Rivoreo Source Code Repositories
src.rivoreo.one / security / openssh-library / 041ab7c1e7d6514ed84a539a767f79ffb356e807
commit041ab7c1e7d6514ed84a539a767f79ffb356e807[log] [download]
authorDamien Miller <djm@mindrot.org>Fri Sep 10 11:23:34 2010 +1000
committerDamien Miller <djm@mindrot.org>Fri Sep 10 11:23:34 2010 +1000
treec6528487bfc1cfa824655e48ef884b2c268c8588
parent3796ab47d3f68f69512c360f178b77bf0fb12b4f [diff]
   - djm@cvs.openbsd.org 2010/09/09 10:45:45
     [kex.c kex.h kexecdh.c key.c key.h monitor.c ssh-ecdsa.c]
     ECDH/ECDSA compliance fix: these methods vary the hash function they use
     (SHA256/384/512) depending on the length of the curve in use. The previous
     code incorrectly used SHA256 in all cases.

     This fix will cause authentication failure when using 384 or 521-bit curve
     keys if one peer hasn't been upgraded and the other has. (256-bit curve
     keys work ok). In particular you may need to specify HostkeyAlgorithms
     when connecting to a server that has not been upgraded from an upgraded
     client.

     ok naddy@
8 files changed
tree: c6528487bfc1cfa824655e48ef884b2c268c8588
  1. .cvsignore
  2. CREDITS
  3. ChangeLog
  4. INSTALL
  5. LICENCE
  6. Makefile.in
  7. OVERVIEW
  8. PROTOCOL
  9. PROTOCOL.agent
  10. PROTOCOL.certkeys
  11. PROTOCOL.mux
  12. README
  13. README.dns
  14. README.platform
  15. README.privsep
  16. README.tun
  17. TODO
  18. WARNING.RNG
  19. aclocal.m4
  20. acss.c
  21. acss.h
  22. addrmatch.c
  23. atomicio.c
  24. atomicio.h
  25. audit-bsm.c
  26. audit.c
  27. audit.h
  28. auth-bsdauth.c
  29. auth-chall.c
  30. auth-krb5.c
  31. auth-options.c
  32. auth-options.h
  33. auth-pam.c
  34. auth-pam.h
  35. auth-passwd.c
  36. auth-rh-rsa.c
  37. auth-rhosts.c
  38. auth-rsa.c
  39. auth-shadow.c
  40. auth-sia.c
  41. auth-sia.h
  42. auth-skey.c
  43. auth.c
  44. auth.h
  45. auth1.c
  46. auth2-chall.c
  47. auth2-gss.c
  48. auth2-hostbased.c
  49. auth2-jpake.c
  50. auth2-kbdint.c
  51. auth2-none.c
  52. auth2-passwd.c
  53. auth2-pubkey.c
  54. auth2.c
  55. authfd.c
  56. authfd.h
  57. authfile.c
  58. authfile.h
  59. bufaux.c
  60. bufbn.c
  61. bufec.c
  62. buffer.c
  63. buffer.h
  64. buildpkg.sh.in
  65. canohost.c
  66. canohost.h
  67. channels.c
  68. channels.h
  69. cipher-3des1.c
  70. cipher-acss.c
  71. cipher-aes.c
  72. cipher-bf1.c
  73. cipher-ctr.c
  74. cipher.c
  75. cipher.h
  76. cleanup.c
  77. clientloop.c
  78. clientloop.h
  79. compat.c
  80. compat.h
  81. compress.c
  82. compress.h
  83. config.guess
  84. config.sub
  85. configure.ac
  86. contrib/
  87. crc32.c
  88. crc32.h
  89. deattack.c
  90. deattack.h
  91. defines.h
  92. dh.c
  93. dh.h
  94. dispatch.c
  95. dispatch.h
  96. dns.c
  97. dns.h
  98. entropy.c
  99. entropy.h
  100. fatal.c
  101. fixpaths
  102. fixprogs
  103. groupaccess.c
  104. groupaccess.h
  105. gss-genr.c
  106. gss-serv-krb5.c
  107. gss-serv.c
  108. hostfile.c
  109. hostfile.h
  110. includes.h
  111. install-sh
  112. jpake.c
  113. jpake.h
  114. kex.c
  115. kex.h
  116. kexdh.c
  117. kexdhc.c
  118. kexdhs.c
  119. kexecdh.c
  120. kexecdhc.c
  121. kexecdhs.c
  122. kexgex.c
  123. kexgexc.c
  124. kexgexs.c
  125. key.c
  126. key.h
  127. log.c
  128. log.h
  129. loginrec.c
  130. loginrec.h
  131. logintest.c
  132. mac.c
  133. mac.h
  134. match.c
  135. match.h
  136. md-sha256.c
  137. md5crypt.c
  138. md5crypt.h
  139. mdoc2man.awk
  140. misc.c
  141. misc.h
  142. mkinstalldirs
  143. moduli
  144. moduli.5
  145. moduli.c
  146. monitor.c
  147. monitor.h
  148. monitor_fdpass.c
  149. monitor_fdpass.h
  150. monitor_mm.c
  151. monitor_mm.h
  152. monitor_wrap.c
  153. monitor_wrap.h
  154. msg.c
  155. msg.h
  156. mux.c
  157. myproposal.h
  158. nchan.c
  159. nchan.ms
  160. nchan2.ms
  161. openbsd-compat/
  162. openssh.xml.in
  163. opensshd.init.in
  164. packet.c
  165. packet.h
  166. pathnames.h
  167. pkcs11.h
  168. platform.c
  169. platform.h
  170. progressmeter.c
  171. progressmeter.h
  172. readconf.c
  173. readconf.h
  174. readpass.c
  175. regress/
  176. rijndael.c
  177. rijndael.h
  178. roaming.h
  179. roaming_client.c
  180. roaming_common.c
  181. roaming_dummy.c
  182. roaming_serv.c
  183. rsa.c
  184. rsa.h
  185. scard/
  186. schnorr.c
  187. schnorr.h
  188. scp.1
  189. scp.c
  190. servconf.c
  191. servconf.h
  192. serverloop.c
  193. serverloop.h
  194. session.c
  195. session.h
  196. sftp-client.c
  197. sftp-client.h
  198. sftp-common.c
  199. sftp-common.h
  200. sftp-glob.c
  201. sftp-server-main.c
  202. sftp-server.8
  203. sftp-server.c
  204. sftp.1
  205. sftp.c
  206. sftp.h
  207. ssh-add.1
  208. ssh-add.c
  209. ssh-agent.1
  210. ssh-agent.c
  211. ssh-dss.c
  212. ssh-ecdsa.c
  213. ssh-gss.h
  214. ssh-keygen.1
  215. ssh-keygen.c
  216. ssh-keyscan.1
  217. ssh-keyscan.c
  218. ssh-keysign.8
  219. ssh-keysign.c
  220. ssh-pkcs11-client.c
  221. ssh-pkcs11-helper.8
  222. ssh-pkcs11-helper.c
  223. ssh-pkcs11.c
  224. ssh-pkcs11.h
  225. ssh-rand-helper.8
  226. ssh-rand-helper.c
  227. ssh-rsa.c
  228. ssh.1
  229. ssh.c
  230. ssh.h
  231. ssh1.h
  232. ssh2.h
  233. ssh_config
  234. ssh_config.5
  235. ssh_prng_cmds.in
  236. sshconnect.c
  237. sshconnect.h
  238. sshconnect1.c
  239. sshconnect2.c
  240. sshd.8
  241. sshd.c
  242. sshd_config
  243. sshd_config.5
  244. sshlogin.c
  245. sshlogin.h
  246. sshpty.c
  247. sshpty.h
  248. sshtty.c
  249. survey.sh.in
  250. ttymodes.c
  251. ttymodes.h
  252. uidswap.c
  253. uidswap.h
  254. umac.c
  255. umac.h
  256. uuencode.c
  257. uuencode.h
  258. version.h
  259. xmalloc.c
  260. xmalloc.h