Mercurial > dropbear
view TODO @ 149:ed9ca2a9705c
Cleaned up the random code, use /dev/random by default,
and remove the addrandom() function which wasn't used.
author | Matt Johnston <matt@ucc.asn.au> |
---|---|
date | Mon, 20 Dec 2004 13:11:15 +0000 |
parents | 88e0a1ad951a |
children | b9d3f725e00b |
line wrap: on
line source
Current: Things which might need doing: - Make options.h generated from configure perhaps? - Improved queueing of unauthed connections - fix agent fwd problems - handle /etc/environment in AIX - check that there aren't timing issues with valid/invalid user authentication feedback. - Binding to different interfaces - possible RSA blinding? need to check whether this is vuln to timing attacks - check PRNG - CTR mode, SSH_MSG_IGNORE sending to improve CBC security - DH Group Exchange possibly, or just add group14 (whatever it's called today) - Use m_burn for clearing sensitive items in LTM/LTC - fix scp.c for IRIX - Be able to use OpenSSH keys for the client? or at least have some form of encrypted keys. - Client agent forwarding