]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Add SRA authentication to src/crypto/telnet.
authornsayer <nsayer@FreeBSD.org>
Mon, 16 Aug 1999 11:24:29 +0000 (11:24 +0000)
committernsayer <nsayer@FreeBSD.org>
Mon, 16 Aug 1999 11:24:29 +0000 (11:24 +0000)
commit189690bcceec94a2b595d9e6d6beca23cd68b5cd
tree131b7d42306f643dcbd0094169238875d98500cf
parent07419aec715eccc813e53ff53f4dd3dfe4c1298a
Add SRA authentication to src/crypto/telnet.

SRA does a Diffie-Hellmen exchange and then DES-encrypts the
authentication data. If the authentication is successful, it also
sets up a session key for DES encryption.

SRA was originally developed at Texas A&M University.

This code is probably export restricted (despite the fact that I
originally found it at a University in Germany).

SRA is not perfect. It is vulnerable to monkey-in-the-middle attacks
and does not use tremendously large DH constants (and thus an individual
exchange probably could be factored in a few days on modern CPU
horsepower). It does not, however, require any changes in user or
administrative behavior and foils session hijacking and sniffing.
The goal of this commit is that telnet and telnetd end up in the DES
distribution and that therefore an encrypted session telnet becomes
standard issue for FreeBSD.
26 files changed:
contrib/telnet/Makefile [new file with mode: 0644]
contrib/telnet/arpa/telnet.h
contrib/telnet/libtelnet/Makefile [new file with mode: 0644]
contrib/telnet/libtelnet/auth-proto.h
contrib/telnet/libtelnet/auth.c
contrib/telnet/libtelnet/enc-proto.h
contrib/telnet/libtelnet/encrypt.c
contrib/telnet/libtelnet/encrypt.h
contrib/telnet/libtelnet/pk.c [new file with mode: 0644]
contrib/telnet/libtelnet/pk.h [new file with mode: 0644]
contrib/telnet/libtelnet/sra.c [new file with mode: 0644]
contrib/telnet/telnet/Makefile [new file with mode: 0644]
contrib/telnet/telnetd/Makefile [new file with mode: 0644]
crypto/telnet/Makefile [new file with mode: 0644]
crypto/telnet/arpa/telnet.h
crypto/telnet/libtelnet/Makefile [new file with mode: 0644]
crypto/telnet/libtelnet/auth-proto.h
crypto/telnet/libtelnet/auth.c
crypto/telnet/libtelnet/enc-proto.h
crypto/telnet/libtelnet/encrypt.c
crypto/telnet/libtelnet/encrypt.h
crypto/telnet/libtelnet/pk.c [new file with mode: 0644]
crypto/telnet/libtelnet/pk.h [new file with mode: 0644]
crypto/telnet/libtelnet/sra.c [new file with mode: 0644]
crypto/telnet/telnet/Makefile [new file with mode: 0644]
crypto/telnet/telnetd/Makefile [new file with mode: 0644]