diff sysoptions.h @ 746:465fefc4f6e0 kexguess

Put some #ifdef options around first-follows options in case they need to be disabled
author Matt Johnston <matt@ucc.asn.au>
date Wed, 03 Apr 2013 00:43:31 +0800
parents 15999b098cc9
children 8dcdfd44e769
line wrap: on
line diff
--- a/sysoptions.h	Wed Apr 03 00:32:55 2013 +0800
+++ b/sysoptions.h	Wed Apr 03 00:43:31 2013 +0800
@@ -23,6 +23,15 @@
 #define AUTH_TIMEOUT 300 /* we choose 5 minutes */
 #endif
 
+/* A client should try and send an initial key exchange packet guessing
+ * the algorithm that will match - saves a round trip connecting, has little
+ * overhead if the guess was "wrong". */
+#define USE_KEX_FIRST_FOLLOWS
+/* Use protocol extension to allow "first follows" to succeed more frequently.
+ * This is currently Dropbear-specific but will gracefully fallback when connecting
+ * to other implementations. */
+#define USE_KEXGUESS2
+
 /* Minimum key sizes for DSS and RSA */
 #ifndef MIN_DSS_KEYLEN
 #define MIN_DSS_KEYLEN 512