class Net::SSH::Transport::Kex::Abstract5656
in the Secure Shell Transport Layer (RFC 5656)
Implement key-exchange algorithm from Elliptic Curve Algorithm Integration
def build_signature_buffer(result)
def build_signature_buffer(result) response = Net::SSH::Buffer.new response.write_string data[:client_version_string], data[:server_version_string], data[:client_algorithm_packet], data[:server_algorithm_packet], result[:key_blob], ecdh_public_key_bytes, result[:server_ecdh_pubkey] response.write_bignum result[:shared_secret] response end
def curve_name
def curve_name raise NotImplementedError, 'abstract class: curve_name not implemented' end
def get_message_types
def get_message_types [KEXECDH_INIT, KEXECDH_REPLY] end
def send_kexinit # :nodoc:
def send_kexinit # :nodoc: init, reply = get_message_types # send the KEXECDH_INIT message ## byte SSH_MSG_KEX_ECDH_INIT ## string Q_C, client's ephemeral public key octet string buffer = Net::SSH::Buffer.from(:byte, init, :mstring, ecdh_public_key_bytes) connection.send_message(buffer) # expect the following KEXECDH_REPLY message ## byte SSH_MSG_KEX_ECDH_REPLY ## string K_S, server's public host key ## string Q_S, server's ephemeral public key octet string ## string the signature on the exchange hash buffer = connection.next_message raise Net::SSH::Exception, 'expected REPLY' unless buffer.type == reply result = {} result[:key_blob] = buffer.read_string result[:server_key] = Net::SSH::Buffer.new(result[:key_blob]).read_key result[:server_ecdh_pubkey] = buffer.read_string result[:shared_secret] = compute_shared_secret(result[:server_ecdh_pubkey]) sig_buffer = Net::SSH::Buffer.new(buffer.read_string) sig_type = sig_buffer.read_string if sig_type != algorithms.host_key_format raise Net::SSH::Exception, "host key algorithm mismatch for signature '#{sig_type}' != '#{algorithms.host_key_format}'" end result[:server_sig] = sig_buffer.read_string result end