- markus@cvs.openbsd.org 2001/03/05 17:17:21
     [kex.c kex.h sshconnect2.c sshd.c]
     generate a 2*need size (~300 instead of 1024/2048) random private
     exponent during the DH key agreement. according to Niels (the great
     german advisor) this is safe since /etc/primes contains strong
     primes only.

     References:
             P. C. van Oorschot and M. J. Wiener, On Diffie-Hellman key
             agreement with short exponents, In Advances in Cryptology
             - EUROCRYPT'96, LNCS 1070, Springer-Verlag, 1996, pp.332-343.
5 files changed
tree: b80be6bceb955898948ef10527b43fc4cf005d8e
  1. CREDITS
  2. ChangeLog
  3. INSTALL
  4. LICENCE
  5. Makefile.in
  6. OVERVIEW
  7. README
  8. RFC.nroff
  9. TODO
  10. WARNING.RNG
  11. acconfig.h
  12. aclocal.m4
  13. atomicio.c
  14. atomicio.h
  15. auth-chall.c
  16. auth-krb4.c
  17. auth-options.c
  18. auth-options.h
  19. auth-pam.c
  20. auth-pam.h
  21. auth-passwd.c
  22. auth-rh-rsa.c
  23. auth-rhosts.c
  24. auth-rsa.c
  25. auth-sia.c
  26. auth-sia.h
  27. auth.c
  28. auth.h
  29. auth1.c
  30. auth2-chall.c
  31. auth2-pam.c
  32. auth2-pam.h
  33. auth2.c
  34. authfd.c
  35. authfd.h
  36. authfile.c
  37. authfile.h
  38. bufaux.c
  39. bufaux.h
  40. buffer.c
  41. buffer.h
  42. canohost.c
  43. canohost.h
  44. channels.c
  45. channels.h
  46. cipher.c
  47. cipher.h
  48. cli.c
  49. cli.h
  50. clientloop.c
  51. clientloop.h
  52. compat.c
  53. compat.h
  54. compress.c
  55. compress.h
  56. config.guess
  57. config.sub
  58. configure.in
  59. contrib/
  60. crc32.c
  61. crc32.h
  62. deattack.c
  63. deattack.h
  64. defines.h
  65. dh.c
  66. dh.h
  67. dispatch.c
  68. dispatch.h
  69. entropy.c
  70. entropy.h
  71. fixpaths
  72. fixprogs
  73. getput.h
  74. groupaccess.c
  75. groupaccess.h
  76. hostfile.c
  77. hostfile.h
  78. includes.h
  79. install-sh
  80. kex.c
  81. kex.h
  82. key.c
  83. key.h
  84. log.c
  85. log.h
  86. loginrec.c
  87. loginrec.h
  88. logintest.c
  89. mac.c
  90. mac.h
  91. match.c
  92. match.h
  93. md5crypt.c
  94. md5crypt.h
  95. misc.c
  96. misc.h
  97. mkinstalldirs
  98. mpaux.c
  99. mpaux.h
  100. myproposal.h
  101. nchan.c
  102. nchan.h
  103. nchan.ms
  104. nchan2.ms
  105. openbsd-compat/
  106. packet.c
  107. packet.h
  108. pathnames.h
  109. primes
  110. radix.c
  111. radix.h
  112. readconf.c
  113. readconf.h
  114. readpass.c
  115. readpass.h
  116. rijndael.c
  117. rijndael.h
  118. rsa.c
  119. rsa.h
  120. scp.1
  121. scp.c
  122. servconf.c
  123. servconf.h
  124. serverloop.c
  125. serverloop.h
  126. session.c
  127. session.h
  128. sftp-client.c
  129. sftp-client.h
  130. sftp-common.c
  131. sftp-common.h
  132. sftp-int.c
  133. sftp-int.h
  134. sftp-server.8
  135. sftp-server.c
  136. sftp.1
  137. sftp.c
  138. sftp.h
  139. ssh-add.1
  140. ssh-add.c
  141. ssh-agent.1
  142. ssh-agent.c
  143. ssh-dss.c
  144. ssh-dss.h
  145. ssh-keygen.1
  146. ssh-keygen.c
  147. ssh-keyscan.1
  148. ssh-keyscan.c
  149. ssh-rsa.c
  150. ssh-rsa.h
  151. ssh.1
  152. ssh.c
  153. ssh.h
  154. ssh1.h
  155. ssh2.h
  156. ssh_config
  157. ssh_prng_cmds.in
  158. sshconnect.c
  159. sshconnect.h
  160. sshconnect1.c
  161. sshconnect2.c
  162. sshd.8
  163. sshd.c
  164. sshd_config
  165. sshlogin.c
  166. sshlogin.h
  167. sshpty.c
  168. sshpty.h
  169. tildexpand.c
  170. tildexpand.h
  171. ttymodes.c
  172. ttymodes.h
  173. uidswap.c
  174. uidswap.h
  175. uuencode.c
  176. uuencode.h
  177. version.h
  178. xmalloc.c
  179. xmalloc.h