diff options
author | Matt Johnston <matt@ucc.asn.au> | 2013-04-03 00:43:31 +0800 |
---|---|---|
committer | Matt Johnston <matt@ucc.asn.au> | 2013-04-03 00:43:31 +0800 |
commit | 0edb52169005774051a49a7e515e753c1bd2dd76 (patch) | |
tree | e7bd424ec9a86b360f348d2612e16707bfd46ca6 /sysoptions.h | |
parent | 7a320179658cd58d802a03b5c0c579f728ac044d (diff) | |
download | dropbear-kexguess.tar.gz |
Put some #ifdef options around first-follows options in case theykexguess
need to be disabled
Diffstat (limited to 'sysoptions.h')
-rw-r--r-- | sysoptions.h | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/sysoptions.h b/sysoptions.h index 4d648c1..22c2a4d 100644 --- a/sysoptions.h +++ b/sysoptions.h @@ -23,6 +23,15 @@ #define AUTH_TIMEOUT 300 /* we choose 5 minutes */ #endif +/* A client should try and send an initial key exchange packet guessing + * the algorithm that will match - saves a round trip connecting, has little + * overhead if the guess was "wrong". */ +#define USE_KEX_FIRST_FOLLOWS +/* Use protocol extension to allow "first follows" to succeed more frequently. + * This is currently Dropbear-specific but will gracefully fallback when connecting + * to other implementations. */ +#define USE_KEXGUESS2 + /* Minimum key sizes for DSS and RSA */ #ifndef MIN_DSS_KEYLEN #define MIN_DSS_KEYLEN 512 |