Age | Commit message (Expand) | Author |
2015-02-16 | Revise hostkeys@openssh.com hostkey learning extension. | Damien Miller |
2015-01-26 | correctly match ECDSA subtype (== curve) for offered/recevied | Damien Miller |
2015-01-19 | adapt kex to sshbuf and struct ssh; ok djm@ | Markus Friedl |
2015-01-19 | move dispatch to struct ssh; ok djm@ | Markus Friedl |
2015-01-19 | update packet.c & isolate, introduce struct ssh | Markus Friedl |
2015-01-15 | sync ssh-keysign, ssh-keygen and some dependencies to the new | Damien Miller |
2015-01-13 | adapt mac.c to ssherr.h return codes (de-fatal) and simplify dependencies | Markus Friedl |
2014-05-02 | revert __bounded change; it causes way more problems for portable than | Damien Miller |
2014-03-26 | use __bounded(...) attribute recently added to sys/cdefs.h instead of | Damien Miller |
2014-01-27 | replace openssl HMAC with an implementation based on our ssh_digest_* | Markus Friedl |
2014-01-25 | Add a special case for the DH group size for 3des-cbc, which has an | Darren Tucker |
2014-01-12 | avoid use of OpenSSL BIGNUM type and functions for KEX with | Damien Miller |
2014-01-09 | Introduce digest API and use it to perform all hashing operations | Damien Miller |
2013-11-07 | Output the effective values of Ciphers, MACs and KexAlgorithms when | Darren Tucker |
2013-11-02 | use curve25519 for default key exchange (curve25519-sha256@libssh.org); | Markus Friedl |
2013-07-19 | add ssh-agent(1) support to sshd(8); allows encrypted hostkeys, | Markus Friedl |
2013-04-19 | add the ability to query supported ciphers, MACs, key type and KEX | Damien Miller |
2013-01-08 | support AES-GCM as defined in RFC 5647 (but with simpler KEX handling) | Markus Friedl |
2012-12-11 | add encrypt-then-mac (EtM) modes to openssh by defining new mac algorithms | Markus Friedl |
2010-09-22 | add a KexAlgorithms knob to the client and server configuration to allow | Damien Miller |
2010-09-09 | ECDH/ECDSA compliance fix: these methods vary the hash function they use | Damien Miller |
2010-08-31 | Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and | Damien Miller |
2010-02-26 | Add support for certificate key types for users and hosts. | Damien Miller |
2009-10-24 | Let the client detect if the server supports roaming by looking | Andreas Gunnarsson |
2009-05-27 | Move the KEX_COOKIE_LEN define to kex.h | Andreas Gunnarsson |
2007-06-07 | Add a new MAC algorithm for data integrity, UMAC-64 (not default yet, must | Peter Valchev |
2007-06-05 | Preserve MAC ctx between packets, saving 2xhash calls per-packet. | Damien Miller |
2006-08-03 | almost entirely get rid of the culture of ".h files that include .h files" | Theo de Raadt |
2006-07-23 | #include <signal.h> for sig_atomic_t; need this prior to <sys/param.h> | Kevin Steves |
2006-04-20 | replace the last non-sig_atomic_t flag used in a signal handler with a | Damien Miller |
2006-03-25 | standardise spacing in $OpenBSD$ tags; requested by deraadt@ | Damien Miller |
2006-03-19 | spacing | Theo de Raadt |
2006-03-07 | Implement the diffie-hellman-group-exchange-sha256 key exchange method | Damien Miller |
2005-11-04 | remove hardcoded hash lengths in key exchange code, allowing | Damien Miller |
2005-07-25 | add a new compression method that delays compression until the user | Markus Friedl |
2005-06-17 | make this -Wsign-compare clean; ok avsm@ markus@ | Damien Miller |
2004-06-13 | implement diffie-hellman-group14-sha1 kex method (trivial extension to | Damien Miller |
2004-05-21 | add prototypes for -Wall; ok djm | Markus Friedl |
2003-02-16 | split kex into client and server code, no need to link | Markus Friedl |
2002-09-09 | signed vs unsigned from -pedantic; ok henning@ | Markus Friedl |
2002-05-16 | fix warnings (openssl 0.9.7 requires const) | Markus Friedl |
2002-03-18 | integrate privilege separated openssh; its turned off by default for now. | Niels Provos |
2002-02-14 | hide some more implementation details of cipher.[ch] and prepares for move | Markus Friedl |
2001-12-28 | remove plen from the dispatch fn. it's no longer used. | Markus Friedl |
2001-12-20 | Conformance fix: we should send failing packet sequence number when | Damien Miller |
2001-06-26 | remove comments from .h, since they are cut&paste from the .c files | Markus Friedl |
2001-06-26 | prototype pedant. not very creative... | Jun-ichiro itojun Hagino |
2001-06-25 | update copyright for 2001 | Markus Friedl |
2001-06-23 | get rid of known_hosts2, use it for hostkey lookup, but do not modify. | Markus Friedl |
2001-04-04 | more robust rekeying | Markus Friedl |