Rivoreo Source Code Repositories
src.rivoreo.one / security / openssh-library / 01ed2272a1545336173bf3aef66fbccc3494c8d8
commit01ed2272a1545336173bf3aef66fbccc3494c8d8[log] [download]
authorDamien Miller <djm@mindrot.org>Wed Nov 05 16:20:46 2008 +1100
committerDamien Miller <djm@mindrot.org>Wed Nov 05 16:20:46 2008 +1100
treea77f115d3b8964f0b6fcc604f9dea87d15143d7e
parent6f66d34308af787613d5525729953665f26367ee [diff]
   - djm@cvs.openbsd.org 2008/11/04 08:22:13
     [auth.h auth2.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h]
     [readconf.c readconf.h servconf.c servconf.h ssh2.h ssh_config.5]
     [sshconnect2.c sshd_config.5 jpake.c jpake.h schnorr.c auth2-jpake.c]
     [Makefile.in]
     Add support for an experimental zero-knowledge password authentication
     method using the J-PAKE protocol described in F. Hao, P. Ryan,
     "Password Authenticated Key Exchange by Juggling", 16th Workshop on
     Security Protocols, Cambridge, April 2008.

     This method allows password-based authentication without exposing
     the password to the server. Instead, the client and server exchange
     cryptographic proofs to demonstrate of knowledge of the password while
     revealing nothing useful to an attacker or compromised endpoint.

     This is experimental, work-in-progress code and is presently
     compiled-time disabled (turn on -DJPAKE in Makefile.inc).

     "just commit it.  It isn't too intrusive." deraadt@
20 files changed
tree: a77f115d3b8964f0b6fcc604f9dea87d15143d7e
  1. .cvsignore
  2. CREDITS
  3. ChangeLog
  4. INSTALL
  5. LICENCE
  6. Makefile.in
  7. OVERVIEW
  8. PROTOCOL
  9. PROTOCOL.agent
  10. README
  11. README.dns
  12. README.platform
  13. README.privsep
  14. README.smartcard
  15. README.tun
  16. TODO
  17. WARNING.RNG
  18. aclocal.m4
  19. acss.c
  20. acss.h
  21. addrmatch.c
  22. atomicio.c
  23. atomicio.h
  24. audit-bsm.c
  25. audit.c
  26. audit.h
  27. auth-bsdauth.c
  28. auth-chall.c
  29. auth-krb5.c
  30. auth-options.c
  31. auth-options.h
  32. auth-pam.c
  33. auth-pam.h
  34. auth-passwd.c
  35. auth-rh-rsa.c
  36. auth-rhosts.c
  37. auth-rsa.c
  38. auth-shadow.c
  39. auth-sia.c
  40. auth-sia.h
  41. auth-skey.c
  42. auth.c
  43. auth.h
  44. auth1.c
  45. auth2-chall.c
  46. auth2-gss.c
  47. auth2-hostbased.c
  48. auth2-jpake.c
  49. auth2-kbdint.c
  50. auth2-none.c
  51. auth2-passwd.c
  52. auth2-pubkey.c
  53. auth2.c
  54. authfd.c
  55. authfd.h
  56. authfile.c
  57. authfile.h
  58. bufaux.c
  59. bufbn.c
  60. buffer.c
  61. buffer.h
  62. buildpkg.sh.in
  63. canohost.c
  64. canohost.h
  65. channels.c
  66. channels.h
  67. cipher-3des1.c
  68. cipher-acss.c
  69. cipher-aes.c
  70. cipher-bf1.c
  71. cipher-ctr.c
  72. cipher.c
  73. cipher.h
  74. cleanup.c
  75. clientloop.c
  76. clientloop.h
  77. compat.c
  78. compat.h
  79. compress.c
  80. compress.h
  81. config.guess
  82. config.sub
  83. configure.ac
  84. contrib/
  85. crc32.c
  86. crc32.h
  87. deattack.c
  88. deattack.h
  89. defines.h
  90. dh.c
  91. dh.h
  92. dispatch.c
  93. dispatch.h
  94. dns.c
  95. dns.h
  96. entropy.c
  97. entropy.h
  98. fatal.c
  99. fixpaths
  100. fixprogs
  101. groupaccess.c
  102. groupaccess.h
  103. gss-genr.c
  104. gss-serv-krb5.c
  105. gss-serv.c
  106. hostfile.c
  107. hostfile.h
  108. includes.h
  109. install-sh
  110. jpake.c
  111. jpake.h
  112. kex.c
  113. kex.h
  114. kexdh.c
  115. kexdhc.c
  116. kexdhs.c
  117. kexgex.c
  118. kexgexc.c
  119. kexgexs.c
  120. key.c
  121. key.h
  122. log.c
  123. log.h
  124. loginrec.c
  125. loginrec.h
  126. logintest.c
  127. mac.c
  128. mac.h
  129. match.c
  130. match.h
  131. md-sha256.c
  132. md5crypt.c
  133. md5crypt.h
  134. mdoc2man.awk
  135. misc.c
  136. misc.h
  137. mkinstalldirs
  138. moduli
  139. moduli.5
  140. moduli.c
  141. monitor.c
  142. monitor.h
  143. monitor_fdpass.c
  144. monitor_fdpass.h
  145. monitor_mm.c
  146. monitor_mm.h
  147. monitor_wrap.c
  148. monitor_wrap.h
  149. msg.c
  150. msg.h
  151. mux.c
  152. myproposal.h
  153. nchan.c
  154. nchan.ms
  155. nchan2.ms
  156. openbsd-compat/
  157. openssh.xml.in
  158. opensshd.init.in
  159. packet.c
  160. packet.h
  161. pathnames.h
  162. platform.c
  163. platform.h
  164. progressmeter.c
  165. progressmeter.h
  166. readconf.c
  167. readconf.h
  168. readpass.c
  169. regress/
  170. rijndael.c
  171. rijndael.h
  172. rsa.c
  173. rsa.h
  174. scard-opensc.c
  175. scard.c
  176. scard.h
  177. scard/
  178. schnorr.c
  179. scp.1
  180. scp.c
  181. servconf.c
  182. servconf.h
  183. serverloop.c
  184. serverloop.h
  185. session.c
  186. session.h
  187. sftp-client.c
  188. sftp-client.h
  189. sftp-common.c
  190. sftp-common.h
  191. sftp-glob.c
  192. sftp-server-main.c
  193. sftp-server.8
  194. sftp-server.c
  195. sftp.1
  196. sftp.c
  197. sftp.h
  198. ssh-add.1
  199. ssh-add.c
  200. ssh-agent.1
  201. ssh-agent.c
  202. ssh-dss.c
  203. ssh-gss.h
  204. ssh-keygen.1
  205. ssh-keygen.c
  206. ssh-keyscan.1
  207. ssh-keyscan.c
  208. ssh-keysign.8
  209. ssh-keysign.c
  210. ssh-rand-helper.8
  211. ssh-rand-helper.c
  212. ssh-rsa.c
  213. ssh.1
  214. ssh.c
  215. ssh.h
  216. ssh1.h
  217. ssh2.h
  218. ssh_config
  219. ssh_config.5
  220. ssh_prng_cmds.in
  221. sshconnect.c
  222. sshconnect.h
  223. sshconnect1.c
  224. sshconnect2.c
  225. sshd.8
  226. sshd.c
  227. sshd_config
  228. sshd_config.5
  229. sshlogin.c
  230. sshlogin.h
  231. sshpty.c
  232. sshpty.h
  233. sshtty.c
  234. survey.sh.in
  235. ttymodes.c
  236. ttymodes.h
  237. uidswap.c
  238. uidswap.h
  239. umac.c
  240. umac.h
  241. uuencode.c
  242. uuencode.h
  243. version.h
  244. xmalloc.c
  245. xmalloc.h