- dtucker@cvs.openbsd.org 2014/01/25 10:12:50
     [cipher.c cipher.h kex.c kex.h kexgexc.c]
     Add a special case for the DH group size for 3des-cbc, which has an
     effective strength much lower than the key size.  This causes problems
     with some cryptlib implementations, which don't support group sizes larger
     than 4k but also don't use the largest group size it does support as
     specified in the RFC.  Based on a patch from Petr Lautrbach at Redhat,
     reduced by me with input from Markus.  ok djm@ markus@
6 files changed
tree: cf69b6a4ae613af69f6a984a68e8e1e7ee268a93
  1. .cvsignore
  2. CREDITS
  3. ChangeLog
  4. INSTALL
  5. LICENCE
  6. Makefile.in
  7. OVERVIEW
  8. PROTOCOL
  9. PROTOCOL.agent
  10. PROTOCOL.certkeys
  11. PROTOCOL.chacha20poly1305
  12. PROTOCOL.key
  13. PROTOCOL.krl
  14. PROTOCOL.mux
  15. README
  16. README.dns
  17. README.platform
  18. README.privsep
  19. README.tun
  20. TODO
  21. aclocal.m4
  22. addrmatch.c
  23. atomicio.c
  24. atomicio.h
  25. audit-bsm.c
  26. audit-linux.c
  27. audit.c
  28. audit.h
  29. auth-bsdauth.c
  30. auth-chall.c
  31. auth-krb5.c
  32. auth-options.c
  33. auth-options.h
  34. auth-pam.c
  35. auth-pam.h
  36. auth-passwd.c
  37. auth-rh-rsa.c
  38. auth-rhosts.c
  39. auth-rsa.c
  40. auth-shadow.c
  41. auth-sia.c
  42. auth-sia.h
  43. auth-skey.c
  44. auth.c
  45. auth.h
  46. auth1.c
  47. auth2-chall.c
  48. auth2-gss.c
  49. auth2-hostbased.c
  50. auth2-jpake.c
  51. auth2-kbdint.c
  52. auth2-none.c
  53. auth2-passwd.c
  54. auth2-pubkey.c
  55. auth2.c
  56. authfd.c
  57. authfd.h
  58. authfile.c
  59. authfile.h
  60. blocks.c
  61. bufaux.c
  62. bufbn.c
  63. bufec.c
  64. buffer.c
  65. buffer.h
  66. buildpkg.sh.in
  67. canohost.c
  68. canohost.h
  69. chacha.c
  70. chacha.h
  71. channels.c
  72. channels.h
  73. cipher-3des1.c
  74. cipher-aes.c
  75. cipher-bf1.c
  76. cipher-chachapoly.c
  77. cipher-chachapoly.h
  78. cipher-ctr.c
  79. cipher.c
  80. cipher.h
  81. cleanup.c
  82. clientloop.c
  83. clientloop.h
  84. compat.c
  85. compat.h
  86. compress.c
  87. compress.h
  88. config.guess
  89. config.sub
  90. configure.ac
  91. contrib/
  92. crc32.c
  93. crc32.h
  94. crypto_api.h
  95. deattack.c
  96. deattack.h
  97. defines.h
  98. dh.c
  99. dh.h
  100. digest.c
  101. digest.h
  102. dispatch.c
  103. dispatch.h
  104. dns.c
  105. dns.h
  106. ed25519.c
  107. entropy.c
  108. entropy.h
  109. fatal.c
  110. fe25519.c
  111. fe25519.h
  112. fixalgorithms
  113. fixpaths
  114. fixprogs
  115. ge25519.c
  116. ge25519.h
  117. ge25519_base.data
  118. groupaccess.c
  119. groupaccess.h
  120. gss-genr.c
  121. gss-serv-krb5.c
  122. gss-serv.c
  123. hash.c
  124. hostfile.c
  125. hostfile.h
  126. includes.h
  127. install-sh
  128. jpake.c
  129. jpake.h
  130. kex.c
  131. kex.h
  132. kexc25519.c
  133. kexc25519c.c
  134. kexc25519s.c
  135. kexdh.c
  136. kexdhc.c
  137. kexdhs.c
  138. kexecdh.c
  139. kexecdhc.c
  140. kexecdhs.c
  141. kexgex.c
  142. kexgexc.c
  143. kexgexs.c
  144. key.c
  145. key.h
  146. krl.c
  147. krl.h
  148. log.c
  149. log.h
  150. loginrec.c
  151. loginrec.h
  152. logintest.c
  153. mac.c
  154. mac.h
  155. match.c
  156. match.h
  157. md-sha256.c
  158. md5crypt.c
  159. md5crypt.h
  160. mdoc2man.awk
  161. misc.c
  162. misc.h
  163. mkinstalldirs
  164. moduli
  165. moduli.5
  166. moduli.c
  167. monitor.c
  168. monitor.h
  169. monitor_fdpass.c
  170. monitor_fdpass.h
  171. monitor_mm.c
  172. monitor_mm.h
  173. monitor_wrap.c
  174. monitor_wrap.h
  175. msg.c
  176. msg.h
  177. mux.c
  178. myproposal.h
  179. nchan.c
  180. nchan.ms
  181. nchan2.ms
  182. openbsd-compat/
  183. openssh.xml.in
  184. opensshd.init.in
  185. packet.c
  186. packet.h
  187. pathnames.h
  188. pkcs11.h
  189. platform.c
  190. platform.h
  191. poly1305.c
  192. poly1305.h
  193. progressmeter.c
  194. progressmeter.h
  195. readconf.c
  196. readconf.h
  197. readpass.c
  198. regress/
  199. rijndael.c
  200. rijndael.h
  201. roaming.h
  202. roaming_client.c
  203. roaming_common.c
  204. roaming_dummy.c
  205. roaming_serv.c
  206. rsa.c
  207. rsa.h
  208. sandbox-capsicum.c
  209. sandbox-darwin.c
  210. sandbox-null.c
  211. sandbox-rlimit.c
  212. sandbox-seccomp-filter.c
  213. sandbox-systrace.c
  214. sc25519.c
  215. sc25519.h
  216. scard/
  217. schnorr.c
  218. schnorr.h
  219. scp.1
  220. scp.c
  221. servconf.c
  222. servconf.h
  223. serverloop.c
  224. serverloop.h
  225. session.c
  226. session.h
  227. sftp-client.c
  228. sftp-client.h
  229. sftp-common.c
  230. sftp-common.h
  231. sftp-glob.c
  232. sftp-server-main.c
  233. sftp-server.8
  234. sftp-server.c
  235. sftp.1
  236. sftp.c
  237. sftp.h
  238. smult_curve25519_ref.c
  239. ssh-add.1
  240. ssh-add.c
  241. ssh-agent.1
  242. ssh-agent.c
  243. ssh-dss.c
  244. ssh-ecdsa.c
  245. ssh-ed25519.c
  246. ssh-gss.h
  247. ssh-keygen.1
  248. ssh-keygen.c
  249. ssh-keyscan.1
  250. ssh-keyscan.c
  251. ssh-keysign.8
  252. ssh-keysign.c
  253. ssh-pkcs11-client.c
  254. ssh-pkcs11-helper.8
  255. ssh-pkcs11-helper.c
  256. ssh-pkcs11.c
  257. ssh-pkcs11.h
  258. ssh-rsa.c
  259. ssh-sandbox.h
  260. ssh.1
  261. ssh.c
  262. ssh.h
  263. ssh1.h
  264. ssh2.h
  265. ssh_config
  266. ssh_config.5
  267. sshconnect.c
  268. sshconnect.h
  269. sshconnect1.c
  270. sshconnect2.c
  271. sshd.8
  272. sshd.c
  273. sshd_config
  274. sshd_config.5
  275. sshlogin.c
  276. sshlogin.h
  277. sshpty.c
  278. sshpty.h
  279. sshtty.c
  280. survey.sh.in
  281. ttymodes.c
  282. ttymodes.h
  283. uidswap.c
  284. uidswap.h
  285. umac.c
  286. umac.h
  287. uuencode.c
  288. uuencode.h
  289. verify.c
  290. version.h
  291. xmalloc.c
  292. xmalloc.h