commit | af43a7ac2d77c57112b48f34c7a72be2adb761bc | [log] [download] |
---|---|---|
author | Damien Miller <djm@mindrot.org> | Wed Dec 12 10:46:31 2012 +1100 |
committer | Damien Miller <djm@mindrot.org> | Wed Dec 12 10:46:31 2012 +1100 |
tree | 4381616492fbbca62d39c042f16221f681c1d37f | |
parent | 6a1937eac5da5bdcf33aaa922ce5de0c764e37ed [diff] |
- markus@cvs.openbsd.org 2012/12/11 22:31:18 [PROTOCOL authfile.c cipher.c cipher.h kex.h mac.c myproposal.h] [packet.c ssh_config.5 sshd_config.5] add encrypt-then-mac (EtM) modes to openssh by defining new mac algorithms that change the packet format and compute the MAC over the encrypted message (including the packet size) instead of the plaintext data; these EtM modes are considered more secure and used by default. feedback and ok djm@