upstream: Add experimental support for PQC XMSS keys (Extended

Hash-Based Signatures) The code is not compiled in by default (see WITH_XMSS
in Makefile.inc) Joint work with stefan-lukas_gazdag at genua.eu See
https://tools.ietf.org/html/draft-irtf-cfrg-xmss-hash-based-signatures-12 ok
djm@

OpenBSD-Commit-ID: ef3eccb96762a5d6f135d7daeef608df7776a7ac

1 files changed, 6 insertions, 1 deletions

diff --git a/dns.c b/dns.c
index 6e1abb530..ff1a2c41c 100644
--- a/dns.c
+++ b/dns.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: dns.c,v 1.37 2017/09/14 04:32:21 djm Exp $ */
+/* $OpenBSD: dns.c,v 1.38 2018/02/23 15:58:37 markus Exp $ */
 
 /*
  * Copyright (c) 2003 Wesley Griffin. All rights reserved.
@@ -105,6 +105,11 @@ dns_read_key(u_int8_t *algorithm, u_int8_t *digest_type,
                 if (!*digest_type)
                         *digest_type = SSHFP_HASH_SHA256;
                 break;
+        case KEY_XMSS:
+                *algorithm = SSHFP_KEY_XMSS;
+                if (!*digest_type)
+                        *digest_type = SSHFP_HASH_SHA256;
+                break;
         default:
                 *algorithm = SSHFP_KEY_RESERVED; /* 0 */
                 *digest_type = SSHFP_HASH_RESERVED; /* 0 */