Dirkjan Bussink 4a67c19118 Add tests and implementation for Encrypt-then-MAC mode ...

This adds the OpenSSH HMACs that do encrypt then mac. This is a more
secure mode than the original HMAC. Newer AEAD ciphers like chacha20 and
AES-GCM are already encrypt-then-mac, but this also adds it for older
legacy clients that don't support those ciphers yet.

Signed-off-by: Dirkjan Bussink <d.bussink@gmail.com>
Reviewed-by: Jon Simons <jon@jonsimons.org>
Reviewed-by: Jakub Jelen <jjelen@redhat.com>

2019-02-22 15:31:08 +01:00

..

CMakeLists.txt

tests: Verify that rekey limits are effective from the client side

2019-01-09 10:31:49 +01:00

torture_algorithms.c

Add tests and implementation for Encrypt-then-MAC mode

2019-02-22 15:31:08 +01:00

torture_auth.c

tests: Do not run SSHD with PAM when not needed

2019-01-09 10:14:56 +01:00

torture_client_config.c

tests: Do not run SSHD with PAM when not needed

2019-01-09 10:14:56 +01:00

torture_connect.c

tests: Do not run SSHD with PAM when not needed

2019-01-09 10:14:56 +01:00

torture_forward.c

tests: Allow to generate unencrypted PCAP files from testsuite

2019-01-09 10:14:56 +01:00

torture_hostkey.c

tests: Do not run SSHD with PAM when not needed

2019-01-09 10:14:56 +01:00

torture_knownhosts_verify.c

tests: Do not run SSHD with PAM when not needed

2019-01-09 10:14:56 +01:00

torture_knownhosts.c

tests: Prefer assert_non_null() over assert_false()

2019-01-26 13:56:22 +01:00

torture_proxycommand.c

tests: Do not run SSHD with PAM when not needed

2019-01-09 10:14:56 +01:00

torture_rekey.c

tests: Refactor the sftp initilization to avoid invalid memory access on sftp failures

2019-01-11 15:06:56 +01:00

torture_request_env.c

tests: Allow to generate unencrypted PCAP files from testsuite

2019-01-09 10:14:56 +01:00

torture_session.c

tests: Allow to generate unencrypted PCAP files from testsuite

2019-01-09 10:14:56 +01:00

torture_sftp_benchmark.c

tests: Allow to generate unencrypted PCAP files from testsuite

2019-01-09 10:14:56 +01:00

torture_sftp_canonicalize_path.c

tests: Allow to generate unencrypted PCAP files from testsuite

2019-01-09 10:14:56 +01:00

torture_sftp_dir.c

tests: Prefer assert_non_null() over assert_false()

2019-01-26 13:56:22 +01:00

torture_sftp_ext.c

tests: Prefer assert_non_null() over assert_false()

2019-01-26 13:56:22 +01:00

torture_sftp_fsync.c

tests: Allow to generate unencrypted PCAP files from testsuite

2019-01-09 10:14:56 +01:00

torture_sftp_read.c

tests: Allow to generate unencrypted PCAP files from testsuite

2019-01-09 10:14:56 +01:00