summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Allocate real file descriptors for fuzz input with dup()fuzzMatt Johnston2020-10-181-20/+29
|
* Disallow extra kexinit messagesMatt Johnston2020-10-181-0/+6
|
* Add fuzzer-client_nomaths, fix client fuzzerMatt Johnston2020-10-185-7/+38
|
* Get client fuzzer building and starting (fails straight away)Matt Johnston2020-10-188-93/+138
|
* Make wrapfd share a common buffer for all FDsMatt Johnston2020-10-156-48/+71
|
* merge from mainMatt Johnston2020-10-15450-49140/+18122
|\
| * Avoid gnu extension conditional operatorMatt Johnston2020-10-081-1/+5
| |
| * Change secure.ucc.asn.au/hg to hg.ucc.asn.auMatt Johnston2020-07-282-12/+12
| |
| * Added signature for changeset 88f63b8b0f13Matt Johnston2020-06-261-0/+1
| |
| * Added tag DROPBEAR_2020.80 for changeset 73646de50f13Matt Johnston2020-06-260-0/+0
| |
| * version 2020.80DROPBEAR_2020.80Matt Johnston2020-06-262-1/+7
| |
| * Don't choke on disabled authorized_keys(5) optionsGuilhem Moulin2020-06-261-4/+4
| | | | | | | | | | | | As of 2020.79 X11 forwarding is disabled at build time, which could lock out users with authorized_keys(5) files containing ?no-X11-forwarding? options.
| * update CHANGES for 2020.80Matt Johnston2020-06-261-1/+16
| |
| * Some notes on styleMatt Johnston2020-06-261-0/+24
| |
| * Refer to libtom license filesMatt Johnston2020-06-251-2/+3
| |
| * mergeMatt Johnston2020-06-232-3/+3
| |\
| | * move GNU_SOURCE earlierMatt Johnston2020-06-231-2/+2
| | |
| | * check for poly1305_init in other libtomcrypt configure testMatt Johnston2020-06-231-1/+1
| | |
| * | fix trace messages (#105)Ilya2020-06-231-4/+4
| |/
| * _GNU_SOURCE for randomMatt Johnston2020-06-231-0/+2
| |
| * Disable toom and karatsuba for new libtommathMatt Johnston2020-06-181-0/+4
| |
| * Added signature for changeset 4877afd51e04Matt Johnston2020-06-151-0/+1
| |
| * Added tag DROPBEAR_2020.79 for changeset e2e4929d057bMatt Johnston2020-06-150-0/+0
| |
| * can't call "make lint" without configureDROPBEAR_2020.79Matt Johnston2020-06-151-1/+0
| |
| * changelog for 2020.79Matt Johnston2020-06-153-1/+61
| |
| * Fix "make install" for manpages in out-of-tree buildsGabor Z. Papp2020-06-151-2/+2
| |
| * Add DEVELOPING.mdMatt Johnston2020-06-152-0/+53
| |
| * Delay seedrandom until connectionsMatt Johnston2020-06-151-3/+3
| |
| * Disallow leading lines before the ident for server (#102)Vladislav Grishenko2020-06-151-2/+5
| | | | | | | | | | | | | | | | | | | | | | Per RFC4253 4.2 clients must be able to process other lines of data before the version string, server behavior is not defined neither with MUST/SHOULD nor with MAY. If server process up to 50 lines too - it may cause too long hanging session with invalid/evil client that consume host resources and potentially may lead to DDoS on poor embedded boxes. Let's require first line from client to be version string and fail early if it's not - matches both RFC and real OpenSSH behavior.
| * Disable by default 3des, cbc, hmac-sha1-96, x11 forwardingMatt Johnston2020-06-111-15/+13
| |
| * Remove blowfishMatt Johnston2020-06-103-12/+0
| |
| * avoid zero length array in base64_decodeMatt Johnston2020-06-101-3/+9
| |
| * Merge libtomcrypt v1.18.2Matt Johnston2020-06-1045-138/+388
| |
| * Fix whitespace changes vs upstream libtomcryptMatt Johnston2020-06-1011-1213/+1213
| |
| * Sync curve25519 licenseVladislav Grishenko2020-05-311-2/+1
| |
| * Set IOV_MAX for IRIXKazuo Kuroi2020-06-101-4/+6
| |
| * void return types for curve25519Matt Johnston2020-05-303-16/+9
| |
| * Remove unused DEBUG_FORKGPROFMatt Johnston2020-05-292-11/+0
| |
| * Fix ChaCha20 on 32-bit platforms (#99)Vladislav Grishenko2020-05-292-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | * Fix ChaCha20 on 32-bit platforms On 32-bit platforms with old compiler STORE64H() parameter is not auto-expanded to 64-bit value, causing wrong IV data. Spotted on BCM4706 MIPS32r2 with GCC 4.2.4: Exit before auth: Integrity error (bad packet size 2065808956) * Fix Chacha20-Poly1305 and AES-GCM debug messages Functions were renamed earlier and trace messages - not.
| * Don't warn when SO_PRIORITY failsMatt Johnston2020-05-281-3/+3
| |
| * Fix typo DROPBEAR_NORMAL_DHMatt Johnston2020-05-282-4/+4
| |
| * Allow DH to be completely disabled (#97)Vladislav Grishenko2020-05-285-4/+14
| | | | | | | | | | | | Reduces binary size by ~2kB by default and by 21kB with no other libtommath functions users, ex. with curve25519 kex and ed25519 key only.
| * Fix warning for unused prngd branchMatt Johnston2020-05-281-1/+1
| |
| * Fix indentation and add bracesMatt Johnston2020-05-281-4/+6
| |
| * mergeMatt Johnston2020-05-281-1/+2
| |\
| | * Avoid oss-fuzz $SANITIZER causing wrong buildMatt Johnston2020-05-271-1/+2
| | | | | | | | | | | | https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22608
| * | Use Linux getrandom() to ensure random device is initialisedMatt Johnston2020-05-283-56/+97
| | | | | | | | | | | | | | | Remove old code warning about random device being not ready, /dev/random isn't used by default anyway.
| * | set up early logging nameMatt Johnston2020-05-281-1/+7
| | |
| * | initialise variable to stop warningMatt Johnston2020-05-281-1/+1
| |/
| * Mention libtom version requirements, check for poly1305 in libtomcryptMatt Johnston2020-05-271-5/+6
| |