summaryrefslogtreecommitdiffstats
path: root/usr.bin/ssh/dh.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* highly polished whitespace, mostly fixing spaces-for-tab and baddjm2021-04-031-2/+2
* Add ModuliFile keyword to sshd_config to specify the location of thedtucker2021-03-121-5/+18
* use the new variant log macros instead of prepending __func__ anddjm2020-10-181-3/+3
* typo in previousdjm2019-09-061-2/+2
* fixes for !WITH_OPENSSL compilation; ok dtucker@djm2019-09-061-6/+5
* correct local variable name; from yawang AT microsoft.comdjm2018-11-091-3/+3
* When choosing a prime from the moduli file, avoid re-using themillert2018-09-171-6/+8
* hold our collective noses and use the openssl-1.1.x API in OpenSSH;djm2018-09-131-24/+38
* invalidate dh->priv_key after freeing it in error path; avoidsdjm2018-08-041-1/+2
* Fix "WARNING: line 6 disappeared in /etc/moduli, giving up" whenmillert2018-06-261-2/+1
* switch config file parsing to getline(3) as this avoids static limitsmarkus2018-06-061-6/+12
* Remove all guards for calls to OpenSSL free functions - all of thesejsing2018-02-071-5/+3
* Fix text in error message. Patch from zev at bewilderbeest.net.dtucker2016-12-151-2/+2
* Add MAXIMUM(), MINIMUM(), and ROUNDUP() to misc.h, then use those definitionsderaadt2016-09-121-3/+2
* add support for additional fixed DH groups fromdjm2016-05-021-11/+72
* Remove fallback from moduli to "primes" file that was deprecated in 2001dtucker2016-03-311-7/+7
* rearrange DH public value tests to be a little more cleardjm2016-02-281-7/+16
* Add a stronger (4k bit) fallback group that sshd can use when the modulidtucker2015-05-271-4/+43
* relax bits needed check to allow diffie-hellman-group1-sha1 keydjm2015-03-261-2/+2
* Reduce use of <sys/param.h> and transition to <limits.h> throughout.deraadt2015-01-201-2/+3
* adapt kex to sshbuf and struct ssh; ok djm@markus2015-01-191-29/+30
* Add a new protocol 2 transport cipher "chacha20-poly1305@openssh.com"djm2013-11-211-26/+12
* Increase the size of the Diffie-Hellman groups requested for a each symmetricdtucker2013-10-081-7/+10
* remove extra whitespacemarkus2013-07-021-2/+2
* sprinkle in some error() to explain moduli(5) parse failuresdjm2013-06-211-27/+47
* fix some harmless and/or unreachable int overflows;djm2011-12-071-1/+3
* fix a castgrunk2009-10-011-2/+2
* when loading moduli from /etc/moduli in sshd(8), check that theydjm2008-06-261-1/+14
* Use arc4random_buf() when requesting more than a single word of outputdjm2008-04-131-2/+2
* Don't return -1 on error in dh_pub_is_valid(), since it evaluatesray2007-09-271-4/+6
* BN_hex2bn returns int; from dtucker@markus2006-11-071-3/+3
* add missing checks for openssl return codes; with & ok djm@markus2006-11-061-3/+3
* almost entirely get rid of the culture of ".h files that include .h files"deraadt2006-08-031-3/+1
* move #include <stdio.h> out of includes.hstevesk2006-08-011-1/+2
* move #include <stdlib.h> out of includes.hstevesk2006-07-261-1/+2
* move #include <sys/param.h> out of includes.hstevesk2006-07-261-1/+3
* move #include <string.h> out of includes.hstevesk2006-07-221-1/+3
* remove unneeded includes; ok djm@stevesk2006-07-181-7/+1
* tighter DH exponent checks here too; feedback and ok markus@djm2006-05-041-2/+19
* use strtonum() instead of atoi(), limit dhg size to 64k; ok djmderaadt2006-03-271-2/+4
* Put $OpenBSD$ tags back (as comments) to replace the RCSID()s thatdjm2006-03-251-0/+1
* RCSID() can diederaadt2006-03-191-1/+0
* potential NULL pointer dereferences detected by Coveritydjm2006-03-191-2/+3
* return group14 when no primes found - fixes hang on empty /etc/moduli;djm2004-08-041-2/+2
* implement diffie-hellman-group14-sha1 kex method (trivial extension todjm2004-06-131-4/+24
* Reset bit counter at the right time, fixes debug output in the case wheredtucker2004-02-271-3/+3
* Make /etc/moduli line buffer big enough for 8kbit primes, in case anyonedtucker2004-02-271-2/+2
* Prevent sshd from sending DH groups with a primitive generator of zero ordtucker2004-02-271-1/+4
* use <= instead of < in dh_estimate; ok provos/hshoexer; do not return < DH_GRP_MINmarkus2003-12-161-5/+3
* A few signedness fixes for harmless situations; markus@ okmiod2003-09-181-2/+2