comparison sysoptions.h @ 1294:56aba7dedbea

options for disabling "normal" DH
author Matt Johnston <matt@ucc.asn.au>
date Mon, 02 May 2016 23:48:16 +0200
parents dc8f7997f10f
children 750ec4ec4cbe
comparison
equal deleted inserted replaced
1293:dc8f7997f10f 1294:56aba7dedbea
111 * signing to guess the private key. Blinding avoids this attack, though makes 111 * signing to guess the private key. Blinding avoids this attack, though makes
112 * signing operations slightly slower. */ 112 * signing operations slightly slower. */
113 #define RSA_BLINDING 113 #define RSA_BLINDING
114 114
115 /* hashes which will be linked and registered */ 115 /* hashes which will be linked and registered */
116 #if defined(DROPBEAR_SHA2_256_HMAC) || defined(DROPBEAR_ECC_256) || defined(DROPBEAR_CURVE25519) || DROPBEAR_DH_GROUP14 116 #if defined(DROPBEAR_SHA2_256_HMAC) || defined(DROPBEAR_ECC_256) || defined(DROPBEAR_CURVE25519) || DROPBEAR_DH_GROUP14_SHA256
117 #define DROPBEAR_SHA256 117 #define DROPBEAR_SHA256
118 #endif 118 #endif
119 #if defined(DROPBEAR_ECC_384) 119 #if defined(DROPBEAR_ECC_384)
120 #define DROPBEAR_SHA384 120 #define DROPBEAR_SHA384
121 #endif 121 #endif
123 #if defined(DROPBEAR_SHA2_512_HMAC) || defined(DROPBEAR_ECC_521) || defined(DROPBEAR_ECC_384) || DROPBEAR_DH_GROUP16 123 #if defined(DROPBEAR_SHA2_512_HMAC) || defined(DROPBEAR_ECC_521) || defined(DROPBEAR_ECC_384) || DROPBEAR_DH_GROUP16
124 #define DROPBEAR_SHA512 124 #define DROPBEAR_SHA512
125 #endif 125 #endif
126 #if defined(DROPBEAR_MD5_HMAC) 126 #if defined(DROPBEAR_MD5_HMAC)
127 #define DROPBEAR_MD5 127 #define DROPBEAR_MD5
128 #endif
129
130 #if DROPBEAR_DH_GROUP14_SHA256 || DROPBEAR_DH_GROUP14_SHA1
131 #define DROPBEAR_DH_GROUP14 1
132 #endif
133
134 #if DROPBEAR_DH_GROUP1 || DROPBEAR_DH_GROUP14 || DROPBEAR_DH_GROUP16
135 #define DROPBEAR_NORMAL_DH 1
128 #endif 136 #endif
129 137
130 /* roughly 2x 521 bits */ 138 /* roughly 2x 521 bits */
131 #define MAX_ECC_SIZE 140 139 #define MAX_ECC_SIZE 140
132 140