Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-10-24 | Add buf_decrpos() | Matt Johnston | |
2020-05-26 | cast to fix warning | Matt Johnston | |
2020-05-24 | send and handle SSH_MSG_EXT_INFO only at the correct point | Matt Johnston | |
- other fixes for rsa pubkey auth - only include ext-info handling when rsa pubkey auth is compiled | |||
2020-05-19 | ext-info handling for server-sig-algs | Matt Johnston | |
only client side is handled | |||
2020-05-17 | split signkey_type and signature_type for RSA sha1 vs sha256 | Matt Johnston | |
2020-04-06 | use sigtype where appropriate | Matt Johnston | |
2020-03-12 | Add Ed25519 support (#91) | Vladislav Grishenko | |
* Add support for Ed25519 as a public key type Ed25519 is a elliptic curve signature scheme that offers better security than ECDSA and DSA and good performance. It may be used for both user and host keys. OpenSSH key import and fuzzer are not supported yet. Initially inspired by Peter Szabo. * Add curve25519 and ed25519 fuzzers * Add import and export of Ed25519 keys | |||
2018-02-28 | - #if not #ifdef for DROPBEAR_FUZZ | Matt Johnston | |
- fix some unused variables --HG-- branch : fuzz | |||
2018-02-17 | merge from main | Matt Johnston | |
--HG-- branch : fuzz | |||
2018-02-16 | options: Complete the transition to numeric toggles (`#if') | Michael Witten | |
For the sake of review, this commit alters only the code; the affiliated comments within the source files also need to be updated, but doing so now would obscure the operational changes that have been made here. * All on/off options have been switched to the numeric `#if' variant; that is the only way to make this `default_options.h.in' thing work in a reasonable manner. * There is now some very minor compile-time checking of the user's choice of options. * NO_FAST_EXPTMOD doesn't seem to be used, so it has been removed. * ENABLE_USER_ALGO_LIST was supposed to be renamed DROPBEAR_USER_ALGO_LIST, and this commit completes that work. * DROPBEAR_FUZZ seems to be a relatively new, as-yet undocumented option, which was added by the following commit: commit 6e0b539e9ca0b5628c6c5a3d118ad6a2e79e8039 Author: Matt Johnston <matt@ucc.asn.au> Date: Tue May 23 22:29:21 2017 +0800 split out checkpubkey_line() separately It has now been added to `sysoptions.h' and defined as `0' by default. * The configuration option `DROPBEAR_PASSWORD_ENV' is no longer listed in `default_options.h.in'; it is no longer meant to be set by the user, and is instead left to be defined in `sysoptions.h' (where it was already being defined) as merely the name of the environment variable in question: DROPBEAR_PASSWORD To enable or disable use of that environment variable, the user must now toggle `DROPBEAR_USE_DROPBEAR_PASSWORD'. * The sFTP support is now toggled by setting `DROPBEAR_SFTPSERVER', and the path of the sFTP server program is set independently through the usual SFTPSERVER_PATH. | |||
2017-08-19 | Pointer parameter could be declared as pointing to const | Francois Perrad | |
2017-05-26 | add m_mp_free_multi, be more careful freeing when failing to load keys | Matt Johnston | |
--HG-- branch : fuzz | |||
2017-05-26 | fix null pointer crash | Matt Johnston | |
2017-05-26 | fix null pointer crash | Matt Johnston | |
--HG-- branch : fuzz | |||
2017-05-25 | avoid NULL argument to base64 decode | Matt Johnston | |
--HG-- branch : fuzz | |||
2017-05-23 | fuzzer-pubkey | Matt Johnston | |
--HG-- branch : fuzz | |||
2017-05-21 | Fix null pointer dereference found by libfuzzer | Matt Johnston | |
2017-05-26 | add m_mp_free_multi, be more careful freeing when failing to load keys | Matt Johnston | |
2017-05-21 | Fix null pointer dereference found by libfuzzer | Matt Johnston | |
--HG-- branch : fuzz | |||
2016-05-04 | Convert #ifdef to #if, other build changes | Matt Johnston | |
2016-03-16 | merge | Matt Johnston | |
2016-03-16 | const variables | Francois Perrad | |
2016-03-15 | cast return type to enum | Matt Johnston | |
2015-12-31 | refactor indentation with hard tab | Francois Perrad | |
2015-06-04 | buf_getstring and buf_putstring now use non-unsigned char* | Matt Johnston | |
2015-05-05 | Fix pointer differ in signess warnings [-Werror=pointer-sign] | Gaƫl PORTAY | |
2015-03-01 | Fix some memory leaks in ecc code | Matt Johnston | |
2015-02-20 | Move generic network routines to netio.c | Matt Johnston | |
--HG-- branch : fastopen | |||
2014-06-25 | Fix compiling with ECDSA and DSS disabled | Matt Johnston | |
2013-11-25 | Fix some warnings | Matt Johnston | |
2013-11-14 | use oldstyle comments | Matt Johnston | |
2013-11-14 | - Some fixes for old compilers like tru64 v4 from Daniel Richard G. | Matt Johnston | |
- Don't warn about blocking random device for prngd | |||
2013-11-12 | Various cleanups and fixes for warnings | Matt Johnston | |
--HG-- branch : ecc | |||
2013-11-07 | Add '-R' for delayed hostkey option | Matt Johnston | |
--HG-- branch : keyondemand | |||
2013-11-07 | refactor key generation, make it generate as required. | Matt Johnston | |
Needs UI in server command line options --HG-- branch : keyondemand | |||
2013-11-01 | Fix specifying a keysize for key generation, fix key name arguments | Matt Johnston | |
--HG-- branch : ecc | |||
2013-05-25 | have separate ecdsa keys for each size | Matt Johnston | |
fix crash from the mp_alloc_init_multi change in RSA --HG-- branch : ecc | |||
2013-05-21 | merge in HEAD | Matt Johnston | |
--HG-- branch : ecc | |||
2013-05-03 | ecdsa is working | Matt Johnston | |
--HG-- branch : ecc | |||
2013-04-28 | more ecdsa signkey work, not correct | Matt Johnston | |
--HG-- branch : ecc | |||
2013-04-14 | A bit of work on ecdsa for host/auth keys | Matt Johnston | |
--HG-- branch : ecc | |||
2013-04-06 | Make _sign and _verify functions take a buffer* rather than void* and int | Matt Johnston | |
--HG-- branch : ecc | |||
2013-04-01 | Move the more verbose TRACE() statements into TRACE2() | Matt Johnston | |
2011-12-04 | - Fix some format strings in TRACE()s | Matt Johnston | |
2011-02-23 | Improve capitalisation for all logged strings | Matt Johnston | |
--HG-- extra : convert_revision : 997e53cec7a9efb7413ac6e17b6be60a5597bd2e | |||
2010-07-21 | Rename rsa_key to dropbear_rsa_key (and same for dss too) so | Matt Johnston | |
we don't conflict with libtomcrypt. --HG-- extra : convert_revision : 77961344ec415d73d48fdc7b1ebead3099c13394 | |||
2009-07-30 | Agent forwarding works | Matt Johnston | |
--HG-- branch : agent-client extra : convert_revision : eb0dae4b62e243ba37a897beb7ba81a4f637d8b3 | |||
2009-07-06 | New standard linked list to use, rather than adhoc SignKeyList or TCPFwdList | Matt Johnston | |
--HG-- branch : agent-client extra : convert_revision : 5465e639cc3f5ee0c6c55f0de6e7b6d5a8769da3 | |||
2007-02-22 | Improve known_hosts checking. | Matt Johnston | |
--HG-- extra : convert_revision : b7933fa29cbedeb53b79a0b60aaa0f049e003cb2 | |||
2005-09-06 | - add explicit check that correct keytype exists for pubkey verification | Matt Johnston | |
--HG-- extra : convert_revision : 8d86185c9b7efcedc1d640208c03bb1b377cc502 |