summaryrefslogtreecommitdiffstats
path: root/rules/dropbear.in
diff options
context:
space:
mode:
Diffstat (limited to 'rules/dropbear.in')
-rw-r--r--rules/dropbear.in15
1 files changed, 15 insertions, 0 deletions
diff --git a/rules/dropbear.in b/rules/dropbear.in
index fe2ada369..1c1d813fc 100644
--- a/rules/dropbear.in
+++ b/rules/dropbear.in
@@ -203,6 +203,21 @@ config DROPBEAR_TWOFISH256
bijective f function made by four key-dependent
8x8-bit S-boxes.
+config DROPBEAR_CBC_CIPHERS
+ bool
+ prompt "CBC mode ciphers"
+ help
+ Enable CBC mode for ciphers. This has security issues though
+ is the most compatible with older SSH implementations.
+
+config DROPBEAR_CTR_CIPHERS
+ bool
+ prompt "Counter mode ciphers"
+ default y
+ help
+ Enable "Counter Mode" for ciphers. This is more secure than normal
+ CBC mode against certain attacks. This adds around 1kB to binary
+ size and is recommended for most cases.
comment "Integrity, at least one required --- RFC Draft requires sha1-hmac and recommends sha1-96"