implement "strict key exchange" in ssh and sshd
authordjm <djm@openbsd.org>
Mon, 18 Dec 2023 14:45:17 +0000 (14:45 +0000)
committerdjm <djm@openbsd.org>
Mon, 18 Dec 2023 14:45:17 +0000 (14:45 +0000)
commit622b8b357e5a170eda73ef0e9ac75975f96fed2b
tree49d8828886d6b4f767e56a3df00ac114f3232f5d
parent73fb5aae645f3bc12746fd705a937dfc9f9abc01
implement "strict key exchange" in ssh and sshd

This adds a protocol extension to improve the integrity of the SSH
transport protocol, particular in and around the initial key exchange
(KEX) phase.

Full details of the extension are in the PROTOCOL file.

with markus@
usr.bin/ssh/PROTOCOL
usr.bin/ssh/kex.c
usr.bin/ssh/kex.h
usr.bin/ssh/packet.c
usr.bin/ssh/packet.h
usr.bin/ssh/sshconnect2.c