CVSROOT: /cvs
Module name: src
Changes by: mar...@cvs.openbsd.org 2012/12/11 15:31:18
Modified files:
usr.bin/ssh : PROTOCOL authfile.c cipher.c cipher.h kex.h
mac.c myproposal.h packet.c ssh_config.5
sshd_config.5
Log message:
add encrypt-then-mac (EtM) modes to openssh by defining new mac algorithms
that change the packet format and compute the MAC over the encrypted
message (including the packet size) instead of the plaintext data;
these EtM modes are considered more secure and used by default.
feedback and ok djm@
