ssh-chat

mirror of https://github.com/shazow/ssh-chat.git synced 2025-04-29 06:41:34 +03:00

History

mik2k2 bd345ce012 Move password authentication handling into sshd/auth (fixes #394 ).

Password authentication is now completely handeled in Auth. The normal
keyboard-interactive handler checks if passwords are supported and asks
for them, removing the need to override the callbacks.

Brute force throttling is removed; I'd like to base it on IP address
banning, which requires changes to the checks.

I'm not sure, but I think timing attacks against the password are fixed:
- The hashing of the real password happens only at startup.
- The hashing of a provided password is something an attacker can do
themselves; It doesn't leak anything about the real password.
- The hash comparison is constant-time.

2021-05-27 13:06:10 +02:00

terminal

sshd/terminal: gofmt

2020-04-01 20:40:56 -04:00

auth.go

Move password authentication handling into sshd/auth (fixes #394 ).

2021-05-27 13:06:10 +02:00

client_test.go

Move password authentication handling into sshd/auth (fixes #394 ).

2021-05-27 13:06:10 +02:00

client.go

Fix unit tests / Travis (#238 )