398 kex_free_newkeys(struct newkeys *newkeys)  in kex_free_newkeys()  argument
400 	if (newkeys == NULL)  in kex_free_newkeys()
402 	if (newkeys->enc.key) {  in kex_free_newkeys()
403 		explicit_bzero(newkeys->enc.key, newkeys->enc.key_len);  in kex_free_newkeys()
404 		free(newkeys->enc.key);  in kex_free_newkeys()
405 		newkeys->enc.key = NULL;  in kex_free_newkeys()
407 	if (newkeys->enc.iv) {  in kex_free_newkeys()
408 		explicit_bzero(newkeys->enc.iv, newkeys->enc.block_size);  in kex_free_newkeys()
409 		free(newkeys->enc.iv);  in kex_free_newkeys()
410 		newkeys->enc.iv = NULL;  in kex_free_newkeys()
412 	free(newkeys->enc.name);  in kex_free_newkeys()
413 	explicit_bzero(&newkeys->enc, sizeof(newkeys->enc));  in kex_free_newkeys()
414 	free(newkeys->comp.name);  in kex_free_newkeys()
415 	explicit_bzero(&newkeys->comp, sizeof(newkeys->comp));  in kex_free_newkeys()
416 	mac_clear(&newkeys->mac);  in kex_free_newkeys()
417 	if (newkeys->mac.key) {  in kex_free_newkeys()
418 		explicit_bzero(newkeys->mac.key, newkeys->mac.key_len);  in kex_free_newkeys()
419 		free(newkeys->mac.key);  in kex_free_newkeys()
420 		newkeys->mac.key = NULL;  in kex_free_newkeys()
422 	free(newkeys->mac.name);  in kex_free_newkeys()
423 	explicit_bzero(&newkeys->mac, sizeof(newkeys->mac));  in kex_free_newkeys()
424 	explicit_bzero(newkeys, sizeof(*newkeys));  in kex_free_newkeys()
425 	free(newkeys);  in kex_free_newkeys()
442 		kex_free_newkeys(kex->newkeys[mode]);  in kex_free()
443 		kex->newkeys[mode] = NULL;  in kex_free()
585 	struct newkeys *newkeys;  in kex_choose_conf()  local
617 		if ((newkeys = calloc(1, sizeof(*newkeys))) == NULL) {  in kex_choose_conf()
621 		kex->newkeys[mode] = newkeys;  in kex_choose_conf()
627 		if ((r = choose_enc(&newkeys->enc, cprop[nenc],  in kex_choose_conf()
630 		authlen = cipher_authlen(newkeys->enc.cipher);  in kex_choose_conf()
633 		    (r = choose_mac(ssh, &newkeys->mac, cprop[nmac],  in kex_choose_conf()
636 		if ((r = choose_comp(&newkeys->comp, cprop[ncomp],  in kex_choose_conf()
641 		    newkeys->enc.name,  in kex_choose_conf()
642 		    authlen == 0 ? newkeys->mac.name : "<implicit>",  in kex_choose_conf()
643 		    newkeys->comp.name);  in kex_choose_conf()
652 		newkeys = kex->newkeys[mode];  in kex_choose_conf()
653 		need = MAX(need, newkeys->enc.key_len);  in kex_choose_conf()
654 		need = MAX(need, newkeys->enc.block_size);  in kex_choose_conf()
655 		need = MAX(need, newkeys->enc.iv_len);  in kex_choose_conf()
656 		need = MAX(need, newkeys->mac.key_len);  in kex_choose_conf()
657 		dh_need = MAX(dh_need, cipher_seclen(newkeys->enc.cipher));  in kex_choose_conf()
658 		dh_need = MAX(dh_need, newkeys->enc.block_size);  in kex_choose_conf()
659 		dh_need = MAX(dh_need, newkeys->enc.iv_len);  in kex_choose_conf()
660 		dh_need = MAX(dh_need, newkeys->mac.key_len);  in kex_choose_conf()
762 		kex->newkeys[mode]->enc.iv  = keys[ctos ? 0 : 1];  in kex_derive_keys()
763 		kex->newkeys[mode]->enc.key = keys[ctos ? 2 : 3];  in kex_derive_keys()
764 		kex->newkeys[mode]->mac.key = keys[ctos ? 4 : 5];  in kex_derive_keys()