summaryrefslogtreecommitdiffhomepage
path: root/TODO
diff options
context:
space:
mode:
Diffstat (limited to 'TODO')
-rw-r--r--TODO18
1 files changed, 7 insertions, 11 deletions
diff --git a/TODO b/TODO
index 8a567c2..4197284 100644
--- a/TODO
+++ b/TODO
@@ -1,28 +1,24 @@
Current:
-Things which need doing:
+Things which might need doing:
- Make options.h generated from configure perhaps?
-- investigate self-pipe?
+- Improved queueing of unauthed connections
+
- fix agent fwd problems
-- improve channel window adjustment algorithm (circular buffering)
-- Don't use pregenerated AES tables
+- improve channel window adjustment algorithm (circular buffering)
-- check PRNG
- check that there aren't timing issues with valid/invalid user authentication
feedback.
-- IP6 (binding to :: takes over ipv4 as well, sigh. If anyone wants to suggest
- a clean way (ie no V4MAPPED or setsockopt things) please let me know :)
-- Binding to different interfaces (see ipv6 probably)
+- Binding to different interfaces
-- PAM ??
-- inetd
- possible RSA blinding? need to check whether this is vuln to timing attacks
+- check PRNG
- CTR mode, SSH_MSG_IGNORE sending to improve CBC security
-- DH Group Exchange possibly
+- DH Group Exchange possibly, or just add group14 (whatever it's called today)
- Use m_burn for clearing sensitive items in LTM/LTC