view TODO @ 92:2e92778dd162

Auth doesn't timeout after 5 minutes.
author Matt Johnston <>
date Wed, 18 Aug 2004 09:14:43 +0000
parents c2ac796b130e
children d3eb1fa8484e
line wrap: on
line source


Things which might need doing:

- Make options.h generated from configure perhaps?

- Improved queueing of unauthed connections

- fix agent fwd problems

- handle /etc/environment in AIX

- improve channel window adjustment algorithm (circular buffering)

- check that there aren't timing issues with valid/invalid user authentication

- Binding to different interfaces

- possible RSA blinding? need to check whether this is vuln to timing attacks
- check PRNG
- CTR mode, SSH_MSG_IGNORE sending to improve CBC security
- DH Group Exchange possibly, or just add group14 (whatever it's called today)

- Use m_burn for clearing sensitive items in LTM/LTC

- fix scp.c for IRIX

- Be able to use OpenSSH keys for the client? or at least have some form of 
  encrypted keys.
- Client agent forwarding