comparison options.h @ 1293:dc8f7997f10f

move group14 and group16 to options.h, group14-sha256 on by default
author Matt Johnston <matt@ucc.asn.au>
date Mon, 02 May 2016 17:03:55 +0200
parents 739b3909c499
children 56aba7dedbea
comparison
equal deleted inserted replaced
1292:432b0a030fd6 1293:dc8f7997f10f
166 166
167 /* Enable elliptic curve Diffie Hellman key exchange, see note about 167 /* Enable elliptic curve Diffie Hellman key exchange, see note about
168 * ECDSA above */ 168 * ECDSA above */
169 #define DROPBEAR_ECDH 169 #define DROPBEAR_ECDH
170 170
171 /* Group14 (2048 bit) is recommended. Group1 is less secure (1024 bit) though 171 /* Key exchange algorithm.
172 is the only option for interoperability with some older SSH programs */ 172 * group1 - 1024 bit, sha1
173 * group14 - 2048 bit, sha1
174 * group14_256 - 2048 bit, sha2-256
175 * group16 - 4096 bit, sha2-512
176 *
177 * group14 is supported by most implementations.
178 * group16 provides a greater strength but is slower and increases binary size
179 * group1 is necessary if compatibility with Dropbear versions < 0.53 is required
180 */
173 #define DROPBEAR_DH_GROUP1 1 181 #define DROPBEAR_DH_GROUP1 1
174 #define DROPBEAR_DH_GROUP14 1 182 #define DROPBEAR_DH_GROUP14 1
183 #define DROPBEAR_DH_GROUP14_256 1
184 #define DROPBEAR_DH_GROUP16 0
175 185
176 /* Control the memory/performance/compression tradeoff for zlib. 186 /* Control the memory/performance/compression tradeoff for zlib.
177 * Set windowBits=8 for least memory usage, see your system's 187 * Set windowBits=8 for least memory usage, see your system's
178 * zlib.h for full details. 188 * zlib.h for full details.
179 * Default settings (windowBits=15) will use 256kB for compression 189 * Default settings (windowBits=15) will use 256kB for compression