From d1b597758eab68bb80d97855f25cb6dda55eeb0b Mon Sep 17 00:00:00 2001 From: Guus Sliepen Date: Thu, 24 May 2001 21:29:09 +0000 Subject: [PATCH] Add randomness to PING/PONG packets to prevent crypto attacks on quiet tunnels. --- src/protocol.c | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/src/protocol.c b/src/protocol.c index cd63ad0b..e3e7e390 100644 --- a/src/protocol.c +++ b/src/protocol.c @@ -17,7 +17,7 @@ along with this program; if not, write to the Free Software Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. - $Id: protocol.c,v 1.28.4.87 2001/05/07 19:08:46 guus Exp $ + $Id: protocol.c,v 1.28.4.88 2001/05/24 21:29:09 guus Exp $ */ #include "config.h" @@ -1060,11 +1060,14 @@ cp int send_ping(connection_t *cl) { + char salt[SALTLEN*2+1]; cp cl->status.pinged = 1; cl->last_ping_time = time(NULL); + RAND_bytes(salt, SALTLEN); + bin2hex(salt, salt, SALTLEN); cp - return send_request(cl, "%d", PING); + return send_request(cl, "%d %s", PING, salt); } int ping_h(connection_t *cl) @@ -1075,8 +1078,12 @@ cp int send_pong(connection_t *cl) { + char salt[SALTLEN*2+1]; cp - return send_request(cl, "%d", PONG); + RAND_bytes(salt, SALTLEN); + bin2hex(salt, salt, SALTLEN); +cp + return send_request(cl, "%d %s", PONG, salt); } int pong_h(connection_t *cl) -- 2.20.1