mirror of
https://git.tartarus.org/simon/putty.git
synced 2025-06-30 19:12:48 -05:00
New logging mode, which records the exact bytes sent over the wire
in an SSH connection _in addition_ to the decrypted packets. This will hopefully come in useful for debugging wire data corruption issues: you can strace the server, enable this mode in the client, and compare the sent and received data. I'd _like_ to have this mode also log Diffie-Hellman private exponents, session IDs, encryption and MAC keys, so that the resulting log file could be used to independently verify the correctness of all cryptographic operations performed by PuTTY. However, I haven't been able to convince myself that the security implications are acceptable. (It doesn't matter that this information would permit an attacker to decrypt the session, because the _already_ decrypted session is stored alongside it in the log file. And I'm not planning, under any circumstances, to log users' private keys. But gaining access to the log file while the session was still running would permit an attacker to _hijack_ the session, and that's the iffy bit.) [originally from svn r6835]
This commit is contained in:
1
putty.h
1
putty.h
@ -163,6 +163,7 @@ struct unicode_data {
|
||||
#define LGTYP_ASCII 1 /* logmode: pure ascii */
|
||||
#define LGTYP_DEBUG 2 /* logmode: all chars of traffic */
|
||||
#define LGTYP_PACKETS 3 /* logmode: SSH data packets */
|
||||
#define LGTYP_SSHRAW 4 /* logmode: SSH raw data */
|
||||
|
||||
typedef enum {
|
||||
/* Actual special commands. Originally Telnet, but some codes have
|
||||
|
Reference in New Issue
Block a user