wireguard-openbsd - WireGuard implementation for the OpenBSD kernel

	Commit message (Collapse)	Author	Age	Files	Lines
*	pass most arguments to the KEX hash functions as sshbuf rather	djm	2019-01-23	1	-9/+9
\| \| \| \|	than pointer+length; ok markus@
*	factor out kex_dh_compute_key() - it's shared between plain DH KEX and	djm	2019-01-21	1	-3/+3
\| \| \| \| \| \|	DH GEX in both the client and server implementations from markus@ ok djm@
*	move client/server SSH-* banners to buffers under ssh->kex and factor	djm	2018-12-27	1	-5/+5
\| \| \| \| \| \| \| \| \| \| \|	out the banner exchange. This eliminates some common code from the client and server. Also be more strict about handling \r characters - these should only be accepted immediately before \n (pointed out by Jann Horn). Inspired by a patch from Markus Schmidt. (lots of) feedback and ok markus@
*	adapt kex to sshbuf and struct ssh; ok djm@	markus	2015-01-19	1	-52/+53
\|
*	Introduce digest API and use it to perform all hashing operations	djm	2014-01-09	1	-12/+12
\| \| \| \| \| \|	rather than calling OpenSSL EVP_Digest* directly. Will make it easier to build a reduced-feature OpenSSH without OpenSSL in future; feedback, ok markus@
*	almost entirely get rid of the culture of ".h files that include .h files"	deraadt	2006-08-03	1	-3/+5
\| \| \| \| \|	ok djm, sort of ok stevesk makes the pain stop in one easy step
*	Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that	djm	2006-03-25	1	-0/+1
\| \| \| \|	Theo nuked - our scripts to sync -portable need them in the files
*	RCSID() can die	deraadt	2006-03-19	1	-1/+0
\|
*	remove hardcoded hash lengths in key exchange code, allowing	djm	2005-11-04	1	-7/+9
\| \| \| \| \|	implementation of KEX methods with different hashes (e.g. SHA-256); ok markus@ dtucker@ stevesk@
*	split kex into client and server code, no need to link	markus	2003-02-16	1	-325/+3
\| \| \| \|	server code into the client; ok provos@
*	typo; ok markus@	stevesk	2002-03-24	1	-2/+2
\|
*	integrate privilege separated openssh; its turned off by default for now.	provos	2002-03-18	1	-3/+6
\| \| \| \|	work done by me and markus@
*	add some const EVP_MD for openssl-0.9.7	markus	2002-02-28	1	-2/+2
\|
*	signed vs. unsigned: make size arguments u_int, ok stevesk@	markus	2002-02-24	1	-3/+3
\|
*	don't allow garbage after payload.	markus	2002-02-23	1	-1/+2
\|
*	cross check announced key type and type from key blob	markus	2002-01-31	1	-2/+3
\|
*	use EVP_MD_size(evp_md) and not evp_md->md_size; ok steveks@	markus	2002-01-25	1	-2/+2
\|
*	packet_read* no longer return the packet length, since it's not used.	markus	2001-12-28	1	-7/+7
\|
*	packet_get_bignum* no longer returns a size	markus	2001-12-28	1	-7/+7
\|
*	s/packet_done/packet_check_eom/ (end-of-message); ok djm@	markus	2001-12-28	1	-4/+4
\|
*	always use BN_clear_free instead of BN_free	markus	2001-12-27	1	-3/+3
\|
*	call fatal() for openssl allocation failures	markus	2001-12-27	1	-7/+7
\|
*	minor KNF	deraadt	2001-12-05	1	-2/+2
\|
*	u_char/char cleanup; ok markus@	stevesk	2001-09-17	1	-6/+6
\|
*	more strict prototypes. raise warning level in Makefile.inc. markus ok'ed	itojun	2001-06-23	1	-4/+4
\| \| \| \|	TODO; cleanup headers
*	get rid of known_hosts2, use it for hostkey lookup, but do not modify.	markus	2001-06-23	1	-4/+5
\|
*	use xxx_put_cstring()	markus	2001-06-07	1	-3/+3
\|
*	fix whitespace: unexpand + trailing spaces.	markus	2001-04-05	1	-4/+4
\|
*	parse full kexinit packet.	markus	2001-04-04	1	-2/+2
\| \| \| \|	make server-side more robust, too.
*	don't sent multiple kexinit-requests.	markus	2001-04-04	1	-10/+7
\| \| \| \| \|	send newkeys, block while waiting for newkeys. fix comments.
*	undo parts of recent my changes: main part of keyexchange does not	markus	2001-04-03	1	-137/+68
\| \| \| \| \| \| \|	need dispatch-callbacks, since application data is delayed until the keyexchange completes (if i understand the drafts correctly). add some infrastructure for re-keying.
*	move kex to kex*.c, used dispatch_set() callbacks for kex. should	markus	2001-04-03	1	-0/+480
	make rekeying easier.