comparison options.h @ 992:731f624af902

Add config option to disable cbc. Disable twofish by default
author Matt Johnston <matt@ucc.asn.au>
date Fri, 23 Jan 2015 22:37:14 +0800
parents 6c0fb5428aaa
children 6fb4c010c448
comparison
equal deleted inserted replaced
991:4f65c867fc99 992:731f624af902
93 #define DROPBEAR_AES128 93 #define DROPBEAR_AES128
94 #define DROPBEAR_3DES 94 #define DROPBEAR_3DES
95 #define DROPBEAR_AES256 95 #define DROPBEAR_AES256
96 /* Compiling in Blowfish will add ~6kB to runtime heap memory usage */ 96 /* Compiling in Blowfish will add ~6kB to runtime heap memory usage */
97 /*#define DROPBEAR_BLOWFISH*/ 97 /*#define DROPBEAR_BLOWFISH*/
98 #define DROPBEAR_TWOFISH256 98 /*#define DROPBEAR_TWOFISH256*/
99 #define DROPBEAR_TWOFISH128 99 /*#define DROPBEAR_TWOFISH128*/
100
101 /* Enable CBC mode for ciphers. This has security issues though
102 * is the most compatible with older SSH implementations */
103 #define DROPBEAR_ENABLE_CBC_MODE
100 104
101 /* Enable "Counter Mode" for ciphers. This is more secure than normal 105 /* Enable "Counter Mode" for ciphers. This is more secure than normal
102 * CBC mode against certain attacks. This adds around 1kB to binary 106 * CBC mode against certain attacks. This adds around 1kB to binary
103 * size and is recommended for most cases */ 107 * size and is recommended for most cases */
104 #define DROPBEAR_ENABLE_CTR_MODE 108 #define DROPBEAR_ENABLE_CTR_MODE