tree cf69b6a4ae613af69f6a984a68e8e1e7ee268a93
parent 603b8f47f1cd9ed95a2017447db8e60ca6704594
author Damien Miller <djm@mindrot.org> 1390689445 +1100
committer Damien Miller <djm@mindrot.org> 1390689445 +1100

   - dtucker@cvs.openbsd.org 2014/01/25 10:12:50
     [cipher.c cipher.h kex.c kex.h kexgexc.c]
     Add a special case for the DH group size for 3des-cbc, which has an
     effective strength much lower than the key size.  This causes problems
     with some cryptlib implementations, which don't support group sizes larger
     than 4k but also don't use the largest group size it does support as
     specified in the RFC.  Based on a patch from Petr Lautrbach at Redhat,
     reduced by me with input from Markus.  ok djm@ markus@