commit | eb648a749b3fb49c57167877ccc5f0ca8085cfcb | [log] [download] |
---|---|---|
author | Ben Lindstrom <mouring@eviladmin.org> | Mon Mar 05 06:00:29 2001 +0000 |
committer | Ben Lindstrom <mouring@eviladmin.org> | Mon Mar 05 06:00:29 2001 +0000 |
tree | 739dad5f12adb3ad3b351584d62d372f894e80a4 | |
parent | f4c73112d00b970698b42765f925050447acc50a [diff] |
- markus@cvs.openbsd.org 2001/02/23 18:15:13 [sshd.c] the random session key depends now on the session_key_int sent by the 'attacker' dig1 = md5(cookie|session_key_int); dig2 = md5(dig1|cookie|session_key_int); fake_session_key = dig1|dig2; this change is caused by a mail from anakin@pobox.com patch based on discussions with my german advisor niels@openbsd.org