Mercurial > dropbear
comparison sysoptions.h @ 1294:56aba7dedbea
options for disabling "normal" DH
author | Matt Johnston <matt@ucc.asn.au> |
---|---|
date | Mon, 02 May 2016 23:48:16 +0200 |
parents | dc8f7997f10f |
children | 750ec4ec4cbe |
comparison
equal
deleted
inserted
replaced
1293:dc8f7997f10f | 1294:56aba7dedbea |
---|---|
111 * signing to guess the private key. Blinding avoids this attack, though makes | 111 * signing to guess the private key. Blinding avoids this attack, though makes |
112 * signing operations slightly slower. */ | 112 * signing operations slightly slower. */ |
113 #define RSA_BLINDING | 113 #define RSA_BLINDING |
114 | 114 |
115 /* hashes which will be linked and registered */ | 115 /* hashes which will be linked and registered */ |
116 #if defined(DROPBEAR_SHA2_256_HMAC) || defined(DROPBEAR_ECC_256) || defined(DROPBEAR_CURVE25519) || DROPBEAR_DH_GROUP14 | 116 #if defined(DROPBEAR_SHA2_256_HMAC) || defined(DROPBEAR_ECC_256) || defined(DROPBEAR_CURVE25519) || DROPBEAR_DH_GROUP14_SHA256 |
117 #define DROPBEAR_SHA256 | 117 #define DROPBEAR_SHA256 |
118 #endif | 118 #endif |
119 #if defined(DROPBEAR_ECC_384) | 119 #if defined(DROPBEAR_ECC_384) |
120 #define DROPBEAR_SHA384 | 120 #define DROPBEAR_SHA384 |
121 #endif | 121 #endif |
123 #if defined(DROPBEAR_SHA2_512_HMAC) || defined(DROPBEAR_ECC_521) || defined(DROPBEAR_ECC_384) || DROPBEAR_DH_GROUP16 | 123 #if defined(DROPBEAR_SHA2_512_HMAC) || defined(DROPBEAR_ECC_521) || defined(DROPBEAR_ECC_384) || DROPBEAR_DH_GROUP16 |
124 #define DROPBEAR_SHA512 | 124 #define DROPBEAR_SHA512 |
125 #endif | 125 #endif |
126 #if defined(DROPBEAR_MD5_HMAC) | 126 #if defined(DROPBEAR_MD5_HMAC) |
127 #define DROPBEAR_MD5 | 127 #define DROPBEAR_MD5 |
128 #endif | |
129 | |
130 #if DROPBEAR_DH_GROUP14_SHA256 || DROPBEAR_DH_GROUP14_SHA1 | |
131 #define DROPBEAR_DH_GROUP14 1 | |
132 #endif | |
133 | |
134 #if DROPBEAR_DH_GROUP1 || DROPBEAR_DH_GROUP14 || DROPBEAR_DH_GROUP16 | |
135 #define DROPBEAR_NORMAL_DH 1 | |
128 #endif | 136 #endif |
129 | 137 |
130 /* roughly 2x 521 bits */ | 138 /* roughly 2x 521 bits */ |
131 #define MAX_ECC_SIZE 140 | 139 #define MAX_ECC_SIZE 140 |
132 | 140 |