* src/atoms.in: Add hmac-sha2-256, hmac-sha2-512 (RFC 6680),
delete hmac-md5.
* src/algorithms.c (all_symmetric_algorithms): Add hmac-sha2-256
and hmac-sha2-512. Delete hmac-md5.
(default_mac_algorithms): Add hmac-sha2-256 (preferred) and
hmac-sha2-512. Delete hmac-md5.
(lookup_mac): Update recognized mac options. Add "hmac-sha256",
"sha256", "hmac-sha512", "sha512", keep "hmac-sha1", "sha1",
delete "sha", "hmac-sha", "hmac-md5", "md5"
* src/ssh.h (SSH_MAX_MAC_SIZE): Increase to 64, for sha512.
* src/lsh-transport.c (read_user_key): Delete hmac-md5, replaced with
hmac-sha2-256, hmac-sha2-512, for spki_pkcs5_decrypt.
* src/lsh-decrypt-key.c (main): Likewise.

Rev: src/algorithms.c:1.44

Rev: ChangeLog:1.1035
Rev: src/algorithms.c:1.43
Rev: src/crypto.c:1.43
Rev: src/crypto.h:1.41
Rev: src/dh_exchange.c:1.24
Rev: src/keyexchange.c:1.103
Rev: src/keyexchange.h:1.64
Rev: src/lsh-export-key.c:1.25
Rev: src/lsh-transport.c:1.21
Rev: src/lshd.c:1.188
Rev: src/pkcs5-test.c:1.8
Rev: src/spki.c:1.66
Rev: src/spki.h:1.37
Rev: src/srp-gen.c:1.29
Rev: src/srp.h:1.10
Rev: src/srp_exchange.c:1.24
Rev: src/testsuite/md5-test.c:1.2
Rev: src/testsuite/sha1-test.c:1.2
Rev: src/testsuite/testutils.c:1.13
Rev: src/testsuite/testutils.h:1.10
Rev: src/transport.c:1.17
Rev: src/transport.h:1.13

and aes128-ctr.
(all_crypto_algorithms): Likewise.
(default_crypto_algorithms): Replaced aes256-cbc by aes128-ctr, as
the preferred choice.
(lookup_crypto): Added "aes128-cbc" with alias "aes-cbc", added
"aes-128-ctr" with aliases "aes", "aes128", "aes-ctr". Removed
some aliases for "aes256-cbc" and "aes256-ctr", including the old
"rijndael" alias.

Rev: src/algorithms.c:1.42

Rev: src/algorithms.c:1.41
Rev: src/algorithms.h:1.14

Rev: src/algorithms.c:1.40
Rev: src/channel.h:1.80
Rev: src/connection.h:1.79

* src/algorithms.c (all_symmetric_algorithms): Deleted
ATOM_SERPENT_CBC_LOCAL.
(all_crypto_algorithms): Likewise.

Rev: src/algorithms.c:1.39
Rev: src/atoms.in:1.40

metasyntactic variables in help output, to match other GNU
programs.

Rev: src/algorithms.c:1.36.2.3

ATOM_AES256_CTR.
(all_crypto_algorithms): Likewise.
(lookup_crypto): Check for "aes256-ctr" and "aes-ctr".

Rev: src/algorithms.c:1.37

and publickey_crypto.h.

Rev: src/algorithms.c:1.36.2.2
Rev: src/algorithms.h:1.12.2.2
Rev: src/client_keyexchange.c:1.68.2.4
Rev: src/client_userauth.c:1.61.2.1
Rev: src/dh_exchange.c:1.20.2.5
Rev: src/dsa.c:1.42.2.2
Rev: src/keyexchange.c:1.94.2.4
Rev: src/keyexchange.h:1.60.2.6
Rev: src/lsh-decode-key.c:1.22.2.2
Rev: src/lsh-decrypt-key.c:1.2.2.2
Rev: src/lsh-keygen.c:1.20.2.2
Rev: src/lsh-transport.c:1.1.2.8
Rev: src/lsh-writekey.c:1.40.2.2
Rev: src/lsh.c:1.200.2.4
Rev: src/lsh_string.c:1.2.2.4
Rev: src/lshd-userauth.c:1.1.2.9
Rev: src/lshd.c:1.170.2.24
Rev: src/lshd.h:1.1.2.9
Rev: src/randomness.h:1.16.2.1
Rev: src/read_packet.h:1.11.2.1
Rev: src/rsa.c:1.29.2.2
Rev: src/server_keyexchange.c:1.58.2.8
Rev: src/spki.c:1.58.2.1
Rev: src/spki.h:1.32.2.1
Rev: src/srp_exchange.c:1.21.2.1
Rev: src/transport.h:1.7.2.9

(default_hostkey_algorithms): New function. Disabled spki support.
(default_compression_algorithms, default_mac_algorithms)
(default_crypto_algorithms): Made non-static.

Rev: src/algorithms.c:1.36.2.1
Rev: src/algorithms.h:1.12.2.1

(all_symmetric_algorithms): Deleted old aes alias
rijndael-cbc@lysator.liu.se. Added official serpent name
serpent256-cbc. The alias serpent-cbc@lysator.liu.se should be
removed at a later date.
(all_crypto_algorithms): Likewise.
(lookup_crypto): Likewise.

Rev: src/algorithms.c:1.36
Rev: src/algorithms.h:1.12

config.h.

Rev: src/abstract_compress.c:1.6
Rev: src/abstract_io.c:1.5
Rev: src/algorithms.c:1.35
Rev: src/alist.c:1.23
Rev: src/bignum.c:1.24
Rev: src/channel_commands.c:1.28
Rev: src/client_keyexchange.c:1.62
Rev: src/client_pty.c:1.26
Rev: src/client_x11.c:1.24
Rev: src/combinators.c:1.19
Rev: src/compress.c:1.10
Rev: src/connection_commands.c:1.43
Rev: src/crypto.c:1.35
Rev: src/daemon.c:1.11
Rev: src/dh_exchange.c:1.16
Rev: src/dsa.c:1.39
Rev: src/dsa_keygen.c:1.26
Rev: src/encrypt.c:1.26
Rev: src/format.c:1.53
Rev: src/interact.c:1.7
Rev: src/jpoll.c:1.8
Rev: src/list.c:1.10
Rev: src/lock_file.c:1.7
Rev: src/lookup_verifier.c:1.4
Rev: src/lsh-export-key.c:1.18
Rev: src/lsh-keygen.c:1.17
Rev: src/lsh-krb-checkpw.c:1.5
Rev: src/lsh-make-seed.c:1.12
Rev: src/lsh-writekey.c:1.31
Rev: src/lsh.c:1.186
Rev: src/lsh_argp.h:1.3
Rev: src/lsh_proxy.c:1.36
Rev: src/lshd.c:1.158
Rev: src/lshg.c:1.22
Rev: src/memcmp.c:1.3
Rev: src/pad.c:1.27
Rev: src/parse.c:1.38
Rev: src/pkcs5-test.c:1.7
Rev: src/pkcs5.c:1.8
Rev: src/proxy.c:1.17
Rev: src/proxy_agentforward.c:1.6
Rev: src/proxy_session.c:1.11
Rev: src/proxy_tcpforward.c:1.8
Rev: src/proxy_userauth.c:1.14
Rev: src/proxy_x11forward.c:1.7
Rev: src/randomness.c:1.29
Rev: src/read_packet.c:1.54
Rev: src/reaper.c:1.26
Rev: src/resource.c:1.27
Rev: src/rsa.c:1.28
Rev: src/rsa_keygen.c:1.16
Rev: src/server.c:1.74
Rev: src/server_authorization.c:1.21
Rev: src/server_keyexchange.c:1.55
Rev: src/sexp.c:1.48
Rev: src/spki.c:1.51
Rev: src/srp-gen.c:1.18
Rev: src/srp_exchange.c:1.19
Rev: src/suspend.c:1.5
Rev: src/testsuite/testutils.h:1.7
Rev: src/translate_signal.c:1.6
Rev: src/tty.c:1.18
Rev: src/unix_random.c:1.15
Rev: src/userauth.c:1.7
Rev: src/version.h:1.10

UINT32. Include files in the order config.h, C headers, system
headers, lsh headers. Deleted RCS id stings. Affects most files.

Rev: src/abstract_compress.c:1.5
Rev: src/abstract_compress.h:1.6
Rev: src/abstract_crypto.c:1.23
Rev: src/abstract_crypto.h:1.42
Rev: src/abstract_io.c:1.4
Rev: src/abstract_io.h:1.35
Rev: src/adns.c:1.4
Rev: src/algorithms.c:1.34
Rev: src/algorithms.h:1.10
Rev: src/alist.c:1.22
Rev: src/alist.h:1.18
Rev: src/atoms.c:1.13
Rev: src/atoms.h:1.8
Rev: src/bignum.c:1.23
Rev: src/bignum.h:1.21
Rev: src/channel.c:1.115
Rev: src/channel.h:1.73
Rev: src/channel_commands.c:1.27
Rev: src/channel_commands.h:1.21
Rev: src/channel_forward.c:1.12
Rev: src/channel_forward.h:1.6
Rev: src/charset.c:1.9
Rev: src/charset.h:1.5
Rev: src/client.c:1.147
Rev: src/client.h:1.52
Rev: src/client_escape.c:1.7
Rev: src/client_keyexchange.c:1.61
Rev: src/client_keyexchange.h:1.18
Rev: src/client_pty.c:1.24
Rev: src/client_session.c:1.20
Rev: src/client_userauth.c:1.53
Rev: src/client_x11.c:1.22
Rev: src/combinators.c:1.18
Rev: src/command.c:1.49
Rev: src/command.h:1.62
Rev: src/compress.c:1.9
Rev: src/compress.h:1.4
Rev: src/connection.c:1.74
Rev: src/connection.h:1.67
Rev: src/connection_commands.c:1.42
Rev: src/connection_commands.h:1.19
Rev: src/crypto.c:1.34
Rev: src/crypto.h:1.32
Rev: src/daemon.c:1.10
Rev: src/daemon.h:1.4
Rev: src/debug.c:1.37
Rev: src/debug.h:1.17
Rev: src/dh_exchange.c:1.15
Rev: src/dsa.c:1.38
Rev: src/dsa_keygen.c:1.25
Rev: src/encrypt.c:1.25
Rev: src/encrypt.h:1.11
Rev: src/exception.c:1.18
Rev: src/exception.h:1.28
Rev: src/format.c:1.52
Rev: src/format.h:1.40
Rev: src/gateway.c:1.8
Rev: src/gateway.h:1.2
Rev: src/gateway_channel.c:1.15
Rev: src/gateway_channel.h:1.6
Rev: src/gateway_commands.c:1.19
Rev: src/gateway_commands.h:1.5
Rev: src/gc.c:1.31
Rev: src/gc.h:1.12
Rev: src/handshake.c:1.16
Rev: src/handshake.h:1.6
Rev: src/interact.c:1.6
Rev: src/interact.h:1.10
Rev: src/io.c:1.182
Rev: src/io.h:1.99
Rev: src/io_commands.c:1.60
Rev: src/io_commands.h:1.30
Rev: src/jpoll.h:1.4
Rev: src/keyexchange.c:1.89
Rev: src/keyexchange.h:1.57
Rev: src/list.c:1.9
Rev: src/list.h:1.10
Rev: src/lookup_verifier.c:1.3
Rev: src/lookup_verifier.h:1.8
Rev: src/lsh-decode-key.c:1.20
Rev: src/lsh-execuv.c:1.5
Rev: src/lsh-export-key.c:1.17
Rev: src/lsh-keygen.c:1.16
Rev: src/lsh-krb-checkpw.c:1.3
Rev: src/lsh-make-seed.c:1.11
Rev: src/lsh-pam-checkpw.c:1.6
Rev: src/lsh-writekey.c:1.30
Rev: src/lsh.c:1.178
Rev: src/lsh.h:1.28
Rev: src/lsh_argp.h:1.2
Rev: src/lsh_proxy.c:1.35
Rev: src/lsh_types.h:1.45
Rev: src/lshd.c:1.149
Rev: src/lshg.c:1.19
Rev: src/memxor.c:1.2
Rev: src/memxor.h:1.2
Rev: src/pad.c:1.26
Rev: src/pad.h:1.12
Rev: src/parse.c:1.37
Rev: src/parse.h:1.27
Rev: src/parse_config.c:1.4
Rev: src/parse_config.h:1.3
Rev: src/parse_macros.h:1.4
Rev: src/pkcs5.c:1.7
Rev: src/proxy.c:1.16
Rev: src/proxy.h:1.7
Rev: src/proxy_agentforward.c:1.5
Rev: src/proxy_agentforward.h:1.2
Rev: src/proxy_session.c:1.10
Rev: src/proxy_session.h:1.5
Rev: src/proxy_tcpforward.c:1.7
Rev: src/proxy_tcpforward.h:1.2
Rev: src/proxy_userauth.c:1.13
Rev: src/proxy_userauth.h:1.3
Rev: src/proxy_x11forward.c:1.6
Rev: src/proxy_x11forward.h:1.2
Rev: src/publickey_crypto.c:1.45
Rev: src/publickey_crypto.h:1.48
Rev: src/queue.c:1.11
Rev: src/queue.h:1.13
Rev: src/randomness.c:1.28
Rev: src/randomness.h:1.16
Rev: src/read_data.c:1.36
Rev: src/read_data.h:1.16
Rev: src/read_file.c:1.5
Rev: src/read_file.h:1.2
Rev: src/read_line.c:1.31
Rev: src/read_line.h:1.17
Rev: src/read_packet.c:1.53
Rev: src/read_packet.h:1.11
Rev: src/reaper.c:1.25
Rev: src/reaper.h:1.12
Rev: src/resource.c:1.26
Rev: src/resource.h:1.15
Rev: src/rsa.c:1.27
Rev: src/rsa_keygen.c:1.15
Rev: src/server.c:1.72
Rev: src/server.h:1.21
Rev: src/server_authorization.c:1.20
Rev: src/server_authorization.h:1.6
Rev: src/server_keyexchange.c:1.54
Rev: src/server_keyexchange.h:1.12
Rev: src/server_password.c:1.34
Rev: src/server_pty.c:1.25
Rev: src/server_pty.h:1.14
Rev: src/server_publickey.c:1.23
Rev: src/server_session.c:1.99
Rev: src/server_session.h:1.20
Rev: src/server_userauth.c:1.38
Rev: src/server_userauth.h:1.21
Rev: src/server_x11.c:1.17
Rev: src/server_x11.h:1.7
Rev: src/sexp.c:1.47
Rev: src/sexp.h:1.39
Rev: src/spki.c:1.48
Rev: src/spki.h:1.29
Rev: src/srp-gen.c:1.17
Rev: src/srp.h:1.7
Rev: src/srp_exchange.c:1.18
Rev: src/ssh1_fallback.c:1.14
Rev: src/ssh1_fallback.h:1.6
Rev: src/string_buffer.c:1.10
Rev: src/string_buffer.h:1.5
Rev: src/suspend.c:1.3
Rev: src/suspend.h:1.3
Rev: src/tcpforward.c:1.65
Rev: src/tcpforward.h:1.19
Rev: src/tcpforward_commands.c:1.44
Rev: src/tcpforward_commands.h:1.7
Rev: src/translate_signal.c:1.5
Rev: src/translate_signal.h:1.3
Rev: src/tty.c:1.17
Rev: src/tty.h:1.13
Rev: src/unix_interact.c:1.17
Rev: src/unix_process.c:1.12
Rev: src/unix_random.c:1.13
Rev: src/unix_user.c:1.58
Rev: src/unpad.c:1.21
Rev: src/unpad.h:1.12
Rev: src/userauth.h:1.37
Rev: src/version.h:1.9
Rev: src/werror.c:1.68
Rev: src/werror.h:1.32
Rev: src/write_buffer.c:1.27
Rev: src/write_buffer.h:1.24
Rev: src/xalloc.c:1.32
Rev: src/xalloc.h:1.28
Rev: src/xauth.c:1.10
Rev: src/xauth.h:1.3
Rev: src/zlib.c:1.35

Rev: src/algorithms.c:1.33
Rev: src/client_keyexchange.c:1.60

the list of algorithms.
(list_hostkey_algorithms): dito.

Rev: src/algorithms.c:1.32

(default_crypto_algorithms): Likewise.

Rev: src/algorithms.c:1.31

make_hmac_algorithm.

Rev: src/algorithms.c:1.30

make_hmac_algorithm.

Rev: src/algorithms.c:1.29

rsa-md5.

Rev: src/algorithms.c:1.28

Rev: src/algorithms.c:1.27
Rev: src/testsuite/.cvsignore:1.16
Rev: src/testsuite/Makefile.am:1.37

replacing the code in blowfish.c.

Rev: src/algorithms.c:1.26
Rev: src/crypto.c:1.29
Rev: src/crypto.h:1.28

replacing the code in twofish.c.
(make_des3_cbc_instance): Initialize the iv properly.

Rev: src/algorithms.c:1.25
Rev: src/crypto.c:1.28
Rev: src/crypto.h:1.27

crypto_des3_cbc_algorithm.

Rev: src/algorithms.c:1.24

to rijndael_algorithm with aes256_cbc_algorithm.

Rev: src/algorithms.c:1.23

* src/atoms.in: Likewise.
* src/algorithms.c: Likewise.
* src/Makefile.am.in: Likewise.

Rev: src/Makefile.am.in:1.114
Rev: src/algorithms.c:1.22
Rev: src/atoms.in:1.27
Rev: src/crypto.h:1.23

an alias for rijndael.
(lookup_crypto): Recognize aes256-cbc, aes-cbc and aes.

Rev: src/algorithms.c:1.21

functions may return NULL, and never returns an empty list.

Rev: src/algorithms.c:1.20

with ATOM_SPKI_SIGN_RSA and ATOM_SPKI_SIGN_DSS.
(lookup_hostkey_algorithm): Likewise.

Rev: src/algorithms.c:1.19

Rev: src/algorithms.c:1.18
Rev: src/algorithms.h:1.9

* src/blowfish.c: Likewise.
* src/rijndael.c: Likewise.
* src/crypto.h: Likewise.
* src/twofish.c: Likewise.
* src/cast.c: Likewise.

Rev: src/algorithms.c:1.17
Rev: src/blowfish.c:1.8
Rev: src/cast.c:1.4
Rev: src/crypto.h:1.21
Rev: src/rijndael.c:1.3
Rev: src/twofish.c:1.5

(lookup_hostkey_algorithm): New function.
(algorithms_options): New option --hostkey-algorithm.
(filter_algorithms): New function.
(filter_algorithms_l): New function.

* src/algorithms.c (default_crypto_algorithms): Make the default
list more restrictive.
(all_crypto_algorithms): New function, returning a less
conservative algorithm list.

Rev: src/algorithms.c:1.16
Rev: src/algorithms.h:1.7

Rev: ChangeLog:1.241
Rev: doc/TODO:1.89
Rev: src/algorithms.c:1.15
Rev: src/atoms.in:1.20
Rev: src/blowfish.c:1.7
Rev: src/crypto.h:1.20
Rev: src/rijndael.c:1.2
Rev: src/serpent.c:1.2
Rev: src/symmetric/arcfour.c:1.4