ClearML/dropbear
1
0
Fork 0
mirror of https://github.com/clearml/dropbear synced 2025-05-21 19:46:11 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Disable twofish-ctr by default, add config option

Browse Source
This commit is contained in:
Matt Johnston 2015-06-03 22:59:59 +08:00
parent 1fa1c3f9db
commit ecd8505218
2 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
common-algo.c
View File

@ -144,12 +144,15 @@ algo_type sshciphers[] = {
#ifdef DROPBEAR_AES256 #ifdef DROPBEAR_AES256
{"aes256-ctr", 0, &dropbear_aes256, 1, &dropbear_mode_ctr}, {"aes256-ctr", 0, &dropbear_aes256, 1, &dropbear_mode_ctr},
#endif #endif
#ifdef DROPBEAR_TWOFISH_CTR
/* twofish ctr is conditional as it hasn't been tested for interoperability, see options.h */
#ifdef DROPBEAR_TWOFISH256 #ifdef DROPBEAR_TWOFISH256
{"twofish256-ctr", 0, &dropbear_twofish256, 1, &dropbear_mode_ctr}, {"twofish256-ctr", 0, &dropbear_twofish256, 1, &dropbear_mode_ctr},
#endif #endif
#ifdef DROPBEAR_TWOFISH128 #ifdef DROPBEAR_TWOFISH128
{"twofish128-ctr", 0, &dropbear_twofish128, 1, &dropbear_mode_ctr}, {"twofish128-ctr", 0, &dropbear_twofish128, 1, &dropbear_mode_ctr},
#endif #endif
#endif /* DROPBEAR_TWOFISH_CTR */
#endif /* DROPBEAR_ENABLE_CTR_MODE */ #endif /* DROPBEAR_ENABLE_CTR_MODE */
#ifdef DROPBEAR_ENABLE_CBC_MODE #ifdef DROPBEAR_ENABLE_CBC_MODE

9
options.h
View File

@ -103,10 +103,15 @@ much traffic. */
#define DROPBEAR_ENABLE_CBC_MODE #define DROPBEAR_ENABLE_CBC_MODE
/* Enable "Counter Mode" for ciphers. This is more secure than normal /* Enable "Counter Mode" for ciphers. This is more secure than normal
* CBC mode against certain attacks. This adds around 1kB to binary * CBC mode against certain attacks. It is recommended for security
* size and is recommended for most cases */ * and forwards compatibility */
#define DROPBEAR_ENABLE_CTR_MODE #define DROPBEAR_ENABLE_CTR_MODE
/* Twofish counter mode is disabled by default because it
has not been tested for interoperability with other SSH implementations.
If you test it please contact the Dropbear author */
/* #define DROPBEAR_TWOFISH_CTR */
/* You can compile with no encryption if you want. In some circumstances /* You can compile with no encryption if you want. In some circumstances
* this could be safe security-wise, though make sure you know what * this could be safe security-wise, though make sure you know what
* you're doing. Anyone can see everything that goes over the wire, so * you're doing. Anyone can see everything that goes over the wire, so