upstream: when signing a challenge using a FIDO toke, perform the

hashing in the middleware layer rather than in ssh code. This allows
middlewares that call APIs that perform the hashing implicitly (including
Microsoft's AFAIK). ok markus@

OpenBSD-Commit-ID: c9fc8630aba26c75d5016884932f08a5a237f37d

1 files changed, 2 insertions, 2 deletions

diff --git a/sk-api.h b/sk-api.h
index 170fd4470..1ecaa3537 100644
--- a/sk-api.h
+++ b/sk-api.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: sk-api.h,v 1.8 2020/01/25 23:13:09 djm Exp $ */
+/* $OpenBSD: sk-api.h,v 1.9 2020/04/28 04:02:29 djm Exp $ */
 /*
  * Copyright (c) 2019 Google LLC
  *
@@ -71,7 +71,7 @@ struct sk_option {
         uint8_t required;
 };
 
-#define SSH_SK_VERSION_MAJOR            0x00040000 /* current API version */
+#define SSH_SK_VERSION_MAJOR            0x00050000 /* current API version */
 #define SSH_SK_VERSION_MAJOR_MASK       0xffff0000
 
 /* Return the version of the middleware API */