Mercurial > dropbear

view TODO @ 150:82fcf3185616

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Cleaning out various dead wood found with -dead_strip bignum.c: mptobytes now resides in dss.c loginrec.c: remove lastlog code since it isn't used. dbutil.c: removed obselete usingsyslog variable channel.h: client channel type only defined for client compile common-algo.c: s/rijndael/aes/
author Matt Johnston <matt@ucc.asn.au>
date Mon, 20 Dec 2004 14:24:57 +0000
parents 88e0a1ad951a
children b9d3f725e00b
line wrap: on
line source

Current:

Things which might need doing:

- Make options.h generated from configure perhaps?

- Improved queueing of unauthed connections

- fix agent fwd problems

- handle /etc/environment in AIX

- check that there aren't timing issues with valid/invalid user authentication
  feedback.

- Binding to different interfaces

- possible RSA blinding? need to check whether this is vuln to timing attacks
- check PRNG
- CTR mode, SSH_MSG_IGNORE sending to improve CBC security
- DH Group Exchange possibly, or just add group14 (whatever it's called today)

- Use m_burn for clearing sensitive items in LTM/LTC

- fix scp.c for IRIX

- Be able to use OpenSSH keys for the client? or at least have some form of 
  encrypted keys.
- Client agent forwarding