BBS:      TELESC.NET.BR
Assunto:  src/ssh/enc/aes128-cbc-botan.c aes128-cbc-botan.cpp aes128-cbc-openssl
De:       Deuc¨
Data:     Sun, 3 May 2026 14:28:10 -0700
-----------------------------------------------------------
https://gitlab.synchro.net/main/sbbs/-/commit/2a7e4b3dd5e742986c2f6be1
Added Files:
	src/ssh/enc/aes128-cbc-botan.c aes128-cbc-botan.cpp aes128-cbc-openssl.c
Modified Files:
	src/ssh/CMakeLists.txt deucessh-algorithms.h
Log Message:
DeuceSSH: add aes128-cbc encryption module for Mystic compatibility

Mystic BBS only offers aes128-cbc on its SSH server, so DeuceSSH-based
clients connecting to Mystic must register it.  This module should
not be enabled for general use  CBC is weaker than CTR (which is
why the original module list deliberately omitted it), and DeuceSSH-
based servers should continue offering only aes256-ctr.

Both backends:
- OpenSSL: EVP_CipherInit_ex / EVP_CipherUpdate (direction stored
  in the OpenSSL ctx; same do_crypt for encrypt and decrypt slots)
- Botan: Botan::Cipher_Mode "AES-128/CBC/NoPadding", direction-bound
  at create_or_throw

bufsz validated as a multiple of the 16-byte block on every call
(rx-side peer-controlled; tx-side ours but cheap to assert).

Co-Authored-By: Claude Opus 4.7 (1M context) 
n
---
  mSynchronetn  hgVertrauen n hHome of Synchronet n gh[vert/cvs/bbs].synchro.net

-----------------------------------------------------------
[Voltar]