Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | security: fix for vulnerability CVE-2014-0017 | Aris Adamantiadis | 2014-03-04 | 1 | -0/+1 |
| | | | | | | | | | | When accepting a new connection, a forking server based on libssh forks and the child process handles the request. The RAND_bytes() function of openssl doesn't reset its state after the fork, but simply adds the current process id (getpid) to the PRNG state, which is not guaranteed to be unique. This can cause several children to end up with same PRNG state which is a security issue. | ||||
* | wrapper: Add more evp functions. | Andreas Schneider | 2013-10-18 | 1 | -0/+3 |
| | |||||
* | include: Fix the LGPL header. | Andreas Schneider | 2013-01-23 | 1 | -12/+11 |
| | | | | | This has been reported by rpmlint: libssh-devel.x86_64: W: incorrect-fsf-address libssh.h | ||||
* | kex: Add simple DES support for SSHv1. | Dmitriy Kuznetsov | 2012-09-07 | 1 | -1/+6 |
| | |||||
* | crypto: Add evp hashing function. | Andreas Schneider | 2012-02-04 | 1 | -0/+2 |
| | |||||
* | priv: Remove crypto.h and add correct includes to src files. | Andreas Schneider | 2011-09-18 | 1 | -1/+0 |
| | |||||
* | [crypto] initial support for ecdh-sha2-nistp256 | Aris Adamantiadis | 2011-06-13 | 1 | -3/+21 |
| | | | | | Works with openssl Still requires work for libgcrypt and other modes | ||||
* | Separation work between openssl and libgcrypt | Aris Adamantiadis | 2010-05-14 | 1 | -73/+2 |
| | |||||
* | Do not compile aes*-ctr with <=OpenSSL 0.9.7b | Aris Adamantiadis | 2010-04-14 | 1 | -0/+5 |
| | |||||
* | More include file splitting | Aris Adamantiadis | 2009-09-26 | 1 | -1/+5 |
| | |||||
* | More include file movings | Aris Adamantiadis | 2009-09-26 | 1 | -0/+110 |