[BACK]Return to innovations.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/innovations.html, Revision 1.63

1.1       schwarze    1: <!DOCTYPE html>
1.34      schwarze    2: <html lang="en">
1.1       schwarze    3: <head>
                      4: <meta charset="UTF-8"/>
1.33      tj          5: <title>OpenBSD: Innovations</title>
1.31      deraadt     6: <meta name="viewport" content="width=device-width, initial-scale=1">
                      7: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.35      tb          8: <link rel="canonical" href="https://www.openbsd.org/innovations.html">
1.1       schwarze    9: </head>
                     10:
1.31      deraadt    11: <body bgcolor= "#ffffff" text= "#000000">
                     12:
                     13: <h2>
1.59      job        14:     <a href="index.html">
                     15:         <i><font color="#0000ff">Open</font></i><font color="#000084">BSD</font></a>
                     16:     <font color="#e00000">Innovations</font>
1.32      tj         17: </h2>
1.31      deraadt    18: <hr>
1.32      tj         19: <p>
1.59      job        20:     This is a list of software and ideas developed or maintained by the OpenBSD
                     21:     project, sorted in order of approximate introduction. Some of them are
                     22:     explained in detail in our <a href="events.html">research papers</a>.
                     23: </p>
1.32      tj         24: <hr>
1.1       schwarze   25:
1.59      job        26: <h3>Concepts</h3>
1.1       schwarze   27:
                     28: <ul>
1.59      job        29:     <li>
                     30:         <a href="https://man.openbsd.org/ipsec.4">ipsec(4)</a>:
                     31:         Started by John Ioannidis, Angelos D. Keromytis, Niels Provos, and
                     32:         Niklas Hallqvist, imported February 20, 1997.  OpenBSD was the first
                     33:         free operating system to provide an IPSec stack.
                     34:     </li>
                     35:     <li>
                     36:         <a href="https://man.openbsd.org/inet6.4">inet6(4)</a>:
                     37:         First complete integration and adoption of IPv6 led by
                     38:         "Itojun" (Dr. Junichiro Hagino) [WIDE/KAME], Craig Metz [NRL], and
                     39:         Angelos D. Keromytis starting Jan 6, 1999.
                     40:         Almost fully operational Jun 6, 1999 during the
                     41:         <a href="hackathons.html">first OpenBSD hackathon</a>.
                     42:         OpenBSD 2.7.
                     43:     </li>
                     44:     <li>
                     45:         <strong>Privilege separation</strong>:
                     46:         First implemented by
                     47:         <a href="http://www.citi.umich.edu/u/provos/ssh/privsep.html">Niels Provos</a>
                     48:         and Markus Friedl in OpenSSH in March 2002, released with OpenBSD 3.2.
                     49:         The concept is now used in many OpenBSD programs, for example
                     50:         <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>,
                     51:         <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>,
                     52:         <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a>,
                     53:         <a href="https://man.openbsd.org/dvmrpd.8">dvmrpd(8)</a>,
                     54:         <a href="https://man.openbsd.org/eigrpd.8">eigrpd(8)</a>,
                     55:         <a href="https://man.openbsd.org/file.1">file(1)</a>,
                     56:         <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>,
                     57:         <a href="https://man.openbsd.org/iked.8">iked(8)</a>,
                     58:         <a href="https://man.openbsd.org/ldapd.8">ldapd(8)</a>,
                     59:         <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>,
                     60:         <a href="https://man.openbsd.org/mountd.8">mountd(8)</a>,
                     61:         <a href="https://man.openbsd.org/npppd.8">npppd(8)</a>,
                     62:         <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a>,
                     63:         <a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a>,
                     64:         <a href="https://man.openbsd.org/ospf6d.8">ospf6d(8)</a>,
                     65:         <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a>,
                     66:         <a href="https://man.openbsd.org/radiusd.8">radiusd(8)</a>,
                     67:         <a href="https://man.openbsd.org/man8/relayd.8">relayd(8)</a>,
                     68:         <a href="https://man.openbsd.org/ripd.8">ripd(8)</a>,
                     69:         <a href="https://man.openbsd.org/script.1">script(1)</a>,
                     70:         <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>,
                     71:         <a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a>,
                     72:         <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>,
                     73:         <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>,
                     74:         <a href="https://man.openbsd.org/xconsole.1">xconsole(1)</a>,
                     75:         <a href="https://man.openbsd.org/xdm.1">xdm(1)</a>,
                     76:         <a href="https://man.openbsd.org/Xserver.1">Xserver(1)</a>,
                     77:         <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a>,
                     78:         <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a>,
                     79:         etc.
                     80:     </li>
                     81:     <li>
                     82:         <strong>Privilege revocation</strong>:
                     83:         Related to the work on privilege separation, some programs were refactored
                     84:         to drop privileges while holding onto a tricky resource such as a raw socket,
                     85:         reserved port, or modification-locked bpf(4) descriptor,
                     86:         for example
                     87:         <a href="https://man.openbsd.org/ping.8">ping(8)</a>,
                     88:         <a href="https://man.openbsd.org/traceroute.8">traceroute(8)</a>,
                     89:         etc.
                     90:     </li>
                     91:     <li>
                     92:         <strong>Stack protector</strong>:
                     93:         Developed since 2001 as "propolice" by Hiroaki Etoh. Integrated, and
                     94:         implemented for additional hardware platforms, by Miod Vallat and Theo
                     95:         de Raadt.  OpenBSD 3.3 was the first operating system to enable it
                     96:         systemwide by default.
                     97:     </li>
                     98:     <li>
                     99:         <strong>W^X</strong>:
                    100:         First used for sparc, sparc64, alpha, and hppa in OpenBSD 3.3.
                    101:         Strictly enforced by default since OpenBSD 6.0: a program can only
                    102:         violate it if the executable is marked with <code>PT_OPENBSD_WXNEEDED</code>
                    103:         and it is located on a filesystem mounted with the <code>wxallowed</code>
                    104:         <a href="https://man.openbsd.org/mount.8">mount(8)</a> option.
                    105:     </li>
                    106:     <li>
                    107:         <strong>GOT and PLT protection</strong> by ld.so:
                    108:         first done as part of the W^X work in OpenBSD 3.3, by Dale Rahn and
                    109:         Theo de Raadt. The GOT and PLT regions are read-only outside of ld.so
                    110:         itself. Extended to the .init/.fini sections (constructors and
                    111:         destructors) in OpenBSD 3.4.
                    112:     </li>
                    113:     <li>
                    114:         <strong>ASLR</strong>:
                    115:         OpenBSD 3.4 was the first widely used operating system to
                    116:         provide it by default.
                    117:     </li>
                    118:     <li>
                    119:         <a href="https://man.openbsd.org/gcc-local.1">gcc-local(1)</a>
                    120:         __attribute__((__bounded__)) static analysis annotation
                    121:         and checking mechanism:
                    122:         Started by Anil Madhavapeddy on June 26, 2003
                    123:         and ported to GCC 4 by Nicholas Marriott.
                    124:         First released with OpenBSD 3.4.
                    125:     </li>
                    126:     <li>
                    127:         <a href="https://man.openbsd.org/malloc.3">malloc(3)</a>
                    128:         randomization implemented by Thierry Deval. Guard pages and randomized (delayed) free added by Ted Unangst.
                    129:         Reimplemented by <a href="papers/eurobsdcon2009/otto-malloc.pdf">Otto Moerbeek</a>
                    130:         for OpenBSD 4.4.
                    131:     </li>
                    132:     <li>
                    133:         <strong>PIE</strong>:
                    134:         OpenBSD 5.3 was the first widely used operating system to enable it
                    135:         globally by default, on seven hardware platforms.
                    136:     </li>
                    137:     <li>
                    138:         <strong>Random-data memory</strong>:
                    139:         the ability to specify that a variable should be initialized at load
                    140:         time with random byte values was implemented in OpenBSD 5.3 by Matthew
                    141:         Dempsky.
                    142:     </li>
                    143:     <li>
                    144:         <strong>Stack protector per shared object</strong>:
                    145:         using the random-data memory feature, each shared object was given its
                    146:         own stack protector cookie in OpenBSD 5.3 by Matthew Dempsky.
                    147:     </li>
                    148:     <li>
                    149:         <strong>Static-PIE</strong>:
                    150:         Position-independent static binaries for /bin, /sbin and ramdisks.
                    151:         First released with OpenBSD 5.7.
                    152:     </li>
                    153:     <li>
                    154:         <strong>SROP</strong>
                    155:         (<a href="https://man.openbsd.org/sigreturn.2">sigreturn(2)</a>
                    156:         oriented programming) mitigation: Researched by
                    157:         <a href="http://www.cs.vu.nl/~herbertb/papers/srop_sp14.pdf">Eric Bosman</a>
                    158:         and Herbert Bos in 2014, implemented by Theo de Raadt in May 2016,
                    159:         enabled by default since OpenBSD 6.0.
                    160:     </li>
                    161:     <li>
                    162:         <strong>Library order randomization</strong>:
                    163:         In <a href="https://man.openbsd.org/rc.8">rc(8)</a>, re-link
                    164:         <code>libc.so</code>, <code>libcrypto</code>, and <code>ld.so</code>
                    165:         on startup, placing the objects in a random order.
                    166:         Theo de Raadt and Robert Peichaer, May 2016,
                    167:         enabled by default since OpenBSD 6.0 and 6.2.
                    168:     </li>
                    169:     <li>
                    170:         Kernel-assisted lazy-binding for W^X safety in multi-threaded programs.
                    171:         A new syscall <a href="https://man.openbsd.org/kbind.2">kbind(2)</a>
                    172:         permits lazy-binding to be W^X safe in multi-threaded programs.
                    173:         Implemented for OpenBSD 5.9 by Philip Guenther in July 2015.
                    174:     </li>
                    175:     <li>
                    176:         Process layouts in memory tightened to remove execute permission from
                    177:         all segmented, non-instruction data and to remove write permission from
                    178:         data that is only modified during loading and relocation.
                    179:         By combining the RELRO (Read-Only after Relocation) design from the
                    180:         GNU project with the original ASLR work from OpenBSD 3.3 and
                    181:         strict lazy-binding work from OpenBSD 5.9, this is applied to not
                    182:         just a subset of programs and libraries but rather to all programs
                    183:         and libraries.
                    184:         Implemented for OpenBSD 6.1 by Philip Guenther in August 2016.
                    185:     </li>
                    186:     <li>
                    187:         Use of <strong>fork+exec in privilege separated programs</strong>. The
                    188:         strategy is to give each process a fresh &amp; unique address space for
                    189:         ASLR, stack protector -- as protection against address space discovery attacks.
                    190:         Implemented first by
                    191:         Damien Miller (<a href="https://man.openbsd.org/sshd.8">sshd(8)</a> 2004),
                    192:         Claudio Jeker (<a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>, 2015),
                    193:         Eric Faurot (<a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>, 2016),
                    194:         Rafael Zalamena (various, 2016), and others.
                    195:     </li>
                    196:     <li>
                    197:         <strong>trapsleds</strong>:
                    198:         Reduction of incidental NOP instructions/sequences in the instruction
                    199:         stream which could be useful potentially for ROP attack methods to
                    200:         innaccurately target gadgets. These NOP sequences are converted into
                    201:         trap sequences where possible. Todd Mortimer and Theo de Raadt, June
                    202:         2017.
                    203:     </li>
                    204:     <li>
                    205:         <strong>Kernel relinking at boot</strong>:
                    206:         the .o files of the kernel are relinked in random order from a
                    207:         link-kit, before every reboot. This provides substantial interior
                    208:         randomization in the kernel's text and data segments for layout and
                    209:         relative branches/calls.  Basically a unique address space for each
                    210:         kernel boot, similar to the userland fork+exec model described above
                    211:         but for the kernel.  Theo de Raadt, June 2017.
                    212:     </li>
1.61      deraadt   213:     <li>
                    214:        Rearranged i386/amd64 register allocator order in
                    215:        <a href="https://man.openbsd.org/clang.1">clang(1)</a>
                    216:        to reduce polymorphic RET instructions:
                    217:        Todd Mortimer, November 20, 2017.
                    218:     </li>
1.17      mlarkin   219: </ul>
1.1       schwarze  220:
1.59      job       221: <h3>Functions</h3>
1.1       schwarze  222:
                    223: <ul>
1.59      job       224:     <li>
1.62      tj        225:         <a href="https://man.openbsd.org/issetugid.2">issetugid(2)</a>:
                    226:         Theo de Raadt, August 25, 1996, OpenBSD 2.0
                    227:     </li>
1.63    ! schwarze  228:     <li>
1.59      job       229:         <a href="https://man.openbsd.org/arc4random.3">arc4random(3)</a>:
                    230:         David Mazieres, December 28, 1996, OpenBSD 2.1
                    231:     </li>
                    232:     <li>
                    233:         <a href="https://man.openbsd.org/bcrypt.3">bcrypt(3)</a>:
                    234:         Implemented by <a href="https://www.usenix.org/legacy/events/usenix99/provos/provos_html/node1.html">Niels Provos and David Mazieres</a>
                    235:         Imported February 13, 1997 and first released with OpenBSD 2.1.
                    236:     </li>
                    237:     <li>
                    238:         <a href="https://man.openbsd.org/strlcpy.3">strlcpy(3)</a>,
                    239:         <a href="https://man.openbsd.org/strlcat.3">strlcat(3)</a>:
                    240:         Todd Miller and Theo de Raadt, July 1, 1998, OpenBSD 2.4
                    241:     </li>
                    242:     <li>
                    243:         <a href="https://man.openbsd.org/strtonum.3">strtonum(3)</a>:
                    244:         Ted Unangst, Todd Miller, and Theo de Raadt, May 3, 2004, OpenBSD 3.6
                    245:     </li>
                    246:     <li>
                    247:         <a href="https://man.openbsd.org/imsg_init.3">imsg</a>:
                    248:         Message passing API, written by Henning Brauer.
                    249:         In libutil since May 26, 2010, OpenBSD 4.8;
                    250:         used by various daemons before that.
                    251:     </li>
                    252:     <li>
                    253:         <a href="https://man.openbsd.org/timingsafe_bcmp.3">timingsafe_bcmp(3)</a>:
                    254:         Damien Miller, July 13, 2010, OpenBSD 4.9
                    255:     </li>
                    256:     <li>
                    257:         <a href="https://man.openbsd.org/explicit_bzero.3">explicit_bzero(3)</a>:
                    258:         Ted Unangst and Matthew Dempsky, January 22, 2014, OpenBSD 5.5
                    259:     </li>
                    260:     <li>
                    261:         <a href="https://man.openbsd.org/ohash_init.3">ohash</a>:
                    262:         Written and maintained by Marc Espie.
                    263:         In libutil since May 12, 2014, OpenBSD 5.6;
                    264:         used by make(1) and m4(1) before that.
                    265:     </li>
                    266:     <li>
                    267:         <a href="https://man.openbsd.org/asr_run.3">asr</a>:
                    268:         Replacement resolver written and maintained by Eric Faurot.
                    269:         Imported April 14, 2012; activated on March 26, 2014, OpenBSD 5.6.
                    270:     </li>
                    271:     <li>
                    272:         <a href="https://man.openbsd.org/reallocarray.3">reallocarray(3)</a>:
                    273:         Theo de Raadt and Ted Unangst, April 22, 2014, OpenBSD 5.6
                    274:     </li>
                    275:     <li>
                    276:         <a href="https://man.openbsd.org/getentropy.2">getentropy(2)</a>:
                    277:         Matthew Dempsky and Theo de Raadt, June 13, 2014, OpenBSD 5.6
                    278:     </li>
                    279:     <li>
                    280:         <a href="https://man.openbsd.org/sendsyslog.2">sendsyslog(2)</a>:
                    281:         Theo de Raadt, July 10, 2014, OpenBSD 5.6
                    282:     </li>
                    283:     <li>
                    284:         <a href="https://man.openbsd.org/timingsafe_memcmp.3">timingsafe_memcmp(3)</a>:
                    285:         Matthew Dempsky, July 13, 2014, OpenBSD 5.6
                    286:     </li>
                    287:     <li>
                    288:         <a href="https://man.openbsd.org/pledge.2">pledge(2)</a>:
                    289:         Theo de Raadt, July 19, 2015, OpenBSD 5.9
                    290:     </li>
                    291:     <li>
                    292:         <a href="https://man.openbsd.org/getpwnam_shadow.3">getpwnam_shadow(3)</a>,
                    293:         <a href="https://man.openbsd.org/getpwuid_shadow.3">getpwuid_shadow(3)</a>:
                    294:         Ted Unangst and Theo de Raadt, November 18, 2015, OpenBSD 5.9
                    295:     </li>
                    296:     <li>
                    297:         <a href="https://man.openbsd.org/recallocarray.3">recallocarray(3)</a>:
                    298:         Otto Moerbeek, Joel Sing and Theo de Raadt, March 6, 2017, OpenBSD 6.1
                    299:     </li>
                    300:     <li>
                    301:         <a href="https://man.openbsd.org/freezero.3">freezero(3)</a>:
                    302:         Otto Moerbeek, April 10, 2017, OpenBSD 6.2
1.60      deraadt   303:     </li>
1.16      deraadt   304: </ul>
                    305:
1.59      job       306:
                    307: <h3>Programs and subsystems</h3>
1.16      deraadt   308:
                    309: <ul>
1.59      job       310:     <li>
                    311:         <a href="https://man.openbsd.org/ypbind.8">ypbind(8)</a>,
                    312:         <a href="https://man.openbsd.org/ypset.8">ypset(8)</a>,
                    313:         <a href="https://man.openbsd.org/ypcat.1">ypcat(1)</a>,
                    314:         <a href="https://man.openbsd.org/ypmatch.1">ypmatch(1)</a>,
                    315:         <a href="https://man.openbsd.org/ypwhich.1">ypwhich(1)</a>,
                    316:         and libc support: Started by Theo de Raadt.
                    317:         Imported April 26, 1993 and first released with NetBSD 0.9.
                    318:     </li>
                    319:     <li>
                    320:         <a href="https://man.openbsd.org/ypserv.8">ypserv(8)</a>:
                    321:         Started by Mats O. Jansson in 1994.
                    322:         Imported October 23, 1995 and first released with OpenBSD 2.0.
                    323:     </li>
                    324:     <li>
                    325:         <a href="https://man.openbsd.org/mopd.8">mopd(8)</a>:
                    326:         Started by Mats O. Jansson in 1993.
                    327:         Imported September 21, 1996 and first released with OpenBSD 2.0.
                    328:     </li>
                    329:     <li>
                    330:         <a href="anoncvs.html">AnonCVS</a>:
                    331:         Designed and implemented by Chuck Cranor and Theo de Raadt in 1995
                    332:         (<a href="papers/anoncvs-paper.pdf">paper</a>,
                    333:         <a href="papers/anoncvs-slides.pdf">slides</a>)
                    334:     </li>
                    335:     <li>
                    336:         <a href="https://man.openbsd.org/aucat.1">aucat(1)</a>:
                    337:         Started by Kenneth Stailey.
                    338:         Imported January 2, 1997 and first released with OpenBSD 2.1.
                    339:         Now maintained by Alexandre Ratchov.
                    340:     </li>
                    341:     <li>
                    342:         <a href="https://www.openssh.com/">OpenSSH</a>
                    343:         including <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>,
                    344:         <a href="https://man.openbsd.org/scp.1">scp(1)</a>,
                    345:         <a href="https://man.openbsd.org/sftp.1">sftp(1)</a>,
                    346:         <a href="https://man.openbsd.org/ssh-add.1">ssh-add(1)</a>,
                    347:         <a href="https://man.openbsd.org/ssh-agent.1">ssh-agent(1)</a>,
                    348:         <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>,
                    349:         <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>,
                    350:         <a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a>:
                    351:         Started by Aaron Campbell, Bob Beck, Dug Song, Markus Friedl,
                    352:         Niels Provos, and Theo de Raadt
                    353:         as a fork of SSH 1.2.12 by Tatu Ylonen.
                    354:         Imported September 26, 1999 and first released with OpenBSD 2.6.
                    355:         Now maintained by Markus Friedl, Damien Miller, Darren Tucker, and
                    356:         Theo de Raadt.
                    357:     </li>
                    358:     <li>
                    359:         <a href="https://man.openbsd.org/mg.1">mg(1)</a>:
                    360:         Started by Dave Conroy in November 1986.
                    361:         Imported February 25, 2000 and first released with OpenBSD 2.7.
                    362:         Now maintained by Mark Lumsden.
                    363:     </li>
                    364:     <li>
                    365:         <a href="https://man.openbsd.org/m4.1">m4(1)</a>:
                    366:         Originally implemented by Ozan Yigit and Richard A. O'Keefe for 4.3BSD-Reno.
                    367:         Considerably extended and maintained by Marc Espie since 1999.
                    368:     </li>
                    369:     <li>
                    370:         <a href="https://man.openbsd.org/pf.4">pf(4)</a>,
                    371:         <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>,
                    372:         <a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a>,
                    373:         <a href="https://man.openbsd.org/authpf.8">authpf(8)</a>,
                    374:         <a href="https://man.openbsd.org/ftp-proxy.8">ftp-proxy(8)</a>:
                    375:         Started by Daniel Hartmeier as a replacement for the non-free ipf by
                    376:         Darren Reed. Imported June 24, 2001 and first released with OpenBSD
                    377:         3.0. Now maintained by Henning Brauer.
                    378:     </li>
                    379:     <li>
                    380:         <a href="https://man.openbsd.org/OpenBSD-5.9/systrace.4">systrace(4)</a>,
                    381:         <a href="https://man.openbsd.org/OpenBSD-5.9/systrace.1">systrace(1)</a>:
                    382:         Started by Niels Provos.
                    383:         Imported June 4, 2002 and first released with OpenBSD 3.2.
                    384:         Deleted after OpenBSD 5.9 because
                    385:         <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> is even better.
                    386:     </li>
                    387:     <li>
                    388:         <a href="https://man.openbsd.org/spamd.8">spamd(8)</a>:
                    389:         Written by Bob Beck. Imported December 21, 2002 and first released with
                    390:         OpenBSD 3.3.
                    391:     </li>
                    392:     <li>
                    393:         <a href="https://man.openbsd.org/dc.1">dc(1)</a>:
                    394:         Written and maintained by Otto Moerbeek.
                    395:         Imported September 19, 2003 and first released with OpenBSD 3.5.
                    396:     </li>
                    397:     <li>
                    398:         <a href="https://man.openbsd.org/bc.1">bc(1)</a>:
                    399:         Written and maintained by Otto Moerbeek.
                    400:         Imported September 25, 2003 and first released with OpenBSD 3.5.
                    401:     </li>
                    402:     <li>
                    403:         <a href="https://man.openbsd.org/sensorsd.8">sensorsd(8)</a>:
                    404:         Started by Henning Brauer.
                    405:         Imported September 24, 2003 and first released with OpenBSD 3.5.
                    406:         Reworked by Constantine A. Murenin.
                    407:     </li>
                    408:     <li>
                    409:         <a href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a>:
                    410:         Written and maintained by Marc Espie.
                    411:         Imported October 16, 2003 and first released with OpenBSD 3.5.
                    412:     </li>
                    413:     <li>
                    414:         <a href="https://man.openbsd.org/carp.4">carp(4)</a>:
                    415:         Written by Mickey Shalayeff, Markus Friedl, Marco Pfatschbacher,
                    416:         and Ryan McBride.
                    417:         Imported October 17, 2003 and first released with OpenBSD 3.5.
                    418:     </li>
                    419:     <li>
                    420:         <a href="http://www.openbgpd.org/">OpenBGPD</a>
                    421:         including <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>
                    422:         and <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a>:
                    423:         Written and maintained by Henning Brauer and Claudio Jeker,
                    424:         and also maintained by Peter Hessler.
                    425:         Imported December 17, 2003 and first released with OpenBSD 3.5.
                    426:     </li>
                    427:     <li>
                    428:         <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>:
                    429:         Started by Ted Lemon and Elliot Poger in 1996.
                    430:         Imported January 18, 2004 and first released with OpenBSD 3.5.
                    431:         Reworked by Henning Brauer.
                    432:         Now maintained by Kenneth Westerback.
                    433:     </li>
                    434:     <li>
                    435:         <a href="https://man.openbsd.org/dhcpd.8">dhcpd(8)</a>:
                    436:         Started by Ted Lemon in 1995.
                    437:         Imported April 13, 2004 and first released with OpenBSD 3.6.
                    438:         Reworked by Henning Brauer.
                    439:         Now maintained by Kenneth Westerback.
                    440:     </li>
                    441:     <li>
                    442:         <a href="https://man.openbsd.org/hotplugd.8">hotplugd(8)</a>:
                    443:         Started by Alexander Yurchenko.
                    444:         Imported May 30, 2004 and first released with OpenBSD 3.6.
                    445:     </li>
                    446:     <li>
                    447:         <a href="http://www.openntpd.org/">OpenNTPD</a>
                    448:         including <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a>
                    449:         and <a href="https://man.openbsd.org/ntpctl.8">ntpctl(8)</a>:
                    450:         Written and maintained by Henning Brauer.
                    451:         Imported May 31, 2004 and first released with OpenBSD 3.6.
                    452:         Portable version maintained by Brent Cook.
                    453:     </li>
                    454:     <li>
                    455:         <a href="https://man.openbsd.org/dpb.1">dpb(1)</a>:
                    456:         Started by Nikolay Sturm on August 10, 2004; first available for OpenBSD 3.6.
                    457:         Rewritten and maintained by Marc Espie since August 20, 2010.
                    458:     </li>
                    459:     <li>
                    460:         <a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a>,
                    461:         <a href="https://man.openbsd.org/ospfctl.8">ospfctl(8)</a>:
                    462:         Started by Esben Norby and Claudio Jeker.
                    463:         Imported January 28, 2005 and first released with OpenBSD 3.7.
                    464:     </li>
                    465:     <li>
                    466:         <a href="https://man.openbsd.org/ifstated.8">ifstated(8)</a>:
                    467:         Started by Marco Pfatschbacher and Ryan McBride.
                    468:         Imported January 23, 2004 and first released with OpenBSD 3.8.
                    469:     </li>
                    470:     <li>
                    471:         <a href="https://man.openbsd.org/bioctl.8">bioctl(8)</a>:
                    472:         Started by Marco Peereboom.
                    473:         Imported March 29, 2005 and first released with OpenBSD 3.8.
                    474:     </li>
                    475:     <li>
                    476:         <a href="https://man.openbsd.org/hostapd.8">hostapd(8)</a>:
                    477:         Written and maintained by Reyk Floeter.
                    478:         Imported May 26, 2005 and first released with OpenBSD 3.8.
                    479:     </li>
                    480:     <li>
                    481:         <a href="https://man.openbsd.org/watchdogd.8">watchdogd(8)</a>:
                    482:         Started by Marc Balmer.
                    483:         Imported August 8, 2005 and first released with OpenBSD 3.8.
                    484:     </li>
                    485:     <li>
                    486:         <a href="https://man.openbsd.org/sdiff.1">sdiff(1)</a>:
                    487:         Written by Ray Lai.
                    488:         Imported December 27, 2005 and first released with OpenBSD 3.9.
                    489:     </li>
                    490:     <li>
                    491:         <a href="https://man.openbsd.org/dvmrpd.8">dvmrpd(8)</a>,
                    492:         <a href="https://man.openbsd.org/dvmrpctl.8">dvmrpctl(8)</a>:
                    493:         Started by Esben Norby.
                    494:         Imported June 1, 2006 and first released with OpenBSD 4.0.
                    495:     </li>
                    496:     <li>
                    497:         <a href="https://man.openbsd.org/ripd.8">ripd(8)</a>,
                    498:         <a href="https://man.openbsd.org/ripctl.8">ripctl(8)</a>:
                    499:         Started by Michele Marchetto.
                    500:         Imported October 18, 2006 and first released with OpenBSD 4.1.
                    501:     </li>
                    502:     <li>
                    503:         <a href="https://man.openbsd.org/pkg-config.1">pkg-config(1)</a>:
                    504:         Started by Chris Kuethe and Marc Espie.
                    505:         Imported November 27, 2006 and first released with OpenBSD 4.1.
                    506:         Now maintained by Jasper Lievisse Adriaanse.
                    507:     </li>
                    508:     <li>
                    509:         <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>
                    510:         with <a href="https://man.openbsd.org/relayctl.8">relayctl(8)</a>:
                    511:         Started by Pierre-Yves Ritschard and Reyk Floeter.
                    512:         Imported December 16, 2006 and first released with OpenBSD 4.1.
                    513:         Now maintained by Reyk Floeter and Sebastian Benoit.<br/>
                    514:     </li>
                    515:     <li>
                    516:         <a href="https://man.openbsd.org/cwm.1">cwm(1)</a>:
                    517:         Started by <a href="http://monkey.org/~marius/cwm/README">Marius
                    518:             Aamodt Eriksen</A> in 2004.
                    519:         Imported April 27, 2007 and first released with OpenBSD 4.2.
                    520:         Now maintained by Okan Demirmen.
                    521:         <a href="https://github.com/chneukirchen/cwm">Portable version</a>
                    522:         maintained by Leah Neukirchen.
                    523:     </li>
                    524:     <li>
                    525:         <a href="https://man.openbsd.org/ospf6d.8">ospf6d(8)</a>,
                    526:         <a href="https://man.openbsd.org/ospf6ctl.8">ospf6ctl(8)</a>:
                    527:         Started by Esben Norby and Claudio Jeker.
                    528:         Imported October 8, 2007 and first released with OpenBSD 4.2.
                    529:     </li>
                    530:     <li>
                    531:         <a href="https://man.openbsd.org/libtool.1">libtool(1)</a>:
                    532:         Written by Steven Mestdagh and Marc Espie.
                    533:         Imported October 28, 2007 and first available for OpenBSD 4.3.
                    534:         Now maintained by Marc Espie, Jasper Lievisse Adriaanse,
                    535:         and Antoine Jacoutot.
                    536:     </li>
                    537:     <li>
                    538:         <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>,
                    539:         <a href="https://man.openbsd.org/snmpctl.8">snmpctl(8)</a>:
                    540:         Started by Reyk Floeter.
                    541:         Imported December 5, 2007 and first released with OpenBSD 4.3.
                    542:         Maintained by Reyk Floeter and Bret Lambert.
                    543:     </li>
                    544:     <li>
                    545:         <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a>:
                    546:         Written and maintained by Antoine Jacoutot,
                    547:         originally forked from mergemaster by Douglas Barton.
                    548:         Imported April 22, 2008, first released with OpenBSD 4.4.
                    549:     </li>
                    550:     <li>
                    551:         <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a>:
                    552:         Started by Pierre-Yves Ritschard.
                    553:         Imported June 26, 2008 and first released with OpenBSD 4.4.
                    554:     </li>
                    555:     <li>
                    556:         <a href="https://www.opensmtpd.org/">OpenSMTPD</a>
                    557:         including <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>,
                    558:         <a href="https://man.openbsd.org/smtpctl.8">smtpctl(8)</a>,
                    559:         <a href="https://man.openbsd.org/makemap.8">makemap(8)</a>:
                    560:         Started by Gilles Chehade.
                    561:         Imported November 1, 2008 and first released with OpenBSD 4.6.
                    562:         Now maintained by Gilles Chehade and Eric Faurot.
                    563:     </li>
                    564:     <li>
                    565:         <a href="http://tmux.github.io/">tmux</a>,
                    566:         <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>:
                    567:         Started in 2007 and maintained by Nicholas Marriott.
                    568:         Imported June 1, 2009, first released with OpenBSD 4.6.
                    569:     </li>
                    570:     <li>
                    571:         <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>,
                    572:         <a href="https://man.openbsd.org/ldpctl.8">ldpctl(8)</a>:
                    573:         Started by Michele Marchetto.
                    574:         Imported June 1, 2009 and first released with OpenBSD 4.6.
                    575:         Now maintained by Claudio Jeker.
                    576:     </li>
                    577:     <li>
                    578:         <a href="http://mdocml.bsd.lv/">mandoc</a>
                    579:         including <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>,
                    580:         <a href="https://man.openbsd.org/man.1">man(1)</a>,
                    581:         <a href="https://man.openbsd.org/apropos.1">apropos(1)</a>,
                    582:         <a href="https://man.openbsd.org/makewhatis.8">makewhatis(8)</a>,
                    583:         <a href="https://man.openbsd.org/mandoc/man8/man.cgi.8">man.cgi(8)</a>:
                    584:         Started by Kristaps Dzonsons in November 2008.
                    585:         Imported April 6, 2009, first released with OpenBSD 4.8.
                    586:         Now maintained by Ingo Schwarze.
                    587:     </li>
                    588:     <li>
                    589:         <a href="https://man.openbsd.org/ldapd.8">ldapd(8)</a>,
                    590:         <a href="https://man.openbsd.org/ldapctl.8">ldapctl(8)</a>:
                    591:         Written by Martin Hedenfalk.
                    592:         Imported May 31, 2010 and first released with OpenBSD 4.8.
                    593:     </li>
                    594:     <li>
                    595:         <a href="http://www.openiked.org/">OpenIKED</a>
                    596:         including <a href="https://man.openbsd.org/iked.8">iked(8)</a>
                    597:         and <a href="https://man.openbsd.org/ikectl.8">ikectl(8)</a>:
                    598:         Started by Reyk Floeter.
                    599:         Imported June 3, 2010 and first released with OpenBSD 4.8.
                    600:         Now maintained by Reyk Floeter and Mike Belopuhov.
                    601:     </li>
                    602:     <li>
                    603:         <a href="https://man.openbsd.org/iscsid.8">iscsid(8)</a>,
                    604:         <a href="https://man.openbsd.org/iscsictl.8">iscsictl(8)</a>:
                    605:         Written and maintained by Claudio Jeker.
                    606:         Imported September 24, 2010 and first released with OpenBSD 4.9.
                    607:     </li>
                    608:     <li>
                    609:         <a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a>,
                    610:         <a href="https://man.openbsd.org/rc.subr.8">rc.subr(8)</a>:
                    611:         Written and maintained by Robert Nagy and Antoine Jacoutot.
                    612:         Imported October 26, 2010 and first released with OpenBSD 4.9.
                    613:     </li>
                    614:     <li>
                    615:         <a href="https://man.openbsd.org/tftpd.8">tftpd(8)</a>:
                    616:         Written and maintained by David Gwynne.
                    617:         Imported March 2, 2012 and first released with OpenBSD 5.2.
                    618:     </li>
                    619:     <li>
                    620:         <a href="https://man.openbsd.org/npppd.8">npppd(8)</a>,
                    621:         <a href="https://man.openbsd.org/npppctl.8">npppctl(8)</a>:
                    622:         Started by Internet Initiative Japan Inc.
                    623:         Imported January 11, 2010, first released with OpenBSD 5.3.
                    624:         Maintained by YASUOKA Masahiko.
                    625:     </li>
                    626:     <li>
                    627:         <a href="https://man.openbsd.org/ldomd.8">ldomd(8)</a>,
                    628:         <a href="https://man.openbsd.org/ldomctl.8">ldomctl(8)</a>:
                    629:         Written and maintained by Mark Kettenis.
                    630:         Imported October 26, 2012 and first released with OpenBSD 5.3.
                    631:     </li>
                    632:     <li>
                    633:         <a href="https://man.openbsd.org/sndiod.8">sndiod(8)</a>:
                    634:         Written and maintained by Alexandre Ratchov.
                    635:         Imported November 23, 2012 and first released with OpenBSD 5.3.
                    636:     </li>
                    637:     <li>
                    638:         <a href="https://man.openbsd.org/cu.1">cu(1)</a>:
                    639:         Written and maintained by Nicholas Marriott.
                    640:         Imported July 10, 2012 and first released with OpenBSD 5.4.
                    641:     </li>
                    642:     <li>
                    643:         <a href="https://man.openbsd.org/identd.8">identd(8)</a>:
                    644:         Written and maintained by David Gwynne.
                    645:         Imported March 18, 2013 and first released with OpenBSD 5.4.
                    646:     </li>
                    647:     <li>
                    648:         <a href="https://man.openbsd.org/slowcgi.8">slowcgi(8)</a>:
                    649:         Written and maintained by Florian Obser.
                    650:         Imported May 23, 2013 and first released with OpenBSD 5.4.
                    651:     </li>
                    652:     <li>
                    653:         <a href="https://man.openbsd.org/signify.1">signify(1)</a>:
                    654:         Written and maintained by <a href="http://www.tedunangst.com/flak/post/signify">Ted Unangst</a>.
                    655:         Imported December 31, 2013 and first released with OpenBSD 5.5.
                    656:     </li>
                    657:     <li>
                    658:         <a href="https://man.openbsd.org/htpasswd.1">htpasswd(1)</a>:
                    659:         Written and maintained by Florian Obser.
                    660:         Imported March 17, 2014 and first released with OpenBSD 5.6.
                    661:     </li>
                    662:     <li>
                    663:         <a href="https://www.libressl.org/">LibreSSL</a>:
                    664:         Started by Ted Unangst, Bob Beck, Joel Sing, Miod Vallat, Philip Guenther,
                    665:         and Theo de Raadt on April 13, 2014, as a fork of OpenSSL 1.0.1g.
                    666:         First released with OpenBSD 5.6.
                    667:         Portable version maintained by Brent Cook.
                    668:     </li>
                    669:     <li>
                    670:         <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>:
                    671:         Started by Reyk Floeter.
                    672:         Imported July 12, 2014 and first released with OpenBSD 5.6.
                    673:         Maintained by Reyk Floeter and Florian Obser.
                    674:     </li>
                    675:     <li>
                    676:         <a href="https://man.openbsd.org/rcctl.8">rcctl(8)</a>:
                    677:         Written and maintained by Antoine Jacoutot.
                    678:         Imported August 19, 2014 and first released with OpenBSD 5.7.
                    679:     </li>
                    680:     <li>
                    681:         <a href="https://man.openbsd.org/file.1">file(1)</a>:
                    682:         Rewritten from scratch and maintained by Nicholas Marriott.
                    683:         Imported April 24, 2015 and first released with OpenBSD 5.8.
                    684:     </li>
                    685:     <li>
                    686:         <a href="https://man.openbsd.org/doas.1">doas(1)</a>:
                    687:         Written and maintained by Ted Unangst.
                    688:         Imported July 16, 2015 and first released with OpenBSD 5.8.
                    689:     </li>
                    690:     <li>
                    691:         <a href="https://man.openbsd.org/radiusd.8">radiusd(8)</a>:
                    692:         Written and maintained by YASUOKA Masahiko.
                    693:         Imported July 21, 2015 and first released with OpenBSD 5.8.
                    694:     </li>
                    695:     <li>
                    696:         <a href="https://man.openbsd.org/eigrpd.8">eigrpd(8)</a>,
                    697:         <a href="https://man.openbsd.org/eigrpctl.8">eigrpctl(8)</a>:
                    698:         Written and maintained by Renato Westphal.
                    699:         Imported October 2, 2015 and first released with OpenBSD 5.9.
                    700:     </li>
                    701:     <li>
                    702:         <a href="https://man.openbsd.org/rebound.8">rebound(8)</a>:
                    703:         Written and maintained by Ted Unangst.
                    704:         Imported October 15, 2015 and first released with OpenBSD 5.9.
                    705:     </li>
                    706:     <li>
                    707:         <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>,
                    708:         <a href="https://man.openbsd.org/vmd.8">vmd(8)</a>,
                    709:         <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a>:
                    710:         Written and maintained by Mike Larkin and Reyk Floeter.
                    711:         Imported November 13, 2015 and first released with OpenBSD 5.9.
                    712:     </li>
                    713:     <li>
                    714:         <a href="https://man.openbsd.org/pdisk.8">pdisk(8)</a>:
                    715:         Originally written by Eryk Vershen in 1996-1998,
                    716:         rewritten and maintained by Kenneth Westerback since January 11, 2016
                    717:         and first released with OpenBSD 5.9.
                    718:     </li>
                    719:     <li>
                    720:         <a href="https://man.openbsd.org/mknod.8">mknod(8)</a>:
                    721:         Original version from Version 6 AT&amp;T UNIX (1975),
                    722:         last rewritten by Marc Espie on March 5, 2016
                    723:         and first released with OpenBSD 6.0.
                    724:     </li>
                    725:     <li>
                    726:         <a href="https://man.openbsd.org/audioctl.1">audioctl(1)</a>:
                    727:         Originally written by Lennart Augustsson in 1997,
                    728:         rewritten and maintained by Alexandre Ratchov since June 21, 2016
                    729:         and first released with OpenBSD 6.0.
                    730:     </li>
                    731:     <li>
                    732:         <a href="https://man.openbsd.org/switchd.8">switchd(8)</a>,
                    733:         <a href="https://man.openbsd.org/switchctl.8">switchctl(8)</a>:
                    734:         Written and maintained by Reyk Floeter.
                    735:         Imported July 19, 2016; released with OpenBSD 6.1.
                    736:     </li>
                    737:     <li>
                    738:         <a href="https://man.openbsd.org/acme-client.1">acme-client(1)</a>:
                    739:         Written by Kristaps Dzonsons, imported August 31, 2016; released
                    740:         with OpenBSD 6.1.
                    741:     </li>
                    742:     <li>
                    743:         <a href="https://man.openbsd.org/syspatch.8">syspatch(8)</a>:
                    744:         Written and maintained by Antoine Jacoutot.
                    745:         Imported September 5, 2016; released with OpenBSD 6.1.
                    746:     </li>
                    747:     <li>
                    748:         <a href="https://man.openbsd.org/ping.8">ping(8)</a>:
                    749:         Restructured to include IPv6 functionality and maintained by Florian Obser.
                    750:         The separate
                    751:         <a href="https://man.openbsd.org/OpenBSD-6.0/ping6.8">ping6(8)</a>
                    752:         was superseded on September 17, 2016,
                    753:         and the new, combined version was released with OpenBSD 6.1.
                    754:     </li>
                    755:     <li>
                    756:         <a href="https://man.openbsd.org/xenodm.1">xenodm(1)</a>:
                    757:         Cleaned-up fork of
                    758:         <a href="https://man.openbsd.org/OpenBSD-6.0/xdm.1">xdm(1)</a>
                    759:         maintained by Matthieu Herrb.
                    760:         Imported October 23, 2016; released with OpenBSD 6.1.
                    761:     </li>
                    762:     <li>
                    763:         <a href="https://man.openbsd.org/ocspcheck.8">ocspcheck(8)</a>:
                    764:         Written and maintained by Bob Beck.
                    765:         Imported January 24, 2017; released with OpenBSD 6.1.
                    766:     </li>
                    767:     <li>
                    768:         <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a>:
                    769:         Written and maintained by Florian Obser.
                    770:         Imported March 18, 2017; released with OpenBSD 6.2.
                    771:     </li>
1.1       schwarze  772: </ul>
                    773:
1.11      deraadt   774: <h3>Projects maintained by OpenBSD developers outside OpenBSD</h3>
1.1       schwarze  775:
                    776: <ul>
1.59      job       777:     <li>
                    778:         <a href="http://www.sudo.ws/">sudo</a>:
                    779:         Started by Bob Coggeshall and Cliff Spencer around 1980.
                    780:         Imported November 18, 1999, first released with OpenBSD 2.7.
                    781:         Now maintained by Todd Miller.
                    782:     </li>
                    783:     <li>
                    784:         <a href="http://bulabula.org/femail/">femail</a>:
                    785:         Written and maintained by Henning Brauer.
                    786:         Started in 2005, port available since September 22, 2005.
                    787:     </li>
                    788:     <li>
                    789:         <a href="http://www.midish.org/">midish</a>:
                    790:         Written and maintained by Alexandre Ratchov.
                    791:         Started in 2003, port available since November 4, 2005.
                    792:     </li>
                    793:     <li>
                    794:         <a href="https://github.com/nicm/fdm">fdm</a>:
                    795:         Written and maintained by Nicholas Marriott.
                    796:         Started in 2006, port available since January 18, 2007.
                    797:     </li>
                    798:     <li>
                    799:         <a href="https://github.com/ajacoutot/toad/">toad</a>:
                    800:         Written and maintained by Antoine Jacoutot.
                    801:         Started in 2013, port available since October 8, 2013.
                    802:     </li>
                    803:     <li>
                    804:         <a href="http://jasperla.github.io/portroach/">portroach</a>:
                    805:         Written and maintained by Jasper Lievisse Adriaanse,
                    806:         originally forked from FreeBSD's portscout.
                    807:         Started in 2014, port available since September 5, 2014.
                    808:     </li>
                    809:     <li>
                    810:         <a href="https://github.com/yasuoka/cvs2gitdump">cvs2gitdump</a>:
                    811:         Written and maintained by YASUOKA Masahiko.
                    812:         Started in 2012, port available since August 1, 2016.
                    813:     </li>
1.1       schwarze  814: </ul>
                    815:
                    816: </body>
                    817: </html>