summaryrefslogtreecommitdiffstats
path: root/usr.bin/ssh/cipher-chachapoly.h (follow)
Commit message (Collapse)AuthorAgeFilesLines
* New key API: refactor key-related functions to be more library-like,djm2014-06-241-2/+2
| | | | | | | | | existing API is offered as a set of wrappers. with and ok markus@ Thanks also to Ben Hawkes, David Tomaschik, Ivan Fratric, Matthew Dempsky and Ron Bowes for a detailed review a few months ago.
* revert __bounded change; it causes way more problems for portable thandjm2014-05-021-3/+3
| | | | it solves; pointed out by dtucker@
* use __bounded(...) attribute recently added to sys/cdefs.h instead ofdjm2014-03-261-3/+3
| | | | | | longform __attribute__(__bounded(...)); for brevity and a warning free compilation with llvm/clan
* Add a new protocol 2 transport cipher "chacha20-poly1305@openssh.com"djm2013-11-211-0/+41
that combines Daniel Bernstein's ChaCha20 stream cipher and Poly1305 MAC to build an authenticated encryption mode. Inspired by and similar to Adam Langley's proposal for TLS: http://tools.ietf.org/html/draft-agl-tls-chacha20poly1305-03 but differs in layout used for the MAC calculation and the use of a second ChaCha20 instance to separately encrypt packet lengths. Details are in the PROTOCOL.chacha20poly1305 file. Feedback markus@, naddy@; manpage bits Loganden Velvindron @ AfriNIC ok markus@ naddy@