Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-02-14 | Fixed typos in lib/ssh | Andrew Dryga | |
2017-02-06 | Revert "ssh: removed 'ssh-dss' from default list" | Hans Nilsson | |
This reverts commit 6847d9223420fb86cdf72f0e608a5f41a2673053. The removal of ssh-dss seems to give a too high risk of failing customer systems. Needs to be properly deprecated. | |||
2017-02-01 | ssh: minor code unfolding | Hans Nilsson | |
2017-02-01 | ssh: clearer hash calculation | Hans Nilsson | |
2017-01-31 | ssh: better error msg at kex failure | Hans Nilsson | |
2017-01-31 | ssh: removed 'ssh-dss' from default list | Hans Nilsson | |
Reason: insecure | |||
2017-01-31 | ssh: removed 'diffie-hellman-group1-sha1' from default list | Hans Nilsson | |
Reason: very insecure | |||
2017-01-31 | ssh: added stronger diffie-hellman groups | Hans Nilsson | |
diffie-hellman-group16-sha512 diffie-hellman-group18-sha512 diffie-hellman-group14-sha256 | |||
2017-01-31 | ssh: reordered default algorithms list | Hans Nilsson | |
2017-01-31 | Merge branch 'maint' | Hans Nilsson | |
Conflicts: lib/crypto/c_src/crypto.c lib/crypto/src/crypto.erl | |||
2017-01-30 | ssh: optimize kex dh_gex using new crypto functionality | Hans Nilsson | |
2017-01-26 | Merge branch 'maint' | Hans Nilsson | |
2017-01-25 | ssh: correct host key signature calculation | Hans Nilsson | |
2016-12-16 | ssh: Optimize handling of #ssh.shared_secret | Hans Nilsson | |
It is not necessary to mpint-encode it every time it is used (in MAC:s), it sufficies to do it once after key exchange | |||
2016-11-18 | ssh: Add fun and fingerprint to option 'silently_accept_host' | Hans Nilsson | |
2016-09-02 | ssh: make ecdsa sha dependent on curve | Hans Nilsson | |
Bug fix. | |||
2016-04-27 | ssh: Partly refactor and polish ssh_connection_handler | Hans Nilsson | |
2016-04-27 | ssh: Gen_statem rewrite of ssh_connection_handler | Hans Nilsson | |
Including misc fixes in surronding code as well as in test cases. | |||
2016-03-15 | update copyright-year | Henrik Nord | |
2016-01-18 | ssh: Optimization - inline encoding in ssh_message:encode/1, now 8 times faster. | Hans Nilsson | |
Also fixes minor error in ssh_protocol_SUITE that the new encoder found. | |||
2015-12-07 | ssh: fix error for bad packet lengths found by Defensics | Hans Nilsson | |
2015-11-27 | Merge branch 'maint-18' into maint | Hans Nilsson | |
* maint-18: Updated OTP version Update release notes ssh: vsn.mk updated ssh: New test cases for SSH_MSG_KEX_DH_GEX_REQUEST_OLD ssh: update existing testcases ssh: Improve group selection ssh: implemented server side SSH_MSG_KEX_DH_GEX_REQUEST_OLD for putty client Conflicts: lib/ssh/src/ssh_transport.erl lib/ssh/test/ssh_protocol_SUITE.erl lib/ssh/vsn.mk | |||
2015-11-26 | ssh: Improve group selection | Hans Nilsson | |
Now it chooses the first found if no exact match. | |||
2015-11-26 | ssh: implemented server side SSH_MSG_KEX_DH_GEX_REQUEST_OLD for putty client | Hans Nilsson | |
2015-11-23 | ssh: fix dialyzer reported error | Hans Nilsson | |
2015-11-23 | ssh: AEAD_AES_(128|256)_GCM and aes(128|256)[email protected] crypto | Hans Nilsson | |
Note that the rfc5647 is ambigous so this implementation of AEAD_AES_(128|256)_GCM may or may not be compatible with others. They are note enabled by default but may be enabled by the user. See the Reference Manual, Application SSH for details of how we interpret the rfc. To be safe, use [email protected] or [email protected] instead. | |||
2015-11-23 | ssh: refactor packet reception | Hans Nilsson | |
There was an assymetric relationship between receiving a ssh-packet (decrypting-mac-decompress) and sending one. When sending, most of the work was defined in the ssh_transport module, while at reception the ssh_connection_handler was the one knowing what to do. This commit moves the reception down to the ssh_transport module where it belongs. | |||
2015-11-09 | ssh: use crypto for ecdh point validation | Hans Nilsson | |
2015-11-04 | ssh: extend 'dh_gex_limits' to server side | Hans Nilsson | |
OTP-13066 | |||
2015-11-04 | ssh, public_key: random selection of diffie-hellman moduli | Hans Nilsson | |
Also tool (public_key:gen_moduli_hrl) to convert an openssh moduli file to erlang format. | |||
2015-11-02 | ssh: Make tests for bad packet_len and field lengths inside packets | Hans Nilsson | |
Includes a ssh_transport:pack/3 function for generating invalid packets | |||
2015-10-19 | ssh: Implemented ssh_transport:ecdh_validate_public_key (partly) | Hans Nilsson | |
Defined in http://www.secg.org/sec1-v2.pdf '3.2.2 Validation of Elliptic Curve Public Keys' according to RFC 5656 ch 4. More to be done: check singularities, implement reading compressed points.... | |||
2015-10-16 | public_key: add/update -spec for ssh functions | Hans Nilsson | |
2015-10-16 | ssh, public_key: use pubkey encode/decode in app public_key | Hans Nilsson | |
2015-10-16 | ssh, public_key: Change EC Public Key representation to what was intended | Hans Nilsson | |
2015-10-08 | Merge branch 'hans/ssh/option_dh_gex_limits_ignored/OTP-13029' into maint | Hans Nilsson | |
2015-10-08 | ssh: ECDSA public key implemented | Hans Nilsson | |
2015-10-07 | ssh: added dh_gex tests | Hans Nilsson | |
2015-10-06 | ssh: Bug in [email protected] compression fixed | Hans Nilsson | |
2015-10-06 | ssh: aes192-ctr and aes256-ctr implemented | Hans Nilsson | |
2015-08-30 | ssh: dh_gex defautl values increased. Groups added | Hans Nilsson | |
2015-08-30 | ssh: Reorganize and extend the test suites | Hans Nilsson | |
Add ssh_trpt_test_lib:instantiate/2, ssh_test_lib:default_algoritms/2 and algo_intersection/2 ssh_to_openssh_SUITE uses only algos that sshd and ssh client supports raised timeout limit in ssh_basic_SUITE:ssh_connect_arg4_timeout Break out ssh_renegotiate_SUITE from ssh_basic_SUITE Move std_daemon/4 to ssh_test_lib.erl Add ssh_algorithms_SUITE Add ssh_options_SUITE Add assymetric testing of algorithms Add openssh tests to ssh_algorithms_SUITE Remove algo tests from ssh_sftp_SUITE (now in ssh_algorithms_SUITE) Removed kex algo tests from in ssh_basic_SUITE because they are now in ssh_algorithm_SUITE. fixed test case ssh_protocol_SUITE:no_common_alg_server_disconnects/1 | |||
2015-08-29 | ssh: Elliptic Curve Diffie-Hellman (ECDH) | Hans Nilsson | |
Adds ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp512 and OTP-12938 hmac-sha2-512 | |||
2015-08-25 | ssh: add extra random length padding in packets | Hans Nilsson | |
A new experimental option 'max_random_length_padding', not documented so it might change... | |||
2015-08-05 | ssh: announce dh-group-exchange | Hans Nilsson | |
2015-08-05 | ssh: more dh_gex test cases | Hans Nilsson | |
2015-08-05 | ssh: options 'dh_gex_groups' and 'dh_gex_limits' | Hans Nilsson | |
2015-08-05 | ssh: diffie-hellman-group14-sha1 | Hans Nilsson | |
2015-08-03 | ssh: added more groups for gex | Hans Nilsson | |
2015-08-03 | ssh: rm ssh_math and use crypto:compute_key instead | Hans Nilsson | |