summaryrefslogtreecommitdiffstats
path: root/crypto/telnet/libtelnet/sra.c
Commit message (Collapse)AuthorAgeFilesLines
* Make the PAM user-override actually override the correect thing.nsayer2001-05-171-3/+3
|
* Make sure the protocol actively rejects bad data rather thannsayer2001-05-161-8/+8
| | | | (potentially) not responding to an invalid SRA 'auth is' message.
* Catch any attempted buffer overflows. The magic numbers in this codensayer2001-05-161-2/+6
| | | | | | | (512) are a little distressing, but the method really needs to be extended to allow server-supplied DH parameters anyway. Submitted by: kris
* Catch malloc return failures. This should help avoid dereferencing NULL onnsayer2001-05-161-0/+8
| | | | | | low-memory situations. Submitted by: kris
* If the uid of the attempted authentication is 0 and if the pty isnsayer2001-05-151-1/+34
| | | | | insecure, do not succeed. Copied from login.c. This functionality really should be a PAM module.
* Pointy hat fix -- reapply the SRA PAM patch. To -current this time.nsayer2001-05-071-0/+133
|
* Add missing $FreeBSD$ to files that are NOT still on vendor a branch.peter2000-07-161-0/+2
|
* Add SRA authentication to src/crypto/telnet.nsayer1999-08-161-0/+478
SRA does a Diffie-Hellmen exchange and then DES-encrypts the authentication data. If the authentication is successful, it also sets up a session key for DES encryption. SRA was originally developed at Texas A&M University. This code is probably export restricted (despite the fact that I originally found it at a University in Germany). SRA is not perfect. It is vulnerable to monkey-in-the-middle attacks and does not use tremendously large DH constants (and thus an individual exchange probably could be factored in a few days on modern CPU horsepower). It does not, however, require any changes in user or administrative behavior and foils session hijacking and sniffing. The goal of this commit is that telnet and telnetd end up in the DES distribution and that therefore an encrypted session telnet becomes standard issue for FreeBSD.
OpenPOWER on IntegriCloud