Skip to content
This repository has been archived by the owner on Jul 13, 2023. It is now read-only.

RT110379: Added Lance's AES support #11

Merged
merged 21 commits into from Feb 4, 2016
Merged

RT110379: Added Lance's AES support #11

merged 21 commits into from Feb 4, 2016

Conversation

choroba
Copy link
Contributor

@choroba choroba commented Jan 23, 2016

I resolved all the conflicts. Please verify the changes.

choroba and others added 21 commits January 23, 2016 00:29
aes128-ctr, aes192-ctr, aes256-ctr are all implemented
Requires Crypt::OpenSSL::AES module
Add Group Exchange (RFC4523) Diffie-Hellman Key Exchange
(preferred DH method for security)
Default DH KEX order is now DHGEX256, DH14, DH1
Requires Digest::SHA2
Default MAC order is now sha2-256, sha2-512, sha1, md5
  (Requires Crypt::Curve25519)
Add support for Ed25519 ssh/host keys (Requires Crypt::Ed25519)
Default KEX order is now Curve25519, DHGEXSHA256, DH14, DH1
Default MAC order is now sha2-512, sha2-256, sha1, md5
Now does not abort due to OpenSSH 6.8+ server SSH2_MSG_GLOBAL_REQUEST
  messages for host key rotation
  Encrypt-then-MAC (ETM) MAC support
Use BSD::arc4random for encrypted packet padding
Default MAC order is now hmac-sha2-512-etm@openssh.com,
  hmac-sha2-256-etm@openssh.com, sha2-512, sha2-256, sha1, md5
(Requires Crypt::OpenSSH::ChachaPoly, see README)
Default ciphers order is now chacha,aes,3des,blowfish,arcfour
(Required for encrypted Ed25519 keys anyway)
(RHEL5/OpenSSH 4.3 does not support diffie-hellman-group-exchange-sha256)
Change wanted bits from 2048 to 4096 in DH Group Exchange to match OpenSSH
Replace Digest::SHA1, Digest::SHA2, and Digest::HMAC_SHA1 with Digest::SHA
Conflicts:
	Changes
	MANIFEST
	META.yml
	lib/Net/SSH/Perl.pm
	lib/Net/SSH/Perl/Buffer.pm
	lib/Net/SSH/Perl/Constants.pm
	lib/Net/SSH/Perl/Kex.pm
	lib/Net/SSH/Perl/Kex/DH.pm
	lib/Net/SSH/Perl/Kex/DH1.pm
	lib/Net/SSH/Perl/Kex/DH14.pm
@choroba
Copy link
Contributor Author

choroba commented Jan 23, 2016

This also seems to fix RT99284.

renormalist added a commit that referenced this pull request Feb 4, 2016
RT110379: Added Lance's AES support
@renormalist renormalist merged commit cefd9a9 into renormalist:master Feb 4, 2016
@renormalist
Copy link
Owner

Thank you very much. This is very much how I preferred it but didn't found the time to do it. I should get some spare cycles to do a cpan release from that.

@lkinley
Copy link
Contributor

lkinley commented Mar 15, 2016

I've done quite a bit more work since the 1.42 rebase. I'm also very close to eliminating the need for Math::Pari.

@choroba
Copy link
Contributor Author

choroba commented Mar 15, 2016

Sounds great. Maybe you can rebase your repo onto the merge commit here then to make future merges easier?

renormalist added a commit that referenced this pull request Mar 12, 2017
Sorry all, that I messed up the master branch
with merges I tested too late and pushed too
fast to github.

This commit here is in fact a simple reverse
patch of the differences that piled up
between the v2 and the broken master so that
the v2 can become master again.

Later I can retry to resolve the pull requests
(PR #11 and #12) that I actually wanted to have
in here.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants