summaryrefslogtreecommitdiffhomepage
AgeCommit message (Collapse)Author
2020-06-26Added tag DROPBEAR_2020.80 for changeset 73646de50f13Matt Johnston
2020-06-26version 2020.80Matt Johnston
2020-06-26Don't choke on disabled authorized_keys(5) optionsGuilhem Moulin
As of 2020.79 X11 forwarding is disabled at build time, which could lock out users with authorized_keys(5) files containing ‘no-X11-forwarding’ options.
2020-06-26update CHANGES for 2020.80Matt Johnston
2020-06-26Some notes on styleMatt Johnston
2020-06-25Refer to libtom license filesMatt Johnston
2020-06-23mergeMatt Johnston
2020-06-23move GNU_SOURCE earlierMatt Johnston
2020-06-23fix trace messages (#105)Ilya
2020-06-23check for poly1305_init in other libtomcrypt configure testMatt Johnston
2020-06-23_GNU_SOURCE for randomMatt Johnston
2020-06-18Disable toom and karatsuba for new libtommathMatt Johnston
2020-06-15Added signature for changeset 4877afd51e04Matt Johnston
2020-06-15Added tag DROPBEAR_2020.79 for changeset e2e4929d057bMatt Johnston
2020-06-15can't call "make lint" without configureMatt Johnston
2020-06-15changelog for 2020.79Matt Johnston
2020-06-15Fix "make install" for manpages in out-of-tree buildsGabor Z. Papp
2020-06-15Add DEVELOPING.mdMatt Johnston
2020-06-15Delay seedrandom until connectionsMatt Johnston
2020-06-15Disallow leading lines before the ident for server (#102)Vladislav Grishenko
Per RFC4253 4.2 clients must be able to process other lines of data before the version string, server behavior is not defined neither with MUST/SHOULD nor with MAY. If server process up to 50 lines too - it may cause too long hanging session with invalid/evil client that consume host resources and potentially may lead to DDoS on poor embedded boxes. Let's require first line from client to be version string and fail early if it's not - matches both RFC and real OpenSSH behavior.
2020-06-11Disable by default 3des, cbc, hmac-sha1-96, x11 forwardingMatt Johnston
2020-06-10Remove blowfishMatt Johnston
2020-06-10avoid zero length array in base64_decodeMatt Johnston
2020-06-10Merge libtomcrypt v1.18.2Matt Johnston
2020-06-10Fix whitespace changes vs upstream libtomcryptMatt Johnston
2020-06-10Sync curve25519 licenseVladislav Grishenko
2020-06-10Set IOV_MAX for IRIXKazuo Kuroi
2020-05-30void return types for curve25519Matt Johnston
2020-05-29Remove unused DEBUG_FORKGPROFMatt Johnston
2020-05-29Fix ChaCha20 on 32-bit platforms (#99)Vladislav Grishenko
* Fix ChaCha20 on 32-bit platforms On 32-bit platforms with old compiler STORE64H() parameter is not auto-expanded to 64-bit value, causing wrong IV data. Spotted on BCM4706 MIPS32r2 with GCC 4.2.4: Exit before auth: Integrity error (bad packet size 2065808956) * Fix Chacha20-Poly1305 and AES-GCM debug messages Functions were renamed earlier and trace messages - not.
2020-05-28Don't warn when SO_PRIORITY failsMatt Johnston
2020-05-28Fix typo DROPBEAR_NORMAL_DHMatt Johnston
2020-05-28Allow DH to be completely disabled (#97)Vladislav Grishenko
Reduces binary size by ~2kB by default and by 21kB with no other libtommath functions users, ex. with curve25519 kex and ed25519 key only.
2020-05-28Fix warning for unused prngd branchMatt Johnston
2020-05-28Fix indentation and add bracesMatt Johnston
2020-05-28mergeMatt Johnston
2020-05-28Use Linux getrandom() to ensure random device is initialisedMatt Johnston
Remove old code warning about random device being not ready, /dev/random isn't used by default anyway.
2020-05-28set up early logging nameMatt Johnston
2020-05-28initialise variable to stop warningMatt Johnston
2020-05-27Avoid oss-fuzz $SANITIZER causing wrong buildMatt Johnston
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22608
2020-05-27Mention libtom version requirements, check for poly1305 in libtomcryptMatt Johnston
2020-05-26Bring back -Werror and improve travis testsMatt Johnston
2020-05-26Update LibTomMath to 1.2.0 (#84)Steffen Jaeckel
* update C files * update other files * update headers * update makefiles * remove mp_set/get_double() * use ltm 1.2.0 API * update ltm_desc * use bundled tommath if system-tommath is too old * XMALLOC etc. were changed to MP_MALLOC etc.
2020-05-26try rearrange travis build matrixMatt Johnston
2020-05-26.travis.yml needs spaces not tabsMatt Johnston
2020-05-26update travis to Ubuntu focal to provide chacha20Matt Johnston
2020-05-26Fix untested rsa-sha256 change to fuzzer-verifyMatt Johnston
2020-05-26Make "dbclient -m help -c help" workMatt Johnston
2020-05-26fix typoMatt Johnston
2020-05-26Get rid of unused "none" cipher optionMatt Johnston