 Simon Tatham
|
b80a41d386
Terrapin warning: say if reconfiguration can help.
|
9 months ago |
|
Simon Tatham
|
fdc891d170
Remove fatal-error reporting from scan_kexinits.
|
9 months ago |
|
Simon Tatham
|
0b00e4ce26
Warn about Terrapin vulnerability for unpatched servers.
|
9 months ago |
|
Simon Tatham
|
244be54127
Support OpenSSH's new strict kex feature.
|
9 months ago |
|
Simon Tatham
|
9fcbb86f71
Refactor confirm_weak to use SeatDialogText.
|
10 months ago |
|
Simon Tatham
|
f2e7086902
Factor out the check for ext-info-* keyword.
|
10 months ago |
|
Simon Tatham
|
9e09915157
Fix check for "ext-info-s".
|
10 months ago |
|
Simon Tatham
|
44272b5355
Packet protocol layers: new 'final_output' method.
|
1 year ago |
|
Simon Tatham
|
aa87c20716
Put HMAC-SHA-512 below HMAC-SHA-256 in priority.
|
1 year ago |
|
Simon Tatham
|
f6f9848465
Add support for HMAC-SHA512.
|
1 year ago |
|
Simon Tatham
|
9af705352d
Uppity: clear the right KEXINIT packet at kex startup!
|
2 years ago |
|
Simon Tatham
|
dc875ca0dc
Make rekeys work when KEXINIT filtering is enabled.
|
2 years ago |
|
Simon Tatham
|
5e2acd9af7
New bug workaround: KEXINIT filtering.
|
2 years ago |
|
Simon Tatham
|
cec8c87626
Support elliptic-curve Diffie-Hellman GSS KEX.
|
2 years ago |
|
Simon Tatham
|
031d86ed5b
Add RFC8268 / RFC3126 Diffie-Hellman group{15,16,17,18}.
|
2 years ago |
|
Simon Tatham
|
c1a2114b28
Implement AES-GCM using the @openssh.com protocol IDs.
|
2 years ago |
|
Simon Tatham
|
9cac27946a
Formatting: miscellaneous.
|
2 years ago |
|
Simon Tatham
|
42740a5455
Allow manually confirming and caching certified keys.
|
2 years ago |
|
Simon Tatham
|
f579b3c01e
Certificate trust scope: change to a boolean-expression system.
|
2 years ago |
|
Simon Tatham
|
958304897d
Fix rekeying when using a certified host key.
|
2 years ago |
|
Simon Tatham
|
42dcd465ab
ssh2_scan_kexinits: dynamically allocate server_hostkeys[].
|
2 years ago |
|
Simon Tatham
|
21d4754b6a
Initial support for host certificates.
|
2 years ago |
|
Simon Tatham
|
cf36b9215f
ssh_keyalg: new method 'alternate_ssh_id'.
|
2 years ago |
|
Simon Tatham
|
7d44e35bb3
transport2: make kexlists dynamically allocated.
|
2 years ago |
|
Simon Tatham
|
6a9e4ba24a
kexinit_algorithm: switch to storing names as ptrlen.
|
2 years ago |
|
Simon Tatham
|
faf1601a55
Implement OpenSSH 9.x's NTRU Prime / Curve25519 kex.
|
2 years ago |
|
Simon Tatham
|
e59ee96554
Refactor ecdh_kex into an organised vtable.
|
2 years ago |
|
Simon Tatham
|
e103ab1fb6
Refactor handling of SSH kex shared secret.
|
2 years ago |
|
Simon Tatham
|
4ecb40a60d
Fix a batch of typos in comments and docs.
|
2 years ago |
|
Simon Tatham
|
a2ff884512
Richer data type for interactive prompt results.
|
2 years ago |
