[OpenWrt-Devel] [PATCH][package] dropbear: enable sha2-based hmac by default.

[Alive4Ever]

> Whats the size increase due to that?
> 
> ~ Jow

Here is a brief comparison about binary and package size
Tested on AR9330, mips, TL MR3220v2

Before applying sha2-hmac patch
root at OpenWrt:~# du -sh $(which dropbear)
161.5K  /usr/sbin/dropbear

After applying sha2-hmac patch
root at OpenWrt:~# du -sh $(which dropbear)
165.5K  /usr/sbin/dropbear

It's about 4K binary size increase.

debug information
ssh root at OpenWrt -o MACs=hmac-sha2-512,hmac-sha2-256 -v
...
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-ctr hmac-sha2-512 none
debug1: kex: client->server aes128-ctr hmac-sha2-512 none
...

Package size compared to downloaded trunk
84829 Sep 25 02:43 dropbear_2014.65-2_ar71xx.ipk
81896 Sep 25 02:13 dropbear_2014.65-2_ar71xx.ipk
It's about 3K package size increase.
_______________________________________________
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel