Mercurial > dropbear
diff sysoptions.h @ 746:465fefc4f6e0 kexguess
Put some #ifdef options around first-follows options in case they
need to be disabled
author | Matt Johnston <matt@ucc.asn.au> |
---|---|
date | Wed, 03 Apr 2013 00:43:31 +0800 |
parents | 15999b098cc9 |
children | 8dcdfd44e769 |
line wrap: on
line diff
--- a/sysoptions.h Wed Apr 03 00:32:55 2013 +0800 +++ b/sysoptions.h Wed Apr 03 00:43:31 2013 +0800 @@ -23,6 +23,15 @@ #define AUTH_TIMEOUT 300 /* we choose 5 minutes */ #endif +/* A client should try and send an initial key exchange packet guessing + * the algorithm that will match - saves a round trip connecting, has little + * overhead if the guess was "wrong". */ +#define USE_KEX_FIRST_FOLLOWS +/* Use protocol extension to allow "first follows" to succeed more frequently. + * This is currently Dropbear-specific but will gracefully fallback when connecting + * to other implementations. */ +#define USE_KEXGUESS2 + /* Minimum key sizes for DSS and RSA */ #ifndef MIN_DSS_KEYLEN #define MIN_DSS_KEYLEN 512