cx: &mut Context,"},{"Add":" ) -> Poll> {"},{"Add":" match *self {"},{"Add":" Stream::Child(_) => Poll::Ready(Ok(())),"},{"Add":" Stream::Tcp(ref mut t) => AsyncWrite::poll_shutdown(Pin::new(t), cx),"},{"Add":" }"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"mod.rs","metadata":420},"context":[{"change":0,"pos":319192}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":""},{"Add":"use crate::auth;"},{"Add":"use crate::negotiation;"},{"Add":"use crate::pty::Pty;"},{"Add":"use crate::session::*;"},{"Add":"use crate::ssh_read::SshRead;"},{"Add":"use crate::sshbuffer::*;"},{"Add":"use crate::{ChannelId, ChannelMsg, ChannelOpenFailure, Disconnect, Limits, Sig};"},{"Add":"use cryptovec::CryptoVec;"},{"Add":"use futures::task::{Context, Poll};"},{"Add":"use futures::Future;"},{"Add":"use std::cell::RefCell;"},{"Add":"use std::collections::HashMap;"},{"Add":"use std::pin::Pin;"},{"Add":"use std::sync::Arc;"},{"Add":"use thrussh_keys::encoding::{Encoding, Reader};"},{"Add":"use thrussh_keys::key;"},{"Add":"use thrussh_keys::key::parse_public_key;"},{"Add":"use tokio;"},{"Add":"use tokio::io::{AsyncRead, AsyncWrite, AsyncWriteExt};"},{"Add":"use tokio::net::TcpStream;"},{"Add":""},{"Add":"mod kex;"},{"Add":"use crate::cipher;"},{"Add":"use crate::{msg, Error};"},{"Add":"mod encrypted;"},{"Add":"mod session;"},{"Add":""},{"Add":"use tokio::sync::mpsc::*;"},{"Add":"pub mod proxy;"},{"Add":"pub struct Session {"},{"Add":" common: CommonSession>,"},{"Add":" receiver: Receiver,"},{"Add":" sender: UnboundedSender,"},{"Add":" channels: HashMap>,"},{"Add":" target_window_size: u32,"},{"Add":"}"},{"Add":""},{"Add":"impl Drop for Session {"},{"Add":" fn drop(&mut self) {"},{"Add":" debug!(\"drop session\")"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"enum Reply {"},{"Add":" AuthSuccess,"},{"Add":" AuthFailure,"},{"Add":" ChannelOpenFailure,"},{"Add":" SignRequest {"},{"Add":" key: thrussh_keys::key::PublicKey,"},{"Add":" data: CryptoVec,"},{"Add":" },"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"enum Msg {"},{"Add":" Authenticate {"},{"Add":" user: String,"},{"Add":" method: auth::Method,"},{"Add":" },"},{"Add":" Signed {"},{"Add":" data: CryptoVec,"},{"Add":" },"},{"Add":" ChannelOpenSession {"},{"Add":" sender: UnboundedSender,"},{"Add":" },"},{"Add":" ChannelOpenX11 {"},{"Add":" originator_address: String,"},{"Add":" originator_port: u32,"},{"Add":" sender: UnboundedSender,"},{"Add":" },"},{"Add":" ChannelOpenDirectTcpIp {"},{"Add":" host_to_connect: String,"},{"Add":" port_to_connect: u32,"},{"Add":" originator_address: String,"},{"Add":" originator_port: u32,"},{"Add":" sender: UnboundedSender,"},{"Add":" },"},{"Add":" TcpIpForward {"},{"Add":" want_reply: bool,"},{"Add":" address: String,"},{"Add":" port: u32,"},{"Add":" },"},{"Add":" CancelTcpIpForward {"},{"Add":" want_reply: bool,"},{"Add":" address: String,"},{"Add":" port: u32,"},{"Add":" },"},{"Add":" Disconnect {"},{"Add":" reason: Disconnect,"},{"Add":" description: String,"},{"Add":" language_tag: String,"},{"Add":" },"},{"Add":" Data {"},{"Add":" id: ChannelId,"},{"Add":" data: CryptoVec,"},{"Add":" },"},{"Add":" ExtendedData {"},{"Add":" id: ChannelId,"},{"Add":" data: CryptoVec,"},{"Add":" ext: u32,"},{"Add":" },"},{"Add":" Eof {"},{"Add":" id: ChannelId,"},{"Add":" },"},{"Add":" RequestPty {"},{"Add":" id: ChannelId,"},{"Add":" want_reply: bool,"},{"Add":" term: String,"},{"Add":" col_width: u32,"},{"Add":" row_height: u32,"},{"Add":" pix_width: u32,"},{"Add":" pix_height: u32,"},{"Add":" terminal_modes: Vec<(Pty, u32)>,"},{"Add":" },"},{"Add":" RequestShell {"},{"Add":" id: ChannelId,"},{"Add":" want_reply: bool,"},{"Add":" },"},{"Add":" Exec {"},{"Add":" id: ChannelId,"},{"Add":" want_reply: bool,"},{"Add":" command: String,"},{"Add":" },"},{"Add":" Signal {"},{"Add":" id: ChannelId,"},{"Add":" signal: Sig,"},{"Add":" },"},{"Add":" RequestSubsystem {"},{"Add":" id: ChannelId,"},{"Add":" want_reply: bool,"},{"Add":" name: String,"},{"Add":" },"},{"Add":" RequestX11 {"},{"Add":" id: ChannelId,"},{"Add":" want_reply: bool,"},{"Add":" single_connection: bool,"},{"Add":" x11_authentication_protocol: String,"},{"Add":" x11_authentication_cookie: String,"},{"Add":" x11_screen_number: u32,"},{"Add":" },"},{"Add":" SetEnv {"},{"Add":" id: ChannelId,"},{"Add":" want_reply: bool,"},{"Add":" variable_name: String,"},{"Add":" variable_value: String,"},{"Add":" },"},{"Add":" WindowChange {"},{"Add":" id: ChannelId,"},{"Add":" col_width: u32,"},{"Add":" row_height: u32,"},{"Add":" pix_width: u32,"},{"Add":" pix_height: u32,"},{"Add":" },"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"enum OpenChannelMsg {"},{"Add":" Open {"},{"Add":" id: ChannelId,"},{"Add":" max_packet_size: u32,"},{"Add":" window_size: u32,"},{"Add":" },"},{"Add":" Msg(ChannelMsg),"},{"Add":"}"},{"Add":""},{"Add":"/// Handle to a session, used to send messages to a client outside of"},{"Add":"/// the request/response cycle."},{"Add":"pub struct Handle {"},{"Add":" sender: Sender,"},{"Add":" receiver: UnboundedReceiver,"},{"Add":" join: tokio::task::JoinHandle>,"},{"Add":"}"},{"Add":""},{"Add":"impl Drop for Handle {"},{"Add":" fn drop(&mut self) {"},{"Add":" debug!(\"drop handle\")"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Clone)]"},{"Add":"pub struct ChannelSender {"},{"Add":" sender: Sender,"},{"Add":" id: ChannelId,"},{"Add":"}"},{"Add":""},{"Add":"pub struct Channel {"},{"Add":" sender: ChannelSender,"},{"Add":" receiver: UnboundedReceiver,"},{"Add":" max_packet_size: u32,"},{"Add":" window_size: u32,"},{"Add":"}"},{"Add":""},{"Add":"impl Handle {"},{"Add":" pub async fn authenticate_password, P: Into>("},{"Add":" &mut self,"},{"Add":" user: U,"},{"Add":" password: P,"},{"Add":" ) -> Result {"},{"Add":" let user = user.into();"},{"Add":" self.sender"},{"Add":" .send(Msg::Authenticate {"},{"Add":" user,"},{"Add":" method: auth::Method::Password {"},{"Add":" password: password.into(),"},{"Add":" },"},{"Add":" })"},{"Add":" .await"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" loop {"},{"Add":" match self.receiver.recv().await {"},{"Add":" Some(Reply::AuthSuccess) => return Ok(true),"},{"Add":" Some(Reply::AuthFailure) => return Ok(false),"},{"Add":" None => return Ok(false),"},{"Add":" _ => {}"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub async fn authenticate_publickey>("},{"Add":" &mut self,"},{"Add":" user: U,"},{"Add":" key: Arc,"},{"Add":" ) -> Result {"},{"Add":" let user = user.into();"},{"Add":" self.sender"},{"Add":" .send(Msg::Authenticate {"},{"Add":" user,"},{"Add":" method: auth::Method::PublicKey { key },"},{"Add":" })"},{"Add":" .await"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" loop {"},{"Add":" match self.receiver.recv().await {"},{"Add":" Some(Reply::AuthSuccess) => return Ok(true),"},{"Add":" Some(Reply::AuthFailure) => return Ok(false),"},{"Add":" None => return Ok(false),"},{"Add":" _ => {}"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub async fn authenticate_future, S: auth::Signer>("},{"Add":" &mut self,"},{"Add":" user: U,"},{"Add":" key: key::PublicKey,"},{"Add":" mut future: S,"},{"Add":" ) -> Result<(S, bool), anyhow::Error> {"},{"Add":" let user = user.into();"},{"Add":" self.sender"},{"Add":" .send(Msg::Authenticate {"},{"Add":" user,"},{"Add":" method: auth::Method::FuturePublicKey { key },"},{"Add":" })"},{"Add":" .await"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" loop {"},{"Add":" let reply = self.receiver.recv().await;"},{"Add":" match reply {"},{"Add":" Some(Reply::AuthSuccess) => return Ok((future, true)),"},{"Add":" Some(Reply::AuthFailure) => return Ok((future, false)),"},{"Add":" Some(Reply::SignRequest { key, data }) => {"},{"Add":" let (f, data) = future.auth_publickey_sign(&key, data).await;"},{"Add":" future = f;"},{"Add":" let data = data?;"},{"Add":" self.sender"},{"Add":" .send(Msg::Signed { data })"},{"Add":" .await"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" }"},{"Add":" None => return Ok((future, false)),"},{"Add":" _ => {}"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" async fn wait_channel_confirmation("},{"Add":" &self,"},{"Add":" mut receiver: UnboundedReceiver,"},{"Add":" ) -> Result {"},{"Add":" loop {"},{"Add":" match receiver.recv().await {"},{"Add":" Some(OpenChannelMsg::Open {"},{"Add":" id,"},{"Add":" max_packet_size,"},{"Add":" window_size,"},{"Add":" }) => {"},{"Add":" return Ok(Channel {"},{"Add":" sender: ChannelSender {"},{"Add":" sender: self.sender.clone(),"},{"Add":" id,"},{"Add":" },"},{"Add":" receiver,"},{"Add":" max_packet_size,"},{"Add":" window_size,"},{"Add":" });"},{"Add":" }"},{"Add":" None => {"},{"Add":" return Err(Error::Disconnect.into());"},{"Add":" }"},{"Add":" msg => {"},{"Add":" debug!(\"msg = {:?}\", msg);"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Request a session channel (the most basic type of"},{"Add":" /// channel). This function returns `Some(..)` immediately if the"},{"Add":" /// connection is authenticated, but the channel only becomes"},{"Add":" /// usable when it's confirmed by the server, as indicated by the"},{"Add":" /// `confirmed` field of the corresponding `Channel`."},{"Add":" pub async fn channel_open_session(&mut self) -> Result {"},{"Add":" let (sender, receiver) = unbounded_channel();"},{"Add":" self.sender"},{"Add":" .send(Msg::ChannelOpenSession { sender })"},{"Add":" .await"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" self.wait_channel_confirmation(receiver).await"},{"Add":" }"},{"Add":""},{"Add":" /// Request an X11 channel, on which the X11 protocol may be tunneled."},{"Add":" pub async fn channel_open_x11>("},{"Add":" &mut self,"},{"Add":" originator_address: A,"},{"Add":" originator_port: u32,"},{"Add":" ) -> Result {"},{"Add":" let (sender, receiver) = unbounded_channel();"},{"Add":" self.sender"},{"Add":" .send(Msg::ChannelOpenX11 {"},{"Add":" originator_address: originator_address.into(),"},{"Add":" originator_port,"},{"Add":" sender,"},{"Add":" })"},{"Add":" .await"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" self.wait_channel_confirmation(receiver).await"},{"Add":" }"},{"Add":""},{"Add":" /// Open a TCP/IP forwarding channel. This is usually done when a"},{"Add":" /// connection comes to a locally forwarded TCP/IP port. See"},{"Add":" /// [RFC4254](https://tools.ietf.org/html/rfc4254#section-7). The"},{"Add":" /// TCP/IP packets can then be tunneled through the channel using"},{"Add":" /// `.data()`."},{"Add":" pub async fn channel_open_direct_tcpip, B: Into>("},{"Add":" &mut self,"},{"Add":" host_to_connect: A,"},{"Add":" port_to_connect: u32,"},{"Add":" originator_address: B,"},{"Add":" originator_port: u32,"},{"Add":" ) -> Result {"},{"Add":" let (sender, receiver) = unbounded_channel();"},{"Add":" self.sender"},{"Add":" .send(Msg::ChannelOpenDirectTcpIp {"},{"Add":" host_to_connect: host_to_connect.into(),"},{"Add":" port_to_connect,"},{"Add":" originator_address: originator_address.into(),"},{"Add":" originator_port,"},{"Add":" sender,"},{"Add":" })"},{"Add":" .await"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" self.wait_channel_confirmation(receiver).await"},{"Add":" }"},{"Add":""},{"Add":" /// Sends a disconnect message."},{"Add":" pub async fn disconnect("},{"Add":" &mut self,"},{"Add":" reason: Disconnect,"},{"Add":" description: &str,"},{"Add":" language_tag: &str,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" self.sender"},{"Add":" .send(Msg::Disconnect {"},{"Add":" reason,"},{"Add":" description: description.into(),"},{"Add":" language_tag: language_tag.into(),"},{"Add":" })"},{"Add":" .await"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Channel {"},{"Add":" pub fn id(&self) -> ChannelId {"},{"Add":" self.sender.id"},{"Add":" }"},{"Add":""},{"Add":" /// Returns the min between the maximum packet size and the"},{"Add":" /// remaining window size in the channel."},{"Add":" pub fn writable_packet_size(&self) -> usize {"},{"Add":" self.max_packet_size.min(self.window_size) as usize"},{"Add":" }"},{"Add":""},{"Add":" /// Request a pseudo-terminal with the given characteristics."},{"Add":" pub async fn request_pty("},{"Add":" &mut self,"},{"Add":" want_reply: bool,"},{"Add":" term: &str,"},{"Add":" col_width: u32,"},{"Add":" row_height: u32,"},{"Add":" pix_width: u32,"},{"Add":" pix_height: u32,"},{"Add":" terminal_modes: &[(Pty, u32)],"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" self.sender"},{"Add":" .sender"},{"Add":" .send(Msg::RequestPty {"},{"Add":" id: self.sender.id,"},{"Add":" want_reply,"},{"Add":" term: term.to_string(),"},{"Add":" col_width,"},{"Add":" row_height,"},{"Add":" pix_width,"},{"Add":" pix_height,"},{"Add":" terminal_modes: terminal_modes.to_vec(),"},{"Add":" })"},{"Add":" .await"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Request a remote shell."},{"Add":" pub async fn request_shell(&mut self, want_reply: bool) -> Result<(), anyhow::Error> {"},{"Add":" self.sender"},{"Add":" .sender"},{"Add":" .send(Msg::RequestShell {"},{"Add":" id: self.sender.id,"},{"Add":" want_reply,"},{"Add":" })"},{"Add":" .await"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Execute a remote program (will be passed to a shell). This can"},{"Add":" /// be used to implement scp (by calling a remote scp and"},{"Add":" /// tunneling to its standard input)."},{"Add":" pub async fn exec>("},{"Add":" &mut self,"},{"Add":" want_reply: bool,"},{"Add":" command: A,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" self.sender"},{"Add":" .sender"},{"Add":" .send(Msg::Exec {"},{"Add":" id: self.sender.id,"},{"Add":" want_reply,"},{"Add":" command: command.into(),"},{"Add":" })"},{"Add":" .await"},{"Add":" .map_err(|e| {"},{"Add":" debug!(\"e = {:?}\", e);"},{"Add":" Error::SendError"},{"Add":" })?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Signal a remote process."},{"Add":" pub async fn signal(&mut self, signal: Sig) -> Result<(), anyhow::Error> {"},{"Add":" self.sender"},{"Add":" .sender"},{"Add":" .send(Msg::Signal {"},{"Add":" id: self.sender.id,"},{"Add":" signal,"},{"Add":" })"},{"Add":" .await"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Request the start of a subsystem with the given name."},{"Add":" pub async fn request_subsystem>("},{"Add":" &mut self,"},{"Add":" want_reply: bool,"},{"Add":" name: A,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" self.sender"},{"Add":" .sender"},{"Add":" .send(Msg::RequestSubsystem {"},{"Add":" id: self.sender.id,"},{"Add":" want_reply,"},{"Add":" name: name.into(),"},{"Add":" })"},{"Add":" .await"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Request the forwarding of a remote port to the client. The"},{"Add":" /// server will then open forwarding channels (which cause the"},{"Add":" /// client to call `.channel_open_forwarded_tcpip()`)."},{"Add":" pub async fn tcpip_forward>("},{"Add":" &mut self,"},{"Add":" want_reply: bool,"},{"Add":" address: A,"},{"Add":" port: u32,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" self.sender"},{"Add":" .sender"},{"Add":" .send(Msg::TcpIpForward {"},{"Add":" want_reply,"},{"Add":" address: address.into(),"},{"Add":" port,"},{"Add":" })"},{"Add":" .await"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Cancel a previous forwarding request."},{"Add":" pub async fn cancel_tcpip_forward>("},{"Add":" &mut self,"},{"Add":" want_reply: bool,"},{"Add":" address: A,"},{"Add":" port: u32,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" self.sender"},{"Add":" .sender"},{"Add":" .send(Msg::CancelTcpIpForward {"},{"Add":" want_reply,"},{"Add":" address: address.into(),"},{"Add":" port,"},{"Add":" })"},{"Add":" .await"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Request X11 forwarding through an already opened X11"},{"Add":" /// channel. See"},{"Add":" /// [RFC4254](https://tools.ietf.org/html/rfc4254#section-6.3.1)"},{"Add":" /// for security issues related to cookies."},{"Add":" pub async fn request_x11, B: Into>("},{"Add":" &mut self,"},{"Add":" want_reply: bool,"},{"Add":" single_connection: bool,"},{"Add":" x11_authentication_protocol: A,"},{"Add":" x11_authentication_cookie: B,"},{"Add":" x11_screen_number: u32,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" self.sender"},{"Add":" .sender"},{"Add":" .send(Msg::RequestX11 {"},{"Add":" id: self.sender.id,"},{"Add":" want_reply,"},{"Add":" single_connection,"},{"Add":" x11_authentication_protocol: x11_authentication_protocol.into(),"},{"Add":" x11_authentication_cookie: x11_authentication_cookie.into(),"},{"Add":" x11_screen_number,"},{"Add":" })"},{"Add":" .await"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Set a remote environment variable."},{"Add":" pub async fn set_env, B: Into>("},{"Add":" &mut self,"},{"Add":" want_reply: bool,"},{"Add":" variable_name: A,"},{"Add":" variable_value: B,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" self.sender"},{"Add":" .sender"},{"Add":" .send(Msg::SetEnv {"},{"Add":" id: self.sender.id,"},{"Add":" want_reply,"},{"Add":" variable_name: variable_name.into(),"},{"Add":" variable_value: variable_value.into(),"},{"Add":" })"},{"Add":" .await"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Inform the server that our window size has changed."},{"Add":" pub async fn window_change("},{"Add":" &mut self,"},{"Add":" col_width: u32,"},{"Add":" row_height: u32,"},{"Add":" pix_width: u32,"},{"Add":" pix_height: u32,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" self.sender"},{"Add":" .sender"},{"Add":" .send(Msg::WindowChange {"},{"Add":" id: self.sender.id,"},{"Add":" col_width,"},{"Add":" row_height,"},{"Add":" pix_width,"},{"Add":" pix_height,"},{"Add":" })"},{"Add":" .await"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Send data to a channel."},{"Add":" pub async fn data("},{"Add":" &mut self,"},{"Add":" data: R,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" self.send_data(None, data).await"},{"Add":" }"},{"Add":""},{"Add":" /// Send data to a channel. The number of bytes added to the"},{"Add":" /// \"sending pipeline\" (to be processed by the event loop) is"},{"Add":" /// returned."},{"Add":" pub async fn extended_data("},{"Add":" &mut self,"},{"Add":" ext: u32,"},{"Add":" data: R,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" self.send_data(Some(ext), data).await"},{"Add":" }"},{"Add":""},{"Add":" async fn send_data("},{"Add":" &mut self,"},{"Add":" ext: Option,"},{"Add":" mut data: R,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" let mut total = 0;"},{"Add":" loop {"},{"Add":" // wait for the window to be restored."},{"Add":" while self.window_size == 0 {"},{"Add":" match self.receiver.recv().await {"},{"Add":" Some(OpenChannelMsg::Msg(ChannelMsg::WindowAdjusted { new_size })) => {"},{"Add":" self.window_size = new_size;"},{"Add":" break;"},{"Add":" }"},{"Add":" Some(OpenChannelMsg::Msg(msg)) => {"},{"Add":" debug!(\"unexpected channel msg: {:?}\", msg);"},{"Add":" }"},{"Add":" Some(_) => debug!(\"unexpected channel msg\"),"},{"Add":" None => break,"},{"Add":" }"},{"Add":" }"},{"Add":" debug!("},{"Add":" \"sending data, self.window_size = {:?}, self.max_packet_size = {:?}, total = {:?}\","},{"Add":" self.window_size, self.max_packet_size, total"},{"Add":" );"},{"Add":" let sendable = self.window_size.min(self.max_packet_size) as usize;"},{"Add":" let mut c = CryptoVec::new_zeroed(sendable);"},{"Add":" let n = data.read(&mut c[..]).await?;"},{"Add":" total += n;"},{"Add":" c.resize(n);"},{"Add":" self.window_size -= n as u32;"},{"Add":" self.send_data_packet(ext, c).await?;"},{"Add":" if n == 0 {"},{"Add":" break;"},{"Add":" } else if self.window_size > 0 {"},{"Add":" continue;"},{"Add":" }"},{"Add":" }"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" async fn send_data_packet("},{"Add":" &mut self,"},{"Add":" ext: Option,"},{"Add":" data: CryptoVec,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" self.sender"},{"Add":" .sender"},{"Add":" .send(if let Some(ext) = ext {"},{"Add":" Msg::ExtendedData {"},{"Add":" id: self.sender.id,"},{"Add":" ext,"},{"Add":" data,"},{"Add":" }"},{"Add":" } else {"},{"Add":" Msg::Data {"},{"Add":" id: self.sender.id,"},{"Add":" data,"},{"Add":" }"},{"Add":" })"},{"Add":" .await"},{"Add":" .map_err(|e| {"},{"Add":" error!(\"{:?}\", e);"},{"Add":" Error::SendError"},{"Add":" })?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" pub async fn eof(&mut self) -> Result<(), anyhow::Error> {"},{"Add":" self.sender"},{"Add":" .sender"},{"Add":" .send(Msg::Eof { id: self.sender.id })"},{"Add":" .await"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Wait for data to come."},{"Add":" pub async fn wait(&mut self) -> Option {"},{"Add":" loop {"},{"Add":" match self.receiver.recv().await {"},{"Add":" Some(OpenChannelMsg::Msg(ChannelMsg::WindowAdjusted { new_size })) => {"},{"Add":" self.window_size += new_size;"},{"Add":" return Some(ChannelMsg::WindowAdjusted { new_size });"},{"Add":" }"},{"Add":" Some(OpenChannelMsg::Msg(msg)) => return Some(msg),"},{"Add":" None => return None,"},{"Add":" _ => {}"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Future for Handle {"},{"Add":" type Output = Result<(), anyhow::Error>;"},{"Add":" fn poll(mut self: Pin<&mut Self>, cx: &mut Context) -> Poll {"},{"Add":" match Future::poll(Pin::new(&mut self.join), cx) {"},{"Add":" Poll::Ready(r) => Poll::Ready(match r {"},{"Add":" Ok(Ok(x)) => Ok(x),"},{"Add":" Err(e) => Err(e.into()),"},{"Add":" Ok(Err(e)) => Err(e),"},{"Add":" }),"},{"Add":" Poll::Pending => Poll::Pending,"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"use std::net::ToSocketAddrs;"},{"Add":"pub async fn connect("},{"Add":" config: Arc,"},{"Add":" addr: T,"},{"Add":" handler: H,"},{"Add":") -> Result {"},{"Add":" let addr = addr.to_socket_addrs()?.next().unwrap();"},{"Add":" let socket = TcpStream::connect(addr).await?;"},{"Add":" connect_stream(config, socket, handler).await"},{"Add":"}"},{"Add":""},{"Add":"async fn connect_stream("},{"Add":" config: Arc,"},{"Add":" mut stream: R,"},{"Add":" handler: H,"},{"Add":") -> Result"},{"Add":"where"},{"Add":" H: Handler + Send + 'static,"},{"Add":" R: AsyncRead + AsyncWrite + Unpin + Send + 'static,"},{"Add":"{"},{"Add":" // Writing SSH id."},{"Add":" let mut write_buffer = SSHBuffer::new();"},{"Add":" write_buffer.send_ssh_id(config.as_ref().client_id.as_bytes());"},{"Add":" stream.write_all(&write_buffer.buffer).await?;"},{"Add":""},{"Add":" // Reading SSH id and allocating a session if correct."},{"Add":" let mut stream = SshRead::new(stream);"},{"Add":" let sshid = stream.read_ssh_id().await?;"},{"Add":" let (sender, receiver) = channel(10);"},{"Add":" let (sender2, receiver2) = unbounded_channel();"},{"Add":" if config.maximum_packet_size > 65535 {"},{"Add":" error!("},{"Add":" \"Maximum packet size ({:?}) should not larger than a TCP packet (65535)\","},{"Add":" config.maximum_packet_size"},{"Add":" );"},{"Add":" }"},{"Add":" let mut session = Session {"},{"Add":" target_window_size: config.window_size,"},{"Add":" common: CommonSession {"},{"Add":" write_buffer,"},{"Add":" kex: None,"},{"Add":" auth_user: String::new(),"},{"Add":" auth_method: None, // Client only."},{"Add":" cipher: Arc::new(cipher::CLEAR_PAIR),"},{"Add":" encrypted: None,"},{"Add":" config,"},{"Add":" wants_reply: false,"},{"Add":" disconnected: false,"},{"Add":" buffer: CryptoVec::new(),"},{"Add":" },"},{"Add":" receiver,"},{"Add":" sender: sender2,"},{"Add":" channels: HashMap::new(),"},{"Add":" };"},{"Add":" session.read_ssh_id(sshid)?;"},{"Add":" Ok(Handle {"},{"Add":" sender,"},{"Add":" receiver: receiver2,"},{"Add":" join: tokio::spawn(session.run(stream, handler)),"},{"Add":" })"},{"Add":"}"},{"Add":""},{"Add":"impl Session {"},{"Add":" async fn run("},{"Add":" mut self,"},{"Add":" mut stream: R,"},{"Add":" handler: H,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" self.flush()?;"},{"Add":" if !self.common.write_buffer.buffer.is_empty() {"},{"Add":" debug!(\"writing {:?} bytes\", self.common.write_buffer.buffer.len());"},{"Add":" stream.write_all(&self.common.write_buffer.buffer).await?;"},{"Add":" stream.flush().await?;"},{"Add":" }"},{"Add":" self.common.write_buffer.buffer.clear();"},{"Add":" let mut buffer = SSHBuffer::new();"},{"Add":" let mut decomp = CryptoVec::new();"},{"Add":" let mut handler = Some(handler);"},{"Add":" while !self.common.disconnected {"},{"Add":" tokio::select! {"},{"Add":" n = cipher::read(&mut stream, &mut buffer, &self.common.cipher) => {"},{"Add":" if n.is_err() || buffer.buffer.len() < 5 {"},{"Add":" break"},{"Add":" }"},{"Add":" let buf = if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let Ok(buf) = enc.decompress.decompress("},{"Add":" &buffer.buffer[5..],"},{"Add":" &mut decomp,"},{"Add":" ) {"},{"Add":" buf"},{"Add":" } else {"},{"Add":" break"},{"Add":" }"},{"Add":" } else {"},{"Add":" &buffer.buffer[5..]"},{"Add":" };"},{"Add":" if buf.is_empty() {"},{"Add":" continue"},{"Add":" }"},{"Add":" if buf[0] == crate::msg::DISCONNECT {"},{"Add":" break;"},{"Add":" } else if buf[0] <= 4 {"},{"Add":" continue;"},{"Add":" }"},{"Add":" self = reply(self, &mut handler, &buf[..]).await?;"},{"Add":" }"},{"Add":" msg = self.receiver.recv(), if !self.is_rekeying() => {"},{"Add":" match msg {"},{"Add":" Some(Msg::Authenticate { user, method }) => {"},{"Add":" self.write_auth_request_if_needed(&user, method);"},{"Add":" }"},{"Add":" Some(Msg::Signed { .. }) => {},"},{"Add":" Some(Msg::ChannelOpenSession { sender }) => {"},{"Add":" let id = self.channel_open_session()?;"},{"Add":" self.channels.insert(id, sender);"},{"Add":" }"},{"Add":" Some(Msg::ChannelOpenX11 { originator_address, originator_port, sender }) => {"},{"Add":" let id = self.channel_open_x11(&originator_address, originator_port)?;"},{"Add":" self.channels.insert(id, sender);"},{"Add":" }"},{"Add":" Some(Msg::ChannelOpenDirectTcpIp { host_to_connect, port_to_connect, originator_address, originator_port, sender }) => {"},{"Add":" let id = self.channel_open_direct_tcpip(&host_to_connect, port_to_connect, &originator_address, originator_port)?;"},{"Add":" self.channels.insert(id, sender);"},{"Add":" }"},{"Add":" Some(Msg::TcpIpForward { want_reply, address, port }) => {"},{"Add":" self.tcpip_forward(want_reply, &address, port)"},{"Add":" },"},{"Add":" Some(Msg::CancelTcpIpForward { want_reply, address, port }) => {"},{"Add":" self.cancel_tcpip_forward(want_reply, &address, port)"},{"Add":" },"},{"Add":" Some(Msg::Disconnect { reason, description, language_tag }) => {"},{"Add":" self.disconnect(reason, &description, &language_tag)"},{"Add":" },"},{"Add":" Some(Msg::Data { data, id }) => { self.data(id, data) },"},{"Add":" Some(Msg::Eof { id }) => { self.eof(id); },"},{"Add":" Some(Msg::ExtendedData { data, ext, id }) => { self.extended_data(id, ext, data); },"},{"Add":" Some(Msg::RequestPty { id, want_reply, term, col_width, row_height, pix_width, pix_height, terminal_modes }) => {"},{"Add":" self.request_pty(id, want_reply, &term, col_width, row_height, pix_width, pix_height, &terminal_modes)"},{"Add":" },"},{"Add":" Some(Msg::WindowChange { id, col_width, row_height, pix_width, pix_height }) => {"},{"Add":" self.window_change(id, col_width, row_height, pix_width, pix_height)"},{"Add":" },"},{"Add":" Some(Msg::RequestX11 { id, want_reply, single_connection, x11_authentication_protocol, x11_authentication_cookie, x11_screen_number }) => {"},{"Add":" self.request_x11(id, want_reply, single_connection, &x11_authentication_protocol, &x11_authentication_cookie, x11_screen_number)"},{"Add":" },"},{"Add":" Some(Msg::SetEnv { id, want_reply, variable_name, variable_value }) => {"},{"Add":" self.set_env(id, want_reply, &variable_name, &variable_value)"},{"Add":" },"},{"Add":" Some(Msg::RequestShell { id, want_reply }) => {"},{"Add":" self.request_shell(want_reply, id)"},{"Add":" },"},{"Add":" Some(Msg::Exec { id, want_reply, command }) => {"},{"Add":" self.exec(id, want_reply, &command)"},{"Add":" },"},{"Add":" Some(Msg::Signal { id, signal }) => {"},{"Add":" self.signal(id, signal)"},{"Add":" },"},{"Add":" Some(Msg::RequestSubsystem { id, want_reply, name }) => {"},{"Add":" self.request_subsystem(want_reply, id, &name)"},{"Add":" },"},{"Add":" None => {"},{"Add":" self.common.disconnected = true;"},{"Add":" break"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" self.flush()?;"},{"Add":" debug!(\"writing {:?} bytes\", self.common.write_buffer.buffer.len());"},{"Add":" if !self.common.write_buffer.buffer.is_empty() {"},{"Add":" stream.write_all(&self.common.write_buffer.buffer).await?;"},{"Add":" stream.flush().await?;"},{"Add":" }"},{"Add":" buffer.buffer.clear();"},{"Add":" self.common.write_buffer.buffer.clear();"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let EncryptedState::InitCompression = enc.state {"},{"Add":" enc.client_compression.init_compress(&mut enc.compress);"},{"Add":" enc.state = EncryptedState::Authenticated;"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" debug!(\"disconnected\");"},{"Add":" if self.common.disconnected {"},{"Add":" stream.shutdown().await?;"},{"Add":""},{"Add":" // Shutdown"},{"Add":" buffer.buffer.clear();"},{"Add":" while cipher::read(&mut stream, &mut buffer, &self.common.cipher).await? != 0 {"},{"Add":" buffer.buffer.clear();"},{"Add":" }"},{"Add":" }"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" fn is_rekeying(&self) -> bool {"},{"Add":" if let Some(ref enc) = self.common.encrypted {"},{"Add":" enc.rekey.is_some()"},{"Add":" } else {"},{"Add":" true"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Session {"},{"Add":" fn read_ssh_id(&mut self, sshid: &[u8]) -> Result<(), anyhow::Error> {"},{"Add":" // self.read_buffer.bytes += sshid.bytes_read + 2;"},{"Add":" let mut exchange = Exchange::new();"},{"Add":" exchange.server_id.extend(sshid);"},{"Add":" // Preparing the response"},{"Add":" exchange"},{"Add":" .client_id"},{"Add":" .extend(self.common.config.as_ref().client_id.as_bytes());"},{"Add":" let mut kexinit = KexInit {"},{"Add":" exchange: exchange,"},{"Add":" algo: None,"},{"Add":" sent: false,"},{"Add":" session_id: None,"},{"Add":" };"},{"Add":" self.common.write_buffer.buffer.clear();"},{"Add":" kexinit.client_write("},{"Add":" self.common.config.as_ref(),"},{"Add":" &mut self.common.cipher,"},{"Add":" &mut self.common.write_buffer,"},{"Add":" )?;"},{"Add":" self.common.kex = Some(Kex::KexInit(kexinit));"},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Flush the temporary cleartext buffer into the encryption"},{"Add":" /// buffer. This does *not* flush to the socket."},{"Add":" fn flush(&mut self) -> Result<(), anyhow::Error> {"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if enc.flush("},{"Add":" &self.common.config.as_ref().limits,"},{"Add":" &mut self.common.cipher,"},{"Add":" &mut self.common.write_buffer,"},{"Add":" ) {"},{"Add":" info!(\"Re-exchanging keys\");"},{"Add":" if enc.rekey.is_none() {"},{"Add":" if let Some(exchange) = std::mem::replace(&mut enc.exchange, None) {"},{"Add":" let mut kexinit = KexInit::initiate_rekey(exchange, &enc.session_id);"},{"Add":" kexinit.client_write("},{"Add":" &self.common.config.as_ref(),"},{"Add":" &mut self.common.cipher,"},{"Add":" &mut self.common.write_buffer,"},{"Add":" )?;"},{"Add":" enc.rekey = Some(Kex::KexInit(kexinit))"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" Ok(())"},{"Add":" }"},{"Add":"}"},{"Add":"thread_local! {"},{"Add":" static HASH_BUFFER: RefCell = RefCell::new(CryptoVec::new());"},{"Add":"}"},{"Add":""},{"Add":"impl KexDhDone {"},{"Add":" async fn server_key_check("},{"Add":" mut self,"},{"Add":" rekey: bool,"},{"Add":" handler: &mut Option,"},{"Add":" buf: &[u8],"},{"Add":" ) -> Result {"},{"Add":" let mut reader = buf.reader(1);"},{"Add":" let pubkey = reader.read_string()?; // server public key."},{"Add":" let pubkey = parse_public_key(pubkey)?;"},{"Add":" debug!(\"server_public_Key: {:?}\", pubkey);"},{"Add":" if !rekey {"},{"Add":" let h = handler.take().unwrap();"},{"Add":" let (h, check) = h.check_server_key(&pubkey).await?;"},{"Add":" *handler = Some(h);"},{"Add":" if !check {"},{"Add":" return Err(Error::UnknownKey.into());"},{"Add":" }"},{"Add":" }"},{"Add":" HASH_BUFFER.with(|buffer| {"},{"Add":" let mut buffer = buffer.borrow_mut();"},{"Add":" buffer.clear();"},{"Add":" let hash = {"},{"Add":" let server_ephemeral = reader.read_string()?;"},{"Add":" self.exchange.server_ephemeral.extend(server_ephemeral);"},{"Add":" let signature = reader.read_string()?;"},{"Add":""},{"Add":" self.kex"},{"Add":" .compute_shared_secret(&self.exchange.server_ephemeral)?;"},{"Add":" debug!(\"kexdhdone.exchange = {:?}\", self.exchange);"},{"Add":" let hash = self"},{"Add":" .kex"},{"Add":" .compute_exchange_hash(&pubkey, &self.exchange, &mut buffer)?;"},{"Add":" debug!(\"exchange hash: {:?}\", hash);"},{"Add":" let signature = {"},{"Add":" let mut sig_reader = signature.reader(0);"},{"Add":" let sig_type = sig_reader.read_string()?;"},{"Add":" debug!(\"sig_type: {:?}\", sig_type);"},{"Add":" sig_reader.read_string()?"},{"Add":" };"},{"Add":" use thrussh_keys::key::Verify;"},{"Add":" debug!(\"signature: {:?}\", signature);"},{"Add":" if !pubkey.verify_server_auth(hash.as_ref(), signature) {"},{"Add":" debug!(\"wrong server sig\");"},{"Add":" return Err(Error::WrongServerSig.into());"},{"Add":" }"},{"Add":" hash"},{"Add":" };"},{"Add":" let mut newkeys = self.compute_keys(hash, false)?;"},{"Add":" newkeys.sent = true;"},{"Add":" Ok(Kex::NewKeys(newkeys))"},{"Add":" })"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"async fn reply("},{"Add":" mut session: Session,"},{"Add":" handler: &mut Option,"},{"Add":" buf: &[u8],"},{"Add":") -> Result {"},{"Add":" match session.common.kex.take() {"},{"Add":" Some(Kex::KexInit(kexinit)) => {"},{"Add":" if kexinit.algo.is_some()"},{"Add":" || buf[0] == msg::KEXINIT"},{"Add":" || session.common.encrypted.is_none()"},{"Add":" {"},{"Add":" session.common.kex = Some(Kex::KexDhDone(kexinit.client_parse("},{"Add":" session.common.config.as_ref(),"},{"Add":" &session.common.cipher,"},{"Add":" buf,"},{"Add":" &mut session.common.write_buffer,"},{"Add":" )?));"},{"Add":" session.flush()?;"},{"Add":" }"},{"Add":" Ok(session)"},{"Add":" }"},{"Add":" Some(Kex::KexDhDone(mut kexdhdone)) => {"},{"Add":" if kexdhdone.names.ignore_guessed {"},{"Add":" kexdhdone.names.ignore_guessed = false;"},{"Add":" session.common.kex = Some(Kex::KexDhDone(kexdhdone));"},{"Add":" Ok(session)"},{"Add":" } else if buf[0] == msg::KEX_ECDH_REPLY {"},{"Add":" // We've sent ECDH_INIT, waiting for ECDH_REPLY"},{"Add":" session.common.kex = Some(kexdhdone.server_key_check(false, handler, buf).await?);"},{"Add":" session"},{"Add":" .common"},{"Add":" .cipher"},{"Add":" .write(&[msg::NEWKEYS], &mut session.common.write_buffer);"},{"Add":" session.flush()?;"},{"Add":" Ok(session)"},{"Add":" } else {"},{"Add":" error!(\"Wrong packet received\");"},{"Add":" Err(Error::Inconsistent.into())"},{"Add":" }"},{"Add":" }"},{"Add":" Some(Kex::NewKeys(newkeys)) => {"},{"Add":" debug!(\"newkeys received\");"},{"Add":" if buf[0] != msg::NEWKEYS {"},{"Add":" return Err(Error::Kex.into());"},{"Add":" }"},{"Add":" let is_first_time = session.common.encrypted.is_none();"},{"Add":" session.common.encrypted("},{"Add":" EncryptedState::WaitingServiceRequest {"},{"Add":" accepted: false,"},{"Add":" sent: is_first_time,"},{"Add":" },"},{"Add":" newkeys,"},{"Add":" );"},{"Add":" if is_first_time {"},{"Add":" debug!(\"sending ssh-userauth service requset\");"},{"Add":" let p = b\"\\x05\\0\\0\\0\\x0Cssh-userauth\";"},{"Add":" session"},{"Add":" .common"},{"Add":" .cipher"},{"Add":" .write(p, &mut session.common.write_buffer);"},{"Add":" }"},{"Add":" // Ok, NEWKEYS received, now encrypted."},{"Add":" Ok(session)"},{"Add":" }"},{"Add":" Some(kex) => {"},{"Add":" session.common.kex = Some(kex);"},{"Add":" Ok(session)"},{"Add":" }"},{"Add":" None => session.client_read_encrypted(handler, buf).await,"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// The configuration of clients."},{"Add":"#[derive(Debug)]"},{"Add":"pub struct Config {"},{"Add":" /// The client ID string sent at the beginning of the protocol."},{"Add":" pub client_id: String,"},{"Add":" /// The bytes and time limits before key re-exchange."},{"Add":" pub limits: Limits,"},{"Add":" /// The initial size of a channel (used for flow control)."},{"Add":" pub window_size: u32,"},{"Add":" /// The maximal size of a single packet."},{"Add":" pub maximum_packet_size: u32,"},{"Add":" /// Lists of preferred algorithms."},{"Add":" pub preferred: negotiation::Preferred,"},{"Add":" /// Time after which the connection is garbage-collected."},{"Add":" pub connection_timeout: Option,"},{"Add":"}"},{"Add":""},{"Add":"impl Default for Config {"},{"Add":" fn default() -> Config {"},{"Add":" Config {"},{"Add":" client_id: format!("},{"Add":" \"SSH-2.0-{}_{}\","},{"Add":" env!(\"CARGO_PKG_NAME\"),"},{"Add":" env!(\"CARGO_PKG_VERSION\")"},{"Add":" ),"},{"Add":" limits: Limits::default(),"},{"Add":" window_size: 2097152,"},{"Add":" maximum_packet_size: 32768,"},{"Add":" preferred: Default::default(),"},{"Add":" connection_timeout: None,"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// A client handler. Note that messages can be received from the"},{"Add":"/// server at any time during a session."},{"Add":"pub trait Handler: Sized {"},{"Add":" /// A future ultimately resolving into a boolean, which can be"},{"Add":" /// returned by some parts of this handler."},{"Add":" type FutureBool: Future> + Send;"},{"Add":""},{"Add":" /// A future ultimately resolving into unit, which can be"},{"Add":" /// returned by some parts of this handler."},{"Add":" type FutureUnit: Future> + Send;"},{"Add":""},{"Add":" /// Convert a `bool` to `Self::FutureBool`. This is used to"},{"Add":" /// produce the default handlers."},{"Add":" fn finished_bool(self, b: bool) -> Self::FutureBool;"},{"Add":""},{"Add":" /// Produce a `Self::FutureUnit`. This is used to produce the"},{"Add":" /// default handlers."},{"Add":" fn finished(self, session: Session) -> Self::FutureUnit;"},{"Add":""},{"Add":" /// Called when the server sends us an authentication banner. This"},{"Add":" /// is usually meant to be shown to the user, see"},{"Add":" /// [RFC4252](https://tools.ietf.org/html/rfc4252#section-5.4) for"},{"Add":" /// more details."},{"Add":" ///"},{"Add":" /// The returned Boolean is ignored."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn auth_banner(self, banner: &str, session: Session) -> Self::FutureUnit {"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Called to check the server's public key. This is a very important"},{"Add":" /// step to help prevent man-in-the-middle attacks. The default"},{"Add":" /// implementation rejects all keys."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn check_server_key(self, server_public_key: &key::PublicKey) -> Self::FutureBool {"},{"Add":" self.finished_bool(false)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when the server confirmed our request to open a"},{"Add":" /// channel. A channel can only be written to after receiving this"},{"Add":" /// message (this library panics otherwise)."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn channel_open_confirmation("},{"Add":" self,"},{"Add":" id: ChannelId,"},{"Add":" max_packet_size: u32,"},{"Add":" window_size: u32,"},{"Add":" session: Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" if let Some(channel) = session.channels.get(&id) {"},{"Add":" channel"},{"Add":" .send(OpenChannelMsg::Open {"},{"Add":" id,"},{"Add":" max_packet_size,"},{"Add":" window_size,"},{"Add":" })"},{"Add":" .unwrap_or(());"},{"Add":" } else {"},{"Add":" error!(\"no channel for id {:?}\", id);"},{"Add":" }"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when the server signals success."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn channel_success(self, channel: ChannelId, session: Session) -> Self::FutureUnit {"},{"Add":" if let Some(chan) = session.channels.get(&channel) {"},{"Add":" chan.send(OpenChannelMsg::Msg(ChannelMsg::Success))"},{"Add":" .unwrap_or(())"},{"Add":" }"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when the server closes a channel."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn channel_close(self, channel: ChannelId, mut session: Session) -> Self::FutureUnit {"},{"Add":" session.channels.remove(&channel);"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when the server sends EOF to a channel."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn channel_eof(self, channel: ChannelId, session: Session) -> Self::FutureUnit {"},{"Add":" if let Some(chan) = session.channels.get(&channel) {"},{"Add":" chan.send(OpenChannelMsg::Msg(ChannelMsg::Eof))"},{"Add":" .unwrap_or(())"},{"Add":" }"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when the server rejected our request to open a channel."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn channel_open_failure("},{"Add":" self,"},{"Add":" channel: ChannelId,"},{"Add":" reason: ChannelOpenFailure,"},{"Add":" description: &str,"},{"Add":" language: &str,"},{"Add":" mut session: Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" session.channels.remove(&channel);"},{"Add":" session.sender.send(Reply::ChannelOpenFailure).unwrap_or(());"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when a new channel is created."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn channel_open_forwarded_tcpip("},{"Add":" self,"},{"Add":" channel: ChannelId,"},{"Add":" connected_address: &str,"},{"Add":" connected_port: u32,"},{"Add":" originator_address: &str,"},{"Add":" originator_port: u32,"},{"Add":" session: Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when the server sends us data. The `extended_code`"},{"Add":" /// parameter is a stream identifier, `None` is usually the"},{"Add":" /// standard output, and `Some(1)` is the standard error. See"},{"Add":" /// [RFC4254](https://tools.ietf.org/html/rfc4254#section-5.2)."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn data(self, channel: ChannelId, data: &[u8], session: Session) -> Self::FutureUnit {"},{"Add":" if let Some(chan) = session.channels.get(&channel) {"},{"Add":" chan.send(OpenChannelMsg::Msg(ChannelMsg::Data {"},{"Add":" data: CryptoVec::from_slice(data),"},{"Add":" }))"},{"Add":" .unwrap_or(())"},{"Add":" }"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when the server sends us data. The `extended_code`"},{"Add":" /// parameter is a stream identifier, `None` is usually the"},{"Add":" /// standard output, and `Some(1)` is the standard error. See"},{"Add":" /// [RFC4254](https://tools.ietf.org/html/rfc4254#section-5.2)."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn extended_data("},{"Add":" self,"},{"Add":" channel: ChannelId,"},{"Add":" ext: u32,"},{"Add":" data: &[u8],"},{"Add":" session: Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" if let Some(chan) = session.channels.get(&channel) {"},{"Add":" chan.send(OpenChannelMsg::Msg(ChannelMsg::ExtendedData {"},{"Add":" ext,"},{"Add":" data: CryptoVec::from_slice(data),"},{"Add":" }))"},{"Add":" .unwrap_or(())"},{"Add":" }"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// The server informs this client of whether the client may"},{"Add":" /// perform control-S/control-Q flow control. See"},{"Add":" /// [RFC4254](https://tools.ietf.org/html/rfc4254#section-6.8)."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn xon_xoff("},{"Add":" self,"},{"Add":" channel: ChannelId,"},{"Add":" client_can_do: bool,"},{"Add":" session: Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" if let Some(chan) = session.channels.get(&channel) {"},{"Add":" chan.send(OpenChannelMsg::Msg(ChannelMsg::XonXoff { client_can_do }))"},{"Add":" .unwrap_or(())"},{"Add":" }"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// The remote process has exited, with the given exit status."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn exit_status("},{"Add":" self,"},{"Add":" channel: ChannelId,"},{"Add":" exit_status: u32,"},{"Add":" session: Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" if let Some(chan) = session.channels.get(&channel) {"},{"Add":" chan.send(OpenChannelMsg::Msg(ChannelMsg::ExitStatus { exit_status }))"},{"Add":" .unwrap_or(())"},{"Add":" }"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// The remote process exited upon receiving a signal."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn exit_signal("},{"Add":" self,"},{"Add":" channel: ChannelId,"},{"Add":" signal_name: Sig,"},{"Add":" core_dumped: bool,"},{"Add":" error_message: &str,"},{"Add":" lang_tag: &str,"},{"Add":" session: Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" if let Some(chan) = session.channels.get(&channel) {"},{"Add":" chan.send(OpenChannelMsg::Msg(ChannelMsg::ExitSignal {"},{"Add":" signal_name,"},{"Add":" core_dumped,"},{"Add":" error_message: error_message.to_string(),"},{"Add":" lang_tag: lang_tag.to_string(),"},{"Add":" }))"},{"Add":" .unwrap_or(())"},{"Add":" }"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when the network window is adjusted, meaning that we"},{"Add":" /// can send more bytes. This is useful if this client wants to"},{"Add":" /// send huge amounts of data, for instance if we have called"},{"Add":" /// `Session::data` before, and it returned less than the"},{"Add":" /// full amount of data."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn window_adjusted("},{"Add":" self,"},{"Add":" channel: ChannelId,"},{"Add":" mut new_size: u32,"},{"Add":" mut session: Session,"},{"Add":" ) -> Self::FutureUnit {"},{"Add":" if let Some(ref mut enc) = session.common.encrypted {"},{"Add":" new_size -= enc.flush_pending(channel) as u32;"},{"Add":" }"},{"Add":" if let Some(chan) = session.channels.get(&channel) {"},{"Add":" chan.send(OpenChannelMsg::Msg(ChannelMsg::WindowAdjusted { new_size }))"},{"Add":" .unwrap_or(())"},{"Add":" }"},{"Add":" self.finished(session)"},{"Add":" }"},{"Add":""},{"Add":" /// Called when this client adjusts the network window. Return the"},{"Add":" /// next target window and maximum packet size."},{"Add":" #[allow(unused_variables)]"},{"Add":" fn adjust_window(&mut self, channel: ChannelId, window: u32) -> u32 {"},{"Add":" window"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"kex.rs","metadata":420},"context":[{"change":0,"pos":319192}],"contents":[{"Add":"use super::*;"},{"Add":"use crate::cipher::CipherPair;"},{"Add":"use crate::negotiation::Select;"},{"Add":"use crate::{negotiation, Error};"},{"Add":""},{"Add":"use crate::kex;"},{"Add":""},{"Add":"impl KexInit {"},{"Add":" pub fn client_parse("},{"Add":" mut self,"},{"Add":" config: &Config,"},{"Add":" cipher: &CipherPair,"},{"Add":" buf: &[u8],"},{"Add":" write_buffer: &mut SSHBuffer,"},{"Add":" ) -> Result {"},{"Add":" debug!(\"client parse {:?} {:?}\", buf.len(), buf);"},{"Add":" let algo = if self.algo.is_none() {"},{"Add":" // read algorithms from packet."},{"Add":" debug!(\"extending {:?}\", &self.exchange.server_kex_init[..]);"},{"Add":" self.exchange.server_kex_init.extend(buf);"},{"Add":" super::negotiation::Client::read_kex(buf, &config.preferred)?"},{"Add":" } else {"},{"Add":" return Err(Error::Kex.into());"},{"Add":" };"},{"Add":" debug!(\"algo = {:?}\", algo);"},{"Add":" debug!(\"write = {:?}\", &write_buffer.buffer[..]);"},{"Add":" if !self.sent {"},{"Add":" self.client_write(config, cipher, write_buffer)?"},{"Add":" }"},{"Add":""},{"Add":" // This function is called from the public API."},{"Add":" //"},{"Add":" // In order to simplify the public API, we reuse the"},{"Add":" // self.exchange.client_kex buffer to send an extra packet,"},{"Add":" // then truncate that buffer. Without that, we would need an"},{"Add":" // extra buffer."},{"Add":" let i0 = self.exchange.client_kex_init.len();"},{"Add":" debug!(\"i0 = {:?}\", i0);"},{"Add":" let kex = kex::Algorithm::client_dh("},{"Add":" algo.kex,"},{"Add":" &mut self.exchange.client_ephemeral,"},{"Add":" &mut self.exchange.client_kex_init,"},{"Add":" )?;"},{"Add":""},{"Add":" cipher.write(&self.exchange.client_kex_init[i0..], write_buffer);"},{"Add":" self.exchange.client_kex_init.resize(i0);"},{"Add":""},{"Add":" debug!(\"moving to kexdhdone, exchange = {:?}\", self.exchange);"},{"Add":" Ok(KexDhDone {"},{"Add":" exchange: self.exchange,"},{"Add":" names: algo,"},{"Add":" kex: kex,"},{"Add":" key: 0,"},{"Add":" session_id: self.session_id,"},{"Add":" })"},{"Add":" }"},{"Add":""},{"Add":" pub fn client_write("},{"Add":" &mut self,"},{"Add":" config: &Config,"},{"Add":" cipher: &CipherPair,"},{"Add":" write_buffer: &mut SSHBuffer,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" self.exchange.client_kex_init.clear();"},{"Add":" negotiation::write_kex(&config.preferred, &mut self.exchange.client_kex_init)?;"},{"Add":" self.sent = true;"},{"Add":" cipher.write(&self.exchange.client_kex_init, write_buffer);"},{"Add":" Ok(())"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"encrypted.rs","metadata":420},"context":[{"change":0,"pos":319192}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":"use super::{Msg, Reply};"},{"Add":"use crate::auth;"},{"Add":"use crate::key::PubKey;"},{"Add":"use crate::msg;"},{"Add":"use crate::negotiation;"},{"Add":"use crate::negotiation::Named;"},{"Add":"use crate::negotiation::Select;"},{"Add":"use crate::session::*;"},{"Add":"use crate::{ChannelId, ChannelOpenFailure, Error, Sig};"},{"Add":"use cryptovec::CryptoVec;"},{"Add":"use std::cell::RefCell;"},{"Add":"use thrussh_keys::encoding::{Encoding, Reader};"},{"Add":""},{"Add":"thread_local! {"},{"Add":" static SIGNATURE_BUFFER: RefCell = RefCell::new(CryptoVec::new());"},{"Add":"}"},{"Add":""},{"Add":"impl super::Session {"},{"Add":" pub(crate) async fn client_read_encrypted("},{"Add":" mut self,"},{"Add":" client: &mut Option,"},{"Add":" buf: &[u8],"},{"Add":" ) -> Result {"},{"Add":" debug!("},{"Add":" \"client_read_encrypted, buf = {:?}\","},{"Add":" &buf[..buf.len().min(100)]"},{"Add":" );"},{"Add":" // Either this packet is a KEXINIT, in which case we start a key re-exchange."},{"Add":" if buf[0] == msg::KEXINIT {"},{"Add":" // Now, if we're encrypted:"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" // If we're not currently rekeying, but buf is a rekey request"},{"Add":" if let Some(Kex::KexInit(kexinit)) = enc.rekey.take() {"},{"Add":" enc.rekey = Some(Kex::KexDhDone(kexinit.client_parse("},{"Add":" self.common.config.as_ref(),"},{"Add":" &self.common.cipher,"},{"Add":" buf,"},{"Add":" &mut self.common.write_buffer,"},{"Add":" )?));"},{"Add":" self.flush()?;"},{"Add":" } else if let Some(exchange) = std::mem::replace(&mut enc.exchange, None) {"},{"Add":" let kexinit = KexInit::received_rekey("},{"Add":" exchange,"},{"Add":" negotiation::Client::read_kex(buf, &self.common.config.as_ref().preferred)?,"},{"Add":" &enc.session_id,"},{"Add":" );"},{"Add":" enc.rekey = Some(Kex::KexDhDone(kexinit.client_parse("},{"Add":" self.common.config.as_ref(),"},{"Add":" &mut self.common.cipher,"},{"Add":" buf,"},{"Add":" &mut self.common.write_buffer,"},{"Add":" )?));"},{"Add":" }"},{"Add":" } else {"},{"Add":" unreachable!()"},{"Add":" }"},{"Add":" return Ok(self);"},{"Add":" }"},{"Add":""},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" match enc.rekey.take() {"},{"Add":" Some(Kex::KexDhDone(mut kexdhdone)) => {"},{"Add":" if kexdhdone.names.ignore_guessed {"},{"Add":" kexdhdone.names.ignore_guessed = false;"},{"Add":" enc.rekey = Some(Kex::KexDhDone(kexdhdone));"},{"Add":" return Ok(self);"},{"Add":" } else if buf[0] == msg::KEX_ECDH_REPLY {"},{"Add":" // We've sent ECDH_INIT, waiting for ECDH_REPLY"},{"Add":" enc.rekey = Some(kexdhdone.server_key_check(true, client, buf).await?);"},{"Add":" self.common"},{"Add":" .cipher"},{"Add":" .write(&[msg::NEWKEYS], &mut self.common.write_buffer);"},{"Add":" self.flush()?;"},{"Add":" return Ok(self);"},{"Add":" } else {"},{"Add":" error!(\"Wrong packet received\");"},{"Add":" return Err(Error::Inconsistent.into());"},{"Add":" }"},{"Add":" }"},{"Add":" Some(Kex::NewKeys(newkeys)) => {"},{"Add":" if buf[0] != msg::NEWKEYS {"},{"Add":" return Err(Error::Kex.into());"},{"Add":" }"},{"Add":" self.common.write_buffer.bytes = 0;"},{"Add":" enc.last_rekey = std::time::Instant::now();"},{"Add":""},{"Add":" // Ok, NEWKEYS received, now encrypted."},{"Add":" self.common.newkeys(newkeys);"},{"Add":" return Ok(self);"},{"Add":" }"},{"Add":" rek => enc.rekey = rek,"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" // If we've successfully read a packet."},{"Add":" debug!(\"buf = {:?} bytes\", buf.len());"},{"Add":" trace!(\"buf = {:?}\", buf);"},{"Add":" let mut is_authenticated = false;"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" match enc.state {"},{"Add":" EncryptedState::WaitingServiceRequest {"},{"Add":" ref mut accepted, .."},{"Add":" } => {"},{"Add":" debug!("},{"Add":" \"waiting service request, {:?} {:?}\","},{"Add":" buf[0],"},{"Add":" msg::SERVICE_ACCEPT"},{"Add":" );"},{"Add":" if buf[0] == msg::SERVICE_ACCEPT {"},{"Add":" let mut r = buf.reader(1);"},{"Add":" if r.read_string()? == b\"ssh-userauth\" {"},{"Add":" *accepted = true;"},{"Add":" if let Some(ref meth) = self.common.auth_method {"},{"Add":" let auth_request = auth::AuthRequest {"},{"Add":" methods: auth::MethodSet::all(),"},{"Add":" partial_success: false,"},{"Add":" current: None,"},{"Add":" rejection_count: 0,"},{"Add":" };"},{"Add":" let len = enc.write.len();"},{"Add":" if enc.write_auth_request(&self.common.auth_user, meth) {"},{"Add":" debug!(\"enc: {:?}\", &enc.write[len..]);"},{"Add":" enc.state = EncryptedState::WaitingAuthRequest(auth_request)"},{"Add":" }"},{"Add":" } else {"},{"Add":" debug!(\"no auth method\")"},{"Add":" }"},{"Add":" }"},{"Add":" } else {"},{"Add":" debug!(\"unknown message: {:?}\", buf);"},{"Add":" return Err(Error::Inconsistent.into());"},{"Add":" }"},{"Add":" }"},{"Add":" EncryptedState::WaitingAuthRequest(ref mut auth_request) => {"},{"Add":" if buf[0] == msg::USERAUTH_SUCCESS {"},{"Add":" debug!(\"userauth_success\");"},{"Add":" self.sender"},{"Add":" .send(Reply::AuthSuccess)"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" enc.state = EncryptedState::InitCompression;"},{"Add":" enc.server_compression.init_decompress(&mut enc.decompress);"},{"Add":" return Ok(self);"},{"Add":" } else if buf[0] == msg::USERAUTH_BANNER {"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let banner = r.read_string()?;"},{"Add":" if let Ok(banner) = std::str::from_utf8(banner) {"},{"Add":" let c = client.take().unwrap();"},{"Add":" let (c, s) = c.auth_banner(banner, self).await?;"},{"Add":" *client = Some(c);"},{"Add":" return Ok(s);"},{"Add":" } else {"},{"Add":" return Ok(self);"},{"Add":" }"},{"Add":" } else if buf[0] == msg::USERAUTH_FAILURE {"},{"Add":" debug!(\"userauth_failure\");"},{"Add":""},{"Add":" let mut r = buf.reader(1);"},{"Add":" let remaining_methods = r.read_string()?;"},{"Add":" debug!("},{"Add":" \"remaining methods {:?}\","},{"Add":" std::str::from_utf8(remaining_methods)"},{"Add":" );"},{"Add":" auth_request.methods = auth::MethodSet::empty();"},{"Add":" for method in remaining_methods.split(|&c| c == b',') {"},{"Add":" if let Some(m) = auth::MethodSet::from_bytes(method) {"},{"Add":" auth_request.methods |= m"},{"Add":" }"},{"Add":" }"},{"Add":" let no_more_methods = auth_request.methods.is_empty();"},{"Add":" self.common.auth_method = None;"},{"Add":" self.sender"},{"Add":" .send(Reply::AuthFailure)"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":""},{"Add":" // If no other authentication method is allowed by the server, give up."},{"Add":" if no_more_methods {"},{"Add":" return Err(Error::NoAuthMethod.into());"},{"Add":" }"},{"Add":" } else if buf[0] == msg::USERAUTH_PK_OK {"},{"Add":" debug!(\"userauth_pk_ok\");"},{"Add":" if let Some(auth::CurrentRequest::PublicKey {"},{"Add":" ref mut sent_pk_ok, .."},{"Add":" }) = auth_request.current"},{"Add":" {"},{"Add":" *sent_pk_ok = true;"},{"Add":" }"},{"Add":""},{"Add":" match self.common.auth_method.take() {"},{"Add":" Some(auth_method @ auth::Method::PublicKey { .. }) => {"},{"Add":" self.common.buffer.clear();"},{"Add":" enc.client_send_signature("},{"Add":" &self.common.auth_user,"},{"Add":" &auth_method,"},{"Add":" &mut self.common.buffer,"},{"Add":" )?"},{"Add":" }"},{"Add":" Some(auth::Method::FuturePublicKey { key }) => {"},{"Add":" debug!(\"public key\");"},{"Add":" self.common.buffer.clear();"},{"Add":" let i = enc.client_make_to_sign("},{"Add":" &self.common.auth_user,"},{"Add":" &key,"},{"Add":" &mut self.common.buffer,"},{"Add":" );"},{"Add":" let len = self.common.buffer.len();"},{"Add":" let buf ="},{"Add":" std::mem::replace(&mut self.common.buffer, CryptoVec::new());"},{"Add":""},{"Add":" self.sender"},{"Add":" .send(Reply::SignRequest { key, data: buf })"},{"Add":" .map_err(|_| Error::SendError)?;"},{"Add":" self.common.buffer = loop {"},{"Add":" match self.receiver.recv().await {"},{"Add":" Some(Msg::Signed { data }) => break data,"},{"Add":" _ => {}"},{"Add":" }"},{"Add":" };"},{"Add":" if self.common.buffer.len() != len {"},{"Add":" // The buffer was modified."},{"Add":" push_packet!(enc.write, {"},{"Add":" enc.write.extend(&self.common.buffer[i..]);"},{"Add":" })"},{"Add":" }"},{"Add":" }"},{"Add":" _ => {}"},{"Add":" }"},{"Add":" } else {"},{"Add":" debug!(\"unknown message: {:?}\", buf);"},{"Add":" return Err(Error::Inconsistent.into());"},{"Add":" }"},{"Add":" }"},{"Add":" EncryptedState::InitCompression => unreachable!(),"},{"Add":" EncryptedState::Authenticated => is_authenticated = true,"},{"Add":" }"},{"Add":" }"},{"Add":" if is_authenticated {"},{"Add":" self.client_read_authenticated(client, buf).await"},{"Add":" } else {"},{"Add":" Ok(self)"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" async fn client_read_authenticated("},{"Add":" mut self,"},{"Add":" client: &mut Option,"},{"Add":" buf: &[u8],"},{"Add":" ) -> Result {"},{"Add":" match buf[0] {"},{"Add":" msg::CHANNEL_OPEN_CONFIRMATION => {"},{"Add":" debug!(\"channel_open_confirmation\");"},{"Add":" let mut reader = buf.reader(1);"},{"Add":" let id_send = ChannelId(reader.read_u32()?);"},{"Add":" let id_recv = reader.read_u32()?;"},{"Add":" let window = reader.read_u32()?;"},{"Add":" let max_packet = reader.read_u32()?;"},{"Add":""},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let Some(parameters) = enc.channels.get_mut(&id_send) {"},{"Add":" parameters.recipient_channel = id_recv;"},{"Add":" parameters.recipient_window_size = window;"},{"Add":" parameters.recipient_maximum_packet_size = max_packet;"},{"Add":" parameters.confirmed = true;"},{"Add":" } else {"},{"Add":" // We've not requested this channel, close connection."},{"Add":" return Err(Error::Inconsistent.into());"},{"Add":" }"},{"Add":" } else {"},{"Add":" return Err(Error::Inconsistent.into());"},{"Add":" };"},{"Add":" let c = client.take().unwrap();"},{"Add":" let (c, s) = c"},{"Add":" .channel_open_confirmation(id_send, max_packet, window, self)"},{"Add":" .await?;"},{"Add":" *client = Some(c);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" msg::CHANNEL_CLOSE => {"},{"Add":" debug!(\"channel_close\");"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let channel_num = ChannelId(r.read_u32()?);"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" enc.channels.remove(&channel_num);"},{"Add":" }"},{"Add":" let c = client.take().unwrap();"},{"Add":" let (c, s) = c.channel_close(channel_num, self).await?;"},{"Add":" *client = Some(c);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" msg::CHANNEL_EOF => {"},{"Add":" debug!(\"channel_close\");"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let channel_num = ChannelId(r.read_u32()?);"},{"Add":" let c = client.take().unwrap();"},{"Add":" let (c, s) = c.channel_eof(channel_num, self).await?;"},{"Add":" *client = Some(c);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" msg::CHANNEL_OPEN_FAILURE => {"},{"Add":" debug!(\"channel_open_failure\");"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let channel_num = ChannelId(r.read_u32()?);"},{"Add":" let reason_code = ChannelOpenFailure::from_u32(r.read_u32()?).unwrap();"},{"Add":" let descr = std::str::from_utf8(r.read_string()?)?;"},{"Add":" let language = std::str::from_utf8(r.read_string()?)?;"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" enc.channels.remove(&channel_num);"},{"Add":" }"},{"Add":" let c = client.take().unwrap();"},{"Add":" let (c, s) = c"},{"Add":" .channel_open_failure(channel_num, reason_code, descr, language, self)"},{"Add":" .await?;"},{"Add":" *client = Some(c);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" msg::CHANNEL_DATA => {"},{"Add":" debug!(\"channel_data\");"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let channel_num = ChannelId(r.read_u32()?);"},{"Add":" let data = r.read_string()?;"},{"Add":" let target = self.common.config.window_size;"},{"Add":" let mut c = client.take().unwrap();"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if enc.adjust_window_size(channel_num, data, target) {"},{"Add":" let next_window = c.adjust_window(channel_num, self.target_window_size);"},{"Add":" if next_window > 0 {"},{"Add":" self.target_window_size = next_window"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" let (c, s) = c.data(channel_num, &data, self).await?;"},{"Add":" *client = Some(c);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" msg::CHANNEL_EXTENDED_DATA => {"},{"Add":" debug!(\"channel_extended_data\");"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let channel_num = ChannelId(r.read_u32()?);"},{"Add":" let extended_code = r.read_u32()?;"},{"Add":" let data = r.read_string()?;"},{"Add":" let target = self.common.config.window_size;"},{"Add":" let mut c = client.take().unwrap();"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if enc.adjust_window_size(channel_num, data, target) {"},{"Add":" let next_window = c.adjust_window(channel_num, self.target_window_size);"},{"Add":" if next_window > 0 {"},{"Add":" self.target_window_size = next_window"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" let (c, s) = c"},{"Add":" .extended_data(channel_num, extended_code, &data, self)"},{"Add":" .await?;"},{"Add":" *client = Some(c);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" msg::CHANNEL_REQUEST => {"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let channel_num = ChannelId(r.read_u32()?);"},{"Add":" let req = r.read_string()?;"},{"Add":" debug!("},{"Add":" \"channel_request: {:?} {:?}\","},{"Add":" channel_num,"},{"Add":" std::str::from_utf8(req)"},{"Add":" );"},{"Add":" let cl = client.take().unwrap();"},{"Add":" let (c, s) = match req {"},{"Add":" b\"forwarded_tcpip\" => {"},{"Add":" let a = std::str::from_utf8(r.read_string()?)?;"},{"Add":" let b = r.read_u32()?;"},{"Add":" let c = std::str::from_utf8(r.read_string()?)?;"},{"Add":" let d = r.read_u32()?;"},{"Add":" cl.channel_open_forwarded_tcpip(channel_num, a, b, c, d, self)"},{"Add":" .await?"},{"Add":" }"},{"Add":" b\"xon-xoff\" => {"},{"Add":" r.read_byte()?; // should be 0."},{"Add":" let client_can_do = r.read_byte()?;"},{"Add":" cl.xon_xoff(channel_num, client_can_do != 0, self).await?"},{"Add":" }"},{"Add":" b\"exit-status\" => {"},{"Add":" r.read_byte()?; // should be 0."},{"Add":" let exit_status = r.read_u32()?;"},{"Add":" cl.exit_status(channel_num, exit_status, self).await?"},{"Add":" }"},{"Add":" b\"exit-signal\" => {"},{"Add":" r.read_byte()?; // should be 0."},{"Add":" let signal_name = Sig::from_name(r.read_string()?)?;"},{"Add":" let core_dumped = r.read_byte()?;"},{"Add":" let error_message = std::str::from_utf8(r.read_string()?)?;"},{"Add":" let lang_tag = std::str::from_utf8(r.read_string()?)?;"},{"Add":" cl.exit_signal("},{"Add":" channel_num,"},{"Add":" signal_name,"},{"Add":" core_dumped != 0,"},{"Add":" error_message,"},{"Add":" lang_tag,"},{"Add":" self,"},{"Add":" )"},{"Add":" .await?"},{"Add":" }"},{"Add":" _ => {"},{"Add":" info!(\"Unknown channel request {:?}\", std::str::from_utf8(req));"},{"Add":" (cl, self)"},{"Add":" }"},{"Add":" };"},{"Add":" *client = Some(c);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" msg::CHANNEL_WINDOW_ADJUST => {"},{"Add":" debug!(\"channel_window_adjust\");"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let channel_num = ChannelId(r.read_u32()?);"},{"Add":" let amount = r.read_u32()?;"},{"Add":" let mut new_value = 0;"},{"Add":" debug!(\"amount: {:?}\", amount);"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" if let Some(ref mut channel) = enc.channels.get_mut(&channel_num) {"},{"Add":" channel.recipient_window_size += amount;"},{"Add":" new_value = channel.recipient_window_size;"},{"Add":" } else {"},{"Add":" return Err(Error::WrongChannel.into());"},{"Add":" }"},{"Add":" }"},{"Add":" let c = client.take().unwrap();"},{"Add":" let (c, s) = c.window_adjusted(channel_num, new_value, self).await?;"},{"Add":" *client = Some(c);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" msg::GLOBAL_REQUEST => {"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let req = r.read_string()?;"},{"Add":" info!(\"Unhandled global request: {:?}\", std::str::from_utf8(req));"},{"Add":" Ok(self)"},{"Add":" }"},{"Add":" msg::CHANNEL_SUCCESS => {"},{"Add":" let mut r = buf.reader(1);"},{"Add":" let channel_num = ChannelId(r.read_u32()?);"},{"Add":" let c = client.take().unwrap();"},{"Add":" let (c, s) = c.channel_success(channel_num, self).await?;"},{"Add":" *client = Some(c);"},{"Add":" Ok(s)"},{"Add":" }"},{"Add":" _ => {"},{"Add":" info!(\"Unhandled packet: {:?}\", buf);"},{"Add":" Ok(self)"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" pub(crate) fn write_auth_request_if_needed(&mut self, user: &str, meth: auth::Method) -> bool {"},{"Add":" let mut is_waiting = false;"},{"Add":" if let Some(ref mut enc) = self.common.encrypted {"},{"Add":" is_waiting = match enc.state {"},{"Add":" EncryptedState::WaitingAuthRequest(_) => true,"},{"Add":" EncryptedState::WaitingServiceRequest {"},{"Add":" accepted,"},{"Add":" ref mut sent,"},{"Add":" } => {"},{"Add":" debug!(\"sending ssh-userauth service requset\");"},{"Add":" if !*sent {"},{"Add":" let p = b\"\\x05\\0\\0\\0\\x0Cssh-userauth\";"},{"Add":" self.common.cipher.write(p, &mut self.common.write_buffer);"},{"Add":" *sent = true"},{"Add":" }"},{"Add":" accepted"},{"Add":" }"},{"Add":" EncryptedState::InitCompression | EncryptedState::Authenticated => false,"},{"Add":" };"},{"Add":" debug!("},{"Add":" \"write_auth_request_if_needed: is_waiting = {:?}\","},{"Add":" is_waiting"},{"Add":" );"},{"Add":" if is_waiting {"},{"Add":" enc.write_auth_request(user, &meth);"},{"Add":" }"},{"Add":" }"},{"Add":" self.common.auth_user.clear();"},{"Add":" self.common.auth_user.push_str(user);"},{"Add":" self.common.auth_method = Some(meth);"},{"Add":" is_waiting"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Encrypted {"},{"Add":" fn write_auth_request(&mut self, user: &str, auth_method: &auth::Method) -> bool {"},{"Add":" // The server is waiting for our USERAUTH_REQUEST."},{"Add":" push_packet!(self.write, {"},{"Add":" self.write.push(msg::USERAUTH_REQUEST);"},{"Add":""},{"Add":" match *auth_method {"},{"Add":" auth::Method::Password { ref password } => {"},{"Add":" self.write.extend_ssh_string(user.as_bytes());"},{"Add":" self.write.extend_ssh_string(b\"ssh-connection\");"},{"Add":" self.write.extend_ssh_string(b\"password\");"},{"Add":" self.write.push(1);"},{"Add":" self.write.extend_ssh_string(password.as_bytes());"},{"Add":" true"},{"Add":" }"},{"Add":" auth::Method::PublicKey { ref key } => {"},{"Add":" self.write.extend_ssh_string(user.as_bytes());"},{"Add":" self.write.extend_ssh_string(b\"ssh-connection\");"},{"Add":" self.write.extend_ssh_string(b\"publickey\");"},{"Add":" self.write.push(0); // This is a probe"},{"Add":""},{"Add":" debug!(\"write_auth_request: {:?}\", key.name());"},{"Add":" self.write.extend_ssh_string(key.name().as_bytes());"},{"Add":" key.push_to(&mut self.write);"},{"Add":" true"},{"Add":" }"},{"Add":" auth::Method::FuturePublicKey { ref key, .. } => {"},{"Add":" self.write.extend_ssh_string(user.as_bytes());"},{"Add":" self.write.extend_ssh_string(b\"ssh-connection\");"},{"Add":" self.write.extend_ssh_string(b\"publickey\");"},{"Add":" self.write.push(0); // This is a probe"},{"Add":""},{"Add":" self.write.extend_ssh_string(key.name().as_bytes());"},{"Add":" key.push_to(&mut self.write);"},{"Add":" true"},{"Add":" }"},{"Add":" }"},{"Add":" })"},{"Add":" }"},{"Add":""},{"Add":" fn client_make_to_sign("},{"Add":" &mut self,"},{"Add":" user: &str,"},{"Add":" key: &Key,"},{"Add":" buffer: &mut CryptoVec,"},{"Add":" ) -> usize {"},{"Add":" buffer.clear();"},{"Add":" buffer.extend_ssh_string(self.session_id.as_ref());"},{"Add":""},{"Add":" let i0 = buffer.len();"},{"Add":" buffer.push(msg::USERAUTH_REQUEST);"},{"Add":" buffer.extend_ssh_string(user.as_bytes());"},{"Add":" buffer.extend_ssh_string(b\"ssh-connection\");"},{"Add":" buffer.extend_ssh_string(b\"publickey\");"},{"Add":" buffer.push(1);"},{"Add":" buffer.extend_ssh_string(key.name().as_bytes());"},{"Add":" key.push_to(buffer);"},{"Add":" i0"},{"Add":" }"},{"Add":""},{"Add":" fn client_send_signature("},{"Add":" &mut self,"},{"Add":" user: &str,"},{"Add":" method: &auth::Method,"},{"Add":" buffer: &mut CryptoVec,"},{"Add":" ) -> Result<(), anyhow::Error> {"},{"Add":" match method {"},{"Add":" &auth::Method::PublicKey { ref key } => {"},{"Add":" let i0 = self.client_make_to_sign(user, key.as_ref(), buffer);"},{"Add":" // Extend with self-signature."},{"Add":" key.add_self_signature(buffer)?;"},{"Add":" push_packet!(self.write, {"},{"Add":" self.write.extend(&buffer[i0..]);"},{"Add":" })"},{"Add":" }"},{"Add":" _ => {}"},{"Add":" }"},{"Add":" Ok(())"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"cipher","metadata":1005},"context":[{"change":0,"pos":165404}],"contents":[]}},{"FileAdd":{"meta":{"basename":"mod.rs","metadata":420},"context":[{"change":0,"pos":409076}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":"use crate::sshbuffer::SSHBuffer;"},{"Add":"use crate::Error;"},{"Add":"use byteorder::{BigEndian, ByteOrder};"},{"Add":"use std::num::Wrapping;"},{"Add":"use tokio::io::AsyncRead;"},{"Add":"pub mod chacha20poly1305;"},{"Add":"pub mod clear;"},{"Add":"use tokio::prelude::*;"},{"Add":""},{"Add":"pub struct Cipher {"},{"Add":" pub name: Name,"},{"Add":" pub key_len: usize,"},{"Add":" pub make_opening_cipher: fn(key: &[u8]) -> OpeningCipher,"},{"Add":" pub make_sealing_cipher: fn(key: &[u8]) -> SealingCipher,"},{"Add":"}"},{"Add":""},{"Add":"pub enum OpeningCipher {"},{"Add":" Clear(clear::Key),"},{"Add":" Chacha20Poly1305(chacha20poly1305::OpeningKey),"},{"Add":"}"},{"Add":""},{"Add":"impl<'a> OpeningCipher {"},{"Add":" fn as_opening_key(&self) -> &dyn OpeningKey {"},{"Add":" match *self {"},{"Add":" OpeningCipher::Clear(ref key) => key,"},{"Add":" OpeningCipher::Chacha20Poly1305(ref key) => key,"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"pub enum SealingCipher {"},{"Add":" Clear(clear::Key),"},{"Add":" Chacha20Poly1305(chacha20poly1305::SealingKey),"},{"Add":"}"},{"Add":""},{"Add":"impl<'a> SealingCipher {"},{"Add":" fn as_sealing_key(&'a self) -> &'a dyn SealingKey {"},{"Add":" match *self {"},{"Add":" SealingCipher::Clear(ref key) => key,"},{"Add":" SealingCipher::Chacha20Poly1305(ref key) => key,"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug, PartialEq, Eq, Copy, Clone)]"},{"Add":"pub struct Name(&'static str);"},{"Add":"impl AsRef for Name {"},{"Add":" fn as_ref(&self) -> &str {"},{"Add":" self.0"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"pub struct CipherPair {"},{"Add":" pub local_to_remote: SealingCipher,"},{"Add":" pub remote_to_local: OpeningCipher,"},{"Add":"}"},{"Add":""},{"Add":"impl std::fmt::Debug for CipherPair {"},{"Add":" fn fmt(&self, _: &mut std::fmt::Formatter) -> Result<(), std::fmt::Error> {"},{"Add":" Ok(())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"pub const CLEAR_PAIR: CipherPair = CipherPair {"},{"Add":" local_to_remote: SealingCipher::Clear(clear::Key),"},{"Add":" remote_to_local: OpeningCipher::Clear(clear::Key),"},{"Add":"};"},{"Add":""},{"Add":"pub trait OpeningKey {"},{"Add":" fn decrypt_packet_length(&self, seqn: u32, encrypted_packet_length: [u8; 4]) -> [u8; 4];"},{"Add":""},{"Add":" fn tag_len(&self) -> usize;"},{"Add":""},{"Add":" fn open<'a>("},{"Add":" &self,"},{"Add":" seqn: u32,"},{"Add":" ciphertext_in_plaintext_out: &'a mut [u8],"},{"Add":" tag: &[u8],"},{"Add":" ) -> Result<&'a [u8], Error>;"},{"Add":"}"},{"Add":""},{"Add":"pub trait SealingKey {"},{"Add":" fn padding_length(&self, plaintext: &[u8]) -> usize;"},{"Add":""},{"Add":" fn fill_padding(&self, padding_out: &mut [u8]);"},{"Add":""},{"Add":" fn tag_len(&self) -> usize;"},{"Add":""},{"Add":" fn seal(&self, seqn: u32, plaintext_in_ciphertext_out: &mut [u8], tag_out: &mut [u8]);"},{"Add":"}"},{"Add":""},{"Add":"pub async fn read<'a, R: AsyncRead + Unpin>("},{"Add":" stream: &'a mut R,"},{"Add":" buffer: &'a mut SSHBuffer,"},{"Add":" pair: &'a CipherPair,"},{"Add":") -> Result {"},{"Add":" let mut len = [0; 4];"},{"Add":" stream.read_exact(&mut len).await?;"},{"Add":" debug!(\"len = {:?}\", len);"},{"Add":" {"},{"Add":" let key = pair.remote_to_local.as_opening_key();"},{"Add":" let seqn = buffer.seqn.0;"},{"Add":" buffer.buffer.clear();"},{"Add":" buffer.buffer.extend(&len);"},{"Add":" let len = key.decrypt_packet_length(seqn, len);"},{"Add":" let len = BigEndian::read_u32(&len) as usize + key.tag_len();"},{"Add":" debug!(\"clear len = {:?}\", len);"},{"Add":" buffer.buffer.resize(len + 4);"},{"Add":" }"},{"Add":" stream.read_exact(&mut buffer.buffer[4..]).await?;"},{"Add":" let key = pair.remote_to_local.as_opening_key();"},{"Add":" let seqn = buffer.seqn.0;"},{"Add":" let ciphertext_len = buffer.buffer.len() - key.tag_len();"},{"Add":" let (ciphertext, tag) = buffer.buffer.split_at_mut(ciphertext_len);"},{"Add":" let plaintext = key.open(seqn, ciphertext, tag)?;"},{"Add":""},{"Add":" let padding_length = plaintext[0] as usize;"},{"Add":" debug!(\"padding_length {:?}\", padding_length);"},{"Add":" let plaintext_end = plaintext"},{"Add":" .len()"},{"Add":" .checked_sub(padding_length)"},{"Add":" .ok_or(Error::IndexOutOfBounds)?;"},{"Add":""},{"Add":" // Sequence numbers are on 32 bits and wrap."},{"Add":" // https://tools.ietf.org/html/rfc4253#section-6.4"},{"Add":" buffer.seqn += Wrapping(1);"},{"Add":" buffer.len = 0;"},{"Add":""},{"Add":" // Remove the padding"},{"Add":" buffer.buffer.resize(plaintext_end + 4);"},{"Add":""},{"Add":" Ok(plaintext_end + 4)"},{"Add":"}"},{"Add":""},{"Add":"impl CipherPair {"},{"Add":" pub fn write(&self, payload: &[u8], buffer: &mut SSHBuffer) {"},{"Add":" // https://tools.ietf.org/html/rfc4253#section-6"},{"Add":" //"},{"Add":" // The variables `payload`, `packet_length` and `padding_length` refer"},{"Add":" // to the protocol fields of the same names."},{"Add":""},{"Add":" let key = self.local_to_remote.as_sealing_key();"},{"Add":""},{"Add":" let padding_length = key.padding_length(payload);"},{"Add":" debug!(\"padding length {:?}\", padding_length);"},{"Add":" let packet_length = PADDING_LENGTH_LEN + payload.len() + padding_length;"},{"Add":" debug!(\"packet_length {:?}\", packet_length);"},{"Add":" let offset = buffer.buffer.len();"},{"Add":""},{"Add":" // Maximum packet length:"},{"Add":" // https://tools.ietf.org/html/rfc4253#section-6.1"},{"Add":" assert!(packet_length <= std::u32::MAX as usize);"},{"Add":" buffer.buffer.push_u32_be(packet_length as u32);"},{"Add":""},{"Add":" assert!(padding_length <= std::u8::MAX as usize);"},{"Add":" buffer.buffer.push(padding_length as u8);"},{"Add":" buffer.buffer.extend(payload);"},{"Add":" key.fill_padding(buffer.buffer.resize_mut(padding_length));"},{"Add":" buffer.buffer.resize_mut(key.tag_len());"},{"Add":""},{"Add":" let (plaintext, tag) ="},{"Add":" buffer.buffer[offset..].split_at_mut(PACKET_LENGTH_LEN + packet_length);"},{"Add":""},{"Add":" key.seal(buffer.seqn.0, plaintext, tag);"},{"Add":""},{"Add":" buffer.bytes += payload.len();"},{"Add":" // Sequence numbers are on 32 bits and wrap."},{"Add":" // https://tools.ietf.org/html/rfc4253#section-6.4"},{"Add":" buffer.seqn += Wrapping(1);"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"pub const PACKET_LENGTH_LEN: usize = 4;"},{"Add":""},{"Add":"const MINIMUM_PACKET_LEN: usize = 16;"},{"Add":""},{"Add":"const PADDING_LENGTH_LEN: usize = 1;"}]}},{"FileAdd":{"meta":{"basename":"clear.rs","metadata":420},"context":[{"change":0,"pos":409076}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":""},{"Add":"use crate::Error;"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"pub struct Key;"},{"Add":""},{"Add":"impl super::OpeningKey for Key {"},{"Add":" fn decrypt_packet_length(&self, _seqn: u32, packet_length: [u8; 4]) -> [u8; 4] {"},{"Add":" packet_length"},{"Add":" }"},{"Add":""},{"Add":" fn tag_len(&self) -> usize {"},{"Add":" 0"},{"Add":" }"},{"Add":""},{"Add":" fn open<'a>("},{"Add":" &self,"},{"Add":" _seqn: u32,"},{"Add":" ciphertext_in_plaintext_out: &'a mut [u8],"},{"Add":" tag: &[u8],"},{"Add":" ) -> Result<&'a [u8], Error> {"},{"Add":" debug_assert_eq!(tag.len(), 0); // self.tag_len());"},{"Add":" Ok(&ciphertext_in_plaintext_out[4..])"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl super::SealingKey for Key {"},{"Add":" // Cleartext packets (including lengths) must be multiple of 8 in"},{"Add":" // length."},{"Add":" fn padding_length(&self, payload: &[u8]) -> usize {"},{"Add":" let block_size = 8;"},{"Add":" let padding_len = block_size - ((5 + payload.len()) % block_size);"},{"Add":" if padding_len < 4 {"},{"Add":" padding_len + block_size"},{"Add":" } else {"},{"Add":" padding_len"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" fn fill_padding(&self, padding_out: &mut [u8]) {"},{"Add":" // Since the packet is unencrypted anyway, there's no advantage to"},{"Add":" // randomizing the padding, so avoid possibly leaking extra RNG state"},{"Add":" // by padding with zeros."},{"Add":" for padding_byte in padding_out {"},{"Add":" *padding_byte = 0;"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" fn tag_len(&self) -> usize {"},{"Add":" 0"},{"Add":" }"},{"Add":""},{"Add":" fn seal(&self, _seqn: u32, _plaintext_in_ciphertext_out: &mut [u8], tag_out: &mut [u8]) {"},{"Add":" debug_assert_eq!(tag_out.len(), self.tag_len());"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"chacha20poly1305.rs","metadata":420},"context":[{"change":0,"pos":409076}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":""},{"Add":"// http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/PROTOCOL.chacha20poly1305?annotate=HEAD"},{"Add":""},{"Add":"use super::super::Error;"},{"Add":"use byteorder::{BigEndian, ByteOrder};"},{"Add":"use sodium::chacha20::*;"},{"Add":""},{"Add":"pub struct OpeningKey {"},{"Add":" k1: Key,"},{"Add":" k2: Key,"},{"Add":"}"},{"Add":"pub struct SealingKey {"},{"Add":" k1: Key,"},{"Add":" k2: Key,"},{"Add":"}"},{"Add":""},{"Add":"const TAG_LEN: usize = 16;"},{"Add":""},{"Add":"pub static CIPHER: super::Cipher = super::Cipher {"},{"Add":" name: NAME,"},{"Add":" key_len: 64,"},{"Add":" make_sealing_cipher,"},{"Add":" make_opening_cipher,"},{"Add":"};"},{"Add":""},{"Add":"pub const NAME: super::Name = super::Name(\"chacha20-poly1305@openssh.com\");"},{"Add":""},{"Add":"fn make_sealing_cipher(k: &[u8]) -> super::SealingCipher {"},{"Add":" let mut k1 = Key([0; KEY_BYTES]);"},{"Add":" let mut k2 = Key([0; KEY_BYTES]);"},{"Add":" k1.0.clone_from_slice(&k[KEY_BYTES..]);"},{"Add":" k2.0.clone_from_slice(&k[..KEY_BYTES]);"},{"Add":" super::SealingCipher::Chacha20Poly1305(SealingKey { k1, k2 })"},{"Add":"}"},{"Add":""},{"Add":"fn make_opening_cipher(k: &[u8]) -> super::OpeningCipher {"},{"Add":" let mut k1 = Key([0; KEY_BYTES]);"},{"Add":" let mut k2 = Key([0; KEY_BYTES]);"},{"Add":" k1.0.clone_from_slice(&k[KEY_BYTES..]);"},{"Add":" k2.0.clone_from_slice(&k[..KEY_BYTES]);"},{"Add":" super::OpeningCipher::Chacha20Poly1305(OpeningKey { k1, k2 })"},{"Add":"}"},{"Add":""},{"Add":"fn make_counter(sequence_number: u32) -> Nonce {"},{"Add":" let mut nonce = Nonce([0; NONCE_BYTES]);"},{"Add":" let i0 = NONCE_BYTES - 4;"},{"Add":" BigEndian::write_u32(&mut nonce.0[i0..], sequence_number);"},{"Add":" nonce"},{"Add":"}"},{"Add":""},{"Add":"impl super::OpeningKey for OpeningKey {"},{"Add":" fn decrypt_packet_length("},{"Add":" &self,"},{"Add":" sequence_number: u32,"},{"Add":" mut encrypted_packet_length: [u8; 4],"},{"Add":" ) -> [u8; 4] {"},{"Add":" let nonce = make_counter(sequence_number);"},{"Add":" chacha20_xor(&mut encrypted_packet_length, &nonce, &self.k1);"},{"Add":" encrypted_packet_length"},{"Add":" }"},{"Add":""},{"Add":" fn tag_len(&self) -> usize {"},{"Add":" TAG_LEN"},{"Add":" }"},{"Add":""},{"Add":" fn open<'a>("},{"Add":" &self,"},{"Add":" sequence_number: u32,"},{"Add":" ciphertext_in_plaintext_out: &'a mut [u8],"},{"Add":" tag: &[u8],"},{"Add":" ) -> Result<&'a [u8], Error> {"},{"Add":" let nonce = make_counter(sequence_number);"},{"Add":" {"},{"Add":" use sodium::poly1305::*;"},{"Add":" let mut poly_key = Key([0; 32]);"},{"Add":" chacha20_xor(&mut poly_key.0, &nonce, &self.k2);"},{"Add":" // let mut tag_ = Tag([0; 16]);"},{"Add":" // tag_.0.clone_from_slice(tag);"},{"Add":" if !poly1305_verify(&tag, ciphertext_in_plaintext_out, &poly_key) {"},{"Add":" return Err(Error::PacketAuth);"},{"Add":" }"},{"Add":" }"},{"Add":" chacha20_xor_ic(&mut ciphertext_in_plaintext_out[4..], &nonce, 1, &self.k2);"},{"Add":" Ok(&ciphertext_in_plaintext_out[4..])"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl super::SealingKey for SealingKey {"},{"Add":" fn padding_length(&self, payload: &[u8]) -> usize {"},{"Add":" let block_size = 8;"},{"Add":" let extra_len = super::PACKET_LENGTH_LEN + super::PADDING_LENGTH_LEN;"},{"Add":" let padding_len = if payload.len() + extra_len <= super::MINIMUM_PACKET_LEN {"},{"Add":" super::MINIMUM_PACKET_LEN - payload.len() - super::PADDING_LENGTH_LEN"},{"Add":" } else {"},{"Add":" block_size - ((super::PADDING_LENGTH_LEN + payload.len()) % block_size)"},{"Add":" };"},{"Add":" if padding_len < super::PACKET_LENGTH_LEN {"},{"Add":" padding_len + block_size"},{"Add":" } else {"},{"Add":" padding_len"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" // As explained in \"SSH via CTR mode with stateful decryption\" in"},{"Add":" // https://openvpn.net/papers/ssh-security.pdf, the padding doesn't need to"},{"Add":" // be random because we're doing stateful counter-mode encryption. Use"},{"Add":" // fixed padding to avoid PRNG overhead."},{"Add":" fn fill_padding(&self, padding_out: &mut [u8]) {"},{"Add":" for padding_byte in padding_out {"},{"Add":" *padding_byte = 0;"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" fn tag_len(&self) -> usize {"},{"Add":" TAG_LEN"},{"Add":" }"},{"Add":""},{"Add":" /// Append an encrypted packet with contents `packet_content` at the end of `buffer`."},{"Add":" fn seal("},{"Add":" &self,"},{"Add":" sequence_number: u32,"},{"Add":" plaintext_in_ciphertext_out: &mut [u8],"},{"Add":" tag_out: &mut [u8],"},{"Add":" ) {"},{"Add":" let mut nonce = make_counter(sequence_number);"},{"Add":" {"},{"Add":" let (a, b) = plaintext_in_ciphertext_out.split_at_mut(4);"},{"Add":" chacha20_xor(a, &nonce, &self.k1);"},{"Add":" chacha20_xor_ic(b, &nonce, 1, &self.k2);"},{"Add":" }"},{"Add":" nonce.0[0] = 0;"},{"Add":" use sodium::poly1305::*;"},{"Add":" let mut poly_key = Key([0; 32]);"},{"Add":" chacha20_xor(&mut poly_key.0, &nonce, &self.k2);"},{"Add":" let tag = poly1305_auth(plaintext_in_ciphertext_out, &poly_key);"},{"Add":" tag_out.clone_from_slice(&tag.0);"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"auth.rs","metadata":420},"context":[{"change":0,"pos":165404}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":""},{"Add":"use cryptovec::CryptoVec;"},{"Add":"use std::sync::Arc;"},{"Add":"use thrussh_keys::encoding;"},{"Add":"use thrussh_keys::key;"},{"Add":"use tokio::io::{AsyncRead, AsyncWrite};"},{"Add":""},{"Add":"bitflags! {"},{"Add":" /// Set of methods, represented by bit flags."},{"Add":" pub struct MethodSet: u32 {"},{"Add":" /// The SSH `none` method (no authentication)."},{"Add":" const NONE = 1;"},{"Add":" /// The SSH `password` method (plaintext passwords)."},{"Add":" const PASSWORD = 2;"},{"Add":" /// The SSH `publickey` method (sign a challenge sent by the"},{"Add":" /// server)."},{"Add":" const PUBLICKEY = 4;"},{"Add":" /// The SSH `hostbased` method (certain hostnames are allowed"},{"Add":" /// by the server)."},{"Add":" const HOSTBASED = 8;"},{"Add":" /// The SSH `keyboard-interactive` method (answer to a"},{"Add":" /// challenge, where the \"challenge\" can be a password prompt,"},{"Add":" /// a bytestring to sign with a smartcard, or something else)."},{"Add":" const KEYBOARD_INTERACTIVE = 16;"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"macro_rules! iter {"},{"Add":" ( $y:expr, $x:expr ) => {{"},{"Add":" if $y.contains($x) {"},{"Add":" $y.remove($x);"},{"Add":" return Some($x);"},{"Add":" }"},{"Add":" }};"},{"Add":"}"},{"Add":""},{"Add":"impl Iterator for MethodSet {"},{"Add":" type Item = MethodSet;"},{"Add":" fn next(&mut self) -> Option {"},{"Add":" iter!(self, MethodSet::NONE);"},{"Add":" iter!(self, MethodSet::PASSWORD);"},{"Add":" iter!(self, MethodSet::PUBLICKEY);"},{"Add":" iter!(self, MethodSet::HOSTBASED);"},{"Add":" iter!(self, MethodSet::KEYBOARD_INTERACTIVE);"},{"Add":" None"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"pub trait Signer: Sized {"},{"Add":" fn auth_publickey_sign("},{"Add":" self,"},{"Add":" key: &key::PublicKey,"},{"Add":" to_sign: CryptoVec,"},{"Add":" ) -> std::pin::Pin<"},{"Add":" Box)> + Send>,"},{"Add":" >;"},{"Add":"}"},{"Add":""},{"Add":"impl Signer"},{"Add":" for thrussh_keys::agent::client::AgentClient"},{"Add":"{"},{"Add":" fn auth_publickey_sign("},{"Add":" self,"},{"Add":" key: &key::PublicKey,"},{"Add":" to_sign: CryptoVec,"},{"Add":" ) -> std::pin::Pin<"},{"Add":" Box)> + Send>,"},{"Add":" > {"},{"Add":" let fut = self.sign_request(key, to_sign);"},{"Add":" futures::FutureExt::boxed(async move { fut.await })"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"pub enum Method {"},{"Add":" // None,"},{"Add":" Password { password: String },"},{"Add":" PublicKey { key: Arc },"},{"Add":" FuturePublicKey { key: key::PublicKey },"},{"Add":" // Hostbased,"},{"Add":"}"},{"Add":""},{"Add":"impl encoding::Bytes for MethodSet {"},{"Add":" fn bytes(&self) -> &'static [u8] {"},{"Add":" match *self {"},{"Add":" MethodSet::NONE => b\"none\","},{"Add":" MethodSet::PASSWORD => b\"password\","},{"Add":" MethodSet::PUBLICKEY => b\"publickey\","},{"Add":" MethodSet::HOSTBASED => b\"hostbased\","},{"Add":" MethodSet::KEYBOARD_INTERACTIVE => b\"keyboard-interactive\","},{"Add":" _ => b\"\","},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl MethodSet {"},{"Add":" pub(crate) fn from_bytes(b: &[u8]) -> Option {"},{"Add":" match b {"},{"Add":" b\"none\" => Some(MethodSet::NONE),"},{"Add":" b\"password\" => Some(MethodSet::PASSWORD),"},{"Add":" b\"publickey\" => Some(MethodSet::PUBLICKEY),"},{"Add":" b\"hostbased\" => Some(MethodSet::HOSTBASED),"},{"Add":" b\"keyboard-interactive\" => Some(MethodSet::KEYBOARD_INTERACTIVE),"},{"Add":" _ => None,"},{"Add":" }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[doc(hidden)]"},{"Add":"#[derive(Debug)]"},{"Add":"pub struct AuthRequest {"},{"Add":" pub methods: MethodSet,"},{"Add":" pub partial_success: bool,"},{"Add":" pub current: Option,"},{"Add":" pub rejection_count: usize,"},{"Add":"}"},{"Add":""},{"Add":"#[doc(hidden)]"},{"Add":"#[derive(Debug)]"},{"Add":"pub enum CurrentRequest {"},{"Add":" PublicKey {"},{"Add":" key: CryptoVec,"},{"Add":" algo: CryptoVec,"},{"Add":" sent_pk_ok: bool,"},{"Add":" },"},{"Add":" KeyboardInteractive {"},{"Add":" submethods: String,"},{"Add":" },"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"Cargo.toml","metadata":493},"context":[{"change":0,"pos":165397}],"contents":[{"Add":"[package]"},{"Add":"name = \"thrussh\""},{"Add":"description = \"A client and server SSH library.\""},{"Add":"keywords = [\"ssh\"]"},{"Add":"version = \"0.29.4\""},{"Add":"authors = [\"Pierre-Étienne Meunier \"]"},{"Add":"repository = \"https://nest.pijul.com/pijul_org/thrussh\""},{"Add":"homepage = \"https://pijul.org/thrussh\""},{"Add":"documentation = \"https://docs.rs/thrussh\""},{"Add":"license = \"Apache-2.0\""},{"Add":"include = ["},{"Add":"\"Cargo.toml\","},{"Add":"\"src/auth.rs\","},{"Add":"\"src/compression.rs\","},{"Add":"\"src/kex.rs\","},{"Add":"\"src/key.rs\","},{"Add":"\"src/lib.rs\","},{"Add":"\"src/msg.rs\","},{"Add":"\"src/negotiation.rs\","},{"Add":"\"src/pty.rs\","},{"Add":"\"src/session.rs\","},{"Add":"\"src/sshbuffer.rs\","},{"Add":"\"src/ssh_read.rs\","},{"Add":"\"src/cipher/chacha20poly1305.rs\","},{"Add":"\"src/cipher/clear.rs\","},{"Add":"\"src/cipher/mod.rs\","},{"Add":"\"src/client/mod.rs\","},{"Add":"\"src/client/session.rs\","},{"Add":"\"src/client/encrypted.rs\","},{"Add":"\"src/client/kex.rs\","},{"Add":"\"src/client/proxy.rs\","},{"Add":"\"src/server/mod.rs\","},{"Add":"\"src/server/encrypted.rs\","},{"Add":"\"src/server/kex.rs\","},{"Add":"\"src/server/session.rs\","},{"Add":"\"src/sodium.rs\","},{"Add":"]"},{"Add":"edition = \"2018\""},{"Add":""},{"Add":"[features]"},{"Add":"default = [ \"flate2\" ]"},{"Add":""},{"Add":"[dependencies]"},{"Add":"byteorder = \"1.3\""},{"Add":"bitflags = \"1.2\""},{"Add":"log = \"0.4\""},{"Add":"thrussh-keys = \"0.18.3\""},{"Add":"openssl = \"0.10\""},{"Add":"thrussh-libsodium = \"0.2\""},{"Add":"cryptovec = \"0.6.0\""},{"Add":"tokio = { version = \"0.2\", features = [ \"io-util\", \"rt-threaded\", \"time\", \"stream\", \"tcp\", \"sync\", \"macros\" ] }"},{"Add":"futures = \"0.3\""},{"Add":"thiserror = \"1.0\""},{"Add":"anyhow = \"1.0\""},{"Add":"flate2 = { version = \"1.0\", optional = true }"},{"Add":""},{"Add":"[dev-dependencies]"},{"Add":"env_logger = \"0.7\""},{"Add":"tokio = { version = \"0.2\", features = [ \"io-util\", \"rt-threaded\", \"time\", \"stream\", \"tcp\", \"sync\", \"macros\" ] }"}]}},{"FileAdd":{"meta":{"basename":"shell.nix","metadata":420},"context":[{"change":1,"pos":0}],"contents":[{"Add":"with import {};"},{"Add":""},{"Add":"let src = fetchFromGitHub {"},{"Add":" owner = \"mozilla\";"},{"Add":" repo = \"nixpkgs-mozilla\";"},{"Add":" rev = \"8c007b60731c07dd7a052cce508de3bb1ae849b4\";"},{"Add":" hash = \"sha256-RsNPnEKd7BcogwkqhaV5kI/HuNC4flH/OQCC/4W5y/8=\";"},{"Add":" };"},{"Add":"in"},{"Add":"with import \"${src.out}/rust-overlay.nix\" pkgs pkgs;"},{"Add":""},{"Add":"stdenv.mkDerivation {"},{"Add":" name = \"rust-pijul\";"},{"Add":" buildInputs = [ rustChannels.stable.rust libsodium pkgconfig openssl ];"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"cryptovec","metadata":1005},"context":[{"change":1,"pos":0}],"contents":[]}},{"FileAdd":{"meta":{"basename":"src","metadata":1005},"context":[{"change":0,"pos":427973}],"contents":[]}},{"FileAdd":{"meta":{"basename":"lib.rs","metadata":420},"context":[{"change":0,"pos":427980}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":"extern crate libc;"},{"Add":"extern crate winapi;"},{"Add":"use libc::c_void;"},{"Add":"#[cfg(not(windows))]"},{"Add":"use libc::size_t;"},{"Add":"use std::ops::{Deref, DerefMut, Index, IndexMut, Range, RangeFrom, RangeFull, RangeTo};"},{"Add":""},{"Add":"/// A buffer which zeroes its memory on `.clear()`, `.resize()` and"},{"Add":"/// reallocations, to avoid copying secrets around."},{"Add":"#[derive(Debug)]"},{"Add":"pub struct CryptoVec {"},{"Add":" p: *mut u8,"},{"Add":" size: usize,"},{"Add":" capacity: usize,"},{"Add":" zero: u8,"},{"Add":"}"},{"Add":""},{"Add":"impl Unpin for CryptoVec {}"},{"Add":""},{"Add":"unsafe impl Send for CryptoVec {}"},{"Add":"unsafe impl Sync for CryptoVec {}"},{"Add":""},{"Add":"impl AsRef<[u8]> for CryptoVec {"},{"Add":" fn as_ref(&self) -> &[u8] {"},{"Add":" self.deref()"},{"Add":" }"},{"Add":"}"},{"Add":"impl AsMut<[u8]> for CryptoVec {"},{"Add":" fn as_mut(&mut self) -> &mut [u8] {"},{"Add":" self.deref_mut()"},{"Add":" }"},{"Add":"}"},{"Add":"impl Deref for CryptoVec {"},{"Add":" type Target = [u8];"},{"Add":" fn deref(&self) -> &[u8] {"},{"Add":" unsafe { std::slice::from_raw_parts(self.p, self.size) }"},{"Add":" }"},{"Add":"}"},{"Add":"impl DerefMut for CryptoVec {"},{"Add":" fn deref_mut(&mut self) -> &mut [u8] {"},{"Add":" unsafe { std::slice::from_raw_parts_mut(self.p, self.size) }"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl From for CryptoVec {"},{"Add":" fn from(e: String) -> Self {"},{"Add":" CryptoVec::from(e.into_bytes())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl From> for CryptoVec {"},{"Add":" fn from(e: Vec) -> Self {"},{"Add":" let mut c = CryptoVec::new_zeroed(e.len());"},{"Add":" c.clone_from_slice(&e[..]);"},{"Add":" c"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Index> for CryptoVec {"},{"Add":" type Output = [u8];"},{"Add":" fn index(&self, index: RangeFrom) -> &[u8] {"},{"Add":" self.deref().index(index)"},{"Add":" }"},{"Add":"}"},{"Add":"impl Index> for CryptoVec {"},{"Add":" type Output = [u8];"},{"Add":" fn index(&self, index: RangeTo) -> &[u8] {"},{"Add":" self.deref().index(index)"},{"Add":" }"},{"Add":"}"},{"Add":"impl Index> for CryptoVec {"},{"Add":" type Output = [u8];"},{"Add":" fn index(&self, index: Range) -> &[u8] {"},{"Add":" self.deref().index(index)"},{"Add":" }"},{"Add":"}"},{"Add":"impl Index for CryptoVec {"},{"Add":" type Output = [u8];"},{"Add":" fn index(&self, _: RangeFull) -> &[u8] {"},{"Add":" self.deref()"},{"Add":" }"},{"Add":"}"},{"Add":"impl IndexMut for CryptoVec {"},{"Add":" fn index_mut(&mut self, _: RangeFull) -> &mut [u8] {"},{"Add":" self.deref_mut()"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl IndexMut> for CryptoVec {"},{"Add":" fn index_mut(&mut self, index: RangeFrom) -> &mut [u8] {"},{"Add":" self.deref_mut().index_mut(index)"},{"Add":" }"},{"Add":"}"},{"Add":"impl IndexMut> for CryptoVec {"},{"Add":" fn index_mut(&mut self, index: RangeTo) -> &mut [u8] {"},{"Add":" self.deref_mut().index_mut(index)"},{"Add":" }"},{"Add":"}"},{"Add":"impl IndexMut> for CryptoVec {"},{"Add":" fn index_mut(&mut self, index: Range) -> &mut [u8] {"},{"Add":" self.deref_mut().index_mut(index)"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Index for CryptoVec {"},{"Add":" type Output = u8;"},{"Add":" fn index(&self, index: usize) -> &u8 {"},{"Add":" self.deref().index(index)"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl std::io::Write for CryptoVec {"},{"Add":" fn write(&mut self, buf: &[u8]) -> Result {"},{"Add":" self.extend(buf);"},{"Add":" Ok(buf.len())"},{"Add":" }"},{"Add":" fn flush(&mut self) -> Result<(), std::io::Error> {"},{"Add":" Ok(())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Default for CryptoVec {"},{"Add":" fn default() -> Self {"},{"Add":" let mut buf = CryptoVec {"},{"Add":" p: std::ptr::null_mut(),"},{"Add":" size: 0,"},{"Add":" capacity: 0,"},{"Add":" zero: 0,"},{"Add":" };"},{"Add":" // This avoids potential problems in as_slice()."},{"Add":" buf.p = &mut buf.zero;"},{"Add":" //"},{"Add":" buf"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[cfg(not(windows))]"},{"Add":"unsafe fn mlock(ptr: *const u8, len: usize) {"},{"Add":" libc::mlock(ptr as *const c_void, len as size_t);"},{"Add":"}"},{"Add":"#[cfg(not(windows))]"},{"Add":"unsafe fn munlock(ptr: *const u8, len: usize) {"},{"Add":" libc::munlock(ptr as *const c_void, len as size_t);"},{"Add":"}"},{"Add":""},{"Add":"#[cfg(windows)]"},{"Add":"use winapi::shared::basetsd::SIZE_T;"},{"Add":"#[cfg(windows)]"},{"Add":"use winapi::shared::minwindef::LPVOID;"},{"Add":"#[cfg(windows)]"},{"Add":"use winapi::um::memoryapi::{VirtualLock, VirtualUnlock};"},{"Add":"#[cfg(windows)]"},{"Add":"unsafe fn mlock(ptr: *const u8, len: usize) {"},{"Add":" VirtualLock(ptr as LPVOID, len as SIZE_T);"},{"Add":"}"},{"Add":"#[cfg(windows)]"},{"Add":"unsafe fn munlock(ptr: *const u8, len: usize) {"},{"Add":" VirtualUnlock(ptr as LPVOID, len as SIZE_T);"},{"Add":"}"},{"Add":""},{"Add":"impl Clone for CryptoVec {"},{"Add":" fn clone(&self) -> Self {"},{"Add":" let mut v = Self::new();"},{"Add":" v.extend(self);"},{"Add":" v"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl CryptoVec {"},{"Add":" /// Creates a new `CryptoVec`."},{"Add":" pub fn new() -> CryptoVec {"},{"Add":" CryptoVec::default()"},{"Add":" }"},{"Add":""},{"Add":" /// Creates a new `CryptoVec` with `n` zeros."},{"Add":" pub fn new_zeroed(size: usize) -> CryptoVec {"},{"Add":" unsafe {"},{"Add":" let capacity = size.next_power_of_two();"},{"Add":" let layout = std::alloc::Layout::from_size_align_unchecked(capacity, 1);"},{"Add":" let p = std::alloc::alloc_zeroed(layout);"},{"Add":" mlock(p, capacity);"},{"Add":" CryptoVec {"},{"Add":" p,"},{"Add":" capacity,"},{"Add":" zero: 0,"},{"Add":" size,"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Creates a new `CryptoVec` with capacity `capacity`."},{"Add":" pub fn with_capacity(capacity: usize) -> CryptoVec {"},{"Add":" unsafe {"},{"Add":" let capacity = capacity.next_power_of_two();"},{"Add":" let layout = std::alloc::Layout::from_size_align_unchecked(capacity, 1);"},{"Add":" let p = std::alloc::alloc_zeroed(layout);"},{"Add":" mlock(p, capacity);"},{"Add":" CryptoVec {"},{"Add":" p,"},{"Add":" capacity,"},{"Add":" zero: 0,"},{"Add":" size: 0,"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Length of this `CryptoVec`."},{"Add":" ///"},{"Add":" /// ```"},{"Add":" /// assert_eq!(cryptovec::CryptoVec::new().len(), 0)"},{"Add":" /// ```"},{"Add":" pub fn len(&self) -> usize {"},{"Add":" self.size"},{"Add":" }"},{"Add":""},{"Add":" /// Returns `true` if and only if this CryptoVec is empty."},{"Add":" ///"},{"Add":" /// ```"},{"Add":" /// assert!(cryptovec::CryptoVec::new().is_empty())"},{"Add":" /// ```"},{"Add":" pub fn is_empty(&self) -> bool {"},{"Add":" self.len() == 0"},{"Add":" }"},{"Add":""},{"Add":" /// Resize this CryptoVec, appending zeros at the end. This may"},{"Add":" /// perform at most one reallocation, overwriting the previous"},{"Add":" /// version with zeros."},{"Add":" pub fn resize(&mut self, size: usize) {"},{"Add":" if size <= self.capacity && size > self.size {"},{"Add":" // If this is an expansion, just resize."},{"Add":" self.size = size"},{"Add":" } else if size <= self.size {"},{"Add":" // If this is a truncation, resize and erase the extra memory."},{"Add":" unsafe {"},{"Add":" libc::memset("},{"Add":" self.p.offset(size as isize) as *mut c_void,"},{"Add":" 0,"},{"Add":" self.size - size,"},{"Add":" );"},{"Add":" }"},{"Add":" self.size = size;"},{"Add":" } else {"},{"Add":" // realloc ! and erase the previous memory."},{"Add":" unsafe {"},{"Add":" let next_capacity = size.next_power_of_two();"},{"Add":" let old_ptr = self.p;"},{"Add":" let next_layout = std::alloc::Layout::from_size_align_unchecked(next_capacity, 1);"},{"Add":" self.p = std::alloc::alloc_zeroed(next_layout);"},{"Add":" mlock(self.p, next_capacity);"},{"Add":""},{"Add":" if self.capacity > 0 {"},{"Add":" std::ptr::copy_nonoverlapping(old_ptr, self.p, self.size);"},{"Add":" for i in 0..self.size {"},{"Add":" std::ptr::write_volatile(old_ptr.offset(i as isize), 0)"},{"Add":" }"},{"Add":" munlock(old_ptr, self.capacity);"},{"Add":" let layout = std::alloc::Layout::from_size_align_unchecked(self.capacity, 1);"},{"Add":" std::alloc::dealloc(old_ptr, layout);"},{"Add":" }"},{"Add":""},{"Add":" if self.p.is_null() {"},{"Add":" panic!(\"Realloc failed, pointer = {:?} {:?}\", self, size)"},{"Add":" } else {"},{"Add":" self.capacity = next_capacity;"},{"Add":" self.size = size;"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Clear this CryptoVec (retaining the memory)."},{"Add":" ///"},{"Add":" /// ```"},{"Add":" /// let mut v = cryptovec::CryptoVec::new();"},{"Add":" /// v.extend(b\"blabla\");"},{"Add":" /// v.clear();"},{"Add":" /// assert!(v.is_empty())"},{"Add":" /// ```"},{"Add":" pub fn clear(&mut self) {"},{"Add":" self.resize(0);"},{"Add":" }"},{"Add":""},{"Add":" /// Append a new byte at the end of this CryptoVec."},{"Add":" pub fn push(&mut self, s: u8) {"},{"Add":" let size = self.size;"},{"Add":" self.resize(size + 1);"},{"Add":" unsafe { *(self.p.offset(size as isize)) = s }"},{"Add":" }"},{"Add":""},{"Add":" /// Append a new u32, big endian-encoded, at the end of this CryptoVec."},{"Add":" ///"},{"Add":" /// ```"},{"Add":" /// let mut v = cryptovec::CryptoVec::new();"},{"Add":" /// let n = 43554;"},{"Add":" /// v.push_u32_be(n);"},{"Add":" /// assert_eq!(n, v.read_u32_be(0))"},{"Add":" /// ```"},{"Add":" pub fn push_u32_be(&mut self, s: u32) {"},{"Add":" let s = s.to_be();"},{"Add":" let x: [u8; 4] = unsafe { std::mem::transmute(s) };"},{"Add":" self.extend(&x)"},{"Add":" }"},{"Add":""},{"Add":" /// Read a big endian-encoded u32 from this CryptoVec, with the"},{"Add":" /// first byte at position `i`."},{"Add":" ///"},{"Add":" /// ```"},{"Add":" /// let mut v = cryptovec::CryptoVec::new();"},{"Add":" /// let n = 99485710;"},{"Add":" /// v.push_u32_be(n);"},{"Add":" /// assert_eq!(n, v.read_u32_be(0))"},{"Add":" /// ```"},{"Add":" pub fn read_u32_be(&self, i: usize) -> u32 {"},{"Add":" assert!(i + 4 <= self.size);"},{"Add":" let mut x: u32 = 0;"},{"Add":" unsafe {"},{"Add":" libc::memcpy("},{"Add":" (&mut x) as *mut u32 as *mut c_void,"},{"Add":" self.p.offset(i as isize) as *const c_void,"},{"Add":" 4,"},{"Add":" );"},{"Add":" }"},{"Add":" u32::from_be(x)"},{"Add":" }"},{"Add":""},{"Add":" /// Read `n_bytes` from `r`, and append them at the end of this"},{"Add":" /// `CryptoVec`. Returns the number of bytes read (and appended)."},{"Add":" pub fn read("},{"Add":" &mut self,"},{"Add":" n_bytes: usize,"},{"Add":" mut r: R,"},{"Add":" ) -> Result {"},{"Add":" let cur_size = self.size;"},{"Add":" self.resize(cur_size + n_bytes);"},{"Add":" let s ="},{"Add":" unsafe { std::slice::from_raw_parts_mut(self.p.offset(cur_size as isize), n_bytes) };"},{"Add":" // Resize the buffer to its appropriate size."},{"Add":" match r.read(s) {"},{"Add":" Ok(n) => {"},{"Add":" self.resize(cur_size + n);"},{"Add":" Ok(n)"},{"Add":" }"},{"Add":" Err(e) => {"},{"Add":" self.resize(cur_size);"},{"Add":" Err(e)"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Write all this CryptoVec to the provided `Write`. Returns the"},{"Add":" /// number of bytes actually written."},{"Add":" ///"},{"Add":" /// ```"},{"Add":" /// let mut v = cryptovec::CryptoVec::new();"},{"Add":" /// v.extend(b\"blabla\");"},{"Add":" /// let mut s = std::io::stdout();"},{"Add":" /// v.write_all_from(0, &mut s).unwrap();"},{"Add":" /// ```"},{"Add":" pub fn write_all_from("},{"Add":" &self,"},{"Add":" offset: usize,"},{"Add":" mut w: W,"},{"Add":" ) -> Result {"},{"Add":" assert!(offset < self.size);"},{"Add":" // if we're past this point, self.p cannot be null."},{"Add":" unsafe {"},{"Add":" let s = std::slice::from_raw_parts(self.p.offset(offset as isize), self.size - offset);"},{"Add":" w.write(s)"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Resize this CryptoVec, returning a mutable borrow to the extra bytes."},{"Add":" ///"},{"Add":" /// ```"},{"Add":" /// let mut v = cryptovec::CryptoVec::new();"},{"Add":" /// v.resize_mut(4).clone_from_slice(b\"test\");"},{"Add":" /// ```"},{"Add":" pub fn resize_mut(&mut self, n: usize) -> &mut [u8] {"},{"Add":" let size = self.size;"},{"Add":" self.resize(size + n);"},{"Add":" unsafe { std::slice::from_raw_parts_mut(self.p.offset(size as isize), n) }"},{"Add":" }"},{"Add":""},{"Add":" /// Append a slice at the end of this CryptoVec."},{"Add":" ///"},{"Add":" /// ```"},{"Add":" /// let mut v = cryptovec::CryptoVec::new();"},{"Add":" /// v.extend(b\"test\");"},{"Add":" /// ```"},{"Add":" pub fn extend(&mut self, s: &[u8]) {"},{"Add":" let size = self.size;"},{"Add":" self.resize(size + s.len());"},{"Add":" unsafe {"},{"Add":" std::ptr::copy_nonoverlapping(s.as_ptr(), self.p.offset(size as isize), s.len());"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" /// Create a `CryptoVec` from a slice"},{"Add":" ///"},{"Add":" /// ```"},{"Add":" /// CryptoVec::from_slice(b\"test\");"},{"Add":" /// ```"},{"Add":" pub fn from_slice(s: &[u8]) -> CryptoVec {"},{"Add":" let mut v = CryptoVec::new();"},{"Add":" v.resize(s.len());"},{"Add":" unsafe {"},{"Add":" std::ptr::copy_nonoverlapping(s.as_ptr(), v.p, s.len());"},{"Add":" }"},{"Add":" v"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl Drop for CryptoVec {"},{"Add":" fn drop(&mut self) {"},{"Add":" if self.capacity > 0 {"},{"Add":" unsafe {"},{"Add":" for i in 0..self.size {"},{"Add":" std::ptr::write_volatile(self.p.offset(i as isize), 0)"},{"Add":" }"},{"Add":" munlock(self.p, self.capacity);"},{"Add":" let layout = std::alloc::Layout::from_size_align_unchecked(self.capacity, 1);"},{"Add":" std::alloc::dealloc(self.p, layout);"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"Cargo.toml","metadata":420},"context":[{"change":0,"pos":427973}],"contents":[{"Add":"[package]"},{"Add":"name = \"cryptovec\""},{"Add":"description = \"A vector which zeroes its memory on clears and reallocations.\""},{"Add":"version = \"0.6.0\""},{"Add":"authors = [\"Pierre-Étienne Meunier \"]"},{"Add":"repository = \"https://pijul.org/cryptovec\""},{"Add":"documentation = \"https://pijul.org/cryptovec/doc/cryptovec\""},{"Add":"license = \"Apache-2.0\""},{"Add":"include = [\"Cargo.toml\", \"src/lib.rs\"]"},{"Add":""},{"Add":"[dependencies]"},{"Add":"libc = \"0.2\""},{"Add":"winapi = { version = \"0.3\", features = [\"basetsd\", \"minwindef\", \"memoryapi\"] }"}]}},{"FileAdd":{"meta":{"basename":"README.md","metadata":420},"context":[{"change":1,"pos":0}],"contents":[{"Add":"# Thrussh"},{"Add":""},{"Add":"A full implementation of the SSH 2 protocol, both server-side and client-side."},{"Add":""},{"Add":"Thrussh is completely asynchronous, and can be combined with other protocols using [Tokio](//tokio.rs)."},{"Add":""},{"Add":"## Contributing"},{"Add":""},{"Add":"We welcome contributions. Currently, the main areas where we need help are:"},{"Add":""},{"Add":"- Handling SSH keys correctly on all platforms. In particular, interactions with agents, PGP, and password-protected/encrypted keys are not yet implemented."},{"Add":""},{"Add":"- Auditing our code, and writing tests. The code is written so that the protocol can be entirely run inside vectors (instead of network sockets)."},{"Add":""},{"Add":"By contributing, you agree to license all your contributions under the Apache 2.0 license."},{"Add":""},{"Add":"Moreover, the main platform for contributing is [the Nest](//nest.pijul.com/pijul_org/thrussh), which is still at an experimental stage. Therefore, even though we do our best to avoid it, our repository might be reset, causing the patches of all contributors to be merged."},{"Add":""},{"Add":""},{"Add":"## Issue Reporting"},{"Add":""},{"Add":"Please report bugs on the [issue page of this repository](//nest.pijul.com/pijul_org/thrussh)."},{"Add":"Thrussh has a full disclosure vulnerability policy."},{"Add":"Please do NOT attempt to report any security vulnerability in this code privately to anybody."}]}},{"FileAdd":{"meta":{"basename":"LICENSE-2.0.txt","metadata":493},"context":[{"change":1,"pos":0}],"contents":[{"Add":""},{"Add":" Apache License"},{"Add":" Version 2.0, January 2004"},{"Add":" http://www.apache.org/licenses/"},{"Add":""},{"Add":" TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION"},{"Add":""},{"Add":" 1. Definitions."},{"Add":""},{"Add":" \"License\" shall mean the terms and conditions for use, reproduction,"},{"Add":" and distribution as defined by Sections 1 through 9 of this document."},{"Add":""},{"Add":" \"Licensor\" shall mean the copyright owner or entity authorized by"},{"Add":" the copyright owner that is granting the License."},{"Add":""},{"Add":" \"Legal Entity\" shall mean the union of the acting entity and all"},{"Add":" other entities that control, are controlled by, or are under common"},{"Add":" control with that entity. For the purposes of this definition,"},{"Add":" \"control\" means (i) the power, direct or indirect, to cause the"},{"Add":" direction or management of such entity, whether by contract or"},{"Add":" otherwise, or (ii) ownership of fifty percent (50%) or more of the"},{"Add":" outstanding shares, or (iii) beneficial ownership of such entity."},{"Add":""},{"Add":" \"You\" (or \"Your\") shall mean an individual or Legal Entity"},{"Add":" exercising permissions granted by this License."},{"Add":""},{"Add":" \"Source\" form shall mean the preferred form for making modifications,"},{"Add":" including but not limited to software source code, documentation"},{"Add":" source, and configuration files."},{"Add":""},{"Add":" \"Object\" form shall mean any form resulting from mechanical"},{"Add":" transformation or translation of a Source form, including but"},{"Add":" not limited to compiled object code, generated documentation,"},{"Add":" and conversions to other media types."},{"Add":""},{"Add":" \"Work\" shall mean the work of authorship, whether in Source or"},{"Add":" Object form, made available under the License, as indicated by a"},{"Add":" copyright notice that is included in or attached to the work"},{"Add":" (an example is provided in the Appendix below)."},{"Add":""},{"Add":" \"Derivative Works\" shall mean any work, whether in Source or Object"},{"Add":" form, that is based on (or derived from) the Work and for which the"},{"Add":" editorial revisions, annotations, elaborations, or other modifications"},{"Add":" represent, as a whole, an original work of authorship. For the purposes"},{"Add":" of this License, Derivative Works shall not include works that remain"},{"Add":" separable from, or merely link (or bind by name) to the interfaces of,"},{"Add":" the Work and Derivative Works thereof."},{"Add":""},{"Add":" \"Contribution\" shall mean any work of authorship, including"},{"Add":" the original version of the Work and any modifications or additions"},{"Add":" to that Work or Derivative Works thereof, that is intentionally"},{"Add":" submitted to Licensor for inclusion in the Work by the copyright owner"},{"Add":" or by an individual or Legal Entity authorized to submit on behalf of"},{"Add":" the copyright owner. For the purposes of this definition, \"submitted\""},{"Add":" means any form of electronic, verbal, or written communication sent"},{"Add":" to the Licensor or its representatives, including but not limited to"},{"Add":" communication on electronic mailing lists, source code control systems,"},{"Add":" and issue tracking systems that are managed by, or on behalf of, the"},{"Add":" Licensor for the purpose of discussing and improving the Work, but"},{"Add":" excluding communication that is conspicuously marked or otherwise"},{"Add":" designated in writing by the copyright owner as \"Not a Contribution.\""},{"Add":""},{"Add":" \"Contributor\" shall mean Licensor and any individual or Legal Entity"},{"Add":" on behalf of whom a Contribution has been received by Licensor and"},{"Add":" subsequently incorporated within the Work."},{"Add":""},{"Add":" 2. Grant of Copyright License. Subject to the terms and conditions of"},{"Add":" this License, each Contributor hereby grants to You a perpetual,"},{"Add":" worldwide, non-exclusive, no-charge, royalty-free, irrevocable"},{"Add":" copyright license to reproduce, prepare Derivative Works of,"},{"Add":" publicly display, publicly perform, sublicense, and distribute the"},{"Add":" Work and such Derivative Works in Source or Object form."},{"Add":""},{"Add":" 3. Grant of Patent License. Subject to the terms and conditions of"},{"Add":" this License, each Contributor hereby grants to You a perpetual,"},{"Add":" worldwide, non-exclusive, no-charge, royalty-free, irrevocable"},{"Add":" (except as stated in this section) patent license to make, have made,"},{"Add":" use, offer to sell, sell, import, and otherwise transfer the Work,"},{"Add":" where such license applies only to those patent claims licensable"},{"Add":" by such Contributor that are necessarily infringed by their"},{"Add":" Contribution(s) alone or by combination of their Contribution(s)"},{"Add":" with the Work to which such Contribution(s) was submitted. If You"},{"Add":" institute patent litigation against any entity (including a"},{"Add":" cross-claim or counterclaim in a lawsuit) alleging that the Work"},{"Add":" or a Contribution incorporated within the Work constitutes direct"},{"Add":" or contributory patent infringement, then any patent licenses"},{"Add":" granted to You under this License for that Work shall terminate"},{"Add":" as of the date such litigation is filed."},{"Add":""},{"Add":" 4. Redistribution. You may reproduce and distribute copies of the"},{"Add":" Work or Derivative Works thereof in any medium, with or without"},{"Add":" modifications, and in Source or Object form, provided that You"},{"Add":" meet the following conditions:"},{"Add":""},{"Add":" (a) You must give any other recipients of the Work or"},{"Add":" Derivative Works a copy of this License; and"},{"Add":""},{"Add":" (b) You must cause any modified files to carry prominent notices"},{"Add":" stating that You changed the files; and"},{"Add":""},{"Add":" (c) You must retain, in the Source form of any Derivative Works"},{"Add":" that You distribute, all copyright, patent, trademark, and"},{"Add":" attribution notices from the Source form of the Work,"},{"Add":" excluding those notices that do not pertain to any part of"},{"Add":" the Derivative Works; and"},{"Add":""},{"Add":" (d) If the Work includes a \"NOTICE\" text file as part of its"},{"Add":" distribution, then any Derivative Works that You distribute must"},{"Add":" include a readable copy of the attribution notices contained"},{"Add":" within such NOTICE file, excluding those notices that do not"},{"Add":" pertain to any part of the Derivative Works, in at least one"},{"Add":" of the following places: within a NOTICE text file distributed"},{"Add":" as part of the Derivative Works; within the Source form or"},{"Add":" documentation, if provided along with the Derivative Works; or,"},{"Add":" within a display generated by the Derivative Works, if and"},{"Add":" wherever such third-party notices normally appear. The contents"},{"Add":" of the NOTICE file are for informational purposes only and"},{"Add":" do not modify the License. You may add Your own attribution"},{"Add":" notices within Derivative Works that You distribute, alongside"},{"Add":" or as an addendum to the NOTICE text from the Work, provided"},{"Add":" that such additional attribution notices cannot be construed"},{"Add":" as modifying the License."},{"Add":""},{"Add":" You may add Your own copyright statement to Your modifications and"},{"Add":" may provide additional or different license terms and conditions"},{"Add":" for use, reproduction, or distribution of Your modifications, or"},{"Add":" for any such Derivative Works as a whole, provided Your use,"},{"Add":" reproduction, and distribution of the Work otherwise complies with"},{"Add":" the conditions stated in this License."},{"Add":""},{"Add":" 5. Submission of Contributions. Unless You explicitly state otherwise,"},{"Add":" any Contribution intentionally submitted for inclusion in the Work"},{"Add":" by You to the Licensor shall be under the terms and conditions of"},{"Add":" this License, without any additional terms or conditions."},{"Add":" Notwithstanding the above, nothing herein shall supersede or modify"},{"Add":" the terms of any separate license agreement you may have executed"},{"Add":" with Licensor regarding such Contributions."},{"Add":""},{"Add":" 6. Trademarks. This License does not grant permission to use the trade"},{"Add":" names, trademarks, service marks, or product names of the Licensor,"},{"Add":" except as required for reasonable and customary use in describing the"},{"Add":" origin of the Work and reproducing the content of the NOTICE file."},{"Add":""},{"Add":" 7. Disclaimer of Warranty. Unless required by applicable law or"},{"Add":" agreed to in writing, Licensor provides the Work (and each"},{"Add":" Contributor provides its Contributions) on an \"AS IS\" BASIS,"},{"Add":" WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or"},{"Add":" implied, including, without limitation, any warranties or conditions"},{"Add":" of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A"},{"Add":" PARTICULAR PURPOSE. You are solely responsible for determining the"},{"Add":" appropriateness of using or redistributing the Work and assume any"},{"Add":" risks associated with Your exercise of permissions under this License."},{"Add":""},{"Add":" 8. Limitation of Liability. In no event and under no legal theory,"},{"Add":" whether in tort (including negligence), contract, or otherwise,"},{"Add":" unless required by applicable law (such as deliberate and grossly"},{"Add":" negligent acts) or agreed to in writing, shall any Contributor be"},{"Add":" liable to You for damages, including any direct, indirect, special,"},{"Add":" incidental, or consequential damages of any character arising as a"},{"Add":" result of this License or out of the use or inability to use the"},{"Add":" Work (including but not limited to damages for loss of goodwill,"},{"Add":" work stoppage, computer failure or malfunction, or any and all"},{"Add":" other commercial damages or losses), even if such Contributor"},{"Add":" has been advised of the possibility of such damages."},{"Add":""},{"Add":" 9. Accepting Warranty or Additional Liability. While redistributing"},{"Add":" the Work or Derivative Works thereof, You may choose to offer,"},{"Add":" and charge a fee for, acceptance of support, warranty, indemnity,"},{"Add":" or other liability obligations and/or rights consistent with this"},{"Add":" License. However, in accepting such obligations, You may act only"},{"Add":" on Your own behalf and on Your sole responsibility, not on behalf"},{"Add":" of any other Contributor, and only if You agree to indemnify,"},{"Add":" defend, and hold each Contributor harmless for any liability"},{"Add":" incurred by, or claims asserted against, such Contributor by reason"},{"Add":" of your accepting any such warranty or additional liability."},{"Add":""},{"Add":" END OF TERMS AND CONDITIONS"},{"Add":""},{"Add":" APPENDIX: How to apply the Apache License to your work."},{"Add":""},{"Add":" To apply the Apache License to your work, attach the following"},{"Add":" boilerplate notice, with the fields enclosed by brackets \"[]\""},{"Add":" replaced with your own identifying information. (Don't include"},{"Add":" the brackets!) The text should be enclosed in the appropriate"},{"Add":" comment syntax for the file format. We also recommend that a"},{"Add":" file or class name and description of purpose be included on the"},{"Add":" same \"printed page\" as the copyright notice for easier"},{"Add":" identification within third-party archives."},{"Add":""},{"Add":" Copyright [yyyy] [name of copyright owner]"},{"Add":""},{"Add":" Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":" you may not use this file except in compliance with the License."},{"Add":" You may obtain a copy of the License at"},{"Add":""},{"Add":" http://www.apache.org/licenses/LICENSE-2.0"},{"Add":""},{"Add":" Unless required by applicable law or agreed to in writing, software"},{"Add":" distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":" WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":" See the License for the specific language governing permissions and"},{"Add":" limitations under the License."}]}},{"FileAdd":{"meta":{"basename":"Cargo.toml","metadata":420},"context":[{"change":1,"pos":0}],"contents":[{"Add":"[workspace]"},{"Add":""},{"Add":"members = [ \"thrussh-keys\", \"thrussh\", \"thrussh-libsodium\", \"thrussh-config\", \"cryptovec\" ]"},{"Add":""},{"Add":"[patch.crates-io]"},{"Add":"thrussh = { path = \"thrussh\" }"},{"Add":"thrussh-keys = { path = \"thrussh-keys\" }"},{"Add":"thrussh-libsodium = { path = \"thrussh-libsodium\" }"},{"Add":"cryptovec = { path = \"cryptovec\" }"},{"Add":"thrussh-config = { path = \"thrussh-config\" }"}]}},{"FileAdd":{"meta":{"basename":"Cargo.lock","metadata":420},"context":[{"change":1,"pos":0}],"contents":[{"Add":"# This file is automatically @generated by Cargo."},{"Add":"# It is not intended for manual editing."},{"Add":"[[package]]"},{"Add":"name = \"adler\""},{"Add":"version = \"0.2.3\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"ee2a4ec343196209d6594e19543ae87a39f96d5534d7174822a3ad825dd6ed7e\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"aho-corasick\""},{"Add":"version = \"0.7.14\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"b476ce7103678b0c6d3d395dbbae31d48ff910bd28be979ba5d48c6351131d0d\""},{"Add":"dependencies = ["},{"Add":" \"memchr\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"anyhow\""},{"Add":"version = \"1.0.33\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"a1fd36ffbb1fb7c834eac128ea8d0e310c5aeb635548f9d58861e1308d46e71c\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"arrayref\""},{"Add":"version = \"0.3.6\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"a4c527152e37cf757a3f78aae5a06fbeefdb07ccc535c980a3208ee3060dd544\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"arrayvec\""},{"Add":"version = \"0.5.2\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"23b62fc65de8e4e7f52534fb52b0f3ed04746ae267519eef2a83941e8085068b\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"atty\""},{"Add":"version = \"0.2.14\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"d9b39be18770d11421cdb1b9947a45dd3f37e93092cbf377614828a319d5fee8\""},{"Add":"dependencies = ["},{"Add":" \"hermit-abi\","},{"Add":" \"libc\","},{"Add":" \"winapi 0.3.9\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"autocfg\""},{"Add":"version = \"1.0.1\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"cdb031dd78e28731d87d56cc8ffef4a8f36ca26c38fe2de700543e627f8a464a\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"base64\""},{"Add":"version = \"0.9.3\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"489d6c0ed21b11d038c31b6ceccca973e65d73ba3bd8ecb9a2babf5546164643\""},{"Add":"dependencies = ["},{"Add":" \"byteorder\","},{"Add":" \"safemem\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"base64\""},{"Add":"version = \"0.12.3\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"3441f0f7b02788e948e47f457ca01f1d7e6d92c693bc132c22b087d3141c03ff\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"bit-vec\""},{"Add":"version = \"0.4.4\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"02b4ff8b16e6076c3e14220b39fbc1fabb6737522281a388998046859400895f\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"bit-vec\""},{"Add":"version = \"0.6.2\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"5f0dc55f2d8a1a85650ac47858bb001b4c0dd73d79e3c455a842925e68d29cd3\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"bitflags\""},{"Add":"version = \"1.2.1\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"cf1de2fe8c75bc145a2f577add951f8134889b4795d47466a54a5c846d691693\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"blake2b_simd\""},{"Add":"version = \"0.5.10\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"d8fb2d74254a3a0b5cac33ac9f8ed0e44aa50378d9dbb2e5d83bd21ed1dc2c8a\""},{"Add":"dependencies = ["},{"Add":" \"arrayref\","},{"Add":" \"arrayvec\","},{"Add":" \"constant_time_eq\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"byteorder\""},{"Add":"version = \"1.3.4\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"08c48aae112d48ed9f069b33538ea9e3e90aa263cfa3d1c24309612b1f7472de\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"bytes\""},{"Add":"version = \"0.4.12\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"206fdffcfa2df7cbe15601ef46c813fce0965eb3286db6b56c583b814b51c81c\""},{"Add":"dependencies = ["},{"Add":" \"byteorder\","},{"Add":" \"iovec\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"bytes\""},{"Add":"version = \"0.5.6\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"0e4cec68f03f32e44924783795810fa50a7035d8c8ebe78580ad7e6c703fba38\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"cc\""},{"Add":"version = \"1.0.61\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"ed67cbde08356238e75fc4656be4749481eeffb09e19f320a25237d5221c985d\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"cfg-if\""},{"Add":"version = \"0.1.10\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"4785bdd1c96b2a846b2bd7cc02e86b6b3dbf14e7e53446c4f54c92a361040822\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"cfg-if\""},{"Add":"version = \"1.0.0\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"cloudabi\""},{"Add":"version = \"0.0.3\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"ddfc5b9aa5d4507acaf872de71051dfd0e309860e88966e1051e462a077aac4f\""},{"Add":"dependencies = ["},{"Add":" \"bitflags\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"constant_time_eq\""},{"Add":"version = \"0.1.5\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"245097e9a4535ee1e3e3931fcfcd55a796a44c643e8596ff6566d68f09b87bbc\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"crc32fast\""},{"Add":"version = \"1.2.1\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"81156fece84ab6a9f2afdb109ce3ae577e42b1228441eded99bd77f627953b1a\""},{"Add":"dependencies = ["},{"Add":" \"cfg-if 1.0.0\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"crossbeam-deque\""},{"Add":"version = \"0.7.3\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"9f02af974daeee82218205558e51ec8768b48cf524bd01d550abe5573a608285\""},{"Add":"dependencies = ["},{"Add":" \"crossbeam-epoch\","},{"Add":" \"crossbeam-utils\","},{"Add":" \"maybe-uninit\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"crossbeam-epoch\""},{"Add":"version = \"0.8.2\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"058ed274caafc1f60c4997b5fc07bf7dc7cca454af7c6e81edffe5f33f70dace\""},{"Add":"dependencies = ["},{"Add":" \"autocfg\","},{"Add":" \"cfg-if 0.1.10\","},{"Add":" \"crossbeam-utils\","},{"Add":" \"lazy_static\","},{"Add":" \"maybe-uninit\","},{"Add":" \"memoffset\","},{"Add":" \"scopeguard\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"crossbeam-queue\""},{"Add":"version = \"0.2.3\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"774ba60a54c213d409d5353bda12d49cd68d14e45036a285234c8d6f91f92570\""},{"Add":"dependencies = ["},{"Add":" \"cfg-if 0.1.10\","},{"Add":" \"crossbeam-utils\","},{"Add":" \"maybe-uninit\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"crossbeam-utils\""},{"Add":"version = \"0.7.2\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"c3c7c73a2d1e9fc0886a08b93e98eb643461230d5f1925e4036204d5f2e261a8\""},{"Add":"dependencies = ["},{"Add":" \"autocfg\","},{"Add":" \"cfg-if 0.1.10\","},{"Add":" \"lazy_static\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"cryptovec\""},{"Add":"version = \"0.4.6\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"e412d5c27b9048893c168870a91ce9df1ce55b780153fa11d1bd89e5606d08d9\""},{"Add":"dependencies = ["},{"Add":" \"kernel32-sys\","},{"Add":" \"libc\","},{"Add":" \"winapi 0.2.8\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"cryptovec\""},{"Add":"version = \"0.6.0\""},{"Add":"dependencies = ["},{"Add":" \"libc\","},{"Add":" \"winapi 0.3.9\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"data-encoding\""},{"Add":"version = \"2.3.0\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"d4d0e2d24e5ee3b23a01de38eefdcd978907890701f08ffffd4cb457ca4ee8d6\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"dirs\""},{"Add":"version = \"1.0.5\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"3fd78930633bd1c6e35c4b42b1df7b0cbc6bc191146e512bb3bedf243fcc3901\""},{"Add":"dependencies = ["},{"Add":" \"libc\","},{"Add":" \"redox_users\","},{"Add":" \"winapi 0.3.9\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"dirs\""},{"Add":"version = \"2.0.2\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"13aea89a5c93364a98e9b37b2fa237effbb694d5cfe01c5b70941f7eb087d5e3\""},{"Add":"dependencies = ["},{"Add":" \"cfg-if 0.1.10\","},{"Add":" \"dirs-sys\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"dirs-sys\""},{"Add":"version = \"0.3.5\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"8e93d7f5705de3e49895a2b5e0b8855a1c27f080192ae9c32a6432d50741a57a\""},{"Add":"dependencies = ["},{"Add":" \"libc\","},{"Add":" \"redox_users\","},{"Add":" \"winapi 0.3.9\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"env_logger\""},{"Add":"version = \"0.7.1\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"44533bbbb3bb3c1fa17d9f2e4e38bbbaf8396ba82193c4cb1b6445d711445d36\""},{"Add":"dependencies = ["},{"Add":" \"atty\","},{"Add":" \"humantime\","},{"Add":" \"log\","},{"Add":" \"regex\","},{"Add":" \"termcolor\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"flate2\""},{"Add":"version = \"1.0.18\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"da80be589a72651dcda34d8b35bcdc9b7254ad06325611074d9cc0fbb19f60ee\""},{"Add":"dependencies = ["},{"Add":" \"cfg-if 0.1.10\","},{"Add":" \"crc32fast\","},{"Add":" \"libc\","},{"Add":" \"miniz_oxide\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"fnv\""},{"Add":"version = \"1.0.7\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"foreign-types\""},{"Add":"version = \"0.3.2\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"f6f339eb8adc052cd2ca78910fda869aefa38d22d5cb648e6485e4d3fc06f3b1\""},{"Add":"dependencies = ["},{"Add":" \"foreign-types-shared\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"foreign-types-shared\""},{"Add":"version = \"0.1.1\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"00b0228411908ca8685dba7fc2cdd70ec9990a6e753e89b6ac91a84c40fbaf4b\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"fuchsia-cprng\""},{"Add":"version = \"0.1.1\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"a06f77d526c1a601b7c4cdd98f54b5eaabffc14d5f2f0296febdc7f357c6d3ba\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"fuchsia-zircon\""},{"Add":"version = \"0.3.3\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"2e9763c69ebaae630ba35f74888db465e49e259ba1bc0eda7d06f4a067615d82\""},{"Add":"dependencies = ["},{"Add":" \"bitflags\","},{"Add":" \"fuchsia-zircon-sys\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"fuchsia-zircon-sys\""},{"Add":"version = \"0.3.3\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"3dcaa9ae7725d12cdb85b3ad99a434db70b468c09ded17e012d86b5c1010f7a7\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"futures\""},{"Add":"version = \"0.1.30\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"4c7e4c2612746b0df8fed4ce0c69156021b704c9aefa360311c04e6e9e002eed\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"futures\""},{"Add":"version = \"0.3.7\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"95314d38584ffbfda215621d723e0a3906f032e03ae5551e650058dac83d4797\""},{"Add":"dependencies = ["},{"Add":" \"futures-channel\","},{"Add":" \"futures-core\","},{"Add":" \"futures-executor\","},{"Add":" \"futures-io\","},{"Add":" \"futures-sink\","},{"Add":" \"futures-task\","},{"Add":" \"futures-util\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"futures-channel\""},{"Add":"version = \"0.3.7\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"0448174b01148032eed37ac4aed28963aaaa8cfa93569a08e5b479bbc6c2c151\""},{"Add":"dependencies = ["},{"Add":" \"futures-core\","},{"Add":" \"futures-sink\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"futures-core\""},{"Add":"version = \"0.3.7\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"18eaa56102984bed2c88ea39026cff3ce3b4c7f508ca970cedf2450ea10d4e46\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"futures-executor\""},{"Add":"version = \"0.3.7\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"f5f8e0c9258abaea85e78ebdda17ef9666d390e987f006be6080dfe354b708cb\""},{"Add":"dependencies = ["},{"Add":" \"futures-core\","},{"Add":" \"futures-task\","},{"Add":" \"futures-util\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"futures-io\""},{"Add":"version = \"0.3.7\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"6e1798854a4727ff944a7b12aa999f58ce7aa81db80d2dfaaf2ba06f065ddd2b\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"futures-macro\""},{"Add":"version = \"0.3.7\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"e36fccf3fc58563b4a14d265027c627c3b665d7fed489427e88e7cc929559efe\""},{"Add":"dependencies = ["},{"Add":" \"proc-macro-hack\","},{"Add":" \"proc-macro2\","},{"Add":" \"quote\","},{"Add":" \"syn\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"futures-sink\""},{"Add":"version = \"0.3.7\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"0e3ca3f17d6e8804ae5d3df7a7d35b2b3a6fe89dac84b31872720fc3060a0b11\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"futures-task\""},{"Add":"version = \"0.3.7\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"96d502af37186c4fef99453df03e374683f8a1eec9dcc1e66b3b82dc8278ce3c\""},{"Add":"dependencies = ["},{"Add":" \"once_cell\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"futures-util\""},{"Add":"version = \"0.3.7\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"abcb44342f62e6f3e8ac427b8aa815f724fd705dfad060b18ac7866c15bb8e34\""},{"Add":"dependencies = ["},{"Add":" \"futures-channel\","},{"Add":" \"futures-core\","},{"Add":" \"futures-io\","},{"Add":" \"futures-macro\","},{"Add":" \"futures-sink\","},{"Add":" \"futures-task\","},{"Add":" \"memchr\","},{"Add":" \"pin-project\","},{"Add":" \"pin-utils\","},{"Add":" \"proc-macro-hack\","},{"Add":" \"proc-macro-nested\","},{"Add":" \"slab\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"getrandom\""},{"Add":"version = \"0.1.15\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"fc587bc0ec293155d5bfa6b9891ec18a1e330c234f896ea47fbada4cadbe47e6\""},{"Add":"dependencies = ["},{"Add":" \"cfg-if 0.1.10\","},{"Add":" \"libc\","},{"Add":" \"wasi\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"hermit-abi\""},{"Add":"version = \"0.1.17\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"5aca5565f760fb5b220e499d72710ed156fdb74e631659e99377d9ebfbd13ae8\""},{"Add":"dependencies = ["},{"Add":" \"libc\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"hex\""},{"Add":"version = \"0.3.2\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"805026a5d0141ffc30abb3be3173848ad46a1b1664fe632428479619a3644d77\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"humantime\""},{"Add":"version = \"1.3.0\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"df004cfca50ef23c36850aaaa59ad52cc70d0e90243c3c7737a4dd32dc7a3c4f\""},{"Add":"dependencies = ["},{"Add":" \"quick-error\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"iovec\""},{"Add":"version = \"0.1.4\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"b2b3ea6ff95e175473f8ffe6a7eb7c00d054240321b84c57051175fe3c1e075e\""},{"Add":"dependencies = ["},{"Add":" \"libc\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"kernel32-sys\""},{"Add":"version = \"0.2.2\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"7507624b29483431c0ba2d82aece8ca6cdba9382bff4ddd0f7490560c056098d\""},{"Add":"dependencies = ["},{"Add":" \"winapi 0.2.8\","},{"Add":" \"winapi-build\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"lazy_static\""},{"Add":"version = \"1.4.0\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"e2abad23fbc42b3700f2f279844dc832adb2b2eb069b2df918f455c4e18cc646\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"libc\""},{"Add":"version = \"0.2.80\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"4d58d1b70b004888f764dfbf6a26a3b0342a1632d33968e4a179d8011c760614\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"libsodium-sys\""},{"Add":"version = \"0.2.6\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"a685b64f837b339074115f2e7f7b431ac73681d08d75b389db7498b8892b8a58\""},{"Add":"dependencies = ["},{"Add":" \"cc\","},{"Add":" \"libc\","},{"Add":" \"pkg-config\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"lock_api\""},{"Add":"version = \"0.3.4\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"c4da24a77a3d8a6d4862d95f72e6fdb9c09a643ecdb402d754004a557f2bec75\""},{"Add":"dependencies = ["},{"Add":" \"scopeguard\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"log\""},{"Add":"version = \"0.4.11\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"4fabed175da42fed1fa0746b0ea71f412aa9d35e76e95e59b192c64b9dc2bf8b\""},{"Add":"dependencies = ["},{"Add":" \"cfg-if 0.1.10\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"maybe-uninit\""},{"Add":"version = \"2.0.0\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"60302e4db3a61da70c0cb7991976248362f30319e88850c487b9b95bbf059e00\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"memchr\""},{"Add":"version = \"2.3.3\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"3728d817d99e5ac407411fa471ff9800a778d88a24685968b36824eaf4bee400\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"memoffset\""},{"Add":"version = \"0.5.6\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"043175f069eda7b85febe4a74abbaeff828d9f8b448515d3151a14a3542811aa\""},{"Add":"dependencies = ["},{"Add":" \"autocfg\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"miniz_oxide\""},{"Add":"version = \"0.4.3\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"0f2d26ec3309788e423cfbf68ad1800f061638098d76a83681af979dc4eda19d\""},{"Add":"dependencies = ["},{"Add":" \"adler\","},{"Add":" \"autocfg\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"mio\""},{"Add":"version = \"0.6.22\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"fce347092656428bc8eaf6201042cb551b8d67855af7374542a92a0fbfcac430\""},{"Add":"dependencies = ["},{"Add":" \"cfg-if 0.1.10\","},{"Add":" \"fuchsia-zircon\","},{"Add":" \"fuchsia-zircon-sys\","},{"Add":" \"iovec\","},{"Add":" \"kernel32-sys\","},{"Add":" \"libc\","},{"Add":" \"log\","},{"Add":" \"miow\","},{"Add":" \"net2\","},{"Add":" \"slab\","},{"Add":" \"winapi 0.2.8\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"mio-uds\""},{"Add":"version = \"0.6.8\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"afcb699eb26d4332647cc848492bbc15eafb26f08d0304550d5aa1f612e066f0\""},{"Add":"dependencies = ["},{"Add":" \"iovec\","},{"Add":" \"libc\","},{"Add":" \"mio\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"miow\""},{"Add":"version = \"0.2.1\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"8c1f2f3b1cf331de6896aabf6e9d55dca90356cc9960cca7eaaf408a355ae919\""},{"Add":"dependencies = ["},{"Add":" \"kernel32-sys\","},{"Add":" \"net2\","},{"Add":" \"winapi 0.2.8\","},{"Add":" \"ws2_32-sys\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"net2\""},{"Add":"version = \"0.2.35\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"3ebc3ec692ed7c9a255596c67808dee269f64655d8baf7b4f0638e51ba1d6853\""},{"Add":"dependencies = ["},{"Add":" \"cfg-if 0.1.10\","},{"Add":" \"libc\","},{"Add":" \"winapi 0.3.9\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"num\""},{"Add":"version = \"0.1.42\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"4703ad64153382334aa8db57c637364c322d3372e097840c72000dabdcf6156e\""},{"Add":"dependencies = ["},{"Add":" \"num-bigint 0.1.44\","},{"Add":" \"num-complex\","},{"Add":" \"num-integer\","},{"Add":" \"num-iter\","},{"Add":" \"num-rational\","},{"Add":" \"num-traits\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"num-bigint\""},{"Add":"version = \"0.1.44\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"e63899ad0da84ce718c14936262a41cee2c79c981fc0a0e7c7beb47d5a07e8c1\""},{"Add":"dependencies = ["},{"Add":" \"num-integer\","},{"Add":" \"num-traits\","},{"Add":" \"rand\","},{"Add":" \"rustc-serialize\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"num-bigint\""},{"Add":"version = \"0.2.6\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"090c7f9998ee0ff65aa5b723e4009f7b217707f1fb5ea551329cc4d6231fb304\""},{"Add":"dependencies = ["},{"Add":" \"autocfg\","},{"Add":" \"num-integer\","},{"Add":" \"num-traits\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"num-complex\""},{"Add":"version = \"0.1.43\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"b288631d7878aaf59442cffd36910ea604ecd7745c36054328595114001c9656\""},{"Add":"dependencies = ["},{"Add":" \"num-traits\","},{"Add":" \"rustc-serialize\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"num-integer\""},{"Add":"version = \"0.1.43\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"8d59457e662d541ba17869cf51cf177c0b5f0cbf476c66bdc90bf1edac4f875b\""},{"Add":"dependencies = ["},{"Add":" \"autocfg\","},{"Add":" \"num-traits\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"num-iter\""},{"Add":"version = \"0.1.42\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"b2021c8337a54d21aca0d59a92577a029af9431cb59b909b03252b9c164fad59\""},{"Add":"dependencies = ["},{"Add":" \"autocfg\","},{"Add":" \"num-integer\","},{"Add":" \"num-traits\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"num-rational\""},{"Add":"version = \"0.1.42\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"ee314c74bd753fc86b4780aa9475da469155f3848473a261d2d18e35245a784e\""},{"Add":"dependencies = ["},{"Add":" \"num-bigint 0.1.44\","},{"Add":" \"num-integer\","},{"Add":" \"num-traits\","},{"Add":" \"rustc-serialize\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"num-traits\""},{"Add":"version = \"0.2.12\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"ac267bcc07f48ee5f8935ab0d24f316fb722d7a1292e2913f0cc196b29ffd611\""},{"Add":"dependencies = ["},{"Add":" \"autocfg\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"num_cpus\""},{"Add":"version = \"1.13.0\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"05499f3756671c15885fee9034446956fff3f243d6077b91e5767df161f766b3\""},{"Add":"dependencies = ["},{"Add":" \"hermit-abi\","},{"Add":" \"libc\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"once_cell\""},{"Add":"version = \"1.4.1\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"260e51e7efe62b592207e9e13a68e43692a7a279171d6ba57abd208bf23645ad\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"openssl\""},{"Add":"version = \"0.10.30\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"8d575eff3665419f9b83678ff2815858ad9d11567e082f5ac1814baba4e2bcb4\""},{"Add":"dependencies = ["},{"Add":" \"bitflags\","},{"Add":" \"cfg-if 0.1.10\","},{"Add":" \"foreign-types\","},{"Add":" \"lazy_static\","},{"Add":" \"libc\","},{"Add":" \"openssl-sys\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"openssl-sys\""},{"Add":"version = \"0.9.58\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"a842db4709b604f0fe5d1170ae3565899be2ad3d9cbc72dedc789ac0511f78de\""},{"Add":"dependencies = ["},{"Add":" \"autocfg\","},{"Add":" \"cc\","},{"Add":" \"libc\","},{"Add":" \"pkg-config\","},{"Add":" \"vcpkg\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"parking_lot\""},{"Add":"version = \"0.9.0\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"f842b1982eb6c2fe34036a4fbfb06dd185a3f5c8edfaacdf7d1ea10b07de6252\""},{"Add":"dependencies = ["},{"Add":" \"lock_api\","},{"Add":" \"parking_lot_core\","},{"Add":" \"rustc_version\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"parking_lot_core\""},{"Add":"version = \"0.6.2\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"b876b1b9e7ac6e1a74a6da34d25c42e17e8862aa409cbbbdcfc8d86c6f3bc62b\""},{"Add":"dependencies = ["},{"Add":" \"cfg-if 0.1.10\","},{"Add":" \"cloudabi\","},{"Add":" \"libc\","},{"Add":" \"redox_syscall\","},{"Add":" \"rustc_version\","},{"Add":" \"smallvec\","},{"Add":" \"winapi 0.3.9\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"pin-project\""},{"Add":"version = \"1.0.1\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"ee41d838744f60d959d7074e3afb6b35c7456d0f61cad38a24e35e6553f73841\""},{"Add":"dependencies = ["},{"Add":" \"pin-project-internal\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"pin-project-internal\""},{"Add":"version = \"1.0.1\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"81a4ffa594b66bff340084d4081df649a7dc049ac8d7fc458d8e628bfbbb2f86\""},{"Add":"dependencies = ["},{"Add":" \"proc-macro2\","},{"Add":" \"quote\","},{"Add":" \"syn\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"pin-project-lite\""},{"Add":"version = \"0.1.11\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"c917123afa01924fc84bb20c4c03f004d9c38e5127e3c039bbf7f4b9c76a2f6b\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"pin-utils\""},{"Add":"version = \"0.1.0\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"pkg-config\""},{"Add":"version = \"0.3.19\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"3831453b3449ceb48b6d9c7ad7c96d5ea673e9b470a1dc578c2ce6521230884c\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"proc-macro-hack\""},{"Add":"version = \"0.5.19\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"dbf0c48bc1d91375ae5c3cd81e3722dff1abcf81a30960240640d223f59fe0e5\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"proc-macro-nested\""},{"Add":"version = \"0.1.6\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"eba180dafb9038b050a4c280019bbedf9f2467b61e5d892dcad585bb57aadc5a\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"proc-macro2\""},{"Add":"version = \"1.0.24\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"1e0704ee1a7e00d7bb417d0770ea303c1bccbabf0ef1667dae92b5967f5f8a71\""},{"Add":"dependencies = ["},{"Add":" \"unicode-xid\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"quick-error\""},{"Add":"version = \"1.2.3\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"a1d01941d82fa2ab50be1e79e6714289dd7cde78eba4c074bc5a4374f650dfe0\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"quote\""},{"Add":"version = \"1.0.7\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"aa563d17ecb180e500da1cfd2b028310ac758de548efdd203e18f283af693f37\""},{"Add":"dependencies = ["},{"Add":" \"proc-macro2\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"rand\""},{"Add":"version = \"0.4.6\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"552840b97013b1a26992c11eac34bdd778e464601a4c2054b5f0bff7c6761293\""},{"Add":"dependencies = ["},{"Add":" \"fuchsia-cprng\","},{"Add":" \"libc\","},{"Add":" \"rand_core 0.3.1\","},{"Add":" \"rdrand\","},{"Add":" \"winapi 0.3.9\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"rand_core\""},{"Add":"version = \"0.3.1\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"7a6fdeb83b075e8266dcc8762c22776f6877a63111121f5f8c7411e5be7eed4b\""},{"Add":"dependencies = ["},{"Add":" \"rand_core 0.4.2\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"rand_core\""},{"Add":"version = \"0.4.2\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"9c33a3c44ca05fa6f1807d8e6743f3824e8509beca625669633be0acbdf509dc\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"rdrand\""},{"Add":"version = \"0.4.0\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"678054eb77286b51581ba43620cc911abf02758c91f93f479767aed0f90458b2\""},{"Add":"dependencies = ["},{"Add":" \"rand_core 0.3.1\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"redox_syscall\""},{"Add":"version = \"0.1.57\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"41cc0f7e4d5d4544e8861606a285bb08d3e70712ccc7d2b84d7c0ccfaf4b05ce\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"redox_users\""},{"Add":"version = \"0.3.5\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"de0737333e7a9502c789a36d7c7fa6092a49895d4faa31ca5df163857ded2e9d\""},{"Add":"dependencies = ["},{"Add":" \"getrandom\","},{"Add":" \"redox_syscall\","},{"Add":" \"rust-argon2\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"regex\""},{"Add":"version = \"1.4.1\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"8963b85b8ce3074fecffde43b4b0dded83ce2f367dc8d363afc56679f3ee820b\""},{"Add":"dependencies = ["},{"Add":" \"aho-corasick\","},{"Add":" \"memchr\","},{"Add":" \"regex-syntax\","},{"Add":" \"thread_local\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"regex-syntax\""},{"Add":"version = \"0.6.20\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"8cab7a364d15cde1e505267766a2d3c4e22a843e1a601f0fa7564c0f82ced11c\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"remove_dir_all\""},{"Add":"version = \"0.5.3\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"3acd125665422973a33ac9d3dd2df85edad0f4ae9b00dafb1a05e43a9f5ef8e7\""},{"Add":"dependencies = ["},{"Add":" \"winapi 0.3.9\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"rust-argon2\""},{"Add":"version = \"0.8.2\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"9dab61250775933275e84053ac235621dfb739556d5c54a2f2e9313b7cf43a19\""},{"Add":"dependencies = ["},{"Add":" \"base64 0.12.3\","},{"Add":" \"blake2b_simd\","},{"Add":" \"constant_time_eq\","},{"Add":" \"crossbeam-utils\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"rustc-serialize\""},{"Add":"version = \"0.3.24\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"dcf128d1287d2ea9d80910b5f1120d0b8eede3fbf1abe91c40d39ea7d51e6fda\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"rustc_version\""},{"Add":"version = \"0.2.3\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"138e3e0acb6c9fb258b19b67cb8abd63c00679d2851805ea151465464fe9030a\""},{"Add":"dependencies = ["},{"Add":" \"semver\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"safemem\""},{"Add":"version = \"0.3.3\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"ef703b7cb59335eae2eb93ceb664c0eb7ea6bf567079d843e09420219668e072\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"scopeguard\""},{"Add":"version = \"1.1.0\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"d29ab0c6d3fc0ee92fe66e2d99f700eab17a8d57d1c1d3b748380fb20baa78cd\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"semver\""},{"Add":"version = \"0.9.0\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"1d7eb9ef2c18661902cc47e535f9bc51b78acd254da71d375c2f6720d9a40403\""},{"Add":"dependencies = ["},{"Add":" \"semver-parser\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"semver-parser\""},{"Add":"version = \"0.7.0\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"388a1df253eca08550bef6c72392cfe7c30914bf41df5269b68cbd6ff8f570a3\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"serde\""},{"Add":"version = \"1.0.117\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"b88fa983de7720629c9387e9f517353ed404164b1e482c970a90c1a4aaf7dc1a\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"serde_derive\""},{"Add":"version = \"1.0.117\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"cbd1ae72adb44aab48f325a02444a5fc079349a8d804c1fc922aed3f7454c74e\""},{"Add":"dependencies = ["},{"Add":" \"proc-macro2\","},{"Add":" \"quote\","},{"Add":" \"syn\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"slab\""},{"Add":"version = \"0.4.2\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"c111b5bd5695e56cffe5129854aa230b39c93a305372fdbb2668ca2394eea9f8\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"smallvec\""},{"Add":"version = \"0.6.13\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"f7b0758c52e15a8b5e3691eae6cc559f08eee9406e548a4477ba4e67770a82b6\""},{"Add":"dependencies = ["},{"Add":" \"maybe-uninit\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"syn\""},{"Add":"version = \"1.0.48\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"cc371affeffc477f42a221a1e4297aedcea33d47d19b61455588bd9d8f6b19ac\""},{"Add":"dependencies = ["},{"Add":" \"proc-macro2\","},{"Add":" \"quote\","},{"Add":" \"unicode-xid\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"tempdir\""},{"Add":"version = \"0.3.7\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"15f2b5fb00ccdf689e0149d1b1b3c03fead81c2b37735d812fa8bddbbf41b6d8\""},{"Add":"dependencies = ["},{"Add":" \"rand\","},{"Add":" \"remove_dir_all\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"termcolor\""},{"Add":"version = \"1.1.0\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"bb6bfa289a4d7c5766392812c0a1f4c1ba45afa1ad47803c11e1f407d846d75f\""},{"Add":"dependencies = ["},{"Add":" \"winapi-util\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"thiserror\""},{"Add":"version = \"1.0.21\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"318234ffa22e0920fe9a40d7b8369b5f649d490980cf7aadcf1eb91594869b42\""},{"Add":"dependencies = ["},{"Add":" \"thiserror-impl\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"thiserror-impl\""},{"Add":"version = \"1.0.21\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"cae2447b6282786c3493999f40a9be2a6ad20cb8bd268b0a0dbf5a065535c0ab\""},{"Add":"dependencies = ["},{"Add":" \"proc-macro2\","},{"Add":" \"quote\","},{"Add":" \"syn\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"thread_local\""},{"Add":"version = \"1.0.1\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"d40c6d1b69745a6ec6fb1ca717914848da4b44ae29d9b3080cbee91d72a69b14\""},{"Add":"dependencies = ["},{"Add":" \"lazy_static\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"thrussh\""},{"Add":"version = \"0.21.5\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"1452876d42918bfe7b42a983c9bcd19cb5ce14d2e84438f0b4db60d4e7800a4d\""},{"Add":"dependencies = ["},{"Add":" \"bitflags\","},{"Add":" \"byteorder\","},{"Add":" \"cryptovec 0.4.6\","},{"Add":" \"futures 0.1.30\","},{"Add":" \"log\","},{"Add":" \"openssl\","},{"Add":" \"thrussh-keys 0.11.9\","},{"Add":" \"thrussh-libsodium 0.1.4\","},{"Add":" \"tokio 0.1.22\","},{"Add":" \"tokio-io\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"thrussh\""},{"Add":"version = \"0.29.4\""},{"Add":"dependencies = ["},{"Add":" \"anyhow\","},{"Add":" \"bitflags\","},{"Add":" \"byteorder\","},{"Add":" \"cryptovec 0.6.0\","},{"Add":" \"env_logger\","},{"Add":" \"flate2\","},{"Add":" \"futures 0.3.7\","},{"Add":" \"log\","},{"Add":" \"openssl\","},{"Add":" \"thiserror\","},{"Add":" \"thrussh-keys 0.18.3\","},{"Add":" \"thrussh-libsodium 0.2.1\","},{"Add":" \"tokio 0.2.22\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"thrussh-config\""},{"Add":"version = \"0.2.1\""},{"Add":"dependencies = ["},{"Add":" \"dirs 1.0.5\","},{"Add":" \"futures 0.1.30\","},{"Add":" \"lazy_static\","},{"Add":" \"log\","},{"Add":" \"regex\","},{"Add":" \"thrussh 0.21.5\","},{"Add":" \"tokio 0.1.22\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"thrussh-keys\""},{"Add":"version = \"0.11.9\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"5e72f93d9f96aa5ce3f38c1e105c668ce06867b6cdbffe68c261cfb4d59c7066\""},{"Add":"dependencies = ["},{"Add":" \"base64 0.9.3\","},{"Add":" \"bit-vec 0.4.4\","},{"Add":" \"byteorder\","},{"Add":" \"cryptovec 0.4.6\","},{"Add":" \"dirs 1.0.5\","},{"Add":" \"futures 0.1.30\","},{"Add":" \"hex\","},{"Add":" \"log\","},{"Add":" \"num-bigint 0.1.44\","},{"Add":" \"num-integer\","},{"Add":" \"openssl\","},{"Add":" \"serde\","},{"Add":" \"serde_derive\","},{"Add":" \"thrussh-libsodium 0.1.4\","},{"Add":" \"tokio 0.1.22\","},{"Add":" \"yasna 0.1.3\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"thrussh-keys\""},{"Add":"version = \"0.18.3\""},{"Add":"dependencies = ["},{"Add":" \"anyhow\","},{"Add":" \"bit-vec 0.6.2\","},{"Add":" \"byteorder\","},{"Add":" \"cryptovec 0.6.0\","},{"Add":" \"data-encoding\","},{"Add":" \"dirs 2.0.2\","},{"Add":" \"env_logger\","},{"Add":" \"futures 0.3.7\","},{"Add":" \"log\","},{"Add":" \"num-bigint 0.2.6\","},{"Add":" \"num-integer\","},{"Add":" \"openssl\","},{"Add":" \"serde\","},{"Add":" \"serde_derive\","},{"Add":" \"tempdir\","},{"Add":" \"thiserror\","},{"Add":" \"thrussh-libsodium 0.2.1\","},{"Add":" \"tokio 0.2.22\","},{"Add":" \"yasna 0.3.2\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"thrussh-libsodium\""},{"Add":"version = \"0.1.4\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"1bdeecb0f876ad8187bd0bd9234fd23e70e6c03cf48c29d5967d55cba3d45a3a\""},{"Add":"dependencies = ["},{"Add":" \"libc\","},{"Add":" \"pkg-config\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"thrussh-libsodium\""},{"Add":"version = \"0.2.1\""},{"Add":"dependencies = ["},{"Add":" \"lazy_static\","},{"Add":" \"libc\","},{"Add":" \"libsodium-sys\","},{"Add":" \"pkg-config\","},{"Add":" \"vcpkg\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"tokio\""},{"Add":"version = \"0.1.22\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"5a09c0b5bb588872ab2f09afa13ee6e9dac11e10a0ec9e8e3ba39a5a5d530af6\""},{"Add":"dependencies = ["},{"Add":" \"bytes 0.4.12\","},{"Add":" \"futures 0.1.30\","},{"Add":" \"mio\","},{"Add":" \"num_cpus\","},{"Add":" \"tokio-codec\","},{"Add":" \"tokio-current-thread\","},{"Add":" \"tokio-executor\","},{"Add":" \"tokio-fs\","},{"Add":" \"tokio-io\","},{"Add":" \"tokio-reactor\","},{"Add":" \"tokio-sync\","},{"Add":" \"tokio-tcp\","},{"Add":" \"tokio-threadpool\","},{"Add":" \"tokio-timer\","},{"Add":" \"tokio-udp\","},{"Add":" \"tokio-uds\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"tokio\""},{"Add":"version = \"0.2.22\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"5d34ca54d84bf2b5b4d7d31e901a8464f7b60ac145a284fba25ceb801f2ddccd\""},{"Add":"dependencies = ["},{"Add":" \"bytes 0.5.6\","},{"Add":" \"fnv\","},{"Add":" \"futures-core\","},{"Add":" \"iovec\","},{"Add":" \"lazy_static\","},{"Add":" \"libc\","},{"Add":" \"memchr\","},{"Add":" \"mio\","},{"Add":" \"mio-uds\","},{"Add":" \"num_cpus\","},{"Add":" \"pin-project-lite\","},{"Add":" \"slab\","},{"Add":" \"tokio-macros\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"tokio-codec\""},{"Add":"version = \"0.1.2\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"25b2998660ba0e70d18684de5d06b70b70a3a747469af9dea7618cc59e75976b\""},{"Add":"dependencies = ["},{"Add":" \"bytes 0.4.12\","},{"Add":" \"futures 0.1.30\","},{"Add":" \"tokio-io\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"tokio-current-thread\""},{"Add":"version = \"0.1.7\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"b1de0e32a83f131e002238d7ccde18211c0a5397f60cbfffcb112868c2e0e20e\""},{"Add":"dependencies = ["},{"Add":" \"futures 0.1.30\","},{"Add":" \"tokio-executor\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"tokio-executor\""},{"Add":"version = \"0.1.10\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"fb2d1b8f4548dbf5e1f7818512e9c406860678f29c300cdf0ebac72d1a3a1671\""},{"Add":"dependencies = ["},{"Add":" \"crossbeam-utils\","},{"Add":" \"futures 0.1.30\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"tokio-fs\""},{"Add":"version = \"0.1.7\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"297a1206e0ca6302a0eed35b700d292b275256f596e2f3fea7729d5e629b6ff4\""},{"Add":"dependencies = ["},{"Add":" \"futures 0.1.30\","},{"Add":" \"tokio-io\","},{"Add":" \"tokio-threadpool\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"tokio-io\""},{"Add":"version = \"0.1.13\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"57fc868aae093479e3131e3d165c93b1c7474109d13c90ec0dda2a1bbfff0674\""},{"Add":"dependencies = ["},{"Add":" \"bytes 0.4.12\","},{"Add":" \"futures 0.1.30\","},{"Add":" \"log\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"tokio-macros\""},{"Add":"version = \"0.2.5\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"f0c3acc6aa564495a0f2e1d59fab677cd7f81a19994cfc7f3ad0e64301560389\""},{"Add":"dependencies = ["},{"Add":" \"proc-macro2\","},{"Add":" \"quote\","},{"Add":" \"syn\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"tokio-reactor\""},{"Add":"version = \"0.1.12\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"09bc590ec4ba8ba87652da2068d150dcada2cfa2e07faae270a5e0409aa51351\""},{"Add":"dependencies = ["},{"Add":" \"crossbeam-utils\","},{"Add":" \"futures 0.1.30\","},{"Add":" \"lazy_static\","},{"Add":" \"log\","},{"Add":" \"mio\","},{"Add":" \"num_cpus\","},{"Add":" \"parking_lot\","},{"Add":" \"slab\","},{"Add":" \"tokio-executor\","},{"Add":" \"tokio-io\","},{"Add":" \"tokio-sync\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"tokio-sync\""},{"Add":"version = \"0.1.8\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"edfe50152bc8164fcc456dab7891fa9bf8beaf01c5ee7e1dd43a397c3cf87dee\""},{"Add":"dependencies = ["},{"Add":" \"fnv\","},{"Add":" \"futures 0.1.30\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"tokio-tcp\""},{"Add":"version = \"0.1.4\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"98df18ed66e3b72e742f185882a9e201892407957e45fbff8da17ae7a7c51f72\""},{"Add":"dependencies = ["},{"Add":" \"bytes 0.4.12\","},{"Add":" \"futures 0.1.30\","},{"Add":" \"iovec\","},{"Add":" \"mio\","},{"Add":" \"tokio-io\","},{"Add":" \"tokio-reactor\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"tokio-threadpool\""},{"Add":"version = \"0.1.18\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"df720b6581784c118f0eb4310796b12b1d242a7eb95f716a8367855325c25f89\""},{"Add":"dependencies = ["},{"Add":" \"crossbeam-deque\","},{"Add":" \"crossbeam-queue\","},{"Add":" \"crossbeam-utils\","},{"Add":" \"futures 0.1.30\","},{"Add":" \"lazy_static\","},{"Add":" \"log\","},{"Add":" \"num_cpus\","},{"Add":" \"slab\","},{"Add":" \"tokio-executor\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"tokio-timer\""},{"Add":"version = \"0.2.13\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"93044f2d313c95ff1cb7809ce9a7a05735b012288a888b62d4434fd58c94f296\""},{"Add":"dependencies = ["},{"Add":" \"crossbeam-utils\","},{"Add":" \"futures 0.1.30\","},{"Add":" \"slab\","},{"Add":" \"tokio-executor\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"tokio-udp\""},{"Add":"version = \"0.1.6\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"e2a0b10e610b39c38b031a2fcab08e4b82f16ece36504988dcbd81dbba650d82\""},{"Add":"dependencies = ["},{"Add":" \"bytes 0.4.12\","},{"Add":" \"futures 0.1.30\","},{"Add":" \"log\","},{"Add":" \"mio\","},{"Add":" \"tokio-codec\","},{"Add":" \"tokio-io\","},{"Add":" \"tokio-reactor\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"tokio-uds\""},{"Add":"version = \"0.2.7\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"ab57a4ac4111c8c9dbcf70779f6fc8bc35ae4b2454809febac840ad19bd7e4e0\""},{"Add":"dependencies = ["},{"Add":" \"bytes 0.4.12\","},{"Add":" \"futures 0.1.30\","},{"Add":" \"iovec\","},{"Add":" \"libc\","},{"Add":" \"log\","},{"Add":" \"mio\","},{"Add":" \"mio-uds\","},{"Add":" \"tokio-codec\","},{"Add":" \"tokio-io\","},{"Add":" \"tokio-reactor\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"unicode-xid\""},{"Add":"version = \"0.2.1\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"f7fe0bb3479651439c9112f72b6c505038574c9fbb575ed1bf3b797fa39dd564\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"vcpkg\""},{"Add":"version = \"0.2.10\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"6454029bf181f092ad1b853286f23e2c507d8e8194d01d92da4a55c274a5508c\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"wasi\""},{"Add":"version = \"0.9.0+wasi-snapshot-preview1\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"cccddf32554fecc6acb585f82a32a72e28b48f8c4c1883ddfeeeaa96f7d8e519\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"winapi\""},{"Add":"version = \"0.2.8\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"167dc9d6949a9b857f3451275e911c3f44255842c1f7a76f33c55103a909087a\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"winapi\""},{"Add":"version = \"0.3.9\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419\""},{"Add":"dependencies = ["},{"Add":" \"winapi-i686-pc-windows-gnu\","},{"Add":" \"winapi-x86_64-pc-windows-gnu\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"winapi-build\""},{"Add":"version = \"0.1.1\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"2d315eee3b34aca4797b2da6b13ed88266e6d612562a0c46390af8299fc699bc\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"winapi-i686-pc-windows-gnu\""},{"Add":"version = \"0.4.0\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"winapi-util\""},{"Add":"version = \"0.1.5\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"70ec6ce85bb158151cae5e5c87f95a8e97d2c0c4b001223f33a334e3ce5de178\""},{"Add":"dependencies = ["},{"Add":" \"winapi 0.3.9\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"winapi-x86_64-pc-windows-gnu\""},{"Add":"version = \"0.4.0\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f\""},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"ws2_32-sys\""},{"Add":"version = \"0.2.1\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"d59cefebd0c892fa2dd6de581e937301d8552cb44489cdff035c6187cb63fa5e\""},{"Add":"dependencies = ["},{"Add":" \"winapi 0.2.8\","},{"Add":" \"winapi-build\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"yasna\""},{"Add":"version = \"0.1.3\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"3a31ff5b5f5fcc70c5da4fcbdcbd91d541bb95b0b2517a3ca5cdc49fd3692cbb\""},{"Add":"dependencies = ["},{"Add":" \"bit-vec 0.4.4\","},{"Add":" \"num\","},{"Add":"]"},{"Add":""},{"Add":"[[package]]"},{"Add":"name = \"yasna\""},{"Add":"version = \"0.3.2\""},{"Add":"source = \"registry+https://github.com/rust-lang/crates.io-index\""},{"Add":"checksum = \"0de7bff972b4f2a06c85f6d8454b09df153af7e3a4ec2aac81db1b105b684ddb\""},{"Add":"dependencies = ["},{"Add":" \"bit-vec 0.6.2\","},{"Add":" \"num-bigint 0.2.6\","},{"Add":"]"}]}}],"owner":"pijul","repo":"thrussh","token":"Dvd+PD14H8IHYyHlSzmj4/v0ckwqoR45gQqOBkuw1MU=","login":null}

…

Dependencies

Change contents