Mercurial > dropbear
diff options.h @ 1087:1e486f368ec3
Disable twofish-ctr by default, add config option
author | Matt Johnston <matt@ucc.asn.au> |
---|---|
date | Wed, 03 Jun 2015 22:59:59 +0800 |
parents | deed0571cacc |
children | 36557295418e |
line wrap: on
line diff
--- a/options.h Wed Jun 03 22:15:12 2015 +0800 +++ b/options.h Wed Jun 03 22:59:59 2015 +0800 @@ -103,10 +103,15 @@ #define DROPBEAR_ENABLE_CBC_MODE /* Enable "Counter Mode" for ciphers. This is more secure than normal - * CBC mode against certain attacks. This adds around 1kB to binary - * size and is recommended for most cases */ + * CBC mode against certain attacks. It is recommended for security + * and forwards compatibility */ #define DROPBEAR_ENABLE_CTR_MODE +/* Twofish counter mode is disabled by default because it +has not been tested for interoperability with other SSH implementations. +If you test it please contact the Dropbear author */ +/* #define DROPBEAR_TWOFISH_CTR */ + /* You can compile with no encryption if you want. In some circumstances * this could be safe security-wise, though make sure you know what * you're doing. Anyone can see everything that goes over the wire, so