summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/cipher.c
AgeCommit message (Expand)Author
2014-06-24New key API: refactor key-related functions to be more library-like,Damien Miller
2014-04-29make compiling against OpenSSL optional (make OPENSSL=no);Markus Friedl
2014-02-07remove some logging that makes ssh debugging output very verbose;Damien Miller
2014-02-02convert memset of potentially-private data to explicit_bzero()Damien Miller
2014-01-27replace openssl MD5 with our ssh_digest_*; ok djm@Markus Friedl
2014-01-25Add a special case for the DH group size for 3des-cbc, which has anDarren Tucker
2013-12-06new private key format, bcrypt as KDF by default; details in PROTOCOL.key;Markus Friedl
2013-12-02correct bzero of chacha20+poly1305 key context. bz#2177 fromDamien Miller
2013-11-21Add a new protocol 2 transport cipher "chacha20-poly1305@openssh.com"Damien Miller
2013-11-07Output the effective values of Ciphers, MACs and KexAlgorithms whenDarren Tucker
2013-05-17bye, bye xfree(); ok markus@Damien Miller
2013-04-19add the ability to query supported ciphers, MACs, key type and KEXDamien Miller
2013-01-26remove ACSS, now that it is gone from libcrypto tooDamien Miller
2013-01-12improve error message for integrity failure in AES-GCM modes; ok markus@Damien Miller
2013-01-08support AES-GCM as defined in RFC 5647 (but with simpler KEX handling)Markus Friedl
2012-12-12use OpenSSL's EVP_aes_{128,192,256}_ctr() API and remove our hand-rolledChristian Weisgerber
2012-12-11add encrypt-then-mac (EtM) modes to openssh by defining new mac algorithmsMarkus Friedl
2009-01-26Work around the CPNI-957037 Plaintext Recovery Attack by alwaysMarkus Friedl
2006-08-03almost entirely get rid of the culture of ".h files that include .h files"Theo de Raadt
2006-07-22move #include <string.h> out of includes.hKevin Steves
2006-03-25Put $OpenBSD$ tags back (as comments) to replace the RCSID()s thatDamien Miller
2006-03-19RCSID() can dieTheo de Raadt
2005-07-16spacingDamien Miller
2005-06-17make this -Wsign-compare clean; ok avsm@ markus@Damien Miller
2005-06-09Correctly initialize end of array sentinel; ok djm@Darren Tucker
2005-05-23add support for draft-harris-ssh-arcfour-fixes-02 improved arcfour modes;Damien Miller
2005-01-23config option "Ciphers" should be case-sensitive; ok dtucker@Damien Miller
2004-12-22remove fallback AES support for old OpenSSL, as OpenBSD has had it for manyDamien Miller
2004-07-28more s/illegal/invalid/Markus Friedl
2004-07-11spacesTheo de Raadt
2004-06-21make ssh -Wshadow clean, no functional changesAnil Madhavapeddy
2004-01-23rename acss@opebsd.org to acss@openssh.orgHans-Joerg Hoexer
2004-01-23enable acss for sshHans-Joerg Hoexer
2003-11-10constify. ok markus@ & djm@Jakob Schlyter
2003-05-17experimental support for aes-ctr modes fromMarkus Friedl
2003-05-15split out custom EVP ciphersMarkus Friedl
2003-04-12hide cipher details; ok djm@Markus Friedl
2002-11-21debug->debug2, unify debug messagesMarkus Friedl
2002-07-12EVP_CIPH_CUSTOM_IV for our own rijndaelMarkus Friedl
2002-06-23KNFTheo de Raadt
2002-06-19make the monitor sync the transfer ssh1 session key;Markus Friedl
2002-06-04__FUNCTION__ -> __func__Markus Friedl
2002-05-30use rijndael/aes from libcrypto (openssl >= 0.9.7) instead ofMarkus Friedl
2002-05-16fix warnings (openssl 0.9.7 requires const)Markus Friedl
2002-04-03re-add rijndael-cbc@lysator.liu.se for MacSSH; ash@lab.poc.netMarkus Friedl
2002-03-19KNF whitespaceMarkus Friedl
2002-03-18export/import cipher states; needed by ssh-privsepMarkus Friedl
2002-02-18switch to EVP, ok djm@ deraadt@Markus Friedl
2002-02-14hide some more implementation details of cipher.[ch] and prepares for moveMarkus Friedl
2002-01-21remove "rijndael-*", just use "aes-" since this how rijndael is calledMarkus Friedl