diff --git a/common-algo.c b/common-algo.c index 280f7c14a5d79a3195ef5932a9bccc556c032b79..88633677a8f3a678d8428bcdfa6cd7db65aeab23 100644 --- a/common-algo.c +++ b/common-algo.c @@ -128,15 +128,6 @@ algo_type sshciphers[] = { #ifdef DROPBEAR_AES256 {"aes256-ctr", 0, &dropbear_aes256, 1, &dropbear_mode_ctr}, #endif -#ifdef DROPBEAR_TWOFISH256 - {"twofish256-ctr", 0, &dropbear_twofish256, 1, &dropbear_mode_ctr}, -#endif -#ifdef DROPBEAR_TWOFISH128 - {"twofish128-ctr", 0, &dropbear_twofish128, 1, &dropbear_mode_ctr}, -#endif -#ifdef DROPBEAR_BLOWFISH - {"blowfish-ctr", 0, &dropbear_blowfish, 1, &dropbear_mode_ctr}, -#endif #endif /* DROPBEAR_ENABLE_CTR_MODE */ /* CBC modes are always enabled */ diff --git a/options.h b/options.h index 924a858f274df17d5e61302ebe94a5c4bd13cef7..6e948762470377802ec072c82a32cee2e7034273 100644 --- a/options.h +++ b/options.h @@ -86,7 +86,8 @@ etc) slower (perhaps by 50%). Recommended for most small systems. */ #define DROPBEAR_TWOFISH128 /* Enable "Counter Mode" for ciphers. This is more secure than normal - * CBC mode against certain attacks. TODO how much size does it add? */ + * CBC mode against certain attacks. This adds around 1kB to binary + * size and is recommended for most cases */ #define DROPBEAR_ENABLE_CTR_MODE /* Message Integrity - at least one required.