comparison options.h @ 257:63601217f5ab

* options.h, common-kex.c: fix support of 4096 byte host keys
author Matt Johnston <matt@ucc.asn.au>
date Wed, 30 Nov 2005 10:11:24 +0000
parents efbaf6b03837
children e37b160c414c
comparison
equal deleted inserted replaced
256:ac890087b8c1 257:63601217f5ab
304 #define MAX_TRANS_WIN_INCR 500000000 /* overflow prevention */ 304 #define MAX_TRANS_WIN_INCR 500000000 /* overflow prevention */
305 305
306 #define MAX_STRING_LEN 1400 /* ~= MAX_PROPOSED_ALGO * MAX_NAME_LEN, also 306 #define MAX_STRING_LEN 1400 /* ~= MAX_PROPOSED_ALGO * MAX_NAME_LEN, also
307 is the max length for a password etc */ 307 is the max length for a password etc */
308 308
309 /* For a 4096 bit DSS key, empirically determined to be 1590 bytes */ 309 /* For a 4096 bit DSS key, empirically determined */
310 #define MAX_PUBKEY_SIZE 1600 310 #define MAX_PUBKEY_SIZE 1700
311 /* For a 4096 bit DSS key, empirically determined to be 1590 bytes */ 311 /* For a 4096 bit DSS key, empirically determined */
312 #define MAX_PRIVKEY_SIZE 1600 312 #define MAX_PRIVKEY_SIZE 1700
313
314 /* The maximum size of the bignum portion of the kexhash buffer */
315 /* Sect. 8 of the transport draft, K_S + e + f + K */
316 #define KEXHASHBUF_MAX_INTS (1700 + 130 + 130 + 130)
313 317
314 #define DROPBEAR_MAX_SOCKS 2 /* IPv4, IPv6 are all we'll get for now. Revisit 318 #define DROPBEAR_MAX_SOCKS 2 /* IPv4, IPv6 are all we'll get for now. Revisit
315 in a few years time.... */ 319 in a few years time.... */
316 320
317 #define DROPBEAR_MAX_CLI_PASS 1024 321 #define DROPBEAR_MAX_CLI_PASS 1024