1 /* 2 * Support for RSA/DSA key blacklisting based on partial fingerprints, 3 * developed under Openwall Project for Owl - http://www.openwall.com/Owl/ 4 * 5 * Copyright (c) 2008 Dmitry V. Levin <ldv at cvs.openwall.com> 6 * 7 * Permission to use, copy, modify, and distribute this software for any 8 * purpose with or without fee is hereby granted, provided that the above 9 * copyright notice and this permission notice appear in all copies. 10 * 11 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES 12 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF 13 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR 14 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 15 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 16 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 17 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 18 * 19 * The blacklist encoding was designed by Solar Designer and Dmitry V. Levin. 20 * No intellectual property rights to the encoding scheme are claimed. 21 * 22 * This effort was supported by CivicActions - http://www.civicactions.com 23 * 24 * The file size to encode 294,903 of 48-bit fingerprints is just 1.3 MB, 25 * which corresponds to less than 4.5 bytes per fingerprint. 26 */ 27 28 #ifndef MOD_SFTP_BLACKLIST_H 29 #define MOD_SFTP_BLACKLIST_H 30 31 #include "mod_sftp.h" 32 33 int sftp_blacklist_reject_key(pool *, unsigned char *, uint32_t); 34 int sftp_blacklist_set_file(const char *); 35 36 #endif /* MOD_SFTP_BLACKLIST_H */ 37