- djm@cvs.openbsd.org 2013/11/21 00:45:44
     [Makefile.in PROTOCOL PROTOCOL.chacha20poly1305 authfile.c chacha.c]
     [chacha.h cipher-chachapoly.c cipher-chachapoly.h cipher.c cipher.h]
     [dh.c myproposal.h packet.c poly1305.c poly1305.h servconf.c ssh.1]
     [ssh.c ssh_config.5 sshd_config.5] Add a new protocol 2 transport
     cipher "chacha20-poly1305@openssh.com" that combines Daniel
     Bernstein's ChaCha20 stream cipher and Poly1305 MAC to build an
     authenticated encryption mode.

     Inspired by and similar to Adam Langley's proposal for TLS:
     http://tools.ietf.org/html/draft-agl-tls-chacha20poly1305-03
     but differs in layout used for the MAC calculation and the use of a
     second ChaCha20 instance to separately encrypt packet lengths.
     Details are in the PROTOCOL.chacha20poly1305 file.

     Feedback markus@, naddy@; manpage bits Loganden Velvindron @ AfriNIC
     ok markus@ naddy@
21 files changed
tree: 6e6aa82b73163bcb412920050d98f82ca9f4e86e
  1. contrib/
  2. openbsd-compat/
  3. regress/
  4. scard/
  5. .cvsignore
  6. aclocal.m4
  7. addrmatch.c
  8. atomicio.c
  9. atomicio.h
  10. audit-bsm.c
  11. audit-linux.c
  12. audit.c
  13. audit.h
  14. auth-bsdauth.c
  15. auth-chall.c
  16. auth-krb5.c
  17. auth-options.c
  18. auth-options.h
  19. auth-pam.c
  20. auth-pam.h
  21. auth-passwd.c
  22. auth-rh-rsa.c
  23. auth-rhosts.c
  24. auth-rsa.c
  25. auth-shadow.c
  26. auth-sia.c
  27. auth-sia.h
  28. auth-skey.c
  29. auth.c
  30. auth.h
  31. auth1.c
  32. auth2-chall.c
  33. auth2-gss.c
  34. auth2-hostbased.c
  35. auth2-jpake.c
  36. auth2-kbdint.c
  37. auth2-none.c
  38. auth2-passwd.c
  39. auth2-pubkey.c
  40. auth2.c
  41. authfd.c
  42. authfd.h
  43. authfile.c
  44. authfile.h
  45. bufaux.c
  46. bufbn.c
  47. bufec.c
  48. buffer.c
  49. buffer.h
  50. buildpkg.sh.in
  51. canohost.c
  52. canohost.h
  53. chacha.c
  54. chacha.h
  55. ChangeLog
  56. channels.c
  57. channels.h
  58. cipher-3des1.c
  59. cipher-aes.c
  60. cipher-bf1.c
  61. cipher-chachapoly.c
  62. cipher-chachapoly.h
  63. cipher-ctr.c
  64. cipher.c
  65. cipher.h
  66. cleanup.c
  67. clientloop.c
  68. clientloop.h
  69. compat.c
  70. compat.h
  71. compress.c
  72. compress.h
  73. config.guess
  74. config.sub
  75. configure.ac
  76. crc32.c
  77. crc32.h
  78. CREDITS
  79. deattack.c
  80. deattack.h
  81. defines.h
  82. dh.c
  83. dh.h
  84. dispatch.c
  85. dispatch.h
  86. dns.c
  87. dns.h
  88. entropy.c
  89. entropy.h
  90. fatal.c
  91. fixalgorithms
  92. fixpaths
  93. fixprogs
  94. groupaccess.c
  95. groupaccess.h
  96. gss-genr.c
  97. gss-serv-krb5.c
  98. gss-serv.c
  99. hostfile.c
  100. hostfile.h
  101. includes.h
  102. INSTALL
  103. install-sh
  104. jpake.c
  105. jpake.h
  106. kex.c
  107. kex.h
  108. kexc25519.c
  109. kexc25519c.c
  110. kexc25519s.c
  111. kexdh.c
  112. kexdhc.c
  113. kexdhs.c
  114. kexecdh.c
  115. kexecdhc.c
  116. kexecdhs.c
  117. kexgex.c
  118. kexgexc.c
  119. kexgexs.c
  120. key.c
  121. key.h
  122. krl.c
  123. krl.h
  124. LICENCE
  125. log.c
  126. log.h
  127. loginrec.c
  128. loginrec.h
  129. logintest.c
  130. mac.c
  131. mac.h
  132. Makefile.in
  133. match.c
  134. match.h
  135. md-sha256.c
  136. md5crypt.c
  137. md5crypt.h
  138. mdoc2man.awk
  139. misc.c
  140. misc.h
  141. mkinstalldirs
  142. moduli
  143. moduli.5
  144. moduli.c
  145. monitor.c
  146. monitor.h
  147. monitor_fdpass.c
  148. monitor_fdpass.h
  149. monitor_mm.c
  150. monitor_mm.h
  151. monitor_wrap.c
  152. monitor_wrap.h
  153. msg.c
  154. msg.h
  155. mux.c
  156. myproposal.h
  157. nchan.c
  158. nchan.ms
  159. nchan2.ms
  160. openssh.xml.in
  161. opensshd.init.in
  162. OVERVIEW
  163. packet.c
  164. packet.h
  165. pathnames.h
  166. pkcs11.h
  167. platform.c
  168. platform.h
  169. poly1305.c
  170. poly1305.h
  171. progressmeter.c
  172. progressmeter.h
  173. PROTOCOL
  174. PROTOCOL.agent
  175. PROTOCOL.certkeys
  176. PROTOCOL.chacha20poly1305
  177. PROTOCOL.krl
  178. PROTOCOL.mux
  179. readconf.c
  180. readconf.h
  181. README
  182. README.dns
  183. README.platform
  184. README.privsep
  185. README.tun
  186. readpass.c
  187. rijndael.c
  188. rijndael.h
  189. roaming.h
  190. roaming_client.c
  191. roaming_common.c
  192. roaming_dummy.c
  193. roaming_serv.c
  194. rsa.c
  195. rsa.h
  196. sandbox-darwin.c
  197. sandbox-null.c
  198. sandbox-rlimit.c
  199. sandbox-seccomp-filter.c
  200. sandbox-systrace.c
  201. schnorr.c
  202. schnorr.h
  203. scp.1
  204. scp.c
  205. servconf.c
  206. servconf.h
  207. serverloop.c
  208. serverloop.h
  209. session.c
  210. session.h
  211. sftp-client.c
  212. sftp-client.h
  213. sftp-common.c
  214. sftp-common.h
  215. sftp-glob.c
  216. sftp-server-main.c
  217. sftp-server.8
  218. sftp-server.c
  219. sftp.1
  220. sftp.c
  221. sftp.h
  222. smult_curve25519_ref.c
  223. ssh-add.1
  224. ssh-add.c
  225. ssh-agent.1
  226. ssh-agent.c
  227. ssh-dss.c
  228. ssh-ecdsa.c
  229. ssh-gss.h
  230. ssh-keygen.1
  231. ssh-keygen.c
  232. ssh-keyscan.1
  233. ssh-keyscan.c
  234. ssh-keysign.8
  235. ssh-keysign.c
  236. ssh-pkcs11-client.c
  237. ssh-pkcs11-helper.8
  238. ssh-pkcs11-helper.c
  239. ssh-pkcs11.c
  240. ssh-pkcs11.h
  241. ssh-rsa.c
  242. ssh-sandbox.h
  243. ssh.1
  244. ssh.c
  245. ssh.h
  246. ssh1.h
  247. ssh2.h
  248. ssh_config
  249. ssh_config.5
  250. sshconnect.c
  251. sshconnect.h
  252. sshconnect1.c
  253. sshconnect2.c
  254. sshd.8
  255. sshd.c
  256. sshd_config
  257. sshd_config.5
  258. sshlogin.c
  259. sshlogin.h
  260. sshpty.c
  261. sshpty.h
  262. sshtty.c
  263. survey.sh.in
  264. TODO
  265. ttymodes.c
  266. ttymodes.h
  267. uidswap.c
  268. uidswap.h
  269. umac.c
  270. umac.h
  271. uuencode.c
  272. uuencode.h
  273. version.h
  274. xmalloc.c
  275. xmalloc.h