{"header":{"message":"Adding support for aes256-gcm","description":null,"timestamp":"2025-08-09T16:59:12.882205172Z","authors":[{}]},"hash":"WX7UY5KKUXOHBGPNWJC6ZQDQ3LFGNTKGF6ZQFIPYNI6H5IMWGOYAC","authors":[{"login":"pmeunier","key":"FZQ2g7VfnzLYM4mtTVDk9HAZjA8Jk9ndkwN1icgbtWUr"}],"deps":{"hashes":[["WX7UY5KKUXOHBGPNWJC6ZQDQ3LFGNTKGF6ZQFIPYNI6H5IMWGOYAC","Adding support for aes256-gcm"],["AA",null],["OBHPOIUH2CPAB2ORVMOGAAQVN4NYP6GHGTIODEQ46VUFNZIUAIRQC","Modernising the API with async traits"],["D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC","Fixing the terrapin attack mitigation"],["WXZWQLGLNQ3QRHMBH7YPTHKSPUST4HD34H3PW5E4LHQYH3KLNHYAC","Correct negotiation without OpenSSL"],["VJIXIN4TVZX2ZELE3H5PVZIO6JIG7JZ3UKEJC7TAUYLOPW6GOGOQC","Fixing CVE-2023-48795"],["2B2UUFXGXMUGYT7KW6PYXSXIRVLXNBUNY6I47ULENHCSLOR4OG5QC","Fixing the doc tests"],["7FRJYUI62VW257VVFQXND6OKSAILVTHGEJCXFE6CG6FIOIUTDVYAC","Reboot because of a bad change"],["TAOFQAIISOBF3NJ5BG72NRG5JSTIJN4X2QZXFPB75US6WTFSK7DQC","cargo fmt"],["2WEO7OZLWJJPUYK4WXLT5FD46G2MAEIHEYMDW5GASCBUNKOPXCVAC","Version updates: getting rid of anyhow + moving to Tokio 1.0"],["32GIIFWR6CUE24WCZJHM2D76QVXV4SNPOUNXJB62LGALJJSWCZUQC","Fixing strict mode"],["NHOSLQGG4CIWBE7VKL5MB7PSY3RZ5IVDFENMGZG6X755GGZ6B3VQC","Thrussh: making OpenSSL optional"],["UHAEQPZUODJ5YVBZJPPJVLO7EBW6DC2JXHQBN26ARELAVULG3JUQC","Support ecdsa-sha2-nistp256 keys for authentication"],["SMUTYV2CTAFI2CCZW3K6FSO2PNTIBQZOPKKURC3P2HZYBQNMP7CAC","Fixing warnings"]],"deps":["OBHPOIUH2CPAB2ORVMOGAAQVN4NYP6GHGTIODEQ46VUFNZIUAIRQC"],"known":["7FRJYUI62VW257VVFQXND6OKSAILVTHGEJCXFE6CG6FIOIUTDVYAC","2WEO7OZLWJJPUYK4WXLT5FD46G2MAEIHEYMDW5GASCBUNKOPXCVAC","2B2UUFXGXMUGYT7KW6PYXSXIRVLXNBUNY6I47ULENHCSLOR4OG5QC","NHOSLQGG4CIWBE7VKL5MB7PSY3RZ5IVDFENMGZG6X755GGZ6B3VQC","WXZWQLGLNQ3QRHMBH7YPTHKSPUST4HD34H3PW5E4LHQYH3KLNHYAC","TAOFQAIISOBF3NJ5BG72NRG5JSTIJN4X2QZXFPB75US6WTFSK7DQC","UHAEQPZUODJ5YVBZJPPJVLO7EBW6DC2JXHQBN26ARELAVULG3JUQC","VJIXIN4TVZX2ZELE3H5PVZIO6JIG7JZ3UKEJC7TAUYLOPW6GOGOQC","D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC","32GIIFWR6CUE24WCZJHM2D76QVXV4SNPOUNXJB62LGALJJSWCZUQC","SMUTYV2CTAFI2CCZW3K6FSO2PNTIBQZOPKKURC3P2HZYBQNMP7CAC"]},"hunks":[{"Edit":{"inode":{"change":3,"pos":268386},"path":"thrussh/src/negotiation.rs","line":57,"atom":{"EdgeMap":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":270075},"to":{"change":2,"start":4472,"end":4473},"introduced_by":2}],"inode":{"change":3,"pos":268386}}},"contents":[{"Del":"\n"}]}},{"Replacement":{"inode":{"change":3,"pos":268386},"path":"thrussh/src/negotiation.rs","line":74,"ins":{"up_context":[{"change":3,"pos":391}],"down_context":[{"change":3,"pos":442}],"flag":"BLOCK","start":0,"end":77,"inode":{"change":3,"pos":268386}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":391},"to":{"change":3,"start":391,"end":442},"introduced_by":3}],"inode":{"change":3,"pos":268386}},"ins_contents":[{"Add":" cipher: &[cipher::chacha20poly1305::NAME, cipher::aes256_gcm::NAME],"}],"del_contents":[{"Del":" cipher: &[cipher::chacha20poly1305::NAME],\n"}]}},{"Replacement":{"inode":{"change":3,"pos":268386},"path":"thrussh/src/negotiation.rs","line":88,"ins":{"up_context":[{"change":3,"pos":15559}],"down_context":[{"change":3,"pos":15610}],"flag":"BLOCK","start":78,"end":155,"inode":{"change":3,"pos":268386}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":15559},"to":{"change":3,"start":15559,"end":15610},"introduced_by":3}],"inode":{"change":3,"pos":268386}},"ins_contents":[{"Add":" cipher: &[cipher::chacha20poly1305::NAME, cipher::aes256_gcm::NAME],"}],"del_contents":[{"Del":" cipher: &[cipher::chacha20poly1305::NAME],\n"}]}},{"Replacement":{"inode":{"change":3,"pos":268386},"path":"thrussh/src/negotiation.rs","line":118,"ins":{"up_context":[{"change":3,"pos":1325}],"down_context":[{"change":3,"pos":1376}],"flag":"BLOCK","start":156,"end":233,"inode":{"change":3,"pos":268386}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":1325},"to":{"change":3,"start":1325,"end":1376},"introduced_by":3}],"inode":{"change":3,"pos":268386}},"ins_contents":[{"Add":" cipher: &[cipher::chacha20poly1305::NAME, cipher::aes256_gcm::NAME],"}],"del_contents":[{"Del":" cipher: &[cipher::chacha20poly1305::NAME],\n"}]}},{"Replacement":{"inode":{"change":3,"pos":268386},"path":"thrussh/src/negotiation.rs","line":128,"ins":{"up_context":[{"change":3,"pos":270223}],"down_context":[{"change":3,"pos":84}],"flag":"BLOCK","start":234,"end":311,"inode":{"change":3,"pos":268386}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":270223},"to":{"change":3,"start":33,"end":84},"introduced_by":3}],"inode":{"change":3,"pos":268386}},"ins_contents":[{"Add":" cipher: &[cipher::chacha20poly1305::NAME, cipher::aes256_gcm::NAME],"}],"del_contents":[{"Del":" cipher: &[cipher::chacha20poly1305::NAME],\n"}]}},{"Replacement":{"inode":{"change":3,"pos":268386},"path":"thrussh/src/negotiation.rs","line":346,"ins":{"up_context":[{"change":3,"pos":275820}],"down_context":[{"change":3,"pos":275856}],"flag":"BLOCK","start":312,"end":353,"inode":{"change":3,"pos":268386}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":275820},"to":{"change":3,"start":692,"end":740},"introduced_by":3}],"inode":{"change":3,"pos":268386}},"ins_contents":[{"Add":" rand::rng().fill_bytes(&mut cookie);"}],"del_contents":[{"Del":" rand::thread_rng().fill_bytes(&mut cookie);\n"}]}},{"Replacement":{"inode":{"change":3,"pos":278640},"path":"thrussh/src/lib.rs","line":264,"ins":{"up_context":[{"change":3,"pos":289921}],"down_context":[{"change":3,"pos":289933}],"flag":"BLOCK","start":354,"end":370,"inode":{"change":3,"pos":278640}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":289921},"to":{"change":3,"start":289921,"end":289933},"introduced_by":3}],"inode":{"change":3,"pos":278640}},"ins_contents":[{"Add":"pub mod cipher;"}],"del_contents":[{"Del":"mod cipher;\n"}]}},{"Edit":{"inode":{"change":3,"pos":306916},"path":"thrussh/src/kex.rs","line":55,"atom":{"NewVertex":{"up_context":[{"change":3,"pos":308436}],"down_context":[{"change":3,"pos":308436}],"flag":"BLOCK","start":371,"end":443,"inode":{"change":3,"pos":306916}}},"contents":[{"Add":" static IV_BUF: RefCell = RefCell::new(CryptoVec::new());"}]}},{"Replacement":{"inode":{"change":3,"pos":306916},"path":"thrussh/src/kex.rs","line":83,"ins":{"up_context":[{"change":3,"pos":309346}],"down_context":[{"change":3,"pos":309389}],"flag":"BLOCK","start":444,"end":498,"inode":{"change":3,"pos":306916}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":309346},"to":{"change":3,"start":1015,"end":1076},"introduced_by":3}],"inode":{"change":3,"pos":306916}},"ins_contents":[{"Add":" rand::rng().fill_bytes(&mut server_secret.0);"}],"del_contents":[{"Del":" rand::thread_rng().fill_bytes(&mut server_secret.0);\n"}]}},{"Replacement":{"inode":{"change":3,"pos":306916},"path":"thrussh/src/kex.rs","line":104,"ins":{"up_context":[{"change":3,"pos":310050}],"down_context":[{"change":3,"pos":310093}],"flag":"BLOCK","start":499,"end":553,"inode":{"change":3,"pos":306916}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":310050},"to":{"change":3,"start":1077,"end":1138},"introduced_by":3}],"inode":{"change":3,"pos":306916}},"ins_contents":[{"Add":" rand::rng().fill_bytes(&mut client_secret.0);"}],"del_contents":[{"Del":" rand::thread_rng().fill_bytes(&mut client_secret.0);\n"}]}},{"Edit":{"inode":{"change":3,"pos":306916},"path":"thrussh/src/kex.rs","line":167,"atom":{"NewVertex":{"up_context":[{"change":3,"pos":312336}],"down_context":[{"change":3,"pos":312336}],"flag":"BLOCK","start":554,"end":677,"inode":{"change":3,"pos":306916}}},"contents":[{"Add":" #[cfg(feature = \"openssl\")]"},{"Add":" super::cipher::aes256_gcm::NAME => &super::cipher::aes256_gcm::CIPHER,"}]}},{"Replacement":{"inode":{"change":3,"pos":306916},"path":"thrussh/src/kex.rs","line":175,"ins":{"up_context":[{"change":3,"pos":312504}],"down_context":[{"change":3,"pos":312876}],"flag":"BLOCK","start":678,"end":950,"inode":{"change":3,"pos":306916}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":312504},"to":{"change":3,"start":14969,"end":15063},"introduced_by":3},{"previous":"","flag":"DELETED","from":{"change":3,"pos":15063},"to":{"change":3,"start":312599,"end":312876},"introduced_by":3},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":312599},"to":{"change":3,"start":312599,"end":312876},"introduced_by":3}],"inode":{"change":3,"pos":306916}},"ins_contents":[{"Add":" IV_BUF.with(|iv| {"},{"Add":" let compute_key = |c, key: &mut CryptoVec, len| -> Result<(), crate::Error> {"},{"Add":" let mut buffer = buffer.borrow_mut();"},{"Add":" buffer.clear();"},{"Add":" key.clear();"}],"del_contents":[{"Del":" let compute_key = |c, key: &mut CryptoVec, len| -> Result<(), crate::Error> {\n"},{"Del":" let mut buffer = buffer.borrow_mut();\n buffer.clear();\n key.clear();\n\n if let Some(ref shared) = self.shared_secret {\n buffer.extend_ssh_mpint(&shared.0);\n }\n"}]}},{"Edit":{"inode":{"change":3,"pos":306916},"path":"thrussh/src/kex.rs","line":181,"atom":{"EdgeMap":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":312877},"to":{"change":3,"start":312877,"end":313028},"introduced_by":3},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":313028},"to":{"change":3,"start":1339,"end":1372},"introduced_by":3},{"previous":"","flag":"DELETED","from":{"change":3,"pos":1372},"to":{"change":3,"start":1463,"end":1661},"introduced_by":3},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":1463},"to":{"change":3,"start":1463,"end":1661},"introduced_by":3},{"previous":"","flag":"DELETED","from":{"change":3,"pos":1661},"to":{"change":3,"start":313273,"end":313463},"introduced_by":3},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":313273},"to":{"change":3,"start":313273,"end":313463},"introduced_by":3}],"inode":{"change":3,"pos":306916}}},"contents":[{"Del":" buffer.extend(exchange_hash.as_ref());\n buffer.push(c);\n buffer.extend(session_id.as_ref());\n"},{"Del":" let hash = {\n"},{"Del":" use sha2::Digest;\n let mut hasher = sha2::Sha256::new();\n hasher.update(&buffer[..]);\n hasher.finalize()\n"},{"Del":" };\n key.extend(hash.as_ref());\n\n while key.len() < len {\n // extend.\n buffer.clear();\n"}]}},{"Edit":{"inode":{"change":3,"pos":306916},"path":"thrussh/src/kex.rs","line":184,"atom":{"NewVertex":{"up_context":[{"change":3,"pos":313624}],"down_context":[{"change":3,"pos":313624}],"flag":"BLOCK","start":951,"end":952,"inode":{"change":3,"pos":306916}}},"contents":[{"Add":""}]}},{"Replacement":{"inode":{"change":3,"pos":306916},"path":"thrussh/src/kex.rs","line":186,"ins":{"up_context":[{"change":3,"pos":313687}],"down_context":[{"change":3,"pos":313731}],"flag":"BLOCK","start":953,"end":1053,"inode":{"change":3,"pos":306916}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":313687},"to":{"change":3,"start":313687,"end":313731},"introduced_by":3}],"inode":{"change":3,"pos":306916}},"ins_contents":[{"Add":" buffer.push(c);"},{"Add":" buffer.extend(session_id.as_ref());"}],"del_contents":[{"Del":" buffer.extend(key);\n"}]}},{"Replacement":{"inode":{"change":3,"pos":306916},"path":"thrussh/src/kex.rs","line":194,"ins":{"up_context":[{"change":3,"pos":313977}],"down_context":[{"change":3,"pos":314097}],"flag":"BLOCK","start":1054,"end":1105,"inode":{"change":3,"pos":306916}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":313977},"to":{"change":3,"start":313977,"end":314097},"introduced_by":3}],"inode":{"change":3,"pos":306916}},"ins_contents":[{"Add":" key.extend(hash.as_ref());"}],"del_contents":[{"Del":" key.extend(&hash.as_ref());\n }\n Ok(())\n };\n"}]}},{"Replacement":{"inode":{"change":3,"pos":306916},"path":"thrussh/src/kex.rs","line":196,"ins":{"up_context":[{"change":3,"pos":314098}],"down_context":[{"change":3,"pos":314280}],"flag":"BLOCK","start":1106,"end":2311,"inode":{"change":3,"pos":306916}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":314098},"to":{"change":3,"start":314098,"end":314280},"introduced_by":3}],"inode":{"change":3,"pos":306916}},"ins_contents":[{"Add":" while key.len() < len {"},{"Add":" // extend."},{"Add":" buffer.clear();"},{"Add":" if let Some(ref shared) = self.shared_secret {"},{"Add":" buffer.extend_ssh_mpint(&shared.0);"},{"Add":" }"},{"Add":" buffer.extend(exchange_hash.as_ref());"},{"Add":" buffer.extend(key);"},{"Add":" let hash = {"},{"Add":" use sha2::Digest;"},{"Add":" let mut hasher = sha2::Sha256::new();"},{"Add":" hasher.update(&buffer[..]);"},{"Add":" hasher.finalize()"},{"Add":" };"},{"Add":" key.extend(&hash.as_ref());"},{"Add":" }"},{"Add":" key.resize(len);"},{"Add":" Ok(())"},{"Add":" };"},{"Add":""},{"Add":" let (local_to_remote, local_to_remote_iv, remote_to_local, remote_to_local_iv) ="},{"Add":" if is_server {"},{"Add":" (b'D', b'B', b'C', b'A')"},{"Add":" } else {"},{"Add":" (b'C', b'A', b'D', b'B')"},{"Add":" };"}],"del_contents":[{"Del":" let (local_to_remote, remote_to_local) = if is_server {\n (b'D', b'C')\n } else {\n (b'C', b'D')\n };\n"}]}},{"Replacement":{"inode":{"change":3,"pos":306916},"path":"thrussh/src/kex.rs","line":223,"ins":{"up_context":[{"change":3,"pos":314281}],"down_context":[{"change":3,"pos":314476}],"flag":"BLOCK","start":2312,"end":2721,"inode":{"change":3,"pos":306916}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":314281},"to":{"change":3,"start":314281,"end":314476},"introduced_by":3}],"inode":{"change":3,"pos":306916}},"ins_contents":[{"Add":" let mut key = key.borrow_mut();"},{"Add":" compute_key(local_to_remote, &mut key, cipher.key_len)?;"},{"Add":" let mut iv = iv.borrow_mut();"},{"Add":" if cipher.iv_len > 0 {"},{"Add":" compute_key(local_to_remote_iv, &mut iv, cipher.iv_len)?;"},{"Add":" }"},{"Add":" let local_to_remote = (cipher.make_sealing_cipher)(&key, &iv);"}],"del_contents":[{"Del":" let mut key = key.borrow_mut();\n compute_key(local_to_remote, &mut key, cipher.key_len)?;\n let local_to_remote = (cipher.make_sealing_cipher)(&key);\n"}]}},{"Replacement":{"inode":{"change":3,"pos":306916},"path":"thrussh/src/kex.rs","line":231,"ins":{"up_context":[{"change":3,"pos":314477}],"down_context":[{"change":3,"pos":314624}],"flag":"BLOCK","start":2722,"end":3029,"inode":{"change":3,"pos":306916}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":314477},"to":{"change":3,"start":314477,"end":314624},"introduced_by":3}],"inode":{"change":3,"pos":306916}},"ins_contents":[{"Add":" compute_key(remote_to_local, &mut key, cipher.key_len)?;"},{"Add":" if cipher.iv_len > 0 {"},{"Add":" compute_key(remote_to_local_iv, &mut iv, cipher.iv_len)?;"},{"Add":" }"},{"Add":" let remote_to_local = (cipher.make_opening_cipher)(&key, &iv);"}],"del_contents":[{"Del":" compute_key(remote_to_local, &mut key, cipher.key_len)?;\n let remote_to_local = (cipher.make_opening_cipher)(&key);\n"}]}},{"Replacement":{"inode":{"change":3,"pos":306916},"path":"thrussh/src/kex.rs","line":237,"ins":{"up_context":[{"change":3,"pos":314625}],"down_context":[{"change":3,"pos":314780}],"flag":"BLOCK","start":3030,"end":3220,"inode":{"change":3,"pos":306916}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":314625},"to":{"change":3,"start":314625,"end":314780},"introduced_by":3}],"inode":{"change":3,"pos":306916}},"ins_contents":[{"Add":" Ok(super::cipher::CipherPair {"},{"Add":" local_to_remote: local_to_remote,"},{"Add":" remote_to_local: remote_to_local,"},{"Add":" })"}],"del_contents":[{"Del":" Ok(super::cipher::CipherPair {\n local_to_remote: local_to_remote,\n remote_to_local: remote_to_local,\n"}]}},{"Edit":{"inode":{"change":3,"pos":409086},"path":"thrussh/src/cipher/mod.rs","line":20,"atom":{"NewVertex":{"up_context":[{"change":3,"pos":23187}],"down_context":[{"change":3,"pos":409826}],"flag":"BLOCK","start":3221,"end":3269,"inode":{"change":3,"pos":409086}}},"contents":[{"Add":"#[cfg(feature = \"openssl\")]"},{"Add":"pub mod aes256_gcm;"}]}},{"Replacement":{"inode":{"change":3,"pos":409086},"path":"thrussh/src/cipher/mod.rs","line":28,"ins":{"up_context":[{"change":3,"pos":409955}],"down_context":[{"change":3,"pos":410079}],"flag":"BLOCK","start":3270,"end":3439,"inode":{"change":3,"pos":409086}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":409955},"to":{"change":3,"start":409955,"end":410079},"introduced_by":3}],"inode":{"change":3,"pos":409086}},"ins_contents":[{"Add":" pub iv_len: usize,"},{"Add":" pub make_opening_cipher: fn(key: &[u8], iv: &[u8]) -> OpeningCipher,"},{"Add":" pub make_sealing_cipher: fn(key: &[u8], iv: &[u8]) -> SealingCipher,"}],"del_contents":[{"Del":" pub make_opening_cipher: fn(key: &[u8]) -> OpeningCipher,\n pub make_sealing_cipher: fn(key: &[u8]) -> SealingCipher,\n"}]}},{"Edit":{"inode":{"change":3,"pos":409086},"path":"thrussh/src/cipher/mod.rs","line":36,"atom":{"NewVertex":{"up_context":[{"change":3,"pos":410182}],"down_context":[{"change":3,"pos":410182}],"flag":"BLOCK","start":3440,"end":3504,"inode":{"change":3,"pos":409086}}},"contents":[{"Add":" #[cfg(feature = \"openssl\")]"},{"Add":" Aes256Gcm(aes256_gcm::Key),"}]}},{"Edit":{"inode":{"change":3,"pos":409086},"path":"thrussh/src/cipher/mod.rs","line":45,"atom":{"NewVertex":{"up_context":[{"change":3,"pos":410393}],"down_context":[{"change":3,"pos":410393}],"flag":"BLOCK","start":3505,"end":3599,"inode":{"change":3,"pos":409086}}},"contents":[{"Add":" #[cfg(feature = \"openssl\")]"},{"Add":" OpeningCipher::Aes256Gcm(ref key) => key,"}]}},{"Edit":{"inode":{"change":3,"pos":409086},"path":"thrussh/src/cipher/mod.rs","line":54,"atom":{"NewVertex":{"up_context":[{"change":3,"pos":410512}],"down_context":[{"change":3,"pos":410512}],"flag":"BLOCK","start":3600,"end":3664,"inode":{"change":3,"pos":409086}}},"contents":[{"Add":" #[cfg(feature = \"openssl\")]"},{"Add":" Aes256Gcm(aes256_gcm::Key),"}]}},{"Edit":{"inode":{"change":3,"pos":409086},"path":"thrussh/src/cipher/mod.rs","line":63,"atom":{"NewVertex":{"up_context":[{"change":3,"pos":410729}],"down_context":[{"change":3,"pos":410729}],"flag":"BLOCK","start":3665,"end":3759,"inode":{"change":3,"pos":409086}}},"contents":[{"Add":" #[cfg(feature = \"openssl\")]"},{"Add":" SealingCipher::Aes256Gcm(ref key) => key,"}]}},{"Edit":{"inode":{"change":3,"pos":417020},"path":"thrussh/src/cipher/chacha20poly1305.rs","line":36,"atom":{"NewVertex":{"up_context":[{"change":3,"pos":418029}],"down_context":[{"change":3,"pos":418029}],"flag":"BLOCK","start":3760,"end":3775,"inode":{"change":3,"pos":417020}}},"contents":[{"Add":" iv_len: 0,"}]}},{"Replacement":{"inode":{"change":3,"pos":417020},"path":"thrussh/src/cipher/chacha20poly1305.rs","line":43,"ins":{"up_context":[{"change":3,"pos":418160}],"down_context":[{"change":3,"pos":418219}],"flag":"BLOCK","start":3776,"end":3845,"inode":{"change":3,"pos":417020}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":418160},"to":{"change":3,"start":418160,"end":418219},"introduced_by":3}],"inode":{"change":3,"pos":417020}},"ins_contents":[{"Add":"fn make_sealing_cipher(k: &[u8], _: &[u8]) -> super::SealingCipher {"}],"del_contents":[{"Del":"fn make_sealing_cipher(k: &[u8]) -> super::SealingCipher {\n"}]}},{"Replacement":{"inode":{"change":3,"pos":417020},"path":"thrussh/src/cipher/chacha20poly1305.rs","line":51,"ins":{"up_context":[{"change":3,"pos":418452}],"down_context":[{"change":3,"pos":418511}],"flag":"BLOCK","start":3846,"end":3915,"inode":{"change":3,"pos":417020}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":418452},"to":{"change":3,"start":418452,"end":418511},"introduced_by":3}],"inode":{"change":3,"pos":417020}},"ins_contents":[{"Add":"fn make_opening_cipher(k: &[u8], _: &[u8]) -> super::OpeningCipher {"}],"del_contents":[{"Del":"fn make_opening_cipher(k: &[u8]) -> super::OpeningCipher {\n"}]}},{"FileAdd":{"meta":{"basename":"aes256_gcm.rs","metadata":0},"context":[{"change":3,"pos":409076}],"contents":[{"Add":"// Copyright 2016 Pierre-Étienne Meunier"},{"Add":"//"},{"Add":"// Licensed under the Apache License, Version 2.0 (the \"License\");"},{"Add":"// you may not use this file except in compliance with the License."},{"Add":"// You may obtain a copy of the License at"},{"Add":"//"},{"Add":"// http://www.apache.org/licenses/LICENSE-2.0"},{"Add":"//"},{"Add":"// Unless required by applicable law or agreed to in writing, software"},{"Add":"// distributed under the License is distributed on an \"AS IS\" BASIS,"},{"Add":"// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied."},{"Add":"// See the License for the specific language governing permissions and"},{"Add":"// limitations under the License."},{"Add":"//"},{"Add":""},{"Add":"use super::super::Error;"},{"Add":"use byteorder::{BigEndian, ByteOrder};"},{"Add":"use openssl::symm::Cipher;"},{"Add":"use rand::Rng;"},{"Add":"use std::sync::atomic::{AtomicU64, Ordering};"},{"Add":""},{"Add":"pub const NAME: super::Name = super::Name(\"aes256-gcm@openssh.com\");"},{"Add":""},{"Add":"pub struct Key {"},{"Add":" cipher: openssl::symm::Cipher,"},{"Add":" key: [u8; 32],"},{"Add":" iv: (u32, AtomicU64),"},{"Add":"}"},{"Add":""},{"Add":"pub static CIPHER: super::Cipher = super::Cipher {"},{"Add":" _name: NAME,"},{"Add":" key_len: 32,"},{"Add":" iv_len: 12,"},{"Add":" make_sealing_cipher,"},{"Add":" make_opening_cipher,"},{"Add":"};"},{"Add":""},{"Add":"fn make_sealing_cipher(k: &[u8], i: &[u8]) -> super::SealingCipher {"},{"Add":" let mut key = [0; 32];"},{"Add":" key.clone_from_slice(k);"},{"Add":" let (a, b) = i.split_at(4);"},{"Add":" let a = BigEndian::read_u32(&a);"},{"Add":" let b = BigEndian::read_u64(&b);"},{"Add":" super::SealingCipher::Aes256Gcm(Key {"},{"Add":" key,"},{"Add":" iv: (a, b.into()),"},{"Add":" cipher: Cipher::aes_256_gcm(),"},{"Add":" })"},{"Add":"}"},{"Add":""},{"Add":"fn make_opening_cipher(k: &[u8], i: &[u8]) -> super::OpeningCipher {"},{"Add":" let mut key = [0; 32];"},{"Add":" key.clone_from_slice(k);"},{"Add":" let (a, b) = i.split_at(4);"},{"Add":" let a = BigEndian::read_u32(&a);"},{"Add":" let b = BigEndian::read_u64(&b);"},{"Add":" super::OpeningCipher::Aes256Gcm(Key {"},{"Add":" key,"},{"Add":" iv: (a, b.into()),"},{"Add":" cipher: Cipher::aes_256_gcm(),"},{"Add":" })"},{"Add":"}"},{"Add":""},{"Add":"impl super::OpeningKey for Key {"},{"Add":" fn decrypt_packet_length("},{"Add":" &self,"},{"Add":" _sequence_number: u32,"},{"Add":" encrypted_packet_length: [u8; 4],"},{"Add":" ) -> [u8; 4] {"},{"Add":" encrypted_packet_length"},{"Add":" }"},{"Add":""},{"Add":" fn tag_len(&self) -> usize {"},{"Add":" 16"},{"Add":" }"},{"Add":""},{"Add":" fn open<'a>("},{"Add":" &self,"},{"Add":" _sequence_number: u32,"},{"Add":" payload: &'a mut [u8],"},{"Add":" tag: &[u8],"},{"Add":" ) -> Result<&'a [u8], Error> {"},{"Add":" let (aad, data) = payload.split_at_mut(4);"},{"Add":" let mut iv = [0; 12];"},{"Add":" {"},{"Add":" let (a, b) = iv.split_at_mut(4);"},{"Add":" BigEndian::write_u32(a, self.iv.0);"},{"Add":" let counter = self.iv.1.fetch_add(1, Ordering::Relaxed);"},{"Add":" BigEndian::write_u64(b, counter);"},{"Add":" }"},{"Add":" let mut tag_ = [0; 16];"},{"Add":" tag_.clone_from_slice(tag);"},{"Add":" crypt_aead("},{"Add":" self.cipher,"},{"Add":" openssl::symm::Mode::Decrypt,"},{"Add":" &self.key,"},{"Add":" Some(&iv),"},{"Add":" aad,"},{"Add":" data,"},{"Add":" &mut tag_,"},{"Add":" )"},{"Add":" .unwrap();"},{"Add":" Ok(payload)"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"impl super::SealingKey for Key {"},{"Add":" fn padding_length(&self, payload: &[u8]) -> usize {"},{"Add":" let encrypted_len = payload.len() + 1;"},{"Add":" let padding = 16 - (encrypted_len % 16);"},{"Add":" let min_padding = if padding < 4 { padding + 16 } else { padding };"},{"Add":" let mut rng = rand::rng();"},{"Add":" (rng.random::() & 0xf0 - 16) as usize + min_padding"},{"Add":" }"},{"Add":""},{"Add":" fn fill_padding(&self, padding_out: &mut [u8]) {"},{"Add":" openssl::rand::rand_bytes(padding_out).unwrap()"},{"Add":" }"},{"Add":""},{"Add":" fn tag_len(&self) -> usize {"},{"Add":" 16"},{"Add":" }"},{"Add":""},{"Add":" /// Append an encrypted packet with contents `packet_content` at"},{"Add":" /// the end of `buffer`."},{"Add":" fn seal(&self, _sequence_number: u32, payload: &mut [u8], tag_out: &mut [u8]) {"},{"Add":" let (aad, data) = payload.split_at_mut(4);"},{"Add":" let mut iv = [0; 12];"},{"Add":" {"},{"Add":" let (a, b) = iv.split_at_mut(4);"},{"Add":" BigEndian::write_u32(a, self.iv.0);"},{"Add":" let counter = self.iv.1.fetch_add(1, Ordering::Relaxed);"},{"Add":" BigEndian::write_u64(b, counter);"},{"Add":" }"},{"Add":" crypt_aead("},{"Add":" self.cipher,"},{"Add":" openssl::symm::Mode::Encrypt,"},{"Add":" &self.key,"},{"Add":" Some(&iv),"},{"Add":" aad,"},{"Add":" data,"},{"Add":" tag_out,"},{"Add":" )"},{"Add":" .unwrap()"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"// The following is copied from the OpenSSL crate, with the addition"},{"Add":"// of a thread-local buffer and less genericity on encryption modes."},{"Add":""},{"Add":"use std::cell::RefCell;"},{"Add":""},{"Add":"thread_local! {"},{"Add":" static BUF: RefCell = RefCell::new(cryptovec::CryptoVec::new());"},{"Add":"}"},{"Add":""},{"Add":"pub fn crypt_aead("},{"Add":" t: openssl::symm::Cipher,"},{"Add":" mode: openssl::symm::Mode,"},{"Add":" key: &[u8],"},{"Add":" iv: Option<&[u8]>,"},{"Add":" aad: &[u8],"},{"Add":" data: &mut [u8],"},{"Add":" tag: &mut [u8],"},{"Add":") -> Result<(), openssl::error::ErrorStack> {"},{"Add":" let mut c = openssl::symm::Crypter::new(t, mode, key, iv)?;"},{"Add":" BUF.with(|buffer| {"},{"Add":" let mut buffer = buffer.borrow_mut();"},{"Add":" buffer.resize(data.len() + t.block_size());"},{"Add":" c.aad_update(aad)?;"},{"Add":" let count = c.update(data, &mut buffer)?;"},{"Add":" let rest = if let openssl::symm::Mode::Encrypt = mode {"},{"Add":" let rest = c.finalize(&mut buffer[count..])?;"},{"Add":" c.get_tag(tag)?;"},{"Add":" rest"},{"Add":" } else {"},{"Add":" c.set_tag(tag)?;"},{"Add":" c.finalize(&mut buffer[count..])?"},{"Add":" };"},{"Add":" data.clone_from_slice(&buffer[..count + rest]);"},{"Add":" buffer.clear();"},{"Add":" Ok(())"},{"Add":" })"},{"Add":"}"}]}},{"Replacement":{"inode":{"change":3,"pos":426118},"path":"thrussh/Cargo.toml","line":58,"ins":{"up_context":[{"change":3,"pos":427375}],"down_context":[{"change":3,"pos":1939}],"flag":"BLOCK","start":9179,"end":9192,"inode":{"change":3,"pos":426118}},"del":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":3,"pos":427375},"to":{"change":3,"start":1926,"end":1939},"introduced_by":3}],"inode":{"change":3,"pos":426118}},"ins_contents":[{"Add":"rand = \"0.9\""}],"del_contents":[{"Del":"rand = \"0.8\"\n"}]}}],"owner":"pijul","repo":"thrussh","token":"hMQZtvwv+8SEJT82ZyyL61wJWyWwI/voJYNZsfwugDI=","login":null}

…

Dependencies

Change contents