Commits · 2e05a2b8c417a91b23e87b2291c4b10859b9d89e · Matt Johnston / dropbear

Jun 04, 2015
- buf_getstring and buf_putstring now use non-unsigned char* · 1a4db21f
  Matt Johnston authored 10 years ago
  
  1a4db21f
Jun 03, 2015
- Disable twofish-ctr by default, add config option · ecd85052
  Matt Johnston authored 10 years ago
  
  ecd85052
May 06, 2015
- Turn Algo_Type's name attribute into const char * · 6b90885d
  Gaël PORTAY authored 10 years ago
  
  6b90885d
- Fix pointer differ in signess warnings [-Werror=pointer-sign] · 224b16b2
  Gaël PORTAY authored 10 years ago
  
  224b16b2
Feb 24, 2015
- Fix for old compilers, variable declarations at beginning of functions · ab943951
  Thorsten Horstmann authored 10 years ago
```
and /**/ comments
```
  ab943951
Feb 04, 2015
- twofish ctr modes · b6685bf8
  Matt Johnston authored 10 years ago
  
  b6685bf8
Jan 28, 2015
- Keep sha1 default · 4de876f2
  Matt Johnston authored 10 years ago
  
  4de876f2
- Disable non-delayed zlib for server · a7a79d56
  Matt Johnston authored 10 years ago
  
  a7a79d56
Jan 23, 2015

Prefer stronger algorithms in algorithm negotiation. · 4122cac6

Fedor Brunner authored 10 years ago

Prefer diffie-hellman-group14-sha1 (2048 bit) over
diffie-hellman-group1-sha1 (1024 bit).

Due to meet-in-the-middle attacks the effective key length of
three key 3DES is 112 bits. AES is stronger and faster then 3DES.

Prefer to delay the start of compression until after authentication
has completed. This avoids exposing compression code to attacks
from unauthenticated users.

(github pull request #9)

4122cac6

Add config option to disable cbc. Disable twofish by default · 6cbb23a8
Matt Johnston authored 10 years ago

6cbb23a8

Nov 14, 2013
- use oldstyle comments · de1deaf0
  Matt Johnston authored 11 years ago
  
  de1deaf0
Nov 12, 2013
- Various cleanups and fixes for warnings · e60a84d0
  Matt Johnston authored 11 years ago
```
--HG--
branch : ecc
```
  e60a84d0
Nov 08, 2013
- curve25519 · 0162c116
  Matt Johnston authored 11 years ago
```
--HG--
branch : ecc
```
  0162c116
Oct 31, 2013
- Default to some larger key sizes · 814ab775
  Matt Johnston authored 11 years ago
```
--HG--
branch : ecc
```
  814ab775
May 03, 2013
- ecdsa is working · 95a21c8f
  Matt Johnston authored 12 years ago
```
--HG--
branch : ecc
```
  95a21c8f
Apr 09, 2013
- start on ecdsa keys · 7f091e70
  Matt Johnston authored 12 years ago
```
--HG--
branch : ecc
```
  7f091e70
Apr 08, 2013
- - Fix various hardcoded uses of SHA1 · c797c175
  Matt Johnston authored 12 years ago
```
- rename curves to nistp256 etc
- fix svr-auth.c TRACE problem

--HG--
branch : ecc
```
  c797c175
Apr 07, 2013
- ecc kind of works, needs fixing/testing · c6bdc810
  Matt Johnston authored 12 years ago
```
--HG--
branch : ecc
```
  c6bdc810
Apr 03, 2013
- Put some #ifdef options around first-follows options in case they · cbd3d5e3
  Matt Johnston authored 12 years ago
```
need to be disabled

--HG--
branch : kexguess
```
  cbd3d5e3
- Don't usually need to recalculate dh_e for the repeated kexdh_init packet · 78fbed8c
  Matt Johnston authored 12 years ago
```
--HG--
branch : kexguess
```
  78fbed8c
Mar 30, 2013
- Get rid of client/server specific buf_match_algo, use single · 9c748533
  Matt Johnston authored 12 years ago
```
function with a couple of if statements instead

--HG--
branch : kexguess
```
  9c748533
Mar 29, 2013
- Add kexguess2 behaviour · 99d9cf50
  Matt Johnston authored 12 years ago
```
--HG--
branch : kexguess
```
  99d9cf50
- More changes for KEX and ECDH. Set up hash descriptors, make ECC code work, · b4bcc606
  Matt Johnston authored 12 years ago
```
ses.hash and ses.session_id are now buffers (doesn't compile)

--HG--
branch : ecc
```
  b4bcc606
Mar 27, 2013
- more bits on ecc branch · 74cad161
  Matt Johnston authored 12 years ago
```
--HG--
branch : ecc
```
  74cad161
Mar 26, 2013
- refactor kexdh code a bit, start working on ecdh etc · 73e22c11
  Matt Johnston authored 12 years ago
```
--HG--
branch : ecc
```
  73e22c11
Mar 21, 2013
- Make hmac-sha2-256 and hmac-sha2-512 work · 024d268d
  Matt Johnston authored 12 years ago
  
  024d268d
May 17, 2012
- - Only request "none" cipher after auth has succeeded · e719a9ef
  Matt Johnston authored 13 years ago
```
--HG--
branch : insecure-nocrypto
```
  e719a9ef
- ENABLE_USER_ALGO_LIST should work for the client · db34044c
  Matt Johnston authored 13 years ago
  
  db34044c
- Add rough support for choosing ciphers/hashes with "-c" or "-m" · 036edd62
  Matt Johnston authored 13 years ago
  
  036edd62
May 10, 2012
- - Add hmac-sha2-256 and hmac-sha2-512. Needs debugging, seems to be · c62e5380
  Matt Johnston authored 13 years ago
```
  getting keyed incorrectly

--HG--
branch : sha2
```
  c62e5380
Feb 24, 2011
- Add diffie-hellman-group14-sha1 KEX method · 0ffdf2bb
  Matt Johnston authored 14 years ago
```
--HG--
extra : convert_revision : 5b9c394ad43745e48c42d671cefac7a5c346082f
```
  0ffdf2bb
Feb 23, 2011
- Improve capitalisation for all logged strings · 38ed870f
  Matt Johnston authored 14 years ago
```
--HG--
extra : convert_revision : 997e53cec7a9efb7413ac6e17b6be60a5597bd2e
```
  38ed870f
Sep 11, 2009
- - Disable compression for non-final multihops · e3ca0513
  Matt Johnston authored 15 years ago
```
--HG--
extra : convert_revision : c507a2aacb9e0db4c0266891b8915c614e32857e
```
  e3ca0513
Jun 09, 2009
- - Don't memcpy() in place with void_encrypt · 08893f03
  Matt Johnston authored 16 years ago
```
--HG--
extra : convert_revision : d123343d78df1b5998d8dd2674fd83fd682ce0c0
```
  08893f03
Nov 06, 2008

Update nocrypto branch to current head · 19124395

Matt Johnston authored 16 years ago

--HG--
branch : insecure-nocrypto
extra : convert_revision : 9e5e6e33be005d27cd5b3270c574edc45b5c2893

19124395

Sep 29, 2008

- Get rid of blowfish and twofish CTR since they weren't likely · c2bd7913
Matt Johnston authored 16 years ago
```
to be that useful

--HG--
extra : convert_revision : e16bd265bb6e8093b3488993dffc86662a2a7a62
```
c2bd7913
- Add Counter Mode support · 511f6555
Matt Johnston authored 16 years ago
```
--HG--
extra : convert_revision : 5225162bdf32d70b58b6d3ae375a290326c59f3a
```
511f6555

Add support for zlib@openssh.com delayed compression. · 049fcf1a

Matt Johnston authored 16 years ago

Are still advertising 'zlib' for the server, need to allow
delayed-only as an option

--HG--
extra : convert_revision : 319df675cc3c9b35a10b7d8357c94f33fdab1a46

049fcf1a

Feb 04, 2007
- Add comments about requiring keysize <= 2*SHA1_HASH_SIZE · 60d4cd59
  Matt Johnston authored 18 years ago
```
--HG--
extra : convert_revision : bcb33fce2fad01a7626598209d43af3571bd86f0
```
  60d4cd59
Nov 08, 2005
- * common-algo.c: use zlib for dbclient · 0314b2cf
  Matt Johnston authored 19 years ago
```
--HG--
extra : convert_revision : 71c8d2ac84129e8aa204e7e35a44066fd1bea584
```
  0314b2cf

Admin message