Mercurial > dropbear
view TODO @ 148:9a1dc9bc17d7
includes.h: include mycrypt.h rather than mycrypt_custom.h
author | Matt Johnston <matt@ucc.asn.au> |
---|---|
date | Sun, 19 Dec 2004 16:28:08 +0000 |
parents | 88e0a1ad951a |
children | b9d3f725e00b |
line wrap: on
line source
Current: Things which might need doing: - Make options.h generated from configure perhaps? - Improved queueing of unauthed connections - fix agent fwd problems - handle /etc/environment in AIX - check that there aren't timing issues with valid/invalid user authentication feedback. - Binding to different interfaces - possible RSA blinding? need to check whether this is vuln to timing attacks - check PRNG - CTR mode, SSH_MSG_IGNORE sending to improve CBC security - DH Group Exchange possibly, or just add group14 (whatever it's called today) - Use m_burn for clearing sensitive items in LTM/LTC - fix scp.c for IRIX - Be able to use OpenSSH keys for the client? or at least have some form of encrypted keys. - Client agent forwarding