summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/kex.h
AgeCommit message (Expand)Author
2015-02-16Revise hostkeys@openssh.com hostkey learning extension.Damien Miller
2015-01-26correctly match ECDSA subtype (== curve) for offered/receviedDamien Miller
2015-01-19adapt kex to sshbuf and struct ssh; ok djm@Markus Friedl
2015-01-19move dispatch to struct ssh; ok djm@Markus Friedl
2015-01-19update packet.c & isolate, introduce struct sshMarkus Friedl
2015-01-15sync ssh-keysign, ssh-keygen and some dependencies to the newDamien Miller
2015-01-13adapt mac.c to ssherr.h return codes (de-fatal) and simplify dependenciesMarkus Friedl
2014-05-02revert __bounded change; it causes way more problems for portable thanDamien Miller
2014-03-26use __bounded(...) attribute recently added to sys/cdefs.h instead ofDamien Miller
2014-01-27replace openssl HMAC with an implementation based on our ssh_digest_*Markus Friedl
2014-01-25Add a special case for the DH group size for 3des-cbc, which has anDarren Tucker
2014-01-12avoid use of OpenSSL BIGNUM type and functions for KEX withDamien Miller
2014-01-09Introduce digest API and use it to perform all hashing operationsDamien Miller
2013-11-07Output the effective values of Ciphers, MACs and KexAlgorithms whenDarren Tucker
2013-11-02use curve25519 for default key exchange (curve25519-sha256@libssh.org);Markus Friedl
2013-07-19add ssh-agent(1) support to sshd(8); allows encrypted hostkeys,Markus Friedl
2013-04-19add the ability to query supported ciphers, MACs, key type and KEXDamien Miller
2013-01-08support AES-GCM as defined in RFC 5647 (but with simpler KEX handling)Markus Friedl
2012-12-11add encrypt-then-mac (EtM) modes to openssh by defining new mac algorithmsMarkus Friedl
2010-09-22add a KexAlgorithms knob to the client and server configuration to allowDamien Miller
2010-09-09ECDH/ECDSA compliance fix: these methods vary the hash function they useDamien Miller
2010-08-31Implement Elliptic Curve Cryptography modes for key exchange (ECDH) andDamien Miller
2010-02-26Add support for certificate key types for users and hosts.Damien Miller
2009-10-24Let the client detect if the server supports roaming by lookingAndreas Gunnarsson
2009-05-27Move the KEX_COOKIE_LEN define to kex.hAndreas Gunnarsson
2007-06-07Add a new MAC algorithm for data integrity, UMAC-64 (not default yet, mustPeter Valchev
2007-06-05Preserve MAC ctx between packets, saving 2xhash calls per-packet.Damien Miller
2006-08-03almost entirely get rid of the culture of ".h files that include .h files"Theo de Raadt
2006-07-23#include <signal.h> for sig_atomic_t; need this prior to <sys/param.h>Kevin Steves
2006-04-20replace the last non-sig_atomic_t flag used in a signal handler with aDamien Miller
2006-03-25standardise spacing in $OpenBSD$ tags; requested by deraadt@Damien Miller
2006-03-19spacingTheo de Raadt
2006-03-07Implement the diffie-hellman-group-exchange-sha256 key exchange methodDamien Miller
2005-11-04remove hardcoded hash lengths in key exchange code, allowingDamien Miller
2005-07-25add a new compression method that delays compression until the userMarkus Friedl
2005-06-17make this -Wsign-compare clean; ok avsm@ markus@Damien Miller
2004-06-13implement diffie-hellman-group14-sha1 kex method (trivial extension toDamien Miller
2004-05-21add prototypes for -Wall; ok djmMarkus Friedl
2003-02-16split kex into client and server code, no need to linkMarkus Friedl
2002-09-09signed vs unsigned from -pedantic; ok henning@Markus Friedl
2002-05-16fix warnings (openssl 0.9.7 requires const)Markus Friedl
2002-03-18integrate privilege separated openssh; its turned off by default for now.Niels Provos
2002-02-14hide some more implementation details of cipher.[ch] and prepares for moveMarkus Friedl
2001-12-28remove plen from the dispatch fn. it's no longer used.Markus Friedl
2001-12-20Conformance fix: we should send failing packet sequence number whenDamien Miller
2001-06-26remove comments from .h, since they are cut&paste from the .c filesMarkus Friedl
2001-06-26prototype pedant. not very creative...Jun-ichiro itojun Hagino
2001-06-25update copyright for 2001Markus Friedl
2001-06-23get rid of known_hosts2, use it for hostkey lookup, but do not modify.Markus Friedl
2001-04-04more robust rekeyingMarkus Friedl