summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/kexgexc.c
AgeCommit message (Expand)Author
2019-11-25Add new structure for signature optionsDamien Miller
2019-01-23pass most arguments to the KEX hash functions as sshbuf ratherDamien Miller
2019-01-21factor out kex_verify_hostkey() - again, duplicated almost exactlyDamien Miller
2019-01-21factor out kex_dh_compute_key() - it's shared between plain DH KEX andDamien Miller
2019-01-21save the derived session id in kex_derive_keys() rather than making eachDamien Miller
2019-01-21Make sshpkt_get_bignum2() allocate the bignum it is parsing ratherDamien Miller
2018-12-27move client/server SSH-* banners to buffers under ssh->kex and factorDamien Miller
2018-09-13hold our collective noses and use the openssl-1.1.x API in OpenSSH;Damien Miller
2018-02-07Remove all guards for calls to OpenSSL free functions - all of theseJoel Sing
2017-12-18pass negotiated signing algorithm though to sshkey_verify() andDamien Miller
2017-05-30protocol handlers all get struct ssh passed; ok djm@Markus Friedl
2017-05-16remove duplicate check; spotted by Jakub JelenDamien Miller
2016-09-12Add MAXIMUM(), MINIMUM(), and ROUNDUP() to misc.h, then use those definitionsTheo de Raadt
2015-05-26Cap DH-GEX group size at 4kbits for Cisco implementations. Some of themDarren Tucker
2015-04-13deprecate ancient, pre-RFC4419 and undocumentedDamien Miller
2015-01-26correctly match ECDSA subtype (== curve) for offered/receviedDamien Miller
2015-01-19adapt kex to sshbuf and struct ssh; ok djm@Markus Friedl
2015-01-19update packet.c & isolate, introduce struct sshMarkus Friedl
2014-02-02convert memset of potentially-private data to explicit_bzero()Damien Miller
2014-01-25Add a special case for the DH group size for 3des-cbc, which has anDarren Tucker
2014-01-12avoid use of OpenSSL BIGNUM type and functions for KEX withDamien Miller
2014-01-09Introduce digest API and use it to perform all hashing operationsDamien Miller
2013-05-17bye, bye xfree(); ok markus@Damien Miller
2010-11-10use only libcrypto APIs that are retained with OPENSSL_NO_DEPRECATED.Damien Miller
2006-11-06add missing checks for openssl return codes; with & ok djm@Markus Friedl
2006-10-31check DH_compute_key() for -1 even if it should not happen because ofMarkus Friedl
2006-08-03almost entirely get rid of the culture of ".h files that include .h files"Theo de Raadt
2006-08-01move #include <stdio.h> out of includes.hKevin Steves
2006-07-22move #include <string.h> out of includes.hKevin Steves
2006-05-18paramter -> parameterMiod Vallat
2006-03-25Put $OpenBSD$ tags back (as comments) to replace the RCSID()s thatDamien Miller
2006-03-19RCSID() can dieTheo de Raadt
2005-11-04remove hardcoded hash lengths in key exchange code, allowingDamien Miller
2003-12-08print requested group size in debug; ok djmMarkus Friedl
2003-02-16split kex into client and server code, no need to linkMarkus Friedl