Mercurial > dropbear
view TODO @ 91:dc68f7624f17
Stupid DSS hostkey bug fixed.
author | Matt Johnston <matt@ucc.asn.au> |
---|---|
date | Wed, 18 Aug 2004 09:14:30 +0000 |
parents | c2ac796b130e |
children | d3eb1fa8484e |
line wrap: on
line source
Current: Things which might need doing: - Make options.h generated from configure perhaps? - Improved queueing of unauthed connections - fix agent fwd problems - handle /etc/environment in AIX - improve channel window adjustment algorithm (circular buffering) - check that there aren't timing issues with valid/invalid user authentication feedback. - Binding to different interfaces - possible RSA blinding? need to check whether this is vuln to timing attacks - check PRNG - CTR mode, SSH_MSG_IGNORE sending to improve CBC security - DH Group Exchange possibly, or just add group14 (whatever it's called today) - Use m_burn for clearing sensitive items in LTM/LTC - fix scp.c for IRIX - Be able to use OpenSSH keys for the client? or at least have some form of encrypted keys. - Client agent forwarding