New commits:
commit 4c3de8925c7b868cc945f195df1b52dadab613a3
Author: Paul Wouters <[email protected]>
Date: Wed Jan 6 00:24:04 2016 -0500
updated changes
commit 6b979985129717228be3ddac8bde8b96420ba648
Author: Paul Wouters <[email protected]>
Date: Wed Jan 6 00:15:31 2016 -0500
testing: renamed ikev2-06-6msg to ikev2-dcookie-01 and added 02 and 03 tests
commit d935515aeef12225a54ba34478d394ac1f3c0750
Author: Paul Wouters <[email protected]>
Date: Wed Jan 6 00:16:54 2016 -0500
IKEv2: Harden dcookies and nonces
- Split minimum/maximum nonce sizes for IKEv1 and IKEv2
- Raise minimum nonce size in IKEv2 from 8 to 16 bytes as per RFC-7296
- Raise the default nonce size for IKEv1 and IKEv2 from 16 to 32 bytes
- Add --impair-send-bogus-dcookie option to pluto for testing
- Use SHA2-256 instead of SHA1 as hash algorithm for dcookies
- Validate dcookies even if we did not expect one [violates RFC-7296]
_______________________________________________
Swan-commit mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-commit
