From f025277147104ae0de018ab139a6ece9709ebdde Mon Sep 17 00:00:00 2001 From: Matt Johnston <matt@ucc.asn.au> Date: Sat, 9 Nov 2013 00:14:28 +0800 Subject: [PATCH] comments, turn off debugging options --HG-- branch : ecc --- debug.h | 2 -- options.h | 5 +++-- 2 files changed, 3 insertions(+), 4 deletions(-) diff --git a/debug.h b/debug.h index 022ad362..289c5773 100644 --- a/debug.h +++ b/debug.h @@ -40,7 +40,6 @@ * since the printing may not sanitise strings etc. This will add a reasonable * amount to your executable size. */ /* #define DEBUG_TRACE */ -#define DEBUG_TRACE /* All functions writing to the cleartext payload buffer call * CHECKCLEARTOWRITE() before writing. This is only really useful if you're @@ -73,7 +72,6 @@ /* To debug with GDB it is easier to run with no forking of child processes. You will need to pass "-F" as well. */ /* #define DEBUG_NOFORK */ -#define DEBUG_NOFORK /* For testing as non-root on shadowed systems, include the crypt of a password diff --git a/options.h b/options.h index 9a775cf8..726e64ca 100644 --- a/options.h +++ b/options.h @@ -146,12 +146,13 @@ much traffic. */ /* Generate hostkeys as-needed when the first connection using that key type occurs. This avoids the need to otherwise run "dropbearkey" and avoids some problems with badly seeded /dev/urandom when systems first boot. - This also requires a runtime flag "-R". */ + This also requires a runtime flag "-R". This adds ~4kB to binary size (or hardly + anything if dropbearkey is linked in a "dropbearmulti" binary) */ #define DROPBEAR_DELAY_HOSTKEY /* Enable Curve25519 for key exchange. This is another elliptic * curve method with good security properties. Increases binary size - * by ~10kB on x86-64 */ + * by ~8kB on x86-64 */ #define DROPBEAR_CURVE25519 /* Enable elliptic curve Diffie Hellman key exchange, see note about -- GitLab