| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | add SSH1 Makefile knob to make it easier to build without SSH1 support; |   djm | 2015-03-03 | 1 | -2/+6 |
| * | add experimental api for packet layer; ok djm@ |   markus | 2015-01-19 | 1 | -4/+10 |
| * | update packet.c & isolate, introduce struct ssh | markus | 2015-01-19 | 1 | -3/+3 |
| * | avoid BIGNUM in KRL code by using a simple bitmap; | djm | 2015-01-14 | 1 | -4/+5 |
| * | New key API: refactor key-related functions to be more library-like, | djm | 2014-06-24 | 1 | -5/+8 |
| * | UMAC can use our local fallback implementation of AES when OpenSSL isn't |   naddy | 2014-04-30 | 1 | -3/+3 |
| * | New buffer API; the first installment of the conversion/replacement | djm | 2014-04-30 | 1 | -2/+15 |
| * | make compiling against OpenSSL optional (make OPENSSL=no); | markus | 2014-04-29 | 1 | -9/+16 |
| * | comment out the .if (${KERBEROS5:L} block for now, breaks the build |   henning | 2014-04-22 | 1 | -6/+6 |
| * | remove experimental, never-enabled JPAKE code; ok markus@ | djm | 2014-01-29 | 1 | -2/+2 |
| * | rename digest.c to digest-openssl.c and add libc variant; ok djm@ | markus | 2014-01-28 | 1 | -2/+3 |
| * | replace openssl HMAC with an implementation based on our ssh_digest_* | markus | 2014-01-27 | 1 | -2/+2 |
| * | Introduce digest API and use it to perform all hashing operations | djm | 2014-01-09 | 1 | -2/+2 |
| * | support ed25519 keys (hostkeys and user identities) using the public domain | markus | 2013-12-06 | 1 | -2/+5 |
| * | Add a new protocol 2 transport cipher "chacha20-poly1305@openssh.com" | djm | 2013-11-21 | 1 | -2/+3 |
| * | use curve25519 for default key exchange (curve25519-sha256@libssh.org); | markus | 2013-11-02 | 1 | -2/+2 |
| * | add support for Key Revocation Lists (KRLs). These are a compact way to | djm | 2013-01-17 | 1 | -2/+3 |
| * | use OpenSSL's EVP_aes_{128,192,256}_ctr() API and remove our hand-rolled | naddy | 2012-12-12 | 1 | -2/+2 |
| * | add umac128 variant; ok djm@ at n2k12 | markus | 2012-10-04 | 1 | -1/+12 |
| * | remove leftover NOLINT, WANTLINT, LINTFLAGS, LOBJ vars and lint targets. |   okan | 2012-08-02 | 1 | -2/+1 |
| * | linting this library is not helping anything |   deraadt | 2011-04-25 | 1 | -2/+2 |
| * | Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and | djm | 2010-08-31 | 1 | -5/+5 |
| * | unbreak build for NOPIC systems; noticed, help and ok deraadt@ | markus | 2010-02-20 | 1 | -1/+2 |
| * | remove scard | markus | 2010-02-08 | 1 | -2/+2 |
| * | replace our obsolete smartcard code with PKCS#11. | markus | 2010-02-08 | 1 | -2/+2 |
| * | Add support for an experimental zero-knowledge password authentication | djm | 2008-11-04 | 1 | -2/+2 |
| * | OpenSSL 0.9.8h supplies a real EVP_sha256 so we do not need our | djm | 2008-09-06 | 1 | -2/+2 |
| * | support CIDR address matching in sshd_config "Match address" blocks, with | djm | 2008-06-10 | 1 | -2/+2 |
| * | Add a new MAC algorithm for data integrity, UMAC-64 (not default yet, must |   pvalchev | 2007-06-07 | 1 | -2/+2 |
| * | build a lint library for us to use above | deraadt | 2006-05-28 | 1 | -1/+2 |
| * | Move Buffer bignum functions into their own file, bufbn.c. This means that |   dtucker | 2006-04-18 | 1 | -2/+2 |
| * | Implement the diffie-hellman-group-exchange-sha256 key exchange method | djm | 2006-03-07 | 1 | -2/+2 |
| * | replace tilde_expand_filename with a simpler implementation, ahead of more | djm | 2005-04-09 | 1 | -2/+2 |
| * | remove fallback AES support for old OpenSSL, as OpenBSD has had it for many | djm | 2004-12-22 | 1 | -3/+3 |
| * | Use permanently_set_uid() in ssh and ssh-keysign for consistency, matches | dtucker | 2004-08-23 | 1 | -2/+2 |
| * | implement session multiplexing in the client (the server has supported this | djm | 2004-06-13 | 1 | -2/+3 |
| * | kill it here too | djm | 2004-05-09 | 1 | -2/+2 |
| * | unexpand and delete whitespace at EOL; ok markus@ | djm | 2003-11-21 | 1 | -3/+3 |
| * | replace fatal_cleanup() and linked list of fatal callbacks with static | markus | 2003-09-23 | 1 | -2/+2 |
| * | support GSS API user authentication; patches from Simon Wilkinson, | markus | 2003-08-22 | 1 | -1/+4 |
| * | experimental support for aes-ctr modes from | markus | 2003-05-17 | 1 | -2/+2 |
| * | split out custom EVP ciphers | markus | 2003-05-15 | 1 | -2/+3 |
| * | add experimental support for verifying hos keys using DNS as described |   jakob | 2003-05-14 | 1 | -2/+2 |
| * | Disable Kerberos 4 support. |   hin | 2003-04-09 | 1 | -9/+1 |
| * | move server only kex and monitor code to sshd. | markus | 2003-02-21 | 1 | -3/+2 |
| * | split kex into client and server code, no need to link | markus | 2003-02-16 | 1 | -1/+2 |
| * | move progressmeter.c to libssh; ok djm/fgs@ | markus | 2003-01-12 | 1 | -2/+2 |
| * | Make sure kerberosV/kafs.h is picked up if kerberosIV/kafs.h is not removed. | hin | 2002-06-11 | 1 | -5/+5 |
| * | no longer use uidswap.[ch] from the ssh client | markus | 2002-06-11 | 1 | -2/+2 |
| * | add /usr/libexec/ssh-keysign: a setuid helper program for hostbased authentication | markus | 2002-05-23 | 1 | -2/+2 |
