diff options
author | Damien Miller <djm@mindrot.org> | 2013-11-21 14:12:23 +1100 |
---|---|---|
committer | Damien Miller <djm@mindrot.org> | 2013-11-21 14:12:23 +1100 |
commit | 0fde8acdad78a4d20cadae974376cc0165f645ee (patch) | |
tree | 6e6aa82b73163bcb412920050d98f82ca9f4e86e /myproposal.h | |
parent | fdb2306acdc3eb2bc46b6dfdaaf6005c650af22a (diff) |
- djm@cvs.openbsd.org 2013/11/21 00:45:44
[Makefile.in PROTOCOL PROTOCOL.chacha20poly1305 authfile.c chacha.c]
[chacha.h cipher-chachapoly.c cipher-chachapoly.h cipher.c cipher.h]
[dh.c myproposal.h packet.c poly1305.c poly1305.h servconf.c ssh.1]
[ssh.c ssh_config.5 sshd_config.5] Add a new protocol 2 transport
cipher "chacha20-poly1305@openssh.com" that combines Daniel
Bernstein's ChaCha20 stream cipher and Poly1305 MAC to build an
authenticated encryption mode.
Inspired by and similar to Adam Langley's proposal for TLS:
http://tools.ietf.org/html/draft-agl-tls-chacha20poly1305-03
but differs in layout used for the MAC calculation and the use of a
second ChaCha20 instance to separately encrypt packet lengths.
Details are in the PROTOCOL.chacha20poly1305 file.
Feedback markus@, naddy@; manpage bits Loganden Velvindron @ AfriNIC
ok markus@ naddy@
Diffstat (limited to 'myproposal.h')
-rw-r--r-- | myproposal.h | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/myproposal.h b/myproposal.h index 8da2ac91f..71dbc997e 100644 --- a/myproposal.h +++ b/myproposal.h | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: myproposal.h,v 1.33 2013/11/02 21:59:15 markus Exp $ */ | 1 | /* $OpenBSD: myproposal.h,v 1.34 2013/11/21 00:45:44 djm Exp $ */ |
2 | 2 | ||
3 | /* | 3 | /* |
4 | * Copyright (c) 2000 Markus Friedl. All rights reserved. | 4 | * Copyright (c) 2000 Markus Friedl. All rights reserved. |
@@ -104,6 +104,7 @@ | |||
104 | "aes128-ctr,aes192-ctr,aes256-ctr," \ | 104 | "aes128-ctr,aes192-ctr,aes256-ctr," \ |
105 | "arcfour256,arcfour128," \ | 105 | "arcfour256,arcfour128," \ |
106 | AESGCM_CIPHER_MODES \ | 106 | AESGCM_CIPHER_MODES \ |
107 | "chacha20-poly1305@openssh.com," \ | ||
107 | "aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc," \ | 108 | "aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc," \ |
108 | "aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se" | 109 | "aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se" |
109 | 110 | ||