summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* merge coverity from maincoverityMatt Johnston2020-06-26423-48874/+17315
|\
| * Don't choke on disabled authorized_keys(5) optionsGuilhem Moulin2020-06-261-4/+4
| | | | | | | | | | | | As of 2020.79 X11 forwarding is disabled at build time, which could lock out users with authorized_keys(5) files containing ?no-X11-forwarding? options.
| * update CHANGES for 2020.80Matt Johnston2020-06-261-1/+16
| |
| * Some notes on styleMatt Johnston2020-06-261-0/+24
| |
| * Refer to libtom license filesMatt Johnston2020-06-251-2/+3
| |
| * mergeMatt Johnston2020-06-232-3/+3
| |\
| | * move GNU_SOURCE earlierMatt Johnston2020-06-231-2/+2
| | |
| | * check for poly1305_init in other libtomcrypt configure testMatt Johnston2020-06-231-1/+1
| | |
| * | fix trace messages (#105)Ilya2020-06-231-4/+4
| |/
| * _GNU_SOURCE for randomMatt Johnston2020-06-231-0/+2
| |
| * Disable toom and karatsuba for new libtommathMatt Johnston2020-06-181-0/+4
| |
| * Added signature for changeset 4877afd51e04Matt Johnston2020-06-151-0/+1
| |
| * Added tag DROPBEAR_2020.79 for changeset e2e4929d057bMatt Johnston2020-06-150-0/+0
| |
| * can't call "make lint" without configureDROPBEAR_2020.79Matt Johnston2020-06-151-1/+0
| |
| * changelog for 2020.79Matt Johnston2020-06-153-1/+61
| |
| * Fix "make install" for manpages in out-of-tree buildsGabor Z. Papp2020-06-151-2/+2
| |
| * Add DEVELOPING.mdMatt Johnston2020-06-152-0/+53
| |
| * Delay seedrandom until connectionsMatt Johnston2020-06-151-3/+3
| |
| * Disallow leading lines before the ident for server (#102)Vladislav Grishenko2020-06-151-2/+5
| | | | | | | | | | | | | | | | | | | | | | Per RFC4253 4.2 clients must be able to process other lines of data before the version string, server behavior is not defined neither with MUST/SHOULD nor with MAY. If server process up to 50 lines too - it may cause too long hanging session with invalid/evil client that consume host resources and potentially may lead to DDoS on poor embedded boxes. Let's require first line from client to be version string and fail early if it's not - matches both RFC and real OpenSSH behavior.
| * Disable by default 3des, cbc, hmac-sha1-96, x11 forwardingMatt Johnston2020-06-111-15/+13
| |
| * Remove blowfishMatt Johnston2020-06-103-12/+0
| |
| * avoid zero length array in base64_decodeMatt Johnston2020-06-101-3/+9
| |
| * Merge libtomcrypt v1.18.2Matt Johnston2020-06-1045-138/+388
| |
| * Fix whitespace changes vs upstream libtomcryptMatt Johnston2020-06-1011-1213/+1213
| |
| * Sync curve25519 licenseVladislav Grishenko2020-05-311-2/+1
| |
| * Set IOV_MAX for IRIXKazuo Kuroi2020-06-101-4/+6
| |
| * void return types for curve25519Matt Johnston2020-05-303-16/+9
| |
| * Remove unused DEBUG_FORKGPROFMatt Johnston2020-05-292-11/+0
| |
| * Fix ChaCha20 on 32-bit platforms (#99)Vladislav Grishenko2020-05-292-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | * Fix ChaCha20 on 32-bit platforms On 32-bit platforms with old compiler STORE64H() parameter is not auto-expanded to 64-bit value, causing wrong IV data. Spotted on BCM4706 MIPS32r2 with GCC 4.2.4: Exit before auth: Integrity error (bad packet size 2065808956) * Fix Chacha20-Poly1305 and AES-GCM debug messages Functions were renamed earlier and trace messages - not.
| * Don't warn when SO_PRIORITY failsMatt Johnston2020-05-281-3/+3
| |
| * Fix typo DROPBEAR_NORMAL_DHMatt Johnston2020-05-282-4/+4
| |
| * Allow DH to be completely disabled (#97)Vladislav Grishenko2020-05-285-4/+14
| | | | | | | | | | | | Reduces binary size by ~2kB by default and by 21kB with no other libtommath functions users, ex. with curve25519 kex and ed25519 key only.
| * Fix warning for unused prngd branchMatt Johnston2020-05-281-1/+1
| |
| * Fix indentation and add bracesMatt Johnston2020-05-281-4/+6
| |
| * mergeMatt Johnston2020-05-281-1/+2
| |\
| | * Avoid oss-fuzz $SANITIZER causing wrong buildMatt Johnston2020-05-271-1/+2
| | | | | | | | | | | | https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22608
| * | Use Linux getrandom() to ensure random device is initialisedMatt Johnston2020-05-283-56/+97
| | | | | | | | | | | | | | | Remove old code warning about random device being not ready, /dev/random isn't used by default anyway.
| * | set up early logging nameMatt Johnston2020-05-281-1/+7
| | |
| * | initialise variable to stop warningMatt Johnston2020-05-281-1/+1
| |/
| * Mention libtom version requirements, check for poly1305 in libtomcryptMatt Johnston2020-05-271-5/+6
| |
| * Bring back -Werror and improve travis testsMatt Johnston2020-05-261-12/+16
| |
| * Update LibTomMath to 1.2.0 (#84)Steffen Jaeckel2020-05-26229-31297/+6033
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update C files * update other files * update headers * update makefiles * remove mp_set/get_double() * use ltm 1.2.0 API * update ltm_desc * use bundled tommath if system-tommath is too old * XMALLOC etc. were changed to MP_MALLOC etc.
| * try rearrange travis build matrixMatt Johnston2020-05-261-6/+4
| |
| * .travis.yml needs spaces not tabsMatt Johnston2020-05-261-4/+4
| |
| * update travis to Ubuntu focal to provide chacha20Matt Johnston2020-05-261-3/+5
| |
| * Fix untested rsa-sha256 change to fuzzer-verifyMatt Johnston2020-05-261-1/+2
| |
| * Make "dbclient -m help -c help" workMatt Johnston2020-05-262-28/+26
| |
| * fix typoMatt Johnston2020-05-261-1/+1
| |
| * Get rid of unused "none" cipher optionMatt Johnston2020-05-261-6/+0
| |
| * cast to fix warningMatt Johnston2020-05-261-1/+1
| |