diff options
Diffstat (limited to 'myproposal.h')
-rw-r--r-- | myproposal.h | 25 |
1 files changed, 14 insertions, 11 deletions
diff --git a/myproposal.h b/myproposal.h index b35b2b8bd..84b63bcd5 100644 --- a/myproposal.h +++ b/myproposal.h | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: myproposal.h,v 1.41 2014/07/11 13:54:34 tedu Exp $ */ | 1 | /* $OpenBSD: myproposal.h,v 1.44 2015/05/27 23:51:10 dtucker Exp $ */ |
2 | 2 | ||
3 | /* | 3 | /* |
4 | * Copyright (c) 2000 Markus Friedl. All rights reserved. | 4 | * Copyright (c) 2000 Markus Friedl. All rights reserved. |
@@ -61,7 +61,7 @@ | |||
61 | 61 | ||
62 | #ifdef OPENSSL_HAVE_EVPGCM | 62 | #ifdef OPENSSL_HAVE_EVPGCM |
63 | # define AESGCM_CIPHER_MODES \ | 63 | # define AESGCM_CIPHER_MODES \ |
64 | "aes128-gcm@openssh.com,aes256-gcm@openssh.com," | 64 | ",aes128-gcm@openssh.com,aes256-gcm@openssh.com" |
65 | #else | 65 | #else |
66 | # define AESGCM_CIPHER_MODES | 66 | # define AESGCM_CIPHER_MODES |
67 | #endif | 67 | #endif |
@@ -83,14 +83,17 @@ | |||
83 | # else | 83 | # else |
84 | # define KEX_CURVE25519_METHODS "" | 84 | # define KEX_CURVE25519_METHODS "" |
85 | # endif | 85 | # endif |
86 | #define KEX_SERVER_KEX \ | 86 | #define KEX_COMMON_KEX \ |
87 | KEX_CURVE25519_METHODS \ | 87 | KEX_CURVE25519_METHODS \ |
88 | KEX_ECDH_METHODS \ | 88 | KEX_ECDH_METHODS \ |
89 | KEX_SHA256_METHODS \ | 89 | KEX_SHA256_METHODS |
90 | "diffie-hellman-group14-sha1" | ||
91 | 90 | ||
92 | #define KEX_CLIENT_KEX KEX_SERVER_KEX "," \ | 91 | #define KEX_SERVER_KEX KEX_COMMON_KEX \ |
92 | "diffie-hellman-group14-sha1" \ | ||
93 | |||
94 | #define KEX_CLIENT_KEX KEX_COMMON_KEX \ | ||
93 | "diffie-hellman-group-exchange-sha1," \ | 95 | "diffie-hellman-group-exchange-sha1," \ |
96 | "diffie-hellman-group14-sha1," \ | ||
94 | "diffie-hellman-group1-sha1" | 97 | "diffie-hellman-group1-sha1" |
95 | 98 | ||
96 | #define KEX_DEFAULT_PK_ALG \ | 99 | #define KEX_DEFAULT_PK_ALG \ |
@@ -108,9 +111,9 @@ | |||
108 | /* the actual algorithms */ | 111 | /* the actual algorithms */ |
109 | 112 | ||
110 | #define KEX_SERVER_ENCRYPT \ | 113 | #define KEX_SERVER_ENCRYPT \ |
111 | "aes128-ctr,aes192-ctr,aes256-ctr," \ | 114 | "chacha20-poly1305@openssh.com," \ |
112 | AESGCM_CIPHER_MODES \ | 115 | "aes128-ctr,aes192-ctr,aes256-ctr" \ |
113 | "chacha20-poly1305@openssh.com" | 116 | AESGCM_CIPHER_MODES |
114 | 117 | ||
115 | #define KEX_CLIENT_ENCRYPT KEX_SERVER_ENCRYPT "," \ | 118 | #define KEX_CLIENT_ENCRYPT KEX_SERVER_ENCRYPT "," \ |
116 | "arcfour256,arcfour128," \ | 119 | "arcfour256,arcfour128," \ |
@@ -148,8 +151,8 @@ | |||
148 | "ssh-ed25519-cert-v01@openssh.com," \ | 151 | "ssh-ed25519-cert-v01@openssh.com," \ |
149 | "ssh-ed25519" | 152 | "ssh-ed25519" |
150 | #define KEX_SERVER_ENCRYPT \ | 153 | #define KEX_SERVER_ENCRYPT \ |
151 | "aes128-ctr,aes192-ctr,aes256-ctr," \ | 154 | "chacha20-poly1305@openssh.com," \ |
152 | "chacha20-poly1305@openssh.com" | 155 | "aes128-ctr,aes192-ctr,aes256-ctr" |
153 | #define KEX_SERVER_MAC \ | 156 | #define KEX_SERVER_MAC \ |
154 | "umac-64-etm@openssh.com," \ | 157 | "umac-64-etm@openssh.com," \ |
155 | "umac-128-etm@openssh.com," \ | 158 | "umac-128-etm@openssh.com," \ |