summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/cipher.c
AgeCommit message (Expand)Author
2021-04-03highly polished whitespace, mostly fixing spaces-for-tab and badDamien Miller
2020-12-21Remove the pre-standardization cipher rijndael-cbc@lysator.liu.se.Darren Tucker
2020-04-03make Chacha20-POLY1305 context struct opaque; ok tb@ as part of a largerDamien Miller
2020-03-13spelling errors in comments; no code changeDamien Miller
2020-02-26change explicit_bzero();free() to freezero()Jonathan Gray
2020-01-23Make zlib optional. This adds a "ZLIB" build time option that allowsDarren Tucker
2019-09-06fixes for !WITH_OPENSSL compilation; ok dtucker@Damien Miller
2018-09-13hold our collective noses and use the openssl-1.1.x API in OpenSSH;Damien Miller
2018-02-23Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures)Markus Friedl
2018-02-13remove space before tabDamien Miller
2018-02-07Remove all guards for calls to OpenSSL free functions - all of theseJoel Sing
2017-11-03avoid unused variable warnings for !WITH_OPENSSL;Damien Miller
2017-05-07As promised in last release announcement: remove support forDamien Miller
2017-05-04another tentacle: cipher_set_key_string() was only ever used for SSHv1Damien Miller
2017-05-01fixup setting ciphercontext->plaintext (lost in SSHv1 purge), thoughDamien Miller
2017-04-30remove SSHv1 ciphers; ok markus@Damien Miller
2017-04-30unifdef WITH_SSH1Damien Miller
2016-08-03small refactor of cipher.c: make ciphercontext opaque to callersDamien Miller
2015-12-10Remove NULL-checks before free().mmcc
2015-01-14make non-OpenSSL aes-ctr work on sshd w/ privsep; ok markus@Damien Miller
2014-06-24New key API: refactor key-related functions to be more library-like,Damien Miller
2014-04-29make compiling against OpenSSL optional (make OPENSSL=no);Markus Friedl
2014-02-07remove some logging that makes ssh debugging output very verbose;Damien Miller
2014-02-02convert memset of potentially-private data to explicit_bzero()Damien Miller
2014-01-27replace openssl MD5 with our ssh_digest_*; ok djm@Markus Friedl
2014-01-25Add a special case for the DH group size for 3des-cbc, which has anDarren Tucker
2013-12-06new private key format, bcrypt as KDF by default; details in PROTOCOL.key;Markus Friedl
2013-12-02correct bzero of chacha20+poly1305 key context. bz#2177 fromDamien Miller
2013-11-21Add a new protocol 2 transport cipher "chacha20-poly1305@openssh.com"Damien Miller
2013-11-07Output the effective values of Ciphers, MACs and KexAlgorithms whenDarren Tucker
2013-05-17bye, bye xfree(); ok markus@Damien Miller
2013-04-19add the ability to query supported ciphers, MACs, key type and KEXDamien Miller
2013-01-26remove ACSS, now that it is gone from libcrypto tooDamien Miller
2013-01-12improve error message for integrity failure in AES-GCM modes; ok markus@Damien Miller
2013-01-08support AES-GCM as defined in RFC 5647 (but with simpler KEX handling)Markus Friedl
2012-12-12use OpenSSL's EVP_aes_{128,192,256}_ctr() API and remove our hand-rolledChristian Weisgerber
2012-12-11add encrypt-then-mac (EtM) modes to openssh by defining new mac algorithmsMarkus Friedl
2009-01-26Work around the CPNI-957037 Plaintext Recovery Attack by alwaysMarkus Friedl
2006-08-03almost entirely get rid of the culture of ".h files that include .h files"Theo de Raadt
2006-07-22move #include <string.h> out of includes.hKevin Steves
2006-03-25Put $OpenBSD$ tags back (as comments) to replace the RCSID()s thatDamien Miller
2006-03-19RCSID() can dieTheo de Raadt
2005-07-16spacingDamien Miller
2005-06-17make this -Wsign-compare clean; ok avsm@ markus@Damien Miller
2005-06-09Correctly initialize end of array sentinel; ok djm@Darren Tucker
2005-05-23add support for draft-harris-ssh-arcfour-fixes-02 improved arcfour modes;Damien Miller
2005-01-23config option "Ciphers" should be case-sensitive; ok dtucker@Damien Miller
2004-12-22remove fallback AES support for old OpenSSL, as OpenBSD has had it for manyDamien Miller
2004-07-28more s/illegal/invalid/Markus Friedl
2004-07-11spacesTheo de Raadt