*** empty log message ***

Rev: ChangeLog:1.446
Rev: NEWS:1.89
Rev: README:1.20
Rev: src/nettle/ChangeLog:1.51

ChangeLog

+2001-12-14  Niels Mller  <nisse@cuckoo.hack.org>
+
+	* Released lsh-1.3.6.
+
+	* src/testsuite/Makefile.am (CLEANFILES, DISTCLEANFILES): Added
+	fiels generated by the test, in order to make make distcheck
+	happy. 
+
+	* src/used_headers: Update for automake-1.5, dependency files are
+	now named foo.Po.
+
+	* src/Makefile.am.in: Changed rules for prime_table.h and
+	digit_table.h. Now they depend only on the source file, not on the
+	executable. 
+
+	* doc/lsh.texinfo (lsh-make-seed): New section.
+	(Files and environment variables): Wrote a file list.
+
+2001-12-12  Niels Mller  <nisse@cuckoo.hack.org>
+
+	* doc/lsh.texinfo (Files and environment variables): Documented
+	environment variables.
+
+	* misc/make-dist: Deleted the strip_rsa function.
+
+	* src/testsuite/functions.sh (LSH_YARROW_SEED_FILE): Export
+	variable. Also create the seed file if needed.
+
+	* src/testsuite/seed-test: Use the -q --sloppy flags when invoking
+	lsh-make-seed. 
+
+	* src/sexp.c (sexp_format): Add newline at the end of the
+	"advanced" syntax representation. Changed all internal uses of
+	sexp_format to use the method SEXP_FORMAT instead.
+
+	* src/sexp-conv.c (main): Deleted code for newline-terminating
+	output. 
+
+	* src/rsa.c (make_rsa_signer): Call mpz_init for all bignum
+	instance variables.
+
+	* src/lsh-make-seed.c: New option --server.
+	(main): If invoked with the quiet option (-q), never ask the user
+	to type randomly.
+
+	* src/lock_file.h (LSH_FILE_LOCK): New argument RETRIES.
+
+	* src/lock_file.c (do_lsh_file_lock): If locking fails,
+	optionally retry a few times.
+
+	* src/client_x11.c (make_forward_x11): Assert that the randomness
+	generator is of "good" quality.
+	* src/rsa_keygen.c (rsa_generate_key): Likewise.
+	* src/keyexchange.c (make_simple_kexinit): Likewise.
+	* src/dsa_keygen.c (dsa_generate_key): Likewise.
+	* src/dsa.c (generic_dsa_sign): Likewise.
+	* src/dh_exchange.c (make_dh): Likewise.
+
+	* src/Makefile.am.in (sbin_PROGRAMS): Install lsh-krb-checkpw in
+	$prefix/sbin, not $prefix/bin.
+
+	* src/randomness.c: Deleted old generators.
+
+	* src/randomness.h: Deleted all classes but randomness. New method
+	RANDOM_ADD. 
+
+	* src/unix_random.c: Rewrote to use yarrow. Updated users.
+
+	* src/werror.c (werror_progress): Fixed test of verbose and quite
+	flags. 
+
+2001-12-08  Niels Mller  <nisse@cuckoo.hack.org>
+
+	* src/lsh-pam-checkpw.c: New helper program for verifying
+	passwords against PAM. Written by Pontus Skld.
+
+2001-12-07  Niels Mller  <nisse@cuckoo.hack.org>
+
+	* src/unix_user.c: Added comments on how to fix use of setuid.
+
+	* src/lsh-make-seed.c: Added option --sloppy.
+
+	* src/lsh-execuv.c: New file. Helper program for securely exec:ing
+	user programs. 
+
 2001-12-05  Niels Mller  <nisse@cuckoo.hack.org>
 
 	* src/werror.c (werror_progress): New function.

NEWS

+News for the 1.3.6 release
+
+	New randomness generator based on Yarrow-256. Initial seeding
+	is done by a separate program, lsh-make-seed. See the manual
+	or the README file.
+
+	Manual update, new section describing the files and
+	environment variables that are used.
+
+	Various bug-fixes.
+
 News for the 1.3.5 release:
 
 	Fixed window change handling in lshd.

README

@@ -55,6 +55,18 @@ liboop (version 0.7 or better) can be found at www.liboop.org.
 
 GETTING STARTED
 
+After install, the first thing you need to do is creating a seed-file
+for the randomness generator. Use
+
+  lsh-make-seed
+
+to create a personal seed file. If you want to run the lshd server,
+you also need to run
+
+  lsh-make-seed-file --server
+
+as root.
+
 Some examples...
 
 Create a new DSS key pair, and save it in NEW_KEY and NEW_KEY.pub:
@@ -86,8 +98,9 @@ details.
 If you are interested in lsh, you may want to subscribe to the
 psst-list. Subscription address is psst-request@net.lut.ac.uk.
 
-Current snapshots of lsh can be found at
-<URL: http://www.lysator.liu.se/~nisse/archive/>.
-
+LSH releases are available at
+<URL: http://www.lysator.liu.se/~nisse/archive/> and <URL:
+ftp://ftp.lysator.liu.se/pub/security/lsh>.
 
+Happy hacking,
 /Niels Möller <nisse@lysator.liu.se>

src/nettle/ChangeLog

+2001-12-14  Niels Mller  <nisse@cuckoo.hack.org>
+
+	* Makefile.am (EXTRA_DIST): Added $(des_headers). Changed
+	dependencies for $(des_headers) to depend only on the source file
+	desdata.c, not on the executable.	
+
 2001-12-12  Niels Mller  <nisse@cuckoo.hack.org>
 
 	* testsuite/yarrow-test.c (main): Updated testcase to match fixed