openssh - openssh

	Commit message (Collapse)	Author	Age	Files	Lines
*	Disable sntrup761 if compiler doesn't support VLAs.	Darren Tucker	2021-01-26	1	-1/+3
\| \| \| \| \| \| \| \| \| \| \|	The sntrup761 code sourced from supercop uses variable length arrays. Although widely supported, they are not part of the ANSI C89 spec so if the compiler does not support VLAs, disable the sntrup761x25519-sha512@openssh.com KEX method by replacing the kex functions with no-op ones similar to what we do in kexecdh.c. This should allow OpenSSH to build with a plain C89 compiler again. Spotted by tim@, ok djm@.
*	upstream: Update the sntrup761 creation script and generated code:	dtucker@openbsd.org	2021-01-08	1	-105/+11
\| \| \| \| \| \| \| \| \| \| \| \|	- remove unneeded header files and typedefs and rely on crypto_api.h - add defines to map types used to the crypto_api ones instead of typedefs. This prevents typedef name collisions in -portable. - remove CRYPTO_NAMESPACE entirely instead of making it a no-op - delete unused functions and make the remaining ones that aren't exported static. ok djm@ OpenBSD-Commit-ID: 7b9d0cf3acd5a3c1091da8afe00c904d38cf5783
*	upstream: estructure sntrup761.sh to process all files in a single	dtucker@openbsd.org	2021-01-08	1	-2/+13
\| \| \| \| \| \| \|	list, which will make it easier to reorder. Re-inline int32_MINMAX. ok tobhe@ OpenBSD-Commit-ID: d145c6c19b08bb93c9e14bfaa7af589d90f144c0
*	upstream: Prevent redefinition of `crypto_int32' error with gcc3.	tobhe@openbsd.org	2021-01-08	1	-2/+1
\| \| \| \| \| \| \| \| \|	Fixes compilation on luna88k. Feedback millert@ Found by and ok aoyama@ OpenBSD-Commit-ID: f305ddfe575a26cc53431af3fde3f4aeebed9ba6
*	Undef int32 after sort routines.	Darren Tucker	2021-01-01	1	-0/+2
\| \| \| \| \|	This prevents typedef'ing crypto_int32 twice, in sntrup761.c and crypto_api.h, which some compilers (at least some GCCs) don't accept.
*	fix: missing pieces of previous commit	Damien Miller	2020-12-31	1	-13/+2
\|
*	upstream: Update/replace the experimental post-quantim hybrid key	djm@openbsd.org	2020-12-29	1	-0/+1364
	exchange method based on Streamlined NTRU Prime (coupled with X25519). The previous sntrup4591761x25519-sha512@tinyssh.org method is replaced with sntrup761x25519-sha512@openssh.com. Per the authors, sntrup4591761 was replaced almost two years ago by sntrup761. The sntrup761 implementaion, like sntrup4591761 before it, is public domain code extracted from the SUPERCOP cryptography benchmark suite (https://bench.cr.yp.to/supercop.html). Thanks for Daniel J Bernstein for guidance on algorithm selection. Patch from Tobias Heider; feedback & ok markus@ and myself (note this both the updated method and the one that it replaced are disabled by default) OpenBSD-Commit-ID: 2bf582b772d81ee24e911bb6f4b2aecfd39338ae