Spacing, no object change.

space -> tab

No object change.

Remove plain DES encryption from IPsec.

DES is insecure since brute force attacks are practical due to its
short key length.

This removes support for DES-CBC encryption in ESP and in IKE main
and q

Remove plain DES encryption from IPsec.

DES is insecure since brute force attacks are practical due to its
short key length.

This removes support for DES-CBC encryption in ESP and in IKE main
and quick mode from the kernel, isakmpd(8), ipsecctl(8), and iked(8).

ok mikeb@

show more ...

remove excessive includes

convert to fuse cast from the libcrypto. with a simplification nit from
blambert, ok jsg, "seems ok" todd

Switch the remaining users of libdes in src to libcrypto,
telnet portion partially from the latest heimdal.

ok mikeb@

Bump crypto buffer logging (before crypto/after crypto) to level 70 from
level 30. This was a huge cause of log spam at level 30 and below, and is
really not that useful.

Make deterministic randomness (only ever used for testing) a compile-time
option. Reduces chances of somehow setting regrand when it's not supposed
to be set. Remove "-r" option from man page. Als

Make deterministic randomness (only ever used for testing) a compile-time
option. Reduces chances of somehow setting regrand when it's not supposed
to be set. Remove "-r" option from man page. Also xref certpatch(8) while
we are in there. And remove some include sysdep.h where it is no longer
needed.
OK hshoexer

show more ...

simplify

kill USE_DES and USE_TRIPLEDES, why was it ever a choice even?

app.c

un-ifdef USE_BLOWFISH

Do not log before/after crypto blobs at log level 10. Makes -DA=10
useable without enduring pages of hex. OK hshoexer

KNF, style, 80c, etc. hshoexer@ ok

Some more KNF, no binary change.

ok ho@

partial move to KNF. More to come. This has happened because there
are a raft of source code auditors who are willing to help improve this
code only if this is done, and hey, isakmpd does need our

partial move to KNF. More to come. This has happened because there
are a raft of source code auditors who are willing to help improve this
code only if this is done, and hey, isakmpd does need our standard
auditing process. ok ho hshoexer

show more ...

-Wsign-compare nits. hshoexer@ ok.

re-add AES, but without using EVP;
patch from Hans-Joerg.Hoexer at yerbouti.franken.de; ok ho@
(interops with isakmpd+AES in OpenBSD 3.4)

back out EVP change; causes fd leaks; ok cedric@

support AES in phase 1, too. switch to OpenSSL EVP interface;
with Hans-Joerg.Hoexer at yerbouti.franken.de; ok ho@

Remove some double semicolons (hmm, do two semis equal a maxi?).
I've skipped the GNU stuff for now. From Patrick Latifi.

Remove clauses 3 and 4. With approval from Niklas Hallqvist and
Niels Provos.

rm trailing whitespace

size_t must be cast to (unsigned long) and printed using %lu

Make DES a feature, so isakmpd can compile on Linux (most of the fixed
by newsham@lava.net)