Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | crypto: Add OpenSSL EVP functions for FIPS compatibility | Michael Wilder | 2015-09-07 | 1 | -143/+409 |
| | | | | Signed-off-by: Michael Wilder <wilder.michael@cimcor.com> | ||||
* | libcrypto: Fix Windows build with ssh_reseed(). | Andreas Schneider | 2014-12-17 | 1 | -0/+5 |
| | | | | | | | gettimeofday() is not available on Windows and we need it only in case of forking. Signed-off-by: Andreas Schneider <asn@cryptomilk.org> | ||||
* | crypto: check malloc return in ssh_mac_ctx_init | Jon Simons | 2014-10-02 | 1 | -1/+5 |
| | | | | | Signed-off-by: Jon Simons <jon@jonsimons.org> Reviewed-by: Andreas Schneider <asn@cryptomilk.org> | ||||
* | Add SHA2 algorithms for HMAC | Dirkjan Bussink | 2014-04-22 | 1 | -0/+69 |
| | | | | | | BUG: https://red.libssh.org/issues/91 Reviewed-by: Andreas Schneider <asn@cryptomilk.org> | ||||
* | security: fix for vulnerability CVE-2014-0017 | Aris Adamantiadis | 2014-03-04 | 1 | -0/+9 |
| | | | | | | | | | | When accepting a new connection, a forking server based on libssh forks and the child process handles the request. The RAND_bytes() function of openssl doesn't reset its state after the fork, but simply adds the current process id (getpid) to the PRNG state, which is not guaranteed to be unique. This can cause several children to end up with same PRNG state which is a security issue. | ||||
* | wrapper: Add more evp functions. | Andreas Schneider | 2013-10-18 | 1 | -0/+24 |
| | |||||
* | kex: Add simple DES support for SSHv1. | Dmitriy Kuznetsov | 2012-09-07 | 1 | -0/+36 |
| | |||||
* | crypto: Add evp hashing function. | Andreas Schneider | 2012-02-04 | 1 | -0/+28 |
| | |||||
* | crypto: rename crypto_struct -> ssh_cipher_struct | Aris Adamantiadis | 2011-09-18 | 1 | -17/+17 |
| | |||||
* | crypt: Fix function definition. | Andreas Schneider | 2011-09-15 | 1 | -1/+2 |
| | |||||
* | [crypto] Removed ugly ifdefs on gcrypt/libcrypto | Aris Adamantiadis | 2011-06-13 | 1 | -34/+46 |
| | |||||
* | [crypto] initial support for ecdh-sha2-nistp256 | Aris Adamantiadis | 2011-06-13 | 1 | -3/+83 |
| | | | | | Works with openssl Still requires work for libgcrypt and other modes | ||||
* | misc: Rename libssh/ to src/ | Andreas Schneider | 2010-09-06 | 1 | -0/+443 |