Reject vulnerable keys to mitigate Debian OpenSSL flaw

In 2008, Debian (and derived distributions such as Ubuntu) shipped an
OpenSSL package with a flawed random number generator, causing OpenSSH to
generate only a very limited set of keys which were subject to private half
precomputation.  To mitigate this, this patch checks key authentications
against a blacklist of known-vulnerable keys, and adds a new ssh-vulnkey
program which can be used to explicitly check keys against that blacklist.
See CVE-2008-0166.

Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1469
Last-Update: 2013-09-14

Patch-Name: ssh-vulnkey.patch

1 files changed, 2 insertions, 0 deletions

diff --git a/authfile.h b/authfile.h
index 78349beb5..3f2bdcb06 100644
--- a/authfile.h
+++ b/authfile.h
@@ -28,4 +28,6 @@ Key	*key_load_private_pem(int, int, const char *, char **);
 int      key_perm_ok(int, const char *);
 int      key_in_file(Key *, const char *, int);
 
+int      blacklisted_key(Key *key, char **fp);
+
 #endif