summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Expand)Author
2019-01-21merge kexkem[cs] into kexgenDamien Miller
2019-01-21pass values used in KEX hash computation as sshbuf rather thanDamien Miller
2019-01-21remove kex_derive_keys_bn wrapper; no unused since the DH-like KEXDamien Miller
2019-01-21use KEM API for vanilla ECDHDamien Miller
2019-01-21use KEM API for vanilla DH KEXDamien Miller
2019-01-21use KEM API for vanilla c25519 KEXDamien Miller
2019-01-21Add support for a PQC KEX/KEM: sntrup4591761x25519-sha512@tinyssh.orgDamien Miller
2019-01-21factor out kex_verify_hostkey() - again, duplicated almost exactlyDamien Miller
2019-01-21factor out kex_load_hostkey() - this is duplicated in both the client andDamien Miller
2019-01-21factor out kex_dh_compute_key() - it's shared between plain DH KEX andDamien Miller
2019-01-21factor out DH keygen; it's identical between the client and the serverDamien Miller
2019-01-21save the derived session id in kex_derive_keys() rather than making eachDamien Miller
2019-01-21Make sshpkt_get_bignum2() allocate the bignum it is parsing ratherDamien Miller
2019-01-21remove obsolete (SSH v.1) sshbuf_get/put_bignum1 functionsDamien Miller
2019-01-21fix all-zero check in kexc25519_shared_keyDamien Miller
2019-01-21explicitly handle printing the AF_KEY socket type as "pfkey"David Gwynne
2019-01-21- -T was added to the first synopsis by mistakeJason McIntyre
2019-01-21always print the caller's error message in ossl_error(), even when thereDamien Miller
2019-01-21get the ex_data (pkcs11_key object) back from the keys at theDamien Miller
2019-01-21GSSAPI code got missed when converting to new packet APIDamien Miller
2019-01-21use ECDSA_SIG_set0() instead of poking signature values intoDamien Miller
2019-01-20we use singleton pkcs#11 RSA_METHOD and EC_KEY_METHOD now, so thereDamien Miller
2019-01-20KNF previous; from markus@Damien Miller
2019-01-20use OpenSSL's RSA reference counting hooks to implicitly clean upDamien Miller
2019-01-20make the PKCS#11 RSA code more like the new PKCS#11 ECDSA code:Damien Miller
2019-01-20fix leak of ECDSA pkcs11_key objectsDamien Miller
2019-01-20use EVP_PKEY_get0_EC_KEY() instead of direct access of EC_KEY internalsDamien Miller
2019-01-20cleanup PKCS#11 ECDSA pubkey loading: the returned object should neverDamien Miller
2019-01-20cleanup unnecessary code in ECDSA pkcs#11 signature support: theDamien Miller
2019-01-20cleanup pkcs#11 client code: use sshkey_new in instead of stack-Damien Miller
2019-01-20allow override of the pkcs#11 helper binary via $SSH_PKCS11_HELPER;Damien Miller
2019-01-20add support for ECDSA keys in PKCS#11 tokensDamien Miller
2019-01-20add option to test whether keys in an agent are usable, by performingDamien Miller
2019-01-20Should use DECFRA if not default, not if default. From Karl Beldan.Nicholas Marriott
2019-01-20merge weird BUGS section into HISTORY;Ingo Schwarze
2019-01-20don't reuse global between functions; the value is wrong.Ted Unangst
2019-01-20Fix BN_is_prime_* calls in SSH, the API returns -1 on error.Theo Buehler
2019-01-20Fix BN_is_prime_* calls in openssl(1), the API returns -1 on error.Theo Buehler
2019-01-20DH-GEX min value is now specified in RFC8270. ok djm@Darren Tucker
2019-01-19fix error in refactor: use ssh_packet_disconnect() instead ofDamien Miller
2019-01-19remove last traces of old packet API!Damien Miller
2019-01-19remove last references to active_stateDamien Miller
2019-01-19convert monitor.c to new packet APIDamien Miller
2019-01-19convert sshd.c to new packet APIDamien Miller
2019-01-19convert session.c to new packet APIDamien Miller
2019-01-19convert auth.c to new packet APIDamien Miller
2019-01-19convert serverloop.c to new packet APIDamien Miller
2019-01-19convert the remainder of sshconnect2.c to new packet APIDamien Miller
2019-01-19convert the remainder of clientloop.c to new packet APIDamien Miller
2019-01-19convert auth2.c to new packet APIDamien Miller