[BACK]Return to innovations.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/innovations.html, Revision 1.61

1.1       schwarze    1: <!DOCTYPE html>
1.34      schwarze    2: <html lang="en">
1.1       schwarze    3: <head>
                      4: <meta charset="UTF-8"/>
1.33      tj          5: <title>OpenBSD: Innovations</title>
1.31      deraadt     6: <meta name="viewport" content="width=device-width, initial-scale=1">
                      7: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.35      tb          8: <link rel="canonical" href="https://www.openbsd.org/innovations.html">
1.1       schwarze    9: </head>
                     10:
1.31      deraadt    11: <body bgcolor= "#ffffff" text= "#000000">
                     12:
                     13: <h2>
1.59      job        14:     <a href="index.html">
                     15:         <i><font color="#0000ff">Open</font></i><font color="#000084">BSD</font></a>
                     16:     <font color="#e00000">Innovations</font>
1.32      tj         17: </h2>
1.31      deraadt    18: <hr>
1.32      tj         19: <p>
1.59      job        20:     This is a list of software and ideas developed or maintained by the OpenBSD
                     21:     project, sorted in order of approximate introduction. Some of them are
                     22:     explained in detail in our <a href="events.html">research papers</a>.
                     23: </p>
1.32      tj         24: <hr>
1.1       schwarze   25:
1.59      job        26: <h3>Concepts</h3>
1.1       schwarze   27:
                     28: <ul>
1.59      job        29:     <li>
                     30:         <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a>:
                     31:         Started by John Ioannidis, Angelos D. Keromytis, Niels Provos, and
                     32:         Niklas Hallqvist, imported February 20, 1997.  OpenBSD was the first
                     33:         free operating system to provide an IPSec stack.
                     34:     </li>
                     35:     <li>
                     36:         <a href="https://man.openbsd.org/inet6.4">inet6(4)</a>:
                     37:         First complete integration and adoption of IPv6 led by
                     38:         "Itojun" (Dr. Junichiro Hagino) [WIDE/KAME], Craig Metz [NRL], and
                     39:         Angelos D. Keromytis starting Jan 6, 1999.
                     40:         Almost fully operational Jun 6, 1999 during the
                     41:         <a href="hackathons.html">first OpenBSD hackathon</a>.
                     42:         OpenBSD 2.7.
                     43:     </li>
                     44:     <li>
                     45:         <strong>Privilege separation</strong>:
                     46:         First implemented by
                     47:         <a href="http://www.citi.umich.edu/u/provos/ssh/privsep.html">Niels Provos</a>
                     48:         and Markus Friedl in OpenSSH in March 2002, released with OpenBSD 3.2.
                     49:         The concept is now used in many OpenBSD programs, for example
                     50:         <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>,
                     51:         <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>,
                     52:         <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a>,
                     53:         <a href="https://man.openbsd.org/dvmrpd.8">dvmrpd(8)</a>,
                     54:         <a href="https://man.openbsd.org/eigrpd.8">eigrpd(8)</a>,
                     55:         <a href="https://man.openbsd.org/file.1">file(1)</a>,
                     56:         <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>,
                     57:         <a href="https://man.openbsd.org/iked.8">iked(8)</a>,
                     58:         <a href="https://man.openbsd.org/ldapd.8">ldapd(8)</a>,
                     59:         <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>,
                     60:         <a href="https://man.openbsd.org/mountd.8">mountd(8)</a>,
                     61:         <a href="https://man.openbsd.org/npppd.8">npppd(8)</a>,
                     62:         <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a>,
                     63:         <a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a>,
                     64:         <a href="https://man.openbsd.org/ospf6d.8">ospf6d(8)</a>,
                     65:         <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a>,
                     66:         <a href="https://man.openbsd.org/radiusd.8">radiusd(8)</a>,
                     67:         <a href="https://man.openbsd.org/man8/relayd.8">relayd(8)</a>,
                     68:         <a href="https://man.openbsd.org/ripd.8">ripd(8)</a>,
                     69:         <a href="https://man.openbsd.org/script.1">script(1)</a>,
                     70:         <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>,
                     71:         <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a>,
                     72:         <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>,
                     73:         <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>,
                     74:         <a href="https://man.openbsd.org/xconsole.1">xconsole(1)</a>,
                     75:         <a href="https://man.openbsd.org/xdm.1">xdm(1)</a>,
                     76:         <a href="https://man.openbsd.org/Xserver.1">Xserver(1)</a>,
                     77:         <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a>,
                     78:         <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a>,
                     79:         etc.
                     80:     </li>
                     81:     <li>
                     82:         <strong>Privilege revocation</strong>:
                     83:         Related to the work on privilege separation, some programs were refactored
                     84:         to drop privileges while holding onto a tricky resource such as a raw socket,
                     85:         reserved port, or modification-locked bpf(4) descriptor,
                     86:         for example
                     87:         <a href="https://man.openbsd.org/ping.8">ping(8)</a>,
                     88:         <a href="https://man.openbsd.org/traceroute.8">traceroute(8)</a>,
                     89:         etc.
                     90:     </li>
                     91:     <li>
                     92:         <strong>Stack protector</strong>:
                     93:         Developed since 2001 as "propolice" by Hiroaki Etoh. Integrated, and
                     94:         implemented for additional hardware platforms, by Miod Vallat and Theo
                     95:         de Raadt.  OpenBSD 3.3 was the first operating system to enable it
                     96:         systemwide by default.
                     97:     </li>
                     98:     <li>
                     99:         <strong>W^X</strong>:
                    100:         First used for sparc, sparc64, alpha, and hppa in OpenBSD 3.3.
                    101:         Strictly enforced by default since OpenBSD 6.0: a program can only
                    102:         violate it if the executable is marked with <code>PT_OPENBSD_WXNEEDED</code>
                    103:         and it is located on a filesystem mounted with the <code>wxallowed</code>
                    104:         <a href="https://man.openbsd.org/mount.8">mount(8)</a> option.
                    105:     </li>
                    106:     <li>
                    107:         <strong>GOT and PLT protection</strong> by ld.so:
                    108:         first done as part of the W^X work in OpenBSD 3.3, by Dale Rahn and
                    109:         Theo de Raadt. The GOT and PLT regions are read-only outside of ld.so
                    110:         itself. Extended to the .init/.fini sections (constructors and
                    111:         destructors) in OpenBSD 3.4.
                    112:     </li>
                    113:     <li>
                    114:         <strong>ASLR</strong>:
                    115:         OpenBSD 3.4 was the first widely used operating system to
                    116:         provide it by default.
                    117:     </li>
                    118:     <li>
                    119:         <a href="https://man.openbsd.org/gcc-local.1">gcc-local(1)</a>
                    120:         __attribute__((__bounded__)) static analysis annotation
                    121:         and checking mechanism:
                    122:         Started by Anil Madhavapeddy on June 26, 2003
                    123:         and ported to GCC 4 by Nicholas Marriott.
                    124:         First released with OpenBSD 3.4.
                    125:     </li>
                    126:     <li>
                    127:         <a href="https://man.openbsd.org/malloc.3">malloc(3)</a>
                    128:         randomization implemented by Thierry Deval. Guard pages and randomized (delayed) free added by Ted Unangst.
                    129:         Reimplemented by <a href="papers/eurobsdcon2009/otto-malloc.pdf">Otto Moerbeek</a>
                    130:         for OpenBSD 4.4.
                    131:     </li>
                    132:     <li>
                    133:         <strong>PIE</strong>:
                    134:         OpenBSD 5.3 was the first widely used operating system to enable it
                    135:         globally by default, on seven hardware platforms.
                    136:     </li>
                    137:     <li>
                    138:         <strong>Random-data memory</strong>:
                    139:         the ability to specify that a variable should be initialized at load
                    140:         time with random byte values was implemented in OpenBSD 5.3 by Matthew
                    141:         Dempsky.
                    142:     </li>
                    143:     <li>
                    144:         <strong>Stack protector per shared object</strong>:
                    145:         using the random-data memory feature, each shared object was given its
                    146:         own stack protector cookie in OpenBSD 5.3 by Matthew Dempsky.
                    147:     </li>
                    148:     <li>
                    149:         <strong>Static-PIE</strong>:
                    150:         Position-independent static binaries for /bin, /sbin and ramdisks.
                    151:         First released with OpenBSD 5.7.
                    152:     </li>
                    153:     <li>
                    154:         <strong>SROP</strong>
                    155:         (<a href="https://man.openbsd.org/sigreturn.2">sigreturn(2)</a>
                    156:         oriented programming) mitigation: Researched by
                    157:         <a href="http://www.cs.vu.nl/~herbertb/papers/srop_sp14.pdf">Eric Bosman</a>
                    158:         and Herbert Bos in 2014, implemented by Theo de Raadt in May 2016,
                    159:         enabled by default since OpenBSD 6.0.
                    160:     </li>
                    161:     <li>
                    162:         <strong>Library order randomization</strong>:
                    163:         In <a href="https://man.openbsd.org/rc.8">rc(8)</a>, re-link
                    164:         <code>libc.so</code>, <code>libcrypto</code>, and <code>ld.so</code>
                    165:         on startup, placing the objects in a random order.
                    166:         Theo de Raadt and Robert Peichaer, May 2016,
                    167:         enabled by default since OpenBSD 6.0 and 6.2.
                    168:     </li>
                    169:     <li>
                    170:         Kernel-assisted lazy-binding for W^X safety in multi-threaded programs.
                    171:         A new syscall <a href="https://man.openbsd.org/kbind.2">kbind(2)</a>
                    172:         permits lazy-binding to be W^X safe in multi-threaded programs.
                    173:         Implemented for OpenBSD 5.9 by Philip Guenther in July 2015.
                    174:     </li>
                    175:     <li>
                    176:         Process layouts in memory tightened to remove execute permission from
                    177:         all segmented, non-instruction data and to remove write permission from
                    178:         data that is only modified during loading and relocation.
                    179:         By combining the RELRO (Read-Only after Relocation) design from the
                    180:         GNU project with the original ASLR work from OpenBSD 3.3 and
                    181:         strict lazy-binding work from OpenBSD 5.9, this is applied to not
                    182:         just a subset of programs and libraries but rather to all programs
                    183:         and libraries.
                    184:         Implemented for OpenBSD 6.1 by Philip Guenther in August 2016.
                    185:     </li>
                    186:     <li>
                    187:         Use of <strong>fork+exec in privilege separated programs</strong>. The
                    188:         strategy is to give each process a fresh &amp; unique address space for
                    189:         ASLR, stack protector -- as protection against address space discovery attacks.
                    190:         Implemented first by
                    191:         Damien Miller (<a href="https://man.openbsd.org/sshd.8">sshd(8)</a> 2004),
                    192:         Claudio Jeker (<a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>, 2015),
                    193:         Eric Faurot (<a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>, 2016),
                    194:         Rafael Zalamena (various, 2016), and others.
                    195:     </li>
                    196:     <li>
                    197:         <strong>trapsleds</strong>:
                    198:         Reduction of incidental NOP instructions/sequences in the instruction
                    199:         stream which could be useful potentially for ROP attack methods to
                    200:         innaccurately target gadgets. These NOP sequences are converted into
                    201:         trap sequences where possible. Todd Mortimer and Theo de Raadt, June
                    202:         2017.
                    203:     </li>
                    204:     <li>
                    205:         <strong>Kernel relinking at boot</strong>:
                    206:         the .o files of the kernel are relinked in random order from a
                    207:         link-kit, before every reboot. This provides substantial interior
                    208:         randomization in the kernel's text and data segments for layout and
                    209:         relative branches/calls.  Basically a unique address space for each
                    210:         kernel boot, similar to the userland fork+exec model described above
                    211:         but for the kernel.  Theo de Raadt, June 2017.
                    212:     </li>
1.61    ! deraadt   213:     <li>
        !           214:        Rearranged i386/amd64 register allocator order in
        !           215:        <a href="https://man.openbsd.org/clang.1">clang(1)</a>
        !           216:        to reduce polymorphic RET instructions:
        !           217:        Todd Mortimer, November 20, 2017.
        !           218:     </li>
1.17      mlarkin   219: </ul>
1.1       schwarze  220:
1.59      job       221: <h3>Functions</h3>
1.1       schwarze  222:
                    223: <ul>
1.59      job       224:     <li>
                    225:         <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a>:
                    226:         David Mazieres, December 28, 1996, OpenBSD 2.1
                    227:     </li>
                    228:     <li>
                    229:         <a href="https://man.openbsd.org/bcrypt.3">bcrypt(3)</a>:
                    230:         Implemented by <a href="https://www.usenix.org/legacy/events/usenix99/provos/provos_html/node1.html">Niels Provos and David Mazieres</a>
                    231:         Imported February 13, 1997 and first released with OpenBSD 2.1.
                    232:     </li>
                    233:     <li>
                    234:         <a href="https://man.openbsd.org/strlcpy.3">strlcpy(3)</a>,
                    235:         <a href="https://man.openbsd.org/strlcat.3">strlcat(3)</a>:
                    236:         Todd Miller and Theo de Raadt, July 1, 1998, OpenBSD 2.4
                    237:     </li>
                    238:     <li>
                    239:         <a href="https://man.openbsd.org/strtonum.3">strtonum(3)</a>:
                    240:         Ted Unangst, Todd Miller, and Theo de Raadt, May 3, 2004, OpenBSD 3.6
                    241:     </li>
                    242:     <li>
                    243:         <a href="https://man.openbsd.org/imsg_init.3">imsg</a>:
                    244:         Message passing API, written by Henning Brauer.
                    245:         In libutil since May 26, 2010, OpenBSD 4.8;
                    246:         used by various daemons before that.
                    247:     </li>
                    248:     <li>
                    249:         <a href="https://man.openbsd.org/timingsafe_bcmp.3">timingsafe_bcmp(3)</a>:
                    250:         Damien Miller, July 13, 2010, OpenBSD 4.9
                    251:     </li>
                    252:     <li>
                    253:         <a href="https://man.openbsd.org/explicit_bzero.3">explicit_bzero(3)</a>:
                    254:         Ted Unangst and Matthew Dempsky, January 22, 2014, OpenBSD 5.5
                    255:     </li>
                    256:     <li>
                    257:         <a href="https://man.openbsd.org/ohash_init.3">ohash</a>:
                    258:         Written and maintained by Marc Espie.
                    259:         In libutil since May 12, 2014, OpenBSD 5.6;
                    260:         used by make(1) and m4(1) before that.
                    261:     </li>
                    262:     <li>
                    263:         <a href="https://man.openbsd.org/asr_run.3">asr</a>:
                    264:         Replacement resolver written and maintained by Eric Faurot.
                    265:         Imported April 14, 2012; activated on March 26, 2014, OpenBSD 5.6.
                    266:     </li>
                    267:     <li>
                    268:         <a href="https://man.openbsd.org/reallocarray.3">reallocarray(3)</a>:
                    269:         Theo de Raadt and Ted Unangst, April 22, 2014, OpenBSD 5.6
                    270:     </li>
                    271:     <li>
                    272:         <a href="https://man.openbsd.org/getentropy.2">getentropy(2)</a>:
                    273:         Matthew Dempsky and Theo de Raadt, June 13, 2014, OpenBSD 5.6
                    274:     </li>
                    275:     <li>
                    276:         <a href="https://man.openbsd.org/sendsyslog.2">sendsyslog(2)</a>:
                    277:         Theo de Raadt, July 10, 2014, OpenBSD 5.6
                    278:     </li>
                    279:     <li>
                    280:         <a href="https://man.openbsd.org/timingsafe_memcmp.3">timingsafe_memcmp(3)</a>:
                    281:         Matthew Dempsky, July 13, 2014, OpenBSD 5.6
                    282:     </li>
                    283:     <li>
                    284:         <a href="https://man.openbsd.org/pledge.2">pledge(2)</a>:
                    285:         Theo de Raadt, July 19, 2015, OpenBSD 5.9
                    286:     </li>
                    287:     <li>
                    288:         <a href="https://man.openbsd.org/getpwnam_shadow.3">getpwnam_shadow(3)</a>,
                    289:         <a href="https://man.openbsd.org/getpwuid_shadow.3">getpwuid_shadow(3)</a>:
                    290:         Ted Unangst and Theo de Raadt, November 18, 2015, OpenBSD 5.9
                    291:     </li>
                    292:     <li>
                    293:         <a href="https://man.openbsd.org/recallocarray.3">recallocarray(3)</a>:
                    294:         Otto Moerbeek, Joel Sing and Theo de Raadt, March 6, 2017, OpenBSD 6.1
                    295:     </li>
                    296:     <li>
                    297:         <a href="https://man.openbsd.org/freezero.3">freezero(3)</a>:
                    298:         Otto Moerbeek, April 10, 2017, OpenBSD 6.2
1.60      deraadt   299:     </li>
1.16      deraadt   300: </ul>
                    301:
1.59      job       302:
                    303: <h3>Programs and subsystems</h3>
1.16      deraadt   304:
                    305: <ul>
1.59      job       306:     <li>
                    307:         <a href="https://man.openbsd.org/ypbind.8">ypbind(8)</a>,
                    308:         <a href="https://man.openbsd.org/ypset.8">ypset(8)</a>,
                    309:         <a href="https://man.openbsd.org/ypcat.1">ypcat(1)</a>,
                    310:         <a href="https://man.openbsd.org/ypmatch.1">ypmatch(1)</a>,
                    311:         <a href="https://man.openbsd.org/ypwhich.1">ypwhich(1)</a>,
                    312:         and libc support: Started by Theo de Raadt.
                    313:         Imported April 26, 1993 and first released with NetBSD 0.9.
                    314:     </li>
                    315:     <li>
                    316:         <a href="https://man.openbsd.org/ypserv.8">ypserv(8)</a>:
                    317:         Started by Mats O. Jansson in 1994.
                    318:         Imported October 23, 1995 and first released with OpenBSD 2.0.
                    319:     </li>
                    320:     <li>
                    321:         <a href="https://man.openbsd.org/mopd.8">mopd(8)</a>:
                    322:         Started by Mats O. Jansson in 1993.
                    323:         Imported September 21, 1996 and first released with OpenBSD 2.0.
                    324:     </li>
                    325:     <li>
                    326:         <a href="anoncvs.html">AnonCVS</a>:
                    327:         Designed and implemented by Chuck Cranor and Theo de Raadt in 1995
                    328:         (<a href="papers/anoncvs-paper.pdf">paper</a>,
                    329:         <a href="papers/anoncvs-slides.pdf">slides</a>)
                    330:     </li>
                    331:     <li>
                    332:         <a href="https://man.openbsd.org/aucat.1">aucat(1)</a>:
                    333:         Started by Kenneth Stailey.
                    334:         Imported January 2, 1997 and first released with OpenBSD 2.1.
                    335:         Now maintained by Alexandre Ratchov.
                    336:     </li>
                    337:     <li>
                    338:         <a href="https://www.openssh.com/">OpenSSH</a>
                    339:         including <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>,
                    340:         <a href="https://man.openbsd.org/scp.1">scp(1)</a>,
                    341:         <a href="https://man.openbsd.org/sftp.1">sftp(1)</a>,
                    342:         <a href="https://man.openbsd.org/ssh-add.1">ssh-add(1)</a>,
                    343:         <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a>,
                    344:         <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>,
                    345:         <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>,
                    346:         <a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a>:
                    347:         Started by Aaron Campbell, Bob Beck, Dug Song, Markus Friedl,
                    348:         Niels Provos, and Theo de Raadt
                    349:         as a fork of SSH 1.2.12 by Tatu Ylonen.
                    350:         Imported September 26, 1999 and first released with OpenBSD 2.6.
                    351:         Now maintained by Markus Friedl, Damien Miller, Darren Tucker, and
                    352:         Theo de Raadt.
                    353:     </li>
                    354:     <li>
                    355:         <a href="https://man.openbsd.org/mg.1">mg(1)</a>:
                    356:         Started by Dave Conroy in November 1986.
                    357:         Imported February 25, 2000 and first released with OpenBSD 2.7.
                    358:         Now maintained by Mark Lumsden.
                    359:     </li>
                    360:     <li>
                    361:         <a href="https://man.openbsd.org/m4.1">m4(1)</a>:
                    362:         Originally implemented by Ozan Yigit and Richard A. O'Keefe for 4.3BSD-Reno.
                    363:         Considerably extended and maintained by Marc Espie since 1999.
                    364:     </li>
                    365:     <li>
                    366:         <a href="https://man.openbsd.org/pf.4">pf(4)</a>,
                    367:         <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>,
                    368:         <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a>,
                    369:         <a href="https://man.openbsd.org/authpf.8">authpf(8)</a>,
                    370:         <a href="https://man.openbsd.org/ftp-proxy.8">ftp-proxy(8)</a>:
                    371:         Started by Daniel Hartmeier as a replacement for the non-free ipf by
                    372:         Darren Reed. Imported June 24, 2001 and first released with OpenBSD
                    373:         3.0. Now maintained by Henning Brauer.
                    374:     </li>
                    375:     <li>
                    376:         <a href="https://man.openbsd.org/OpenBSD-5.9/systrace.4">systrace(4)</a>,
                    377:         <a href="https://man.openbsd.org/OpenBSD-5.9/systrace.1">systrace(1)</a>:
                    378:         Started by Niels Provos.
                    379:         Imported June 4, 2002 and first released with OpenBSD 3.2.
                    380:         Deleted after OpenBSD 5.9 because
                    381:         <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> is even better.
                    382:     </li>
                    383:     <li>
                    384:         <a href="https://man.openbsd.org/spamd.8">spamd(8)</a>:
                    385:         Written by Bob Beck. Imported December 21, 2002 and first released with
                    386:         OpenBSD 3.3.
                    387:     </li>
                    388:     <li>
                    389:         <a href="https://man.openbsd.org/dc.1">dc(1)</a>:
                    390:         Written and maintained by Otto Moerbeek.
                    391:         Imported September 19, 2003 and first released with OpenBSD 3.5.
                    392:     </li>
                    393:     <li>
                    394:         <a href="https://man.openbsd.org/bc.1">bc(1)</a>:
                    395:         Written and maintained by Otto Moerbeek.
                    396:         Imported September 25, 2003 and first released with OpenBSD 3.5.
                    397:     </li>
                    398:     <li>
                    399:         <a href="https://man.openbsd.org/sensorsd.8">sensorsd(8)</a>:
                    400:         Started by Henning Brauer.
                    401:         Imported September 24, 2003 and first released with OpenBSD 3.5.
                    402:         Reworked by Constantine A. Murenin.
                    403:     </li>
                    404:     <li>
                    405:         <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a>:
                    406:         Written and maintained by Marc Espie.
                    407:         Imported October 16, 2003 and first released with OpenBSD 3.5.
                    408:     </li>
                    409:     <li>
                    410:         <a href="https://man.openbsd.org/carp.4">carp(4)</a>:
                    411:         Written by Mickey Shalayeff, Markus Friedl, Marco Pfatschbacher,
                    412:         and Ryan McBride.
                    413:         Imported October 17, 2003 and first released with OpenBSD 3.5.
                    414:     </li>
                    415:     <li>
                    416:         <a href="http://www.openbgpd.org/">OpenBGPD</a>
                    417:         including <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>
                    418:         and <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a>:
                    419:         Written and maintained by Henning Brauer and Claudio Jeker,
                    420:         and also maintained by Peter Hessler.
                    421:         Imported December 17, 2003 and first released with OpenBSD 3.5.
                    422:     </li>
                    423:     <li>
                    424:         <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>:
                    425:         Started by Ted Lemon and Elliot Poger in 1996.
                    426:         Imported January 18, 2004 and first released with OpenBSD 3.5.
                    427:         Reworked by Henning Brauer.
                    428:         Now maintained by Kenneth Westerback.
                    429:     </li>
                    430:     <li>
                    431:         <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a>:
                    432:         Started by Ted Lemon in 1995.
                    433:         Imported April 13, 2004 and first released with OpenBSD 3.6.
                    434:         Reworked by Henning Brauer.
                    435:         Now maintained by Kenneth Westerback.
                    436:     </li>
                    437:     <li>
                    438:         <a href="https://man.openbsd.org/hotplugd.8">hotplugd(8)</a>:
                    439:         Started by Alexander Yurchenko.
                    440:         Imported May 30, 2004 and first released with OpenBSD 3.6.
                    441:     </li>
                    442:     <li>
                    443:         <a href="http://www.openntpd.org/">OpenNTPD</a>
                    444:         including <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a>
                    445:         and <a href="https://man.openbsd.org/ntpctl.8">ntpctl(8)</a>:
                    446:         Written and maintained by Henning Brauer.
                    447:         Imported May 31, 2004 and first released with OpenBSD 3.6.
                    448:         Portable version maintained by Brent Cook.
                    449:     </li>
                    450:     <li>
                    451:         <a href="https://man.openbsd.org/dpb.1">dpb(1)</a>:
                    452:         Started by Nikolay Sturm on August 10, 2004; first available for OpenBSD 3.6.
                    453:         Rewritten and maintained by Marc Espie since August 20, 2010.
                    454:     </li>
                    455:     <li>
                    456:         <a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a>,
                    457:         <a href="https://man.openbsd.org/ospfctl.8">ospfctl(8)</a>:
                    458:         Started by Esben Norby and Claudio Jeker.
                    459:         Imported January 28, 2005 and first released with OpenBSD 3.7.
                    460:     </li>
                    461:     <li>
                    462:         <a href="https://man.openbsd.org/ifstated.8">ifstated(8)</a>:
                    463:         Started by Marco Pfatschbacher and Ryan McBride.
                    464:         Imported January 23, 2004 and first released with OpenBSD 3.8.
                    465:     </li>
                    466:     <li>
                    467:         <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a>:
                    468:         Started by Marco Peereboom.
                    469:         Imported March 29, 2005 and first released with OpenBSD 3.8.
                    470:     </li>
                    471:     <li>
                    472:         <a href="https://man.openbsd.org/hostapd.8">hostapd(8)</a>:
                    473:         Written and maintained by Reyk Floeter.
                    474:         Imported May 26, 2005 and first released with OpenBSD 3.8.
                    475:     </li>
                    476:     <li>
                    477:         <a href="https://man.openbsd.org/watchdogd.8">watchdogd(8)</a>:
                    478:         Started by Marc Balmer.
                    479:         Imported August 8, 2005 and first released with OpenBSD 3.8.
                    480:     </li>
                    481:     <li>
                    482:         <a href="https://man.openbsd.org/sdiff.1">sdiff(1)</a>:
                    483:         Written by Ray Lai.
                    484:         Imported December 27, 2005 and first released with OpenBSD 3.9.
                    485:     </li>
                    486:     <li>
                    487:         <a href="https://man.openbsd.org/dvmrpd.8">dvmrpd(8)</a>,
                    488:         <a href="https://man.openbsd.org/dvmrpctl.8">dvmrpctl(8)</a>:
                    489:         Started by Esben Norby.
                    490:         Imported June 1, 2006 and first released with OpenBSD 4.0.
                    491:     </li>
                    492:     <li>
                    493:         <a href="https://man.openbsd.org/ripd.8">ripd(8)</a>,
                    494:         <a href="https://man.openbsd.org/ripctl.8">ripctl(8)</a>:
                    495:         Started by Michele Marchetto.
                    496:         Imported October 18, 2006 and first released with OpenBSD 4.1.
                    497:     </li>
                    498:     <li>
                    499:         <a href="https://man.openbsd.org/pkg-config.1">pkg-config(1)</a>:
                    500:         Started by Chris Kuethe and Marc Espie.
                    501:         Imported November 27, 2006 and first released with OpenBSD 4.1.
                    502:         Now maintained by Jasper Lievisse Adriaanse.
                    503:     </li>
                    504:     <li>
                    505:         <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>
                    506:         with <a href="https://man.openbsd.org/relayctl.8">relayctl(8)</a>:
                    507:         Started by Pierre-Yves Ritschard and Reyk Floeter.
                    508:         Imported December 16, 2006 and first released with OpenBSD 4.1.
                    509:         Now maintained by Reyk Floeter and Sebastian Benoit.<br/>
                    510:     </li>
                    511:     <li>
                    512:         <a href="https://man.openbsd.org/cwm.1">cwm(1)</a>:
                    513:         Started by <a href="http://monkey.org/~marius/cwm/README">Marius
                    514:             Aamodt Eriksen</A> in 2004.
                    515:         Imported April 27, 2007 and first released with OpenBSD 4.2.
                    516:         Now maintained by Okan Demirmen.
                    517:         <a href="https://github.com/chneukirchen/cwm">Portable version</a>
                    518:         maintained by Leah Neukirchen.
                    519:     </li>
                    520:     <li>
                    521:         <a href="https://man.openbsd.org/ospf6d.8">ospf6d(8)</a>,
                    522:         <a href="https://man.openbsd.org/ospf6ctl.8">ospf6ctl(8)</a>:
                    523:         Started by Esben Norby and Claudio Jeker.
                    524:         Imported October 8, 2007 and first released with OpenBSD 4.2.
                    525:     </li>
                    526:     <li>
                    527:         <a href="https://man.openbsd.org/libtool.1">libtool(1)</a>:
                    528:         Written by Steven Mestdagh and Marc Espie.
                    529:         Imported October 28, 2007 and first available for OpenBSD 4.3.
                    530:         Now maintained by Marc Espie, Jasper Lievisse Adriaanse,
                    531:         and Antoine Jacoutot.
                    532:     </li>
                    533:     <li>
                    534:         <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>,
                    535:         <a href="https://man.openbsd.org/snmpctl.8">snmpctl(8)</a>:
                    536:         Started by Reyk Floeter.
                    537:         Imported December 5, 2007 and first released with OpenBSD 4.3.
                    538:         Maintained by Reyk Floeter and Bret Lambert.
                    539:     </li>
                    540:     <li>
                    541:         <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a>:
                    542:         Written and maintained by Antoine Jacoutot,
                    543:         originally forked from mergemaster by Douglas Barton.
                    544:         Imported April 22, 2008, first released with OpenBSD 4.4.
                    545:     </li>
                    546:     <li>
                    547:         <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a>:
                    548:         Started by Pierre-Yves Ritschard.
                    549:         Imported June 26, 2008 and first released with OpenBSD 4.4.
                    550:     </li>
                    551:     <li>
                    552:         <a href="https://www.opensmtpd.org/">OpenSMTPD</a>
                    553:         including <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>,
                    554:         <a href="https://man.openbsd.org/smtpctl.8">smtpctl(8)</a>,
                    555:         <a href="https://man.openbsd.org/makemap.8">makemap(8)</a>:
                    556:         Started by Gilles Chehade.
                    557:         Imported November 1, 2008 and first released with OpenBSD 4.6.
                    558:         Now maintained by Gilles Chehade and Eric Faurot.
                    559:     </li>
                    560:     <li>
                    561:         <a href="http://tmux.github.io/">tmux</a>,
                    562:         <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>:
                    563:         Started in 2007 and maintained by Nicholas Marriott.
                    564:         Imported June 1, 2009, first released with OpenBSD 4.6.
                    565:     </li>
                    566:     <li>
                    567:         <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>,
                    568:         <a href="https://man.openbsd.org/ldpctl.8">ldpctl(8)</a>:
                    569:         Started by Michele Marchetto.
                    570:         Imported June 1, 2009 and first released with OpenBSD 4.6.
                    571:         Now maintained by Claudio Jeker.
                    572:     </li>
                    573:     <li>
                    574:         <a href="http://mdocml.bsd.lv/">mandoc</a>
                    575:         including <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>,
                    576:         <a href="https://man.openbsd.org/man.1">man(1)</a>,
                    577:         <a href="https://man.openbsd.org/apropos.1">apropos(1)</a>,
                    578:         <a href="https://man.openbsd.org/makewhatis.8">makewhatis(8)</a>,
                    579:         <a href="https://man.openbsd.org/mandoc/man8/man.cgi.8">man.cgi(8)</a>:
                    580:         Started by Kristaps Dzonsons in November 2008.
                    581:         Imported April 6, 2009, first released with OpenBSD 4.8.
                    582:         Now maintained by Ingo Schwarze.
                    583:     </li>
                    584:     <li>
                    585:         <a href="https://man.openbsd.org/ldapd.8">ldapd(8)</a>,
                    586:         <a href="https://man.openbsd.org/ldapctl.8">ldapctl(8)</a>:
                    587:         Written by Martin Hedenfalk.
                    588:         Imported May 31, 2010 and first released with OpenBSD 4.8.
                    589:     </li>
                    590:     <li>
                    591:         <a href="http://www.openiked.org/">OpenIKED</a>
                    592:         including <a href="https://man.openbsd.org/iked.8">iked(8)</a>
                    593:         and <a href="https://man.openbsd.org/ikectl.8">ikectl(8)</a>:
                    594:         Started by Reyk Floeter.
                    595:         Imported June 3, 2010 and first released with OpenBSD 4.8.
                    596:         Now maintained by Reyk Floeter and Mike Belopuhov.
                    597:     </li>
                    598:     <li>
                    599:         <a href="https://man.openbsd.org/iscsid.8">iscsid(8)</a>,
                    600:         <a href="https://man.openbsd.org/iscsictl.8">iscsictl(8)</a>:
                    601:         Written and maintained by Claudio Jeker.
                    602:         Imported September 24, 2010 and first released with OpenBSD 4.9.
                    603:     </li>
                    604:     <li>
                    605:         <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a>,
                    606:         <a href="https://man.openbsd.org/rc.subr.8">rc.subr(8)</a>:
                    607:         Written and maintained by Robert Nagy and Antoine Jacoutot.
                    608:         Imported October 26, 2010 and first released with OpenBSD 4.9.
                    609:     </li>
                    610:     <li>
                    611:         <a href="https://man.openbsd.org/tftpd.8">tftpd(8)</a>:
                    612:         Written and maintained by David Gwynne.
                    613:         Imported March 2, 2012 and first released with OpenBSD 5.2.
                    614:     </li>
                    615:     <li>
                    616:         <a href="https://man.openbsd.org/npppd.8">npppd(8)</a>,
                    617:         <a href="https://man.openbsd.org/npppctl.8">npppctl(8)</a>:
                    618:         Started by Internet Initiative Japan Inc.
                    619:         Imported January 11, 2010, first released with OpenBSD 5.3.
                    620:         Maintained by YASUOKA Masahiko.
                    621:     </li>
                    622:     <li>
                    623:         <a href="https://man.openbsd.org/ldomd.8">ldomd(8)</a>,
                    624:         <a href="https://man.openbsd.org/ldomctl.8">ldomctl(8)</a>:
                    625:         Written and maintained by Mark Kettenis.
                    626:         Imported October 26, 2012 and first released with OpenBSD 5.3.
                    627:     </li>
                    628:     <li>
                    629:         <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a>:
                    630:         Written and maintained by Alexandre Ratchov.
                    631:         Imported November 23, 2012 and first released with OpenBSD 5.3.
                    632:     </li>
                    633:     <li>
                    634:         <a href="https://man.openbsd.org/cu.1">cu(1)</a>:
                    635:         Written and maintained by Nicholas Marriott.
                    636:         Imported July 10, 2012 and first released with OpenBSD 5.4.
                    637:     </li>
                    638:     <li>
                    639:         <a href="https://man.openbsd.org/identd.8">identd(8)</a>:
                    640:         Written and maintained by David Gwynne.
                    641:         Imported March 18, 2013 and first released with OpenBSD 5.4.
                    642:     </li>
                    643:     <li>
                    644:         <a href="https://man.openbsd.org/slowcgi.8">slowcgi(8)</a>:
                    645:         Written and maintained by Florian Obser.
                    646:         Imported May 23, 2013 and first released with OpenBSD 5.4.
                    647:     </li>
                    648:     <li>
                    649:         <a href="https://man.openbsd.org/signify.1">signify(1)</a>:
                    650:         Written and maintained by <a href="http://www.tedunangst.com/flak/post/signify">Ted Unangst</a>.
                    651:         Imported December 31, 2013 and first released with OpenBSD 5.5.
                    652:     </li>
                    653:     <li>
                    654:         <a href="https://man.openbsd.org/htpasswd.1">htpasswd(1)</a>:
                    655:         Written and maintained by Florian Obser.
                    656:         Imported March 17, 2014 and first released with OpenBSD 5.6.
                    657:     </li>
                    658:     <li>
                    659:         <a href="https://www.libressl.org/">LibreSSL</a>:
                    660:         Started by Ted Unangst, Bob Beck, Joel Sing, Miod Vallat, Philip Guenther,
                    661:         and Theo de Raadt on April 13, 2014, as a fork of OpenSSL 1.0.1g.
                    662:         First released with OpenBSD 5.6.
                    663:         Portable version maintained by Brent Cook.
                    664:     </li>
                    665:     <li>
                    666:         <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>:
                    667:         Started by Reyk Floeter.
                    668:         Imported July 12, 2014 and first released with OpenBSD 5.6.
                    669:         Maintained by Reyk Floeter and Florian Obser.
                    670:     </li>
                    671:     <li>
                    672:         <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a>:
                    673:         Written and maintained by Antoine Jacoutot.
                    674:         Imported August 19, 2014 and first released with OpenBSD 5.7.
                    675:     </li>
                    676:     <li>
                    677:         <a href="https://man.openbsd.org/file.1">file(1)</a>:
                    678:         Rewritten from scratch and maintained by Nicholas Marriott.
                    679:         Imported April 24, 2015 and first released with OpenBSD 5.8.
                    680:     </li>
                    681:     <li>
                    682:         <a href="https://man.openbsd.org/doas.1">doas(1)</a>:
                    683:         Written and maintained by Ted Unangst.
                    684:         Imported July 16, 2015 and first released with OpenBSD 5.8.
                    685:     </li>
                    686:     <li>
                    687:         <a href="https://man.openbsd.org/radiusd.8">radiusd(8)</a>:
                    688:         Written and maintained by YASUOKA Masahiko.
                    689:         Imported July 21, 2015 and first released with OpenBSD 5.8.
                    690:     </li>
                    691:     <li>
                    692:         <a href="https://man.openbsd.org/eigrpd.8">eigrpd(8)</a>,
                    693:         <a href="https://man.openbsd.org/eigrpctl.8">eigrpctl(8)</a>:
                    694:         Written and maintained by Renato Westphal.
                    695:         Imported October 2, 2015 and first released with OpenBSD 5.9.
                    696:     </li>
                    697:     <li>
                    698:         <a href="https://man.openbsd.org/rebound.8">rebound(8)</a>:
                    699:         Written and maintained by Ted Unangst.
                    700:         Imported October 15, 2015 and first released with OpenBSD 5.9.
                    701:     </li>
                    702:     <li>
                    703:         <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>,
                    704:         <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>,
                    705:         <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a>:
                    706:         Written and maintained by Mike Larkin and Reyk Floeter.
                    707:         Imported November 13, 2015 and first released with OpenBSD 5.9.
                    708:     </li>
                    709:     <li>
                    710:         <a href="https://man.openbsd.org/pdisk.8">pdisk(8)</a>:
                    711:         Originally written by Eryk Vershen in 1996-1998,
                    712:         rewritten and maintained by Kenneth Westerback since January 11, 2016
                    713:         and first released with OpenBSD 5.9.
                    714:     </li>
                    715:     <li>
                    716:         <a href="https://man.openbsd.org/mknod.8">mknod(8)</a>:
                    717:         Original version from Version 6 AT&amp;T UNIX (1975),
                    718:         last rewritten by Marc Espie on March 5, 2016
                    719:         and first released with OpenBSD 6.0.
                    720:     </li>
                    721:     <li>
                    722:         <a href="https://man.openbsd.org/audioctl.1">audioctl(1)</a>:
                    723:         Originally written by Lennart Augustsson in 1997,
                    724:         rewritten and maintained by Alexandre Ratchov since June 21, 2016
                    725:         and first released with OpenBSD 6.0.
                    726:     </li>
                    727:     <li>
                    728:         <a href="https://man.openbsd.org/switchd.8">switchd(8)</a>,
                    729:         <a href="https://man.openbsd.org/switchctl.8">switchctl(8)</a>:
                    730:         Written and maintained by Reyk Floeter.
                    731:         Imported July 19, 2016; released with OpenBSD 6.1.
                    732:     </li>
                    733:     <li>
                    734:         <a href="https://man.openbsd.org/acme-client.1">acme-client(1)</a>:
                    735:         Written by Kristaps Dzonsons, imported August 31, 2016; released
                    736:         with OpenBSD 6.1.
                    737:     </li>
                    738:     <li>
                    739:         <a href="https://man.openbsd.org/syspatch.8">syspatch(8)</a>:
                    740:         Written and maintained by Antoine Jacoutot.
                    741:         Imported September 5, 2016; released with OpenBSD 6.1.
                    742:     </li>
                    743:     <li>
                    744:         <a href="https://man.openbsd.org/ping.8">ping(8)</a>:
                    745:         Restructured to include IPv6 functionality and maintained by Florian Obser.
                    746:         The separate
                    747:         <a href="https://man.openbsd.org/OpenBSD-6.0/ping6.8">ping6(8)</a>
                    748:         was superseded on September 17, 2016,
                    749:         and the new, combined version was released with OpenBSD 6.1.
                    750:     </li>
                    751:     <li>
                    752:         <a href="https://man.openbsd.org/xenodm.1">xenodm(1)</a>:
                    753:         Cleaned-up fork of
                    754:         <a href="https://man.openbsd.org/OpenBSD-6.0/xdm.1">xdm(1)</a>
                    755:         maintained by Matthieu Herrb.
                    756:         Imported October 23, 2016; released with OpenBSD 6.1.
                    757:     </li>
                    758:     <li>
                    759:         <a href="https://man.openbsd.org/ocspcheck.8">ocspcheck(8)</a>:
                    760:         Written and maintained by Bob Beck.
                    761:         Imported January 24, 2017; released with OpenBSD 6.1.
                    762:     </li>
                    763:     <li>
                    764:         <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a>:
                    765:         Written and maintained by Florian Obser.
                    766:         Imported March 18, 2017; released with OpenBSD 6.2.
                    767:     </li>
1.1       schwarze  768: </ul>
                    769:
1.11      deraadt   770: <h3>Projects maintained by OpenBSD developers outside OpenBSD</h3>
1.1       schwarze  771:
                    772: <ul>
1.59      job       773:     <li>
                    774:         <a href="http://www.sudo.ws/">sudo</a>:
                    775:         Started by Bob Coggeshall and Cliff Spencer around 1980.
                    776:         Imported November 18, 1999, first released with OpenBSD 2.7.
                    777:         Now maintained by Todd Miller.
                    778:     </li>
                    779:     <li>
                    780:         <a href="http://bulabula.org/femail/">femail</a>:
                    781:         Written and maintained by Henning Brauer.
                    782:         Started in 2005, port available since September 22, 2005.
                    783:     </li>
                    784:     <li>
                    785:         <a href="http://www.midish.org/">midish</a>:
                    786:         Written and maintained by Alexandre Ratchov.
                    787:         Started in 2003, port available since November 4, 2005.
                    788:     </li>
                    789:     <li>
                    790:         <a href="https://github.com/nicm/fdm">fdm</a>:
                    791:         Written and maintained by Nicholas Marriott.
                    792:         Started in 2006, port available since January 18, 2007.
                    793:     </li>
                    794:     <li>
                    795:         <a href="https://github.com/ajacoutot/toad/">toad</a>:
                    796:         Written and maintained by Antoine Jacoutot.
                    797:         Started in 2013, port available since October 8, 2013.
                    798:     </li>
                    799:     <li>
                    800:         <a href="http://jasperla.github.io/portroach/">portroach</a>:
                    801:         Written and maintained by Jasper Lievisse Adriaanse,
                    802:         originally forked from FreeBSD's portscout.
                    803:         Started in 2014, port available since September 5, 2014.
                    804:     </li>
                    805:     <li>
                    806:         <a href="https://github.com/yasuoka/cvs2gitdump">cvs2gitdump</a>:
                    807:         Written and maintained by YASUOKA Masahiko.
                    808:         Started in 2012, port available since August 1, 2016.
                    809:     </li>
1.1       schwarze  810: </ul>
                    811:
                    812: </body>
                    813: </html>