Click on a directory to enter that directory. Click on a file to display its revision history and to get a chance to display diffs between revisions.
Current directory: [local] / src / usr.bin / ssh
Current tag: OPENBSD_6_3_BASE
| File | Rev. | Age | Author | Last log entry |
|---|---|---|---|---|
![[BACK]](/icons/back.gif){kind=icon} Parent Directory |
||||
![[DIR]](/icons/dir.gif){kind=icon} lib/ |
||||
| moduli-gen/ |
||||
| scard/ |
||||
| scp/ |
||||
| sftp/ |
||||
| sftp-server/ |
||||
| ssh/ |
||||
| ssh-add/ |
||||
| ssh-agent/ |
||||
| ssh-keygen/ |
||||
| ssh-keyscan/ |
||||
| ssh-keysign/ |
||||
| ssh-pkcs11-helper/ |
||||
| ssh-sk-helper/ |
||||
| sshd/ |
||||
| sshd-session/ |
||||
![[TXT]](/icons/text.gif){kind=icon} LICENCE |
1.20 | 7 years | djm | remove the (in)famous SSHv1 CRC compensation attack detector. Despite your came... |
| Makefile |
1.16 | 6 years | deraadt | ssh/lib hasn't worked towards our code-sharing goals for a quit while, perhaps i... |
| Makefile.inc |
1.58 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| OVERVIEW |
1.12 | 8 years | markus | compress.c is gone |
| PROTOCOL |
1.32 | 6 years | djm | emphasise that the hostkey rotation may send key types that the client may not s... |
| PROTOCOL.agent |
1.12 | 6 years | djm | Now that we no longer support SSHv1, replace the contents of this file with a po... |
| PROTOCOL.certkeys |
1.13 | 6 years | djm | typos in ECDSA certificate names; bz#2787 reported by Mike Gerow |
| PROTOCOL.chacha20poly1305 |
1.3 | 8 years | djm | clarify ordering of subkeys; pointed out by ietf-ssh AT stbuehler.de |
| PROTOCOL.key |
1.1 | 10 years | markus | new private key format, bcrypt as KDF by default; details in PROTOCOL.key; feedb... |
| PROTOCOL.krl |
1.3 | 9 years | djm | permit KRLs that revoke certificates by serial number or key ID without scoping ... |
| PROTOCOL.mux |
1.10 | 8 years | djm | describe magic for setting up Unix domain socket fowards via the mux channel; bz... |
| README |
1.7 | 18 years | djm | $OpenBSD$ in here too |
| addrmatch.c |
1.13 | 7 years | djm | Revert two recent changes to negated address matching. The new behaviour offers ... |
| atomicio.c |
1.28 | 7 years | djm | better bounds check on iovcnt (we only ever use fixed, positive values) |
| atomicio.h |
1.11 | 13 years | djm | add an option per-read/write callback to atomicio factor out bandwidth limiting... |
| auth-bsdauth.c |
1.14 | 8 years | mmcc | Compare pointers to NULL rather than 0. ok djm@ |
| auth-krb5.c |
1.22 | 8 years | markus | move SSH_MSG_NONE, so we don't have to include ssh1.h; ok deraadt@ |
| auth-options.c |
1.78 | 6 years | djm | rename recently-added "valid-before" key restriction to "expiry-time" as the for... |
| auth-options.h |
1.26 | 6 years | djm | add valid-before="[time]" authorized_keys option. A simple way of giving a key a... |
| auth-passwd.c |
1.46 | 6 years | djm | switch over to the new authorized_keys options API and remove the legacy one. I... |
| auth-rhosts.c |
1.48 | 7 years | markus | remove ssh1 server code; ok djm@ |
| auth.c |
1.127 | 6 years | djm | add valid-before="[time]" authorized_keys option. A simple way of giving a key a... |
| auth.h |
1.95 | 6 years | djm | switch over to the new authorized_keys options API and remove the legacy one. I... |
| auth2-chall.c |
1.48 | 6 years | markus | switch auth2 to ssh_dispatch API; ok djm@ |
| auth2-gss.c |
1.26 | 6 years | djm | refactor authentication logging optionally record successful auth methods and p... |
| auth2-hostbased.c |
1.33 | 6 years | djm | Drop compatibility hacks for some ancient SSH implementations, including ssh.com... |
| auth2-kbdint.c |
1.8 | 6 years | markus | switch auth2 to ssh_dispatch API; ok djm@ |
| auth2-none.c |
1.21 | 6 years | djm | switch over to the new authorized_keys options API and remove the legacy one. I... |
| auth2-passwd.c |
1.15 | 6 years | djm | switch over to the new authorized_keys options API and remove the legacy one. I... |
| auth2-pubkey.c |
1.77 | 6 years | djm | switch over to the new authorized_keys options API and remove the legacy one. I... |
| auth2.c |
1.145 | 6 years | djm | switch over to the new authorized_keys options API and remove the legacy one. I... |
| authfd.c |
1.108 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| authfd.h |
1.43 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| authfile.c |
1.128 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| authfile.h |
1.21 | 9 years | djm | deprecate key_load_private_pem() and sshkey_load_private_pem() interfaces. Refac... |
| bitmap.c |
1.9 | 6 years | djm | add RCSIDs to these; they make syncing portable a bit easier |
| bitmap.h |
1.2 | 6 years | djm | add RCSIDs to these; they make syncing portable a bit easier |
| canohost.c |
1.73 | 8 years | djm | refactor canohost.c: move functions that cache results closer to the places that... |
| canohost.h |
1.12 | 8 years | djm | refactor canohost.c: move functions that cache results closer to the places that... |
| chacha.c |
1.1 | 10 years | djm | Add a new protocol 2 transport cipher "chacha20-poly1305@openssh.com" that combi... |
| chacha.h |
1.4 | 7 years | guenther | Pull in <stdlib.h> for NULL ok deraadt@ |
| channels.c |
1.379 | 6 years | tb | The file descriptors for socket, stdin, stdout and stderr aren't necessarily dis... |
| channels.h |
1.130 | 6 years | markus | Add 'reverse' dynamic forwarding which combines dynamic forwarding (-D) with rem... |
| cipher-aesctr.c |
1.2 | 9 years | markus | remove unneeded includes, sync my copyright across files & whitespace; ok djm@ |
| cipher-aesctr.h |
1.1 | 10 years | markus | re-add our own aesctr implementation; ok djm@ |
| cipher-chachapoly.c |
1.8 | 7 years | djm | small refactor of cipher.c: make ciphercontext opaque to callers feedback and ok... |
| cipher-chachapoly.h |
1.4 | 9 years | djm | New key API: refactor key-related functions to be more library-like, existing AP... |
| cipher.c |
1.111 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| cipher.h |
1.52 | 7 years | djm | As promised in last release announcement: remove support for Blowfish, RC4 and C... |
| cleanup.c |
1.5 | 17 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... |
| clientloop.c |
1.311 | 6 years | dtucker | Don't reset signal handlers inside handlers. The signal handlers from the origi... |
| clientloop.h |
1.35 | 6 years | djm | Expose devices allocated for tun/tap forwarding. At the client, the device may ... |
| compat.c |
1.106 | 6 years | dtucker | Don't send IUTF8 to servers that don't like them. Some SSH servers eg "ConfD" d... |
| compat.h |
1.51 | 6 years | dtucker | Don't send IUTF8 to servers that don't like them. Some SSH servers eg "ConfD" d... |
| crypto_api.h |
1.4 | 6 years | naddy | Replace ED25519's private SHA-512 implementation with a call to the regular dige... |
| dh.c |
1.63 | 6 years | jsing | Remove all guards for calls to OpenSSL free functions - all of these functions h... |
| dh.h |
1.15 | 8 years | djm | add support for additional fixed DH groups from draft-ietf-curdle-ssh-kex-sha2-0... |
| digest-libc.c |
1.6 | 7 years | djm | remove hmac-ripemd160; ok dtucker |
| digest-openssl.c |
1.7 | 7 years | djm | remove hmac-ripemd160; ok dtucker |
| digest.h |
1.8 | 7 years | djm | remove hmac-ripemd160; ok dtucker |
| dispatch.c |
1.31 | 6 years | markus | remove now obsolete ctx from ssh_dispatch_run; ok djm@ |
| dispatch.h |
1.14 | 6 years | markus | remove now obsolete ctx from ssh_dispatch_run; ok djm@ |
| dns.c |
1.38 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| dns.h |
1.18 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| ed25519.c |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| fatal.c |
1.7 | 17 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... |
| groupaccess.c |
1.16 | 9 years | djm | Remove pattern length argument from match_pattern_list(), we only ever use it fo... |
| groupaccess.h |
1.8 | 15 years | djm | support negation of groups in "Match group" block (bz#1315); ok dtucker@ |
| gss-genr.c |
1.24 | 7 years | deraadt | Add MAXIMUM(), MINIMUM(), and ROUNDUP() to misc.h, then use those definitions ra... |
| gss-serv-krb5.c |
1.8 | 10 years | djm | fix kerberos/GSSAPI deprecation warnings and linking; "looks okay" millert@ |
| gss-serv.c |
1.30 | 6 years | djm | refactor authentication logging optionally record successful auth methods and p... |
| hash.c |
1.5 | 6 years | naddy | clarify authorship; prodded by and ok markus@ |
| hmac.c |
1.12 | 9 years | markus | correct fmt-string for size_t as noted by Nicholas Lemonias; ok djm@ |
| hmac.h |
1.9 | 9 years | djm | New key API: refactor key-related functions to be more library-like, existing AP... |
| hostfile.c |
1.71 | 6 years | deraadt | Switch to recallocarray() for a few operations. Both growth and shrinkage are h... |
| hostfile.h |
1.24 | 9 years | djm | Refactor hostkeys_foreach() and dependent code Deal with IP addresses (i.e. Chec... |
| kex.c |
1.136 | 6 years | jsing | Remove all guards for calls to OpenSSL free functions - all of these functions h... |
| kex.h |
1.83 | 6 years | markus | protocol handlers all get struct ssh passed; ok djm@ |
| kexc25519.c |
1.10 | 8 years | djm | fix signed/unsigned errors reported by clang-3.7; add sshbuf_dup_string() to rep... |
| kexdh.c |
1.26 | 8 years | djm | add support for additional fixed DH groups from draft-ietf-curdle-ssh-kex-sha2-0... |
| kexecdh.c |
1.6 | 9 years | markus | adapt kex to sshbuf and struct ssh; ok djm@ |
| kexgex.c |
1.29 | 9 years | markus | adapt kex to sshbuf and struct ssh; ok djm@ |
| kexgexc.c |
1.27 | 6 years | jsing | Remove all guards for calls to OpenSSL free functions - all of these functions h... |
| kexgexs.c |
1.32 | 6 years | jsing | Remove all guards for calls to OpenSSL free functions - all of these functions h... |
| krl.c |
1.41 | 6 years | djm | pass negotiated signing algorithm though to sshkey_verify() and check that the n... |
| krl.h |
1.5 | 8 years | djm | unused prototype |
| log.c |
1.50 | 7 years | djm | allow LogLevel in sshd_config Match blocks; ok dtucker bz#2717 |
| log.h |
1.22 | 7 years | djm | allow LogLevel in sshd_config Match blocks; ok dtucker bz#2717 |
| mac.c |
1.34 | 7 years | djm | remove hmac-ripemd160; ok dtucker |
| mac.h |
1.10 | 7 years | djm | Improve crypto ordering for Encrypt-then-MAC (EtM) mode MAC algorithms. Previou... |
| match.c |
1.37 | 7 years | djm | make hostname matching really insensitive to case; bz#2685, reported by Petr Cer... |
| match.h |
1.17 | 7 years | djm | support =- for removing methods from algorithms lists, e.g. Ciphers=-*cbc; sugge... |
| misc.c |
1.127 | 6 years | djm | add valid-before="[time]" authorized_keys option. A simple way of giving a key a... |
| misc.h |
1.71 | 6 years | djm | add valid-before="[time]" authorized_keys option. A simple way of giving a key a... |
| moduli.c |
1.32 | 6 years | deraadt | time_t printing needs %lld and (long long) casts ok djm |
| monitor.c |
1.180 | 6 years | djm | switch over to the new authorized_keys options API and remove the legacy one. I... |
| monitor.h |
1.20 | 7 years | djm | Remove support for pre-authentication compression. Doing compression early in th... |
| monitor_fdpass.c |
1.21 | 8 years | jca | Print ssize_t with %zd; ok deraadt@ mmcc@ |
| monitor_fdpass.h |
1.4 | 16 years | djm | make file descriptor passing code return an error rather than call fatal() when ... |
| monitor_wrap.c |
1.99 | 6 years | djm | switch over to the new authorized_keys options API and remove the legacy one. I... |
| monitor_wrap.h |
1.37 | 6 years | djm | switch over to the new authorized_keys options API and remove the legacy one. I... |
| msg.c |
1.16 | 9 years | djm | sync ssh-keysign, ssh-keygen and some dependencies to the new buffer/key API; mo... |
| msg.h |
1.5 | 9 years | djm | sync ssh-keysign, ssh-keygen and some dependencies to the new buffer/key API; mo... |
| mux.c |
1.69 | 6 years | dtucker | Use strsignal in debug message instead of casting for the benefit of portable wh... |
| myproposal.h |
1.55 | 7 years | djm | Don't offer CBC ciphers by default in the client. ok markus@ |
| nchan.c |
1.67 | 6 years | djm | Make remote channel ID a u_int Previously we tracked the remote channel IDs in ... |
| nchan.ms |
1.8 | 20 years | djm | unexpand and delete whitespace at EOL; ok markus@ |
| nchan2.ms |
1.4 | 16 years | djm | document eow message in ssh protocol 2 channel state machine; feedback and ok ma... |
| packet.c |
1.269 | 6 years | djm | pass kex->hostkey_alg and kex->hostkey_nid from pre-auth to post-auth unpriviled... |
| packet.h |
1.84 | 6 years | dtucker | Put remote client info back into the ClientAlive connection termination message.... |
| pathnames.h |
1.28 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| pkcs11.h |
1.3 | 10 years | deraadt | cleanup 1 << 31 idioms. Resurrection of this issue pointed out by Eitan Adler o... |
| poly1305.c |
1.3 | 10 years | djm | use full name for author, with his permission |
| poly1305.h |
1.4 | 10 years | djm | revert __bounded change; it causes way more problems for portable than it solves... |
| progressmeter.c |
1.45 | 7 years | dtucker | Explicitly check for 100% completion to avoid potential floating point rounding ... |
| progressmeter.h |
1.3 | 9 years | djm | update sftp client and server to new buffer API. pretty much just mechanical cha... |
| readconf.c |
1.283 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| readconf.h |
1.125 | 6 years | djm | Add BindInterface ssh_config directive and -B command-line argument to ssh(1) th... |
| readpass.c |
1.51 | 8 years | mmcc | Pass (char *)NULL rather than (char *)0 to execl and execlp. ok dtucker@ |
| rijndael.c |
1.20 | 9 years | djm | #if 0 some more arrays used only for decrypting (we don't use since we only need... |
| rijndael.h |
1.14 | 10 years | markus | re-add our own aesctr implementation; ok djm@ |
| sandbox-pledge.c |
1.1 | 8 years | deraadt | Change all tame callers to namechange to pledge(2). |
| sandbox-rlimit.c |
1.4 | 7 years | deraadt | Add MAXIMUM(), MINIMUM(), and ROUNDUP() to misc.h, then use those definitions ra... |
| scp.1 |
1.77 | 6 years | jmc | some cleanup for BindInterface and ssh-keyscan; |
| scp.c |
1.195 | 6 years | djm | Disable RemoteCommand and RequestTTY in the ssh session started by scp. sftp is ... |
| servconf.c |
1.326 | 6 years | markus | missing #ifdef for _PATH_HOST_XMSS_KEY_FILE; report by jmc@ |
| servconf.h |
1.130 | 6 years | djm | add a "rdomain" criteria for the sshd_config Match keyword to allow conditional ... |
| serverloop.c |
1.205 | 6 years | djm | switch over to the new authorized_keys options API and remove the legacy one. I... |
| serverloop.h |
1.8 | 6 years | djm | refactor channels.c Move static state to a "struct ssh_channels" that is alloca... |
| session.c |
1.294 | 6 years | djm | switch over to the new authorized_keys options API and remove the legacy one. I... |
| session.h |
1.35 | 6 years | djm | refactor channels.c Move static state to a "struct ssh_channels" that is alloca... |
| sftp-client.c |
1.128 | 6 years | dtucker | Have sftp print a warning about shell cleanliness when decoding the first packet... |
| sftp-client.h |
1.27 | 9 years | djm | moar whitespace at eol |
| sftp-common.c |
1.30 | 6 years | djm | print '?' instead of incorrect link count (that the protocol doesn't provide) fo... |
| sftp-common.h |
1.12 | 9 years | djm | update sftp client and server to new buffer API. pretty much just mechanical cha... |
| sftp-glob.c |
1.27 | 9 years | djm | update sftp client and server to new buffer API. pretty much just mechanical cha... |
| sftp-server-main.c |
1.5 | 8 years | dtucker | Add a function to enable security-related malloc_options. With and ok deraadt@,... |
| sftp-server.8 |
1.27 | 9 years | djm | Make manual reflect reality: sftp-server's -d option accepts a "%d" option, not ... |
| sftp-server.c |
1.111 | 7 years | djm | disallow creation (of empty files) in read-only mode; reported by Michal Zalewsk... |
| sftp.1 |
1.114 | 6 years | jmc | some cleanup for BindInterface and ssh-keyscan; |
| sftp.c |
1.182 | 6 years | djm | allow "cd" and "lcd" commands with no explicit path argument. lcd will change to... |
| sftp.h |
1.9 | 15 years | dtucker | replace __dead with __attribute__((noreturn)), makes things a little easier to p... |
| smult_curve25519_ref.c |
1.2 | 10 years | markus | add missing $OpenBSD$ tags |
| ssh-add.1 |
1.66 | 6 years | jmc | sort options; |
| ssh-add.c |
1.135 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| ssh-agent.1 |
1.64 | 7 years | jmc | tweak previous; while here fix up FILES and AUTHORS; |
| ssh-agent.c |
1.228 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| ssh-dss.c |
1.37 | 6 years | jsing | Remove all guards for calls to OpenSSL free functions - all of these functions h... |
| ssh-ecdsa.c |
1.14 | 6 years | jsing | Remove all guards for calls to OpenSSL free functions - all of these functions h... |
| ssh-ed25519.c |
1.7 | 8 years | djm | make argument == NULL tests more consistent |
| ssh-gss.h |
1.12 | 6 years | djm | refactor authentication logging optionally record successful auth methods and p... |
| ssh-keygen.1 |
1.147 | 6 years | djm | add valid-before="[time]" authorized_keys option. A simple way of giving a key a... |
| ssh-keygen.c |
1.314 | 6 years | djm | add valid-before="[time]" authorized_keys option. A simple way of giving a key a... |
| ssh-keyscan.1 |
1.44 | 6 years | jmc | move the input format details to -f; remove the output format details and point ... |
| ssh-keyscan.c |
1.119 | 6 years | jmc | apply a lick of paint; tweaks/ok dtucker |
| ssh-keysign.8 |
1.15 | 8 years | jmc | since these pages now clearly tell folks to avoid v1, normalise the docs from a ... |
| ssh-keysign.c |
1.54 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| ssh-pkcs11-client.c |
1.8 | 6 years | tb | Add a couple of non-negativity checks to avoid close(-1). ok djm |
| ssh-pkcs11-helper.8 |
1.4 | 10 years | schwarze | use .Mt for email addresses; from Jan Stary <hans at stare dot cz>; ok jmc@ |
| ssh-pkcs11-helper.c |
1.14 | 6 years | markus | switch ssh-pkcs11-helper to new API; ok djm@ |
| ssh-pkcs11.c |
1.26 | 6 years | jsing | Remove all guards for calls to OpenSSL free functions - all of these functions h... |
| ssh-pkcs11.h |
1.4 | 9 years | djm | sync ssh-keysign, ssh-keygen and some dependencies to the new buffer/key API; mo... |
| ssh-rsa.c |
1.66 | 6 years | jsing | Ensure that D mod (P-1) and D mod (Q-1) are calculated in constant time. This a... |
| ssh-sandbox.h |
1.1 | 12 years | djm | rename sandbox.h => ssh-sandbox.h to make things easier for portable |
| ssh-xmss.c |
1.1 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| ssh.1 |
1.391 | 6 years | jmc | some cleanup for BindInterface and ssh-keyscan; |
| ssh.c |
1.475 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| ssh.h |
1.87 | 7 years | djm | Refuse RSA keys <1024 bits in length. Improve reporting for keys that do not mee... |
| ssh2.h |
1.18 | 8 years | markus | move SSH_MSG_NONE, so we don't have to include ssh1.h; ok deraadt@ |
| ssh_api.c |
1.8 | 7 years | djm | remove compat20/compat13/compat15 variables ok markus@ |
| ssh_api.h |
1.1 | 9 years | markus | add experimental api for packet layer; ok djm@ |
| ssh_config |
1.33 | 7 years | djm | As promised in last release announcement: remove support for Blowfish, RC4 and C... |
| ssh_config.5 |
1.268 | 6 years | jmc | some cleanup for BindInterface and ssh-keyscan; |
| sshbuf-getput-basic.c |
1.7 | 6 years | djm | fix casts re constness |
| sshbuf-getput-crypto.c |
1.5 | 8 years | djm | use explicit_bzero() more liberally in the buffer code; ok deraadt |
| sshbuf-misc.c |
1.6 | 8 years | djm | fix signed/unsigned errors reported by clang-3.7; add sshbuf_dup_string() to rep... |
| sshbuf.c |
1.11 | 6 years | djm | unconditionally zero init size of buffer; ok markus@ deraadt@ |
| sshbuf.h |
1.9 | 6 years | djm | refactor channels.c Move static state to a "struct ssh_channels" that is alloca... |
| sshconnect.c |
1.297 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| sshconnect.h |
1.32 | 6 years | djm | constify some private key-related functions; based on https://github.com/openssh... |
| sshconnect2.c |
1.270 | 6 years | markus | fix bogus warning when signing cert keys using agent; from djm; ok deraadt dtuck... |
| sshd.8 |
1.299 | 6 years | jmc | sort expiry-time; |
| sshd.c |
1.506 | 6 years | djm | switch over to the new authorized_keys options API and remove the legacy one. I... |
| sshd_config |
1.102 | 6 years | djm | stop loading DSA keys by default, remove sshd_config stanza and manpage bits; fr... |
| sshd_config.5 |
1.263 | 6 years | djm | Mention recent DH KEX methods: diffie-hellman-group14-sha256 diffie-hellman-gro... |
| ssherr.c |
1.7 | 6 years | djm | refactor channels.c Move static state to a "struct ssh_channels" that is alloca... |
| ssherr.h |
1.5 | 6 years | djm | refactor channels.c Move static state to a "struct ssh_channels" that is alloca... |
| sshkey-xmss.c |
1.1 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| sshkey-xmss.h |
1.1 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| sshkey.c |
1.64 | 6 years | markus | ssh/xmss: fix deserialize for certs; ok djm@ |
| sshkey.h |
1.24 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| sshlogin.c |
1.32 | 8 years | guenther | Use pread/pwrite instead separate lseek+read/write for lastlog. Cast to off_t be... |
| sshlogin.h |
1.8 | 17 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... |
| sshpty.c |
1.31 | 7 years | dtucker | Factor out code to disconnect from controlling terminal into its own function. ... |
| sshpty.h |
1.13 | 7 years | dtucker | Factor out code to disconnect from controlling terminal into its own function. ... |
| sshtty.c |
1.14 | 14 years | djm | quell tc[gs]etattr warnings when forcing a tty (ssh -tt), since we usually don't... |
| ttymodes.c |
1.33 | 6 years | dtucker | Don't send IUTF8 to servers that don't like them. Some SSH servers eg "ConfD" d... |
| ttymodes.h |
1.16 | 7 years | djm | purge the last traces of SSHv1 from the TTY modes handling code ok markus |
| uidswap.c |
1.39 | 8 years | dtucker | Revert previous commit. We still want to call setgroups in the case where there... |
| uidswap.h |
1.13 | 17 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... |
| umac.c |
1.16 | 6 years | naddy | Create a persistent umac128.c source file: #define the output size and the name ... |
| umac.h |
1.3 | 10 years | djm | oops, forgot to commit corresponding header change; spotted by jsg and jasper |
| umac128.c |
1.2 | 6 years | dtucker | Rename struct umac_ctx to umac128_ctx too. In portable some linkers complain ab... |
| utf8.c |
1.7 | 6 years | deraadt | Switch to recallocarray() for a few operations. Both growth and shrinkage are h... |
| utf8.h |
1.1 | 7 years | schwarze | To prevent screwing up terminal settings when printing to the terminal, for ASCI... |
| version.h |
1.81 | 6 years | markus | openssh-7.7 |
| xmalloc.c |
1.34 | 6 years | deraadt | Switch to recallocarray() for a few operations. Both growth and shrinkage are h... |
| xmalloc.h |
1.17 | 6 years | deraadt | Switch to recallocarray() for a few operations. Both growth and shrinkage are h... |
| xmss_commons.c |
1.2 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_commons.h |
1.3 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_fast.c |
1.3 | 6 years | markus | ssh/xmss: fix build; ok djm@ |
| xmss_fast.h |
1.2 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_hash.c |
1.2 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_hash.h |
1.2 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_hash_address.c |
1.2 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_hash_address.h |
1.2 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_wots.c |
1.2 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_wots.h |
1.3 | 6 years | dtucker | Remove unneeded (local) include. ok markus@ |
| bufaux.c (in the Attic) [Hide] |
1.60 | 10 years | djm | New buffer API; the first installment of the conversion/replacement of OpenSSH's... |
| bufbn.c (in the Attic) [Hide] |
1.13 | 7 years | djm | remove SSHv1 support from packet and buffer APIs ok markus@ |
| bufec.c (in the Attic) [Hide] |
1.4 | 10 years | djm | New buffer API; the first installment of the conversion/replacement of OpenSSH's... |
| buffer.c (in the Attic) [Hide] |
1.36 | 10 years | djm | New buffer API; the first installment of the conversion/replacement of OpenSSH's... |
| buffer.h (in the Attic) [Hide] |
1.26 | 7 years | djm | remove SSHv1 support from packet and buffer APIs ok markus@ |
| crc32.c (in the Attic) [Hide] |
1.11 | 18 years | stevesk | remove extra spaces |
| crc32.h (in the Attic) [Hide] |
1.15 | 18 years | djm | standardise spacing in $OpenBSD$ tags; requested by deraadt@ |
| fe25519.c (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| fe25519.h (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| ge25519.c (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| ge25519.h (in the Attic) [Hide] |
1.4 | 9 years | miod | Declare ge25519_base as extern, to prevent it from becoming a common. Gets us ri... |
| ge25519_base.data (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| kexc25519c.c (in the Attic) [Hide] |
1.9 | 6 years | djm | pass negotiated signing algorithm though to sshkey_verify() and check that the n... |
| kexc25519s.c (in the Attic) [Hide] |
1.11 | 6 years | djm | one more void *ctx => struct ssh *ssh conversion |
| kexdhc.c (in the Attic) [Hide] |
1.22 | 6 years | jsing | Remove all guards for calls to OpenSSL free functions - all of these functions h... |
| kexdhs.c (in the Attic) [Hide] |
1.26 | 6 years | jsing | Remove all guards for calls to OpenSSL free functions - all of these functions h... |
| kexecdhc.c (in the Attic) [Hide] |
1.13 | 6 years | jsing | Remove all guards for calls to OpenSSL free functions - all of these functions h... |
| kexecdhs.c (in the Attic) [Hide] |
1.17 | 6 years | jsing | Remove all guards for calls to OpenSSL free functions - all of these functions h... |
| key.c (in the Attic) [Hide] |
1.132 | 6 years | djm | pass negotiated signing algorithm though to sshkey_verify() and check that the n... |
| key.h (in the Attic) [Hide] |
1.52 | 6 years | djm | pass negotiated signing algorithm though to sshkey_verify() and check that the n... |
| opacket.c (in the Attic) [Hide] |
1.7 | 6 years | djm | add RCSIDs to these; they make syncing portable a bit easier |
| opacket.h (in the Attic) [Hide] |
1.12 | 6 years | djm | add RCSIDs to these; they make syncing portable a bit easier |
| sc25519.c (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| sc25519.h (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| uuencode.c (in the Attic) [Hide] |
1.28 | 9 years | deraadt | 2*len -> use xreallocarray() ok djm |
| uuencode.h (in the Attic) [Hide] |
1.14 | 13 years | djm | Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and host/use... |
| verify.c (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |