| Commit message (Expand) | Author | Age | Files | Lines |
* | highly polished whitespace, mostly fixing spaces-for-tab and bad |  djm | 2021-04-03 | 1 | -5/+4 |
* | Remove the pre-standardization cipher rijndael-cbc@lysator.liu.se. |  dtucker | 2020-12-21 | 1 | -3/+1 |
* | make Chacha20-POLY1305 context struct opaque; ok tb@ as part of a larger |  djm | 2020-04-03 | 1 | -8/+10 |
* | spelling errors in comments; no code change |  djm | 2020-03-13 | 1 | -2/+2 |
* | change explicit_bzero();free() to freezero() |  jsg | 2020-02-26 | 1 | -5/+3 |
* | Make zlib optional. This adds a "ZLIB" build time option that allows |  dtucker | 2020-01-23 | 1 | -1/+12 |
* | fixes for !WITH_OPENSSL compilation; ok dtucker@ |  djm | 2019-09-06 | 1 | -1/+4 |
* | hold our collective noses and use the openssl-1.1.x API in OpenSSH; |  djm | 2018-09-13 | 1 | -8/+10 |
* | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) |  markus | 2018-02-23 | 1 | -2/+2 |
* | remove space before tab |  djm | 2018-02-13 | 1 | -3/+3 |
* | Remove all guards for calls to OpenSSL free functions - all of these |  jsing | 2018-02-07 | 1 | -7/+4 |
* | avoid unused variable warnings for !WITH_OPENSSL; |  djm | 2017-11-03 | 1 | -3/+3 |
* | As promised in last release announcement: remove support for |  djm | 2017-05-07 | 1 | -78/+17 |
* | another tentacle: cipher_set_key_string() was only ever used for SSHv1 |  djm | 2017-05-04 | 1 | -23/+1 |
* | fixup setting ciphercontext->plaintext (lost in SSHv1 purge), though |  djm | 2017-05-01 | 1 | -2/+2 |
* | remove SSHv1 ciphers; ok markus@ |  djm | 2017-04-30 | 1 | -152/+65 |
* | unifdef WITH_SSH1 |  djm | 2017-04-30 | 1 | -19/+1 |
* | small refactor of cipher.c: make ciphercontext opaque to callers |  djm | 2016-08-03 | 1 | -56/+109 |
* | Remove NULL-checks before free(). |  mmcc | 2015-12-10 | 1 | -3/+2 |
* | make non-OpenSSL aes-ctr work on sshd w/ privsep; ok markus@ |  djm | 2015-01-14 | 1 | -1/+9 |
* | New key API: refactor key-related functions to be more library-like, |  djm | 2014-06-24 | 1 | -140/+158 |
* | make compiling against OpenSSL optional (make OPENSSL=no); |  markus | 2014-04-29 | 1 | -4/+78 |
* | remove some logging that makes ssh debugging output very verbose; |  djm | 2014-02-07 | 1 | -3/+1 |
* | convert memset of potentially-private data to explicit_bzero() |  djm | 2014-02-02 | 1 | -4/+4 |
* | replace openssl MD5 with our ssh_digest_*; ok djm@ |  markus | 2014-01-27 | 1 | -8/+6 |
* | Add a special case for the DH group size for 3des-cbc, which has an |  dtucker | 2014-01-25 | 1 | -1/+9 |
* | new private key format, bcrypt as KDF by default; details in PROTOCOL.key; |  markus | 2013-12-06 | 1 | -9/+9 |
* | correct bzero of chacha20+poly1305 key context. bz#2177 from |  djm | 2013-12-02 | 1 | -2/+2 |
* | Add a new protocol 2 transport cipher "chacha20-poly1305@openssh.com" |  djm | 2013-11-21 | 1 | -8/+57 |
* | Output the effective values of Ciphers, MACs and KexAlgorithms when |  dtucker | 2013-11-07 | 1 | -4/+4 |
* | bye, bye xfree(); ok markus@ |  djm | 2013-05-17 | 1 | -5/+5 |
* | add the ability to query supported ciphers, MACs, key type and KEX |  djm | 2013-04-19 | 1 | -16/+39 |
* | remove ACSS, now that it is gone from libcrypto too |  djm | 2013-01-26 | 1 | -5/+3 |
* | improve error message for integrity failure in AES-GCM modes; ok markus@ |  djm | 2013-01-12 | 1 | -3/+7 |
* | support AES-GCM as defined in RFC 5647 (but with simpler KEX handling) |  markus | 2013-01-08 | 1 | -27/+95 |
* | use OpenSSL's EVP_aes_{128,192,256}_ctr() API and remove our hand-rolled |  naddy | 2012-12-12 | 1 | -14/+6 |
* | add encrypt-then-mac (EtM) modes to openssh by defining new mac algorithms |  markus | 2012-12-11 | 1 | -5/+17 |
* | Work around the CPNI-957037 Plaintext Recovery Attack by always |  markus | 2009-01-26 | 1 | -21/+28 |
* | almost entirely get rid of the culture of ".h files that include .h files" |  deraadt | 2006-08-03 | 1 | -2/+3 |
* | move #include <string.h> out of includes.h |  stevesk | 2006-07-22 | 1 | -3/+5 |
* | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that |  djm | 2006-03-25 | 1 | -0/+1 |
* | RCSID() can die |  deraadt | 2006-03-19 | 1 | -1/+0 |
* | spacing |  djm | 2005-07-16 | 1 | -2/+2 |
* | make this -Wsign-compare clean; ok avsm@ markus@ |  djm | 2005-06-17 | 1 | -4/+4 |
* | Correctly initialize end of array sentinel; ok djm@ |  dtucker | 2005-06-09 | 1 | -2/+2 |
* | add support for draft-harris-ssh-arcfour-fixes-02 improved arcfour modes; |  djm | 2005-05-23 | 1 | -18/+33 |
* | config option "Ciphers" should be case-sensitive; ok dtucker@ |  djm | 2005-01-23 | 1 | -4/+6 |
* | remove fallback AES support for old OpenSSL, as OpenBSD has had it for many |  djm | 2004-12-22 | 1 | -28/+1 |
* | more s/illegal/invalid/ |  markus | 2004-07-28 | 1 | -2/+2 |
* | spaces |  deraadt | 2004-07-11 | 1 | -16/+16 |