Gaël PORTAY
947d2697cf
Turn sshsession's remoteident attribute into char *
2015-05-05 20:39:14 +02:00
Gaël PORTAY
224b16b247
Fix pointer differ in signess warnings [-Werror=pointer-sign]
2015-05-05 20:39:13 +02:00
Matt Johnston
579463933b
A bit of a bodge to avoid memcpy if zlib is disabled
...
--HG--
branch : nocircbuffer
2015-03-01 00:57:21 +08:00
Matt Johnston
c44a78a2e6
Tighten validation of DH values. Odds of x==0 being generated are
...
improbable, roughly 2**-1023
Regression in 0.49
2015-02-10 21:46:19 +08:00
Matt Johnston
a7a79d569a
Disable non-delayed zlib for server
2015-01-28 21:38:27 +08:00
Matt Johnston
b24984deb3
clear hash state memory after use
2015-01-04 23:10:59 +08:00
Matt Johnston
e767bbb41f
Add new monotonic_now() wrapper so that timeouts are unaffected by
...
system clock changes
2014-03-13 23:50:09 +08:00
Matt Johnston
12e7d570a2
Make some debug info conditional
2014-02-24 20:53:32 +08:00
Matt Johnston
55a0c5068f
requirenext doesn't need two values
2014-01-23 22:25:52 +08:00
Matt Johnston
8128b15e41
Fix failing rekeying when we receive a still-in-flight packet
2014-01-23 21:56:35 +08:00
Matt Johnston
61cecbb337
DROPBEAR_CLI_AUTH_IMMEDIATE fixed, now enabled by default
2014-01-17 21:39:27 +08:00
Matt Johnston
cbe63bbabe
rename random.h to dbrandom.h since some OSes have a system random.h
...
--HG--
rename : random.c => dbrandom.c
rename : random.h => dbrandom.h
2013-11-14 22:05:47 +08:00
Matt Johnston
de1deaf0bd
use oldstyle comments
2013-11-14 22:03:30 +08:00
Matt Johnston
a65f84db38
- Some fixes for old compilers like tru64 v4 from Daniel Richard G.
...
- Don't warn about blocking random device for prngd
2013-11-14 21:36:45 +08:00
Matt Johnston
e60a84d0ed
Various cleanups and fixes for warnings
...
--HG--
branch : ecc
2013-11-12 23:02:32 +08:00
Matt Johnston
0162c116da
curve25519
...
--HG--
branch : ecc
2013-11-08 23:11:43 +08:00
Matt Johnston
d9e790e7dc
Add m_mp_alloc_init_multi() helper
...
--HG--
branch : ecc
2013-05-23 22:18:16 +08:00
Matt Johnston
04518e9e80
merge in HEAD
...
--HG--
branch : ecc
2013-05-21 12:09:35 +08:00
Matt Johnston
154a65fc31
Fix build when zlib is disabled, from
...
http://freetz.org/browser/trunk/make/dropbear/patches/350-no_zlib_fix.patch
2013-04-16 22:16:32 +08:00
Matt Johnston
ef151888fb
requirenext fixup for firstkexfollows
2013-04-14 23:16:16 +08:00
Matt Johnston
5c87c6a435
A bit of work on ecdsa for host/auth keys
...
--HG--
branch : ecc
2013-04-14 00:50:03 +08:00
Matt Johnston
adeb372a66
Fix zlib for split newkeys
2013-04-11 23:03:58 +08:00
Matt Johnston
7f091e7019
start on ecdsa keys
...
--HG--
branch : ecc
2013-04-09 00:36:04 +08:00
Matt Johnston
4f07805d0a
- Rename buf_put_ecc_pubkey_string() to buf_put_ecc_raw_pubkey_string()
...
- Reindent ecc.c properly
--HG--
branch : ecc
2013-04-08 23:56:31 +08:00
Matt Johnston
48c83aa9d0
ecdh works against OpenSSH
...
--HG--
branch : ecc
2013-04-08 23:12:20 +08:00
Matt Johnston
c797c1750c
- Fix various hardcoded uses of SHA1
...
- rename curves to nistp256 etc
- fix svr-auth.c TRACE problem
--HG--
branch : ecc
2013-04-08 00:10:57 +08:00
Matt Johnston
c6bdc810ab
ecc kind of works, needs fixing/testing
...
--HG--
branch : ecc
2013-04-07 01:36:42 +08:00
Matt Johnston
7f42096d0f
Take transmit and receive keys into use separately
2013-04-04 00:18:50 +08:00
Matt Johnston
cbd3d5e3a5
Put some #ifdef options around first-follows options in case they
...
need to be disabled
--HG--
branch : kexguess
2013-04-03 00:43:31 +08:00
Matt Johnston
9c7485331a
Get rid of client/server specific buf_match_algo, use single
...
function with a couple of if statements instead
--HG--
branch : kexguess
2013-03-30 23:55:05 +08:00
Matt Johnston
99d9cf500b
Add kexguess2 behaviour
...
--HG--
branch : kexguess
2013-03-29 23:29:48 +08:00
Matt Johnston
4f62da0f0d
first_kex_packet_follows working, needs tidying
...
--HG--
branch : kexguess
2013-03-29 20:44:13 +08:00
Matt Johnston
b4bcc60657
More changes for KEX and ECDH. Set up hash descriptors, make ECC code work,
...
ses.hash and ses.session_id are now buffers (doesn't compile)
--HG--
branch : ecc
2013-03-29 00:28:09 +08:00
Matt Johnston
cf7a271f90
ecc key import function
...
--HG--
branch : ecc
2013-03-27 23:50:52 +08:00
Matt Johnston
74cad1612f
more bits on ecc branch
...
--HG--
branch : ecc
2013-03-27 00:38:03 +08:00
Matt Johnston
73e22c115c
refactor kexdh code a bit, start working on ecdh etc
...
--HG--
branch : ecc
2013-03-26 01:35:22 +08:00
Matt Johnston
2259ce4cdf
Fix "-m none" case and ugly typo
2013-03-20 23:13:45 +08:00
Matt Johnston
f2cd610750
Merge in "-m"/"-c" code
...
--HG--
branch : insecure-nocrypto
2012-05-17 08:09:19 +08:00
Matt Johnston
db34044c7f
ENABLE_USER_ALGO_LIST should work for the client
2012-05-17 00:26:12 +08:00
Matt Johnston
036edd6206
Add rough support for choosing ciphers/hashes with "-c" or "-m"
2012-05-17 00:12:42 +08:00
Matt Johnston
f40ed8bad7
Update insecure-nocrypto to current head
...
--HG--
branch : insecure-nocrypto
2012-05-16 22:54:51 +08:00
Matt Johnston
c62e53807f
- Add hmac-sha2-256 and hmac-sha2-512. Needs debugging, seems to be
...
getting keyed incorrectly
--HG--
branch : sha2
2012-05-10 08:38:37 +08:00
Matt Johnston
5feebd300e
Clear a few buffers when possible
2012-02-10 18:32:18 +08:00
Matt Johnston
3c42c5407c
Refer to RFCs rather than drafts, update some section references
...
--HG--
extra : convert_revision : b5c5c88e702f427b9d5e8c592e2b7e1bda204ff3
2011-02-27 13:57:32 +00:00
Matt Johnston
0ffdf2bba9
Add diffie-hellman-group14-sha1 KEX method
...
--HG--
extra : convert_revision : 5b9c394ad43745e48c42d671cefac7a5c346082f
2011-02-24 12:42:42 +00:00
Matt Johnston
38ed870ffe
Improve capitalisation for all logged strings
...
--HG--
extra : convert_revision : 997e53cec7a9efb7413ac6e17b6be60a5597bd2e
2011-02-23 15:50:30 +00:00
Matt Johnston
e3ca0513a0
- Disable compression for non-final multihops
...
--HG--
extra : convert_revision : c507a2aacb9e0db4c0266891b8915c614e32857e
2009-09-11 14:02:04 +00:00
Matt Johnston
3608775306
- Add option to change zlib windowBits/memLevel
...
--HG--
extra : convert_revision : 5fc51ba0b8f165426c78f8d32162e5ccb51e524f
2009-07-26 15:39:47 +00:00
Matt Johnston
ff763e4005
- Get rid of decryptreadbuf, just decrypt in-place with readbuf
...
- Share make_mac function for both packet creation and validation
- Split recv/trans parts of key_context into their own structures
--HG--
extra : convert_revision : 043bc598c76ed43625987e6937e32238f7ed6240
2009-03-01 16:15:57 +00:00
Matt Johnston
1912439526
Update nocrypto branch to current head
...
--HG--
branch : insecure-nocrypto
extra : convert_revision : 9e5e6e33be005d27cd5b3270c574edc45b5c2893
2008-11-06 13:33:06 +00:00