| commit | eb648a749b3fb49c57167877ccc5f0ca8085cfcb | [log] [download] |
|---|---|---|
| author | Ben Lindstrom <mouring@eviladmin.org> | Mon Mar 05 06:00:29 2001 +0000 |
| committer | Ben Lindstrom <mouring@eviladmin.org> | Mon Mar 05 06:00:29 2001 +0000 |
| tree | 739dad5f12adb3ad3b351584d62d372f894e80a4 | |
| parent | f4c73112d00b970698b42765f925050447acc50a [diff] |
- markus@cvs.openbsd.org 2001/02/23 18:15:13
[sshd.c]
the random session key depends now on the session_key_int
sent by the 'attacker'
dig1 = md5(cookie|session_key_int);
dig2 = md5(dig1|cookie|session_key_int);
fake_session_key = dig1|dig2;
this change is caused by a mail from anakin@pobox.com
patch based on discussions with my german advisor niels@openbsd.org