- markus@cvs.openbsd.org 2012/12/11 22:31:18
     [PROTOCOL authfile.c cipher.c cipher.h kex.h mac.c myproposal.h]
     [packet.c ssh_config.5 sshd_config.5]
     add encrypt-then-mac (EtM) modes to openssh by defining new mac algorithms
     that change the packet format and compute the MAC over the encrypted
     message (including the packet size) instead of the plaintext data;
     these EtM modes are considered more secure and used by default.
     feedback and ok djm@
11 files changed
tree: 4381616492fbbca62d39c042f16221f681c1d37f
  1. .cvsignore
  2. CREDITS
  3. ChangeLog
  4. INSTALL
  5. LICENCE
  6. Makefile.in
  7. OVERVIEW
  8. PROTOCOL
  9. PROTOCOL.agent
  10. PROTOCOL.certkeys
  11. PROTOCOL.mux
  12. README
  13. README.dns
  14. README.platform
  15. README.privsep
  16. README.tun
  17. TODO
  18. aclocal.m4
  19. acss.c
  20. acss.h
  21. addrmatch.c
  22. atomicio.c
  23. atomicio.h
  24. audit-bsm.c
  25. audit-linux.c
  26. audit.c
  27. audit.h
  28. auth-bsdauth.c
  29. auth-chall.c
  30. auth-krb5.c
  31. auth-options.c
  32. auth-options.h
  33. auth-pam.c
  34. auth-pam.h
  35. auth-passwd.c
  36. auth-rh-rsa.c
  37. auth-rhosts.c
  38. auth-rsa.c
  39. auth-shadow.c
  40. auth-sia.c
  41. auth-sia.h
  42. auth-skey.c
  43. auth.c
  44. auth.h
  45. auth1.c
  46. auth2-chall.c
  47. auth2-gss.c
  48. auth2-hostbased.c
  49. auth2-jpake.c
  50. auth2-kbdint.c
  51. auth2-none.c
  52. auth2-passwd.c
  53. auth2-pubkey.c
  54. auth2.c
  55. authfd.c
  56. authfd.h
  57. authfile.c
  58. authfile.h
  59. bufaux.c
  60. bufbn.c
  61. bufec.c
  62. buffer.c
  63. buffer.h
  64. buildpkg.sh.in
  65. canohost.c
  66. canohost.h
  67. channels.c
  68. channels.h
  69. cipher-3des1.c
  70. cipher-acss.c
  71. cipher-aes.c
  72. cipher-bf1.c
  73. cipher-ctr.c
  74. cipher.c
  75. cipher.h
  76. cleanup.c
  77. clientloop.c
  78. clientloop.h
  79. compat.c
  80. compat.h
  81. compress.c
  82. compress.h
  83. config.guess
  84. config.sub
  85. configure.ac
  86. contrib/
  87. crc32.c
  88. crc32.h
  89. deattack.c
  90. deattack.h
  91. defines.h
  92. dh.c
  93. dh.h
  94. dispatch.c
  95. dispatch.h
  96. dns.c
  97. dns.h
  98. entropy.c
  99. entropy.h
  100. fatal.c
  101. fixpaths
  102. fixprogs
  103. groupaccess.c
  104. groupaccess.h
  105. gss-genr.c
  106. gss-serv-krb5.c
  107. gss-serv.c
  108. hostfile.c
  109. hostfile.h
  110. includes.h
  111. install-sh
  112. jpake.c
  113. jpake.h
  114. kex.c
  115. kex.h
  116. kexdh.c
  117. kexdhc.c
  118. kexdhs.c
  119. kexecdh.c
  120. kexecdhc.c
  121. kexecdhs.c
  122. kexgex.c
  123. kexgexc.c
  124. kexgexs.c
  125. key.c
  126. key.h
  127. log.c
  128. log.h
  129. loginrec.c
  130. loginrec.h
  131. logintest.c
  132. mac.c
  133. mac.h
  134. match.c
  135. match.h
  136. md-sha256.c
  137. md5crypt.c
  138. md5crypt.h
  139. mdoc2man.awk
  140. misc.c
  141. misc.h
  142. mkinstalldirs
  143. moduli
  144. moduli.5
  145. moduli.c
  146. monitor.c
  147. monitor.h
  148. monitor_fdpass.c
  149. monitor_fdpass.h
  150. monitor_mm.c
  151. monitor_mm.h
  152. monitor_wrap.c
  153. monitor_wrap.h
  154. msg.c
  155. msg.h
  156. mux.c
  157. myproposal.h
  158. nchan.c
  159. nchan.ms
  160. nchan2.ms
  161. openbsd-compat/
  162. openssh.xml.in
  163. opensshd.init.in
  164. packet.c
  165. packet.h
  166. pathnames.h
  167. pkcs11.h
  168. platform.c
  169. platform.h
  170. progressmeter.c
  171. progressmeter.h
  172. readconf.c
  173. readconf.h
  174. readpass.c
  175. regress/
  176. rijndael.c
  177. rijndael.h
  178. roaming.h
  179. roaming_client.c
  180. roaming_common.c
  181. roaming_dummy.c
  182. roaming_serv.c
  183. rsa.c
  184. rsa.h
  185. sandbox-darwin.c
  186. sandbox-null.c
  187. sandbox-rlimit.c
  188. sandbox-seccomp-filter.c
  189. sandbox-systrace.c
  190. scard/
  191. schnorr.c
  192. schnorr.h
  193. scp.1
  194. scp.c
  195. servconf.c
  196. servconf.h
  197. serverloop.c
  198. serverloop.h
  199. session.c
  200. session.h
  201. sftp-client.c
  202. sftp-client.h
  203. sftp-common.c
  204. sftp-common.h
  205. sftp-glob.c
  206. sftp-server-main.c
  207. sftp-server.8
  208. sftp-server.c
  209. sftp.1
  210. sftp.c
  211. sftp.h
  212. ssh-add.1
  213. ssh-add.c
  214. ssh-agent.1
  215. ssh-agent.c
  216. ssh-dss.c
  217. ssh-ecdsa.c
  218. ssh-gss.h
  219. ssh-keygen.1
  220. ssh-keygen.c
  221. ssh-keyscan.1
  222. ssh-keyscan.c
  223. ssh-keysign.8
  224. ssh-keysign.c
  225. ssh-pkcs11-client.c
  226. ssh-pkcs11-helper.8
  227. ssh-pkcs11-helper.c
  228. ssh-pkcs11.c
  229. ssh-pkcs11.h
  230. ssh-rsa.c
  231. ssh-sandbox.h
  232. ssh.1
  233. ssh.c
  234. ssh.h
  235. ssh1.h
  236. ssh2.h
  237. ssh_config
  238. ssh_config.5
  239. sshconnect.c
  240. sshconnect.h
  241. sshconnect1.c
  242. sshconnect2.c
  243. sshd.8
  244. sshd.c
  245. sshd_config
  246. sshd_config.5
  247. sshlogin.c
  248. sshlogin.h
  249. sshpty.c
  250. sshpty.h
  251. sshtty.c
  252. survey.sh.in
  253. ttymodes.c
  254. ttymodes.h
  255. uidswap.c
  256. uidswap.h
  257. umac.c
  258. umac.h
  259. uuencode.c
  260. uuencode.h
  261. version.h
  262. xmalloc.c
  263. xmalloc.h