- djm@cvs.openbsd.org 2013/11/21 00:45:44
     [Makefile.in PROTOCOL PROTOCOL.chacha20poly1305 authfile.c chacha.c]
     [chacha.h cipher-chachapoly.c cipher-chachapoly.h cipher.c cipher.h]
     [dh.c myproposal.h packet.c poly1305.c poly1305.h servconf.c ssh.1]
     [ssh.c ssh_config.5 sshd_config.5] Add a new protocol 2 transport
     cipher "chacha20-poly1305@openssh.com" that combines Daniel
     Bernstein's ChaCha20 stream cipher and Poly1305 MAC to build an
     authenticated encryption mode.

     Inspired by and similar to Adam Langley's proposal for TLS:
     http://tools.ietf.org/html/draft-agl-tls-chacha20poly1305-03
     but differs in layout used for the MAC calculation and the use of a
     second ChaCha20 instance to separately encrypt packet lengths.
     Details are in the PROTOCOL.chacha20poly1305 file.

     Feedback markus@, naddy@; manpage bits Loganden Velvindron @ AfriNIC
     ok markus@ naddy@
21 files changed
tree: 6e6aa82b73163bcb412920050d98f82ca9f4e86e
  1. .cvsignore
  2. CREDITS
  3. ChangeLog
  4. INSTALL
  5. LICENCE
  6. Makefile.in
  7. OVERVIEW
  8. PROTOCOL
  9. PROTOCOL.agent
  10. PROTOCOL.certkeys
  11. PROTOCOL.chacha20poly1305
  12. PROTOCOL.krl
  13. PROTOCOL.mux
  14. README
  15. README.dns
  16. README.platform
  17. README.privsep
  18. README.tun
  19. TODO
  20. aclocal.m4
  21. addrmatch.c
  22. atomicio.c
  23. atomicio.h
  24. audit-bsm.c
  25. audit-linux.c
  26. audit.c
  27. audit.h
  28. auth-bsdauth.c
  29. auth-chall.c
  30. auth-krb5.c
  31. auth-options.c
  32. auth-options.h
  33. auth-pam.c
  34. auth-pam.h
  35. auth-passwd.c
  36. auth-rh-rsa.c
  37. auth-rhosts.c
  38. auth-rsa.c
  39. auth-shadow.c
  40. auth-sia.c
  41. auth-sia.h
  42. auth-skey.c
  43. auth.c
  44. auth.h
  45. auth1.c
  46. auth2-chall.c
  47. auth2-gss.c
  48. auth2-hostbased.c
  49. auth2-jpake.c
  50. auth2-kbdint.c
  51. auth2-none.c
  52. auth2-passwd.c
  53. auth2-pubkey.c
  54. auth2.c
  55. authfd.c
  56. authfd.h
  57. authfile.c
  58. authfile.h
  59. bufaux.c
  60. bufbn.c
  61. bufec.c
  62. buffer.c
  63. buffer.h
  64. buildpkg.sh.in
  65. canohost.c
  66. canohost.h
  67. chacha.c
  68. chacha.h
  69. channels.c
  70. channels.h
  71. cipher-3des1.c
  72. cipher-aes.c
  73. cipher-bf1.c
  74. cipher-chachapoly.c
  75. cipher-chachapoly.h
  76. cipher-ctr.c
  77. cipher.c
  78. cipher.h
  79. cleanup.c
  80. clientloop.c
  81. clientloop.h
  82. compat.c
  83. compat.h
  84. compress.c
  85. compress.h
  86. config.guess
  87. config.sub
  88. configure.ac
  89. contrib/
  90. crc32.c
  91. crc32.h
  92. deattack.c
  93. deattack.h
  94. defines.h
  95. dh.c
  96. dh.h
  97. dispatch.c
  98. dispatch.h
  99. dns.c
  100. dns.h
  101. entropy.c
  102. entropy.h
  103. fatal.c
  104. fixalgorithms
  105. fixpaths
  106. fixprogs
  107. groupaccess.c
  108. groupaccess.h
  109. gss-genr.c
  110. gss-serv-krb5.c
  111. gss-serv.c
  112. hostfile.c
  113. hostfile.h
  114. includes.h
  115. install-sh
  116. jpake.c
  117. jpake.h
  118. kex.c
  119. kex.h
  120. kexc25519.c
  121. kexc25519c.c
  122. kexc25519s.c
  123. kexdh.c
  124. kexdhc.c
  125. kexdhs.c
  126. kexecdh.c
  127. kexecdhc.c
  128. kexecdhs.c
  129. kexgex.c
  130. kexgexc.c
  131. kexgexs.c
  132. key.c
  133. key.h
  134. krl.c
  135. krl.h
  136. log.c
  137. log.h
  138. loginrec.c
  139. loginrec.h
  140. logintest.c
  141. mac.c
  142. mac.h
  143. match.c
  144. match.h
  145. md-sha256.c
  146. md5crypt.c
  147. md5crypt.h
  148. mdoc2man.awk
  149. misc.c
  150. misc.h
  151. mkinstalldirs
  152. moduli
  153. moduli.5
  154. moduli.c
  155. monitor.c
  156. monitor.h
  157. monitor_fdpass.c
  158. monitor_fdpass.h
  159. monitor_mm.c
  160. monitor_mm.h
  161. monitor_wrap.c
  162. monitor_wrap.h
  163. msg.c
  164. msg.h
  165. mux.c
  166. myproposal.h
  167. nchan.c
  168. nchan.ms
  169. nchan2.ms
  170. openbsd-compat/
  171. openssh.xml.in
  172. opensshd.init.in
  173. packet.c
  174. packet.h
  175. pathnames.h
  176. pkcs11.h
  177. platform.c
  178. platform.h
  179. poly1305.c
  180. poly1305.h
  181. progressmeter.c
  182. progressmeter.h
  183. readconf.c
  184. readconf.h
  185. readpass.c
  186. regress/
  187. rijndael.c
  188. rijndael.h
  189. roaming.h
  190. roaming_client.c
  191. roaming_common.c
  192. roaming_dummy.c
  193. roaming_serv.c
  194. rsa.c
  195. rsa.h
  196. sandbox-darwin.c
  197. sandbox-null.c
  198. sandbox-rlimit.c
  199. sandbox-seccomp-filter.c
  200. sandbox-systrace.c
  201. scard/
  202. schnorr.c
  203. schnorr.h
  204. scp.1
  205. scp.c
  206. servconf.c
  207. servconf.h
  208. serverloop.c
  209. serverloop.h
  210. session.c
  211. session.h
  212. sftp-client.c
  213. sftp-client.h
  214. sftp-common.c
  215. sftp-common.h
  216. sftp-glob.c
  217. sftp-server-main.c
  218. sftp-server.8
  219. sftp-server.c
  220. sftp.1
  221. sftp.c
  222. sftp.h
  223. smult_curve25519_ref.c
  224. ssh-add.1
  225. ssh-add.c
  226. ssh-agent.1
  227. ssh-agent.c
  228. ssh-dss.c
  229. ssh-ecdsa.c
  230. ssh-gss.h
  231. ssh-keygen.1
  232. ssh-keygen.c
  233. ssh-keyscan.1
  234. ssh-keyscan.c
  235. ssh-keysign.8
  236. ssh-keysign.c
  237. ssh-pkcs11-client.c
  238. ssh-pkcs11-helper.8
  239. ssh-pkcs11-helper.c
  240. ssh-pkcs11.c
  241. ssh-pkcs11.h
  242. ssh-rsa.c
  243. ssh-sandbox.h
  244. ssh.1
  245. ssh.c
  246. ssh.h
  247. ssh1.h
  248. ssh2.h
  249. ssh_config
  250. ssh_config.5
  251. sshconnect.c
  252. sshconnect.h
  253. sshconnect1.c
  254. sshconnect2.c
  255. sshd.8
  256. sshd.c
  257. sshd_config
  258. sshd_config.5
  259. sshlogin.c
  260. sshlogin.h
  261. sshpty.c
  262. sshpty.h
  263. sshtty.c
  264. survey.sh.in
  265. ttymodes.c
  266. ttymodes.h
  267. uidswap.c
  268. uidswap.h
  269. umac.c
  270. umac.h
  271. uuencode.c
  272. uuencode.h
  273. version.h
  274. xmalloc.c
  275. xmalloc.h