diff options
| author | Damien Miller <djm@cvs.openbsd.org> | 2008-11-04 08:22:14 +0000 |
|---|---|---|
| committer | Damien Miller <djm@cvs.openbsd.org> | 2008-11-04 08:22:14 +0000 |
| commit | 6d6cc1a771a01cfb0780b7838a8906907e05decb (patch) | |
| tree | d51a92e922e99b0362d3bc99f2e42f7da3bfde78 /usr.bin/ssh/servconf.h | |
| parent | 48875799da9efccdddf642e514c036278e48eec1 (diff) | |
Add support for an experimental zero-knowledge password authentication
method using the J-PAKE protocol described in F. Hao, P. Ryan,
"Password Authenticated Key Exchange by Juggling", 16th Workshop on
Security Protocols, Cambridge, April 2008.
This method allows password-based authentication without exposing
the password to the server. Instead, the client and server exchange
cryptographic proofs to demonstrate of knowledge of the password while
revealing nothing useful to an attacker or compromised endpoint.
This is experimental, work-in-progress code and is presently
compiled-time disabled (turn on -DJPAKE in Makefile.inc).
"just commit it. It isn't too intrusive." deraadt@
Diffstat (limited to 'usr.bin/ssh/servconf.h')
| -rw-r--r-- | usr.bin/ssh/servconf.h | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/usr.bin/ssh/servconf.h b/usr.bin/ssh/servconf.h index c9c8c71769d..394f4dd2a35 100644 --- a/usr.bin/ssh/servconf.h +++ b/usr.bin/ssh/servconf.h @@ -1,4 +1,4 @@ -/* $OpenBSD: servconf.h,v 1.85 2008/06/10 04:50:25 dtucker Exp $ */ +/* $OpenBSD: servconf.h,v 1.86 2008/11/04 08:22:13 djm Exp $ */ /* * Author: Tatu Ylonen <ylo@cs.hut.fi> @@ -96,6 +96,8 @@ typedef struct { * authentication. */ int kbd_interactive_authentication; /* If true, permit */ int challenge_response_authentication; + int zero_knowledge_password_authentication; + /* If true, permit jpake auth */ int permit_empty_passwd; /* If false, do not permit empty * passwords. */ int permit_user_env; /* If true, read ~/.ssh/environment */ |