Displaying 3 results from an estimated 3 matches for "steno_timer".
2001 Oct 16
1
Defeating Timing Attacks Patch for OpenSSH 2.9.9p2 and 2.9p2
...ARE
DISCLAIMED.
@@ -315,16 +342,25 @@
* Waits until the client can do something (some data becomes available
on
* one of the file descriptors).
*/
-
-static void
+/*
+ * SD Mod: We changed the return value of
client_wait_until_can_do_something
+ * from void to int. It now returns 1 if the steno_timer has expired
and 0 if not.
+ */
+int
client_wait_until_can_do_something(fd_set **readsetp, fd_set
**writesetp,
int *maxfdp, int *nallocp, int rekeying)
{
+ /* SD Mod: added variable steno_timer */
+ static struct timeval steno_timer = {0, 50000};
+
+ int return_val = 0;
+...
2001 Nov 09
4
keystroke timing attack
I'm reading this fine article on O'Reilly:
http://linux.oreillynet.com/lpt/a//linux/2001/11/08/ssh_keystroke.html
<quote>
The paper concludes that the keystroke timing data observable from
today's SSH implementations reveals a dangerously significant amount of
information about user terminal sessions--enough to locate typed
passwords in the session data stream and reduce the
2001 Oct 06
1
Defeating Timing Attacks
Hello,
In response to the timing analysis attacks presented by Dawn Song et.
al. in her paper http://paris.cs.berkeley.edu/~dawnsong/ssh-timing.html
we
at Silicon Defense developed a patch for openssh to avoid such
measures.
Timing Analysis Evasion changes were developed by C. Jason Coit and Roel
Jonkman of Silicon Defense.
These changes cause SSH to send packets unless request not to,