Click on a directory to enter that directory. Click on a file to display its revision history and to get a chance to display diffs between revisions.
Current directory: [local] / src / usr.bin / ssh
Current tag: OPENBSD_6_6_BASE
| File | Rev. | Age | Author | Last log entry |
|---|---|---|---|---|
![[BACK]](/icons/back.gif){kind=icon} Parent Directory |
||||
![[DIR]](/icons/dir.gif){kind=icon} lib/ |
||||
| moduli-gen/ |
||||
| scard/ |
||||
| scp/ |
||||
| sftp/ |
||||
| sftp-server/ |
||||
| ssh/ |
||||
| ssh-add/ |
||||
| ssh-agent/ |
||||
| ssh-keygen/ |
||||
| ssh-keyscan/ |
||||
| ssh-keysign/ |
||||
| ssh-pkcs11-helper/ |
||||
| ssh-sk-helper/ |
||||
| sshd/ |
||||
| sshd-session/ |
||||
![[TXT]](/icons/text.gif){kind=icon} LICENCE |
1.20 | 7 years | djm | remove the (in)famous SSHv1 CRC compensation attack detector. Despite your came... |
| Makefile |
1.16 | 6 years | deraadt | ssh/lib hasn't worked towards our code-sharing goals for a quit while, perhaps i... |
| Makefile.inc |
1.69 | 4 years | djm | avoid compiling certain files that deeply depend on libcrypto when WITH_OPENSSL ... |
| OVERVIEW |
1.15 | 5 years | djm | refer to OpenSSL not SSLeay; we're old, but we don't have to act it |
| PROTOCOL |
1.36 | 5 years | djm | mention INFO@openssh.com for sending SIGINFO |
| PROTOCOL.agent |
1.12 | 6 years | djm | Now that we no longer support SSHv1, replace the contents of this file with a po... |
| PROTOCOL.certkeys |
1.16 | 5 years | djm | mention ssh-ed25519-cert-v01@openssh.com in list of cert key type at start of do... |
| PROTOCOL.chacha20poly1305 |
1.4 | 6 years | djm | lots of typos in comments/docs. Patch from Karsten Weiss after checking with cod... |
| PROTOCOL.key |
1.1 | 10 years | markus | new private key format, bcrypt as KDF by default; details in PROTOCOL.key; feedb... |
| PROTOCOL.krl |
1.5 | 5 years | djm | allow key revocation by SHA256 hash and allow ssh-keygen to create KRLs using SH... |
| PROTOCOL.mux |
1.11 | 5 years | djm | Document mux proxy mode; added by Markus in openssh-7.4 Also add a little bit o... |
| PROTOCOL.sshsig |
1.2 | 4 years | djm | sshsig tweaks and improvements from and suggested by Markus ok markus/me |
| README |
1.7 | 18 years | djm | $OpenBSD$ in here too |
| addrmatch.c |
1.14 | 5 years | djm | fix some memory leaks spotted by Coverity via Jakub Jelen in bz#2366 feedback an... |
| atomicio.c |
1.30 | 5 years | dtucker | Check for both EAGAIN and EWOULDBLOCK. This is a no-op in OpenBSD (they are the... |
| atomicio.h |
1.12 | 5 years | djm | move client/server SSH-* banners to buffers under ssh->kex and factor out the ba... |
| auth-bsdauth.c |
1.15 | 5 years | markus | sshd: switch authentication to sshbuf API; ok djm@ |
| auth-krb5.c |
1.23 | 5 years | markus | sshd: switch authentication to sshbuf API; ok djm@ |
| auth-options.c |
1.89 | 4 years | dtucker | Plug mem leaks on error paths, based in part on github pr#120 from David Carlier... |
| auth-options.h |
1.28 | 4 years | djm | cap the number of permiopen/permitlisten directives we're willing to parse on a ... |
| auth-passwd.c |
1.47 | 5 years | markus | sshd: switch loginmsg to sshbuf API; ok djm@ |
| auth-rhosts.c |
1.51 | 4 years | djm | remove some duplicate #includes |
| auth.c |
1.141 | 4 years | djm | remove some duplicate #includes |
| auth.h |
1.100 | 4 years | djm | fixes for !WITH_OPENSSL compilation; ok dtucker@ |
| auth2-chall.c |
1.51 | 4 years | djm | lots of things were relying on libcrypto headers to transitively include various... |
| auth2-gss.c |
1.29 | 5 years | djm | delay bailout for invalid authenticating user until after the packet containing ... |
| auth2-hostbased.c |
1.41 | 4 years | djm | lots of things were relying on libcrypto headers to transitively include various... |
| auth2-kbdint.c |
1.10 | 4 years | djm | lots of things were relying on libcrypto headers to transitively include various... |
| auth2-none.c |
1.22 | 5 years | markus | sshd: switch authentication to sshbuf API; ok djm@ |
| auth2-passwd.c |
1.17 | 4 years | djm | lots of things were relying on libcrypto headers to transitively include various... |
| auth2-pubkey.c |
1.94 | 4 years | djm | lots of things were relying on libcrypto headers to transitively include various... |
| auth2.c |
1.157 | 4 years | djm | lots of things were relying on libcrypto headers to transitively include various... |
| authfd.c |
1.117 | 4 years | djm | authfd: add function to check if key is in agent This commit adds a helper func... |
| authfd.h |
1.46 | 4 years | djm | authfd: add function to check if key is in agent This commit adds a helper func... |
| authfile.c |
1.135 | 4 years | djm | move advance_past_options to authfile.c and make it public; ok markus@ |
| authfile.h |
1.23 | 4 years | djm | move advance_past_options to authfile.c and make it public; ok markus@ |
| bitmap.c |
1.9 | 6 years | djm | add RCSIDs to these; they make syncing portable a bit easier |
| bitmap.h |
1.2 | 6 years | djm | add RCSIDs to these; they make syncing portable a bit easier |
| canohost.c |
1.74 | 4 years | deraadt | When system calls indicate an error they return -1, not some arbitrary value < 0... |
| canohost.h |
1.12 | 8 years | djm | refactor canohost.c: move functions that cache results closer to the places that... |
| chacha.c |
1.1 | 10 years | djm | Add a new protocol 2 transport cipher "chacha20-poly1305@openssh.com" that combi... |
| chacha.h |
1.4 | 7 years | guenther | Pull in <stdlib.h> for NULL ok deraadt@ |
| channels.c |
1.394 | 4 years | dtucker | Remove some set but never used variables. ok daraadt@ |
| channels.h |
1.132 | 5 years | djm | include a little more information about the status and disposition of channel's ... |
| cipher-aesctr.c |
1.2 | 9 years | markus | remove unneeded includes, sync my copyright across files & whitespace; ok djm@ |
| cipher-aesctr.h |
1.1 | 10 years | markus | re-add our own aesctr implementation; ok djm@ |
| cipher-chachapoly.c |
1.8 | 7 years | djm | small refactor of cipher.c: make ciphercontext opaque to callers feedback and ok... |
| cipher-chachapoly.h |
1.4 | 9 years | djm | New key API: refactor key-related functions to be more library-like, existing AP... |
| cipher.c |
1.113 | 4 years | djm | fixes for !WITH_OPENSSL compilation; ok dtucker@ |
| cipher.h |
1.54 | 4 years | djm | fixes for !WITH_OPENSSL compilation; ok dtucker@ |
| cleanup.c |
1.5 | 17 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... |
| clientloop.c |
1.327 | 4 years | mestre | When using a combination of a Yubikey+GnuPG+remote forwarding the gpg-agent (and... |
| clientloop.h |
1.36 | 5 years | markus | client: switch to sshbuf API; ok djm@ |
| compat.c |
1.113 | 5 years | djm | revert compat.[ch] section of the following change. It causes double-free under ... |
| compat.h |
1.54 | 5 years | djm | revert compat.[ch] section of the following change. It causes double-free under ... |
| crypto_api.h |
1.5 | 5 years | djm | Add support for a PQC KEX/KEM: sntrup4591761x25519-sha512@tinyssh.org using the ... |
| dh.c |
1.71 | 4 years | djm | typo in previous |
| dh.h |
1.18 | 4 years | djm | fixes for !WITH_OPENSSL compilation; ok dtucker@ |
| digest-libc.c |
1.6 | 7 years | djm | remove hmac-ripemd160; ok dtucker |
| digest-openssl.c |
1.8 | 5 years | djm | hold our collective noses and use the openssl-1.1.x API in OpenSSH; feedback and... |
| digest.h |
1.8 | 7 years | djm | remove hmac-ripemd160; ok dtucker |
| dispatch.c |
1.32 | 5 years | djm | allow sshpkt_fatal() to take a varargs format; we'll use this to give packet-rel... |
| dispatch.h |
1.15 | 5 years | djm | remove last traces of old packet API! with & ok markus@ |
| dns.c |
1.38 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| dns.h |
1.18 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| ed25519.c |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| fatal.c |
1.7 | 17 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... |
| groupaccess.c |
1.17 | 5 years | dtucker | Move checks for lists of users or groups into their own function. This is a no-o... |
| groupaccess.h |
1.8 | 15 years | djm | support negation of groups in "Match group" block (bz#1315); ok dtucker@ |
| gss-genr.c |
1.26 | 5 years | djm | kerberos/gssapi fixes for buffer removal |
| gss-serv-krb5.c |
1.9 | 5 years | markus | sshd: switch GSSAPI to sshbuf API; ok djm@ |
| gss-serv.c |
1.31 | 5 years | markus | sshd: switch GSSAPI to sshbuf API; ok djm@ |
| hash.c |
1.5 | 6 years | naddy | clarify authorship; prodded by and ok markus@ |
| hmac.c |
1.13 | 4 years | djm | lots of things were relying on libcrypto headers to transitively include various... |
| hmac.h |
1.9 | 9 years | djm | New key API: refactor key-related functions to be more library-like, existing AP... |
| hostfile.c |
1.76 | 4 years | dtucker | Remove some set but never used variables. ok daraadt@ |
| hostfile.h |
1.24 | 9 years | djm | Refactor hostkeys_foreach() and dependent code Deal with IP addresses (i.e. Chec... |
| kex.c |
1.155 | 4 years | dtucker | Correct type for end-of-list sentinel; fixes initializer warnings on some platfo... |
| kex.h |
1.109 | 4 years | djm | fixes for !WITH_OPENSSL compilation; ok dtucker@ |
| kexc25519.c |
1.17 | 5 years | djm | rename kex->kem_client_pub -> kex->client_pub now that KEM has been renamed to k... |
| kexdh.c |
1.32 | 5 years | djm | rename kex->kem_client_pub -> kex->client_pub now that KEM has been renamed to k... |
| kexecdh.c |
1.10 | 5 years | djm | rename kex->kem_client_pub -> kex->client_pub now that KEM has been renamed to k... |
| kexgen.c |
1.3 | 4 years | djm | fixes for !WITH_OPENSSL compilation; ok dtucker@ |
| kexgex.c |
1.32 | 5 years | djm | pass most arguments to the KEX hash functions as sshbuf rather than pointer+leng... |
| kexgexc.c |
1.34 | 5 years | djm | pass most arguments to the KEX hash functions as sshbuf rather than pointer+leng... |
| kexgexs.c |
1.42 | 5 years | djm | pass most arguments to the KEX hash functions as sshbuf rather than pointer+leng... |
| krl.c |
1.44 | 4 years | djm | lots of things were relying on libcrypto headers to transitively include various... |
| krl.h |
1.7 | 4 years | djm | Add protection for private keys at rest in RAM against speculation and memory si... |
| log.c |
1.51 | 5 years | markus | avoid expensive channel_open_message() calls; ok djm@ |
| log.h |
1.24 | 4 years | djm | lots of things were relying on libcrypto headers to transitively include various... |
| mac.c |
1.35 | 4 years | djm | lots of things were relying on libcrypto headers to transitively include various... |
| mac.h |
1.10 | 7 years | djm | Improve crypto ordering for Encrypt-then-MAC (EtM) mode MAC algorithms. Previou... |
| match.c |
1.40 | 4 years | djm | space |
| match.h |
1.19 | 5 years | dtucker | Move checks for lists of users or groups into their own function. This is a no-o... |
| misc.c |
1.142 | 4 years | djm | move authorized_keys option parsing helpsers to misc.c and make them public; ok ... |
| misc.h |
1.81 | 4 years | djm | move authorized_keys option parsing helpsers to misc.c and make them public; ok ... |
| moduli.c |
1.36 | 4 years | dtucker | Check for gmtime failure in moduli generation. Based on patch from krishnaiah.b... |
| monitor.c |
1.199 | 4 years | djm | reversed test yielded incorrect debug message |
| monitor.h |
1.23 | 5 years | djm | remove last references to active_state with & ok markus@ |
| monitor_fdpass.c |
1.21 | 8 years | jca | Print ssize_t with %zd; ok deraadt@ mmcc@ |
| monitor_fdpass.h |
1.4 | 16 years | djm | make file descriptor passing code return an error rather than call fatal() when ... |
| monitor_wrap.c |
1.113 | 4 years | deraadt | When system calls indicate an error they return -1, not some arbitrary value < 0... |
| monitor_wrap.h |
1.42 | 4 years | djm | fixes for !WITH_OPENSSL compilation; ok dtucker@ |
| msg.c |
1.17 | 5 years | markus | replace cast with call to sshbuf_mutable_ptr(); ok djm@ |
| msg.h |
1.5 | 9 years | djm | sync ssh-keysign, ssh-keygen and some dependencies to the new buffer/key API; mo... |
| mux.c |
1.80 | 4 years | deraadt | When system calls indicate an error they return -1, not some arbitrary value < 0... |
| myproposal.h |
1.58 | 5 years | djm | openssh-7.9 accidentally reused the server's algorithm lists in the client for K... |
| nchan.c |
1.70 | 4 years | deraadt | When system calls indicate an error they return -1, not some arbitrary value < 0... |
| nchan.ms |
1.8 | 20 years | djm | unexpand and delete whitespace at EOL; ok markus@ |
| nchan2.ms |
1.4 | 16 years | djm | document eow message in ssh protocol 2 channel state machine; feedback and ok ma... |
| packet.c |
1.286 | 4 years | deraadt | When system calls indicate an error they return -1, not some arbitrary value < 0... |
| packet.h |
1.91 | 4 years | djm | fixes for !WITH_OPENSSL compilation; ok dtucker@ |
| pathnames.h |
1.28 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| pkcs11.h |
1.3 | 10 years | deraadt | cleanup 1 << 31 idioms. Resurrection of this issue pointed out by Eitan Adler o... |
| poly1305.c |
1.3 | 10 years | djm | use full name for author, with his permission |
| poly1305.h |
1.4 | 10 years | djm | revert __bounded change; it causes way more problems for portable than it solves... |
| progressmeter.c |
1.48 | 5 years | dtucker | Use the correct (according to POSIX) format for left-justification in snmprintf.... |
| progressmeter.h |
1.5 | 5 years | dtucker | Have progressmeter force an update at the beginning and end of each transfer. F... |
| readconf.c |
1.309 | 4 years | naddy | Allow prepending a list of algorithms to the default set by starting the list wi... |
| readconf.h |
1.129 | 5 years | djm | add a ssh_config "Match final" predicate Matches in same pass as "Match canonic... |
| readpass.c |
1.54 | 4 years | deraadt | When system calls indicate an error they return -1, not some arbitrary value < 0... |
| rijndael.c |
1.20 | 9 years | djm | #if 0 some more arrays used only for decrypting (we don't use since we only need... |
| rijndael.h |
1.14 | 10 years | markus | re-add our own aesctr implementation; ok djm@ |
| sandbox-pledge.c |
1.1 | 8 years | deraadt | Change all tame callers to namechange to pledge(2). |
| sandbox-rlimit.c |
1.4 | 7 years | deraadt | Add MAXIMUM(), MINIMUM(), and ROUNDUP() to misc.h, then use those definitions ra... |
| scp.1 |
1.86 | 4 years | jmc | Hostname->HostName cleanup; from lauri tirkkonen ok dtucker |
| scp.c |
1.206 | 4 years | dtucker | Fix potential truncation warning. ok deraadt. |
| servconf.c |
1.352 | 4 years | naddy | Allow prepending a list of algorithms to the default set by starting the list wi... |
| servconf.h |
1.140 | 5 years | dtucker | When running sshd -T, assume any attibute not provided by -C does not match, whi... |
| serverloop.c |
1.216 | 4 years | deraadt | When system calls indicate an error they return -1, not some arbitrary value < 0... |
| serverloop.h |
1.8 | 6 years | djm | refactor channels.c Move static state to a "struct ssh_channels" that is alloca... |
| session.c |
1.316 | 4 years | deraadt | When system calls indicate an error they return -1, not some arbitrary value < 0... |
| session.h |
1.36 | 5 years | djm | Add server support for signalling sessions via the SSH channel/ session protocol... |
| sftp-client.c |
1.135 | 4 years | djm | fix memory leak in error path; bz#3074 patch from krishnaiah.bommu@intel.com, ok... |
| sftp-client.h |
1.28 | 5 years | djm | Add "-h" flag to sftp chown/chgrp/chmod commands to request they do not follow s... |
| sftp-common.c |
1.31 | 5 years | millert | Fix warnings caused by user_from_uid() and group_from_gid() now returning const ... |
| sftp-common.h |
1.12 | 9 years | djm | update sftp client and server to new buffer API. pretty much just mechanical cha... |
| sftp-glob.c |
1.28 | 4 years | djm | remove some duplicate #includes |
| sftp-realpath.c |
1.1 | 4 years | djm | add a local implementation of BSD realpath() for sftp-server use ahead of OpenBS... |
| sftp-server-main.c |
1.6 | 4 years | otto | Replace calls to ssh_malloc_init() by a static init of malloc_options. Prepares ... |
| sftp-server.8 |
1.27 | 9 years | djm | Make manual reflect reality: sftp-server's -d option accepts a "%d" option, not ... |
| sftp-server.c |
1.117 | 4 years | djm | add a local implementation of BSD realpath() for sftp-server use ahead of OpenBS... |
| sftp.1 |
1.127 | 4 years | jmc | from tim: - for reput, it is remote-path which is optional, not local-path - syn... |
| sftp.c |
1.195 | 4 years | djm | remove some duplicate #includes |
| sftp.h |
1.9 | 15 years | dtucker | replace __dead with __attribute__((noreturn)), makes things a little easier to p... |
| smult_curve25519_ref.c |
1.2 | 10 years | markus | add missing $OpenBSD$ tags |
| ssh-add.1 |
1.69 | 5 years | djm | add "-v" flags to ssh-add and ssh-pkcs11-helper to turn up debug verbosity. Mak... |
| ssh-add.c |
1.141 | 4 years | djm | fixes for !WITH_OPENSSL compilation; ok dtucker@ |
| ssh-agent.1 |
1.64 | 7 years | jmc | tweak previous; while here fix up FILES and AUTHORS; |
| ssh-agent.c |
1.237 | 4 years | deraadt | When system calls indicate an error they return -1, not some arbitrary value < 0... |
| ssh-dss.c |
1.38 | 5 years | djm | hold our collective noses and use the openssl-1.1.x API in OpenSSH; feedback and... |
| ssh-ecdsa.c |
1.16 | 5 years | djm | Make sshpkt_get_bignum2() allocate the bignum it is parsing rather than make the... |
| ssh-ed25519.c |
1.7 | 8 years | djm | make argument == NULL tests more consistent |
| ssh-gss.h |
1.14 | 5 years | djm | kerberos/gssapi fixes for buffer removal |
| ssh-keygen.1 |
1.171 | 4 years | jmc | use a more common options order in SYNOPSIS and sync usage(); while here, no nee... |
| ssh-keygen.c |
1.355 | 4 years | jmc | use a more common options order in SYNOPSIS and sync usage(); while here, no nee... |
| ssh-keyscan.1 |
1.44 | 6 years | jmc | move the input format details to -f; remove the output format details and point ... |
| ssh-keyscan.c |
1.130 | 4 years | djm | fixes for !WITH_OPENSSL compilation; ok dtucker@ |
| ssh-keysign.8 |
1.15 | 8 years | jmc | since these pages now clearly tell folks to avoid v1, normalise the docs from a ... |
| ssh-keysign.c |
1.61 | 4 years | djm | remove some duplicate #includes |
| ssh-pkcs11-client.c |
1.15 | 5 years | djm | add "-v" flags to ssh-add and ssh-pkcs11-helper to turn up debug verbosity. Mak... |
| ssh-pkcs11-helper.8 |
1.5 | 5 years | djm | add "-v" flags to ssh-add and ssh-pkcs11-helper to turn up debug verbosity. Mak... |
| ssh-pkcs11-helper.c |
1.21 | 4 years | djm | fixes for !WITH_OPENSSL compilation; ok dtucker@ |
| ssh-pkcs11.c |
1.46 | 4 years | djm | revert unconditional forced login implemented in r1.41 of ssh-pkcs11.c; r1.45 ad... |
| ssh-pkcs11.h |
1.5 | 5 years | djm | add support for ECDSA keys in PKCS#11 tokens Work by markus@ and Pedro Martelle... |
| ssh-rsa.c |
1.68 | 5 years | djm | hold our collective noses and use the openssl-1.1.x API in OpenSSH; feedback and... |
| ssh-sandbox.h |
1.1 | 12 years | djm | rename sandbox.h => ssh-sandbox.h to make things easier for portable |
| ssh-xmss.c |
1.1 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| ssh.1 |
1.403 | 4 years | jmc | Hostname->HostName cleanup; from lauri tirkkonen ok dtucker |
| ssh.c |
1.507 | 4 years | djm | allow %n to be expanded in ProxyCommand strings From Zachary Harmany via github... |
| ssh.h |
1.89 | 5 years | djm | move client/server SSH-* banners to buffers under ssh->kex and factor out the ba... |
| ssh2.h |
1.18 | 8 years | markus | move SSH_MSG_NONE, so we don't have to include ssh1.h; ok deraadt@ |
| ssh_api.c |
1.18 | 4 years | dtucker | Plug mem leaks on error paths, based in part on github pr#120 from David Carlier... |
| ssh_api.h |
1.2 | 6 years | djm | lots of typos in comments/docs. Patch from Karsten Weiss after checking with cod... |
| ssh_config |
1.34 | 5 years | dtucker | Remove obsolete "Protocol" from commented out examples. Patch from samy.mahmoudi... |
| ssh_config.5 |
1.304 | 4 years | djm | clarify that IdentitiesOnly also applies to the default ~/.ssh/id_* keys; bz#306... |
| sshbuf-getput-basic.c |
1.9 | 4 years | djm | lots of things were relying on libcrypto headers to transitively include various... |
| sshbuf-getput-crypto.c |
1.7 | 5 years | djm | Make sshpkt_get_bignum2() allocate the bignum it is parsing rather than make the... |
| sshbuf-misc.c |
1.11 | 4 years | djm | let sshbuf_find/cmp take a void* for the search/comparison argument, instead of ... |
| sshbuf.c |
1.13 | 5 years | djm | make grandparent-parent-child sshbuf chains robust to use-after-free faults if t... |
| sshbuf.h |
1.18 | 4 years | djm | fixes for !WITH_OPENSSL compilation; ok dtucker@ |
| sshconnect.c |
1.319 | 4 years | djm | whitespace |
| sshconnect.h |
1.39 | 4 years | djm | allow %n to be expanded in ProxyCommand strings From Zachary Harmany via github... |
| sshconnect2.c |
1.308 | 4 years | dtucker | Remove now-redundant perm_ok arg since sshkey_load_private_type will now return ... |
| sshd.8 |
1.304 | 5 years | dtucker | Switch authorized_keys example from ssh-dss to ssh-rsa since the former is no lo... |
| sshd.c |
1.537 | 4 years | deraadt | When system calls indicate an error they return -1, not some arbitrary value < 0... |
| sshd_config |
1.103 | 6 years | tj | the UseLogin option was removed, so remove it here too. ok dtucker |
| sshd_config.5 |
1.290 | 4 years | naddy | Allow prepending a list of algorithms to the default set by starting the list wi... |
| ssherr.c |
1.8 | 5 years | djm | Improve strictness and control over RSA-SHA2 signature types: In ssh, when an a... |
| ssherr.h |
1.6 | 5 years | djm | Improve strictness and control over RSA-SHA2 signature types: In ssh, when an a... |
| sshkey-xmss.c |
1.6 | 4 years | djm | fix integer overflow in XMSS private key parsing. Reported by Adam Zabrocki via ... |
| sshkey-xmss.h |
1.1 | 6 years | markus | Add experimental support for PQC XMSS keys (Extended Hash-Based Signatures) The ... |
| sshkey.c |
1.84 | 4 years | djm | fix an unreachable integer overflow similar to the XMSS case, and some other NUL... |
| sshkey.h |
1.34 | 4 years | djm | make get_sigtype public as sshkey_get_sigtype(); ok markus@ |
| sshlogin.c |
1.34 | 4 years | deraadt | When system calls indicate an error they return -1, not some arbitrary value < 0... |
| sshlogin.h |
1.8 | 17 years | deraadt | almost entirely get rid of the culture of ".h files that include .h files" ok dj... |
| sshpty.c |
1.34 | 4 years | deraadt | fatal() if getgrnam() cannot find "tty" |
| sshpty.h |
1.13 | 7 years | dtucker | Factor out code to disconnect from controlling terminal into its own function. ... |
| sshsig.c |
1.6 | 4 years | djm | make signature format match PROTOCOL.sshsig file: the message hash should be wri... |
| sshsig.h |
1.3 | 4 years | djm | expose allowed_signers options parsing code in header for fuzzing rename to mak... |
| sshtty.c |
1.14 | 14 years | djm | quell tc[gs]etattr warnings when forcing a tty (ssh -tt), since we usually don't... |
| ttymodes.c |
1.34 | 5 years | markus | ttymodes: switch to sshbuf API; ok djm@ |
| ttymodes.h |
1.16 | 7 years | djm | purge the last traces of SSHv1 from the TTY modes handling code ok markus |
| uidswap.c |
1.42 | 4 years | deraadt | When system calls indicate an error they return -1, not some arbitrary value < 0... |
| uidswap.h |
1.14 | 5 years | dtucker | Remove support for running ssh(1) setuid and fatal if attempted. Do not link uid... |
| umac.c |
1.17 | 6 years | djm | lots of typos in comments/docs. Patch from Karsten Weiss after checking with cod... |
| umac.h |
1.4 | 4 years | dtucker | Typo and spelling fixes in comments and error messages. Patch from knweiss at g... |
| umac128.c |
1.2 | 6 years | dtucker | Rename struct umac_ctx to umac128_ctx too. In portable some linkers complain ab... |
| utf8.c |
1.8 | 5 years | schwarze | AIX reports the CODESET as "ISO8859-1" in the POSIX locale. Treating that as a s... |
| utf8.h |
1.1 | 7 years | schwarze | To prevent screwing up terminal settings when printing to the terminal, for ASCI... |
| version.h |
1.85 | 4 years | djm | openssh-8.1 |
| xmalloc.c |
1.35 | 4 years | otto | Replace calls to ssh_malloc_init() by a static init of malloc_options. Prepares ... |
| xmalloc.h |
1.18 | 4 years | otto | Replace calls to ssh_malloc_init() by a static init of malloc_options. Prepares ... |
| xmss_commons.c |
1.2 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_commons.h |
1.3 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_fast.c |
1.3 | 6 years | markus | ssh/xmss: fix build; ok djm@ |
| xmss_fast.h |
1.2 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_hash.c |
1.2 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_hash.h |
1.2 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_hash_address.c |
1.2 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_hash_address.h |
1.2 | 6 years | dtucker | Add $OpenBSD$ markers to xmss files to help keep synced with portable. ok djm@. |
| xmss_wots.c |
1.3 | 6 years | djm | lots of typos in comments/docs. Patch from Karsten Weiss after checking with cod... |
| xmss_wots.h |
1.3 | 6 years | dtucker | Remove unneeded (local) include. ok markus@ |
| fe25519.c (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| fe25519.h (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| ge25519.c (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| ge25519.h (in the Attic) [Hide] |
1.4 | 9 years | miod | Declare ge25519_base as extern, to prevent it from becoming a common. Gets us ri... |
| ge25519_base.data (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| kexsntrup4591761x25519.c (in the Attic) [Hide] |
1.3 | 5 years | djm | rename kex->kem_client_pub -> kex->client_pub now that KEM has been renamed to k... |
| sc25519.c (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| sc25519.h (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |
| sntrup4591761.c (in the Attic) [Hide] |
1.3 | 5 years | markus | Add authors for public domain sntrup4591761 code; confirmed by Daniel J. Bernste... |
| sntrup4591761.sh (in the Attic) [Hide] |
1.3 | 5 years | markus | Add authors for public domain sntrup4591761 code; confirmed by Daniel J. Bernste... |
| verify.c (in the Attic) [Hide] |
1.3 | 10 years | markus | Add Authors for the public domain ed25519/nacl code. see also http://nacl.cr.yp.... |