Here we go!
what's missing is:
* auth SHA1 -- RFC3414 section 7
* crypt AES -- RFC3826
* localized key cahching -- so that if a (mentally stable) system
administrator uses the same username/password for all nodes in a
network he has to add just one line to the users file, instead of one
for each authoritative engine as it works now. We want to do caching
instead of calculating the localized key every time because key
localization is a very intensive task)
sha1 and aes are (relatively) simple implementations (one function
mimics md5 the other one does the same with des), if you (or someone
else) takes care of those I'll go for the caching and we can get it
out complete very soon.
Testing with broken packets is welcome too, fuzz testing it against a
wide capture library would help but hand-crafted malformed packets
tests would have better aim.
However the most important test to be done is that it does no harm
while disabled. Weird runtime linking problems disallow me to build
with net-snmp so I cannot test it that way. I do not think that
net-snmp changes anything for this but verifying that everything that
worked before works afterwards it's a must.
Luis
On 1/9/07, lego@xxxxxxxxxxxxx <lego@xxxxxxxxxxxxx> wrote:
http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=20353
User: lego
Date: 2007/01/09 06:38 PM
Log:
SNMPv3 USM decryption/authentication phase 1
Directory: /trunk/epan/crypt/
Changes Path Action
+3 -1 Makefile.common Modified
+120 -0 hmac.c Added
+34 -0 hmac.h Added
Directory: /trunk/epan/dissectors/
Changes Path Action
+603 -122 packet-snmp.c Modified
+73 -0 packet-snmp.h Modified
Directory: /trunk/epan/
Changes Path Action
+5 -0 Makefile.am Modified
+1 -0 Makefile.common Modified
Directory: /trunk/asn1/snmp/
Changes Path Action
+436 -8 packet-snmp-template.c Modified
+73 -0 packet-snmp-template.h Modified
+103 -20 snmp.cnf Modified
_______________________________________________
Wireshark-commits mailing list
Wireshark-commits@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-commits
--
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan
