--- gvpe/configure.ac 2013/07/16 16:44:36 1.62 +++ gvpe/configure.ac 2013/07/18 13:35:19 1.63 @@ -337,21 +337,21 @@ ) AC_DEFINE_UNQUOTED(RSABITS, $RSA, [Size of RSA keys.]) -HMAC=12 +HMACSIZE=12 AC_ARG_ENABLE(hmac-length, [AS_HELP_STRING(--enable-hmac-length=BYTES,[ use a hmac of length BYTES bytes (default 12). Allowed values are 4, 8, 12, 16.])], - HMAC=$enableval + HMACSIZE=$enableval ) -AC_DEFINE_UNQUOTED(HMACLENGTH, $HMAC, [Size of HMAC in each packet in bytes.]) +AC_DEFINE_UNQUOTED(HMACLENGTH, $HMACSIZE, [Size of HMAC in each packet in bytes.]) -RAND=8 +RANDSIZE=12 AC_ARG_ENABLE(rand-length, [AS_HELP_STRING(--enable-rand-length=BYTES, - [use BYTES bytes of extra randomness (default 8). Allowed values are 0, 4, 8.])], - RAND=$enableval + [use BYTES bytes of extra randomness (default 12). Allowed values are 0, 4, 8, 12.])], + RANDSIZE=$enableval ) -AC_DEFINE_UNQUOTED(RAND_SIZE, $RAND, [Add this many bytes of randomness to each packet.]) +AC_DEFINE_UNQUOTED(RAND_SIZE, $RANDSIZE, [Add this many bytes of randomness to each packet.]) MTU=1500 AC_ARG_ENABLE(max-mtu, @@ -383,18 +383,18 @@ ) AC_DEFINE_UNQUOTED(ENABLE_CIPHER, EVP_${CIPHER}, [Select the symmetric cipher to use.]) -DIGEST=sha1 -AC_ARG_ENABLE(digest, - [AS_HELP_STRING(--enable-digest=DIGEST,[ - Select the digest algorithm to use (default "sha1"). Must be one of +HMAC=sha1 +AC_ARG_ENABLE(hmac-digest, + [AS_HELP_STRING(--enable-hmac-digest=HMAC,[ + Select the HMAC digest algorithm to use (default "sha1"). Must be one of "sha512", "sha256", "sha1", "ripemd160", "whirlpool".])], - if test "x$enableval" = xwhirlpool; then DIGEST=whirlpool; fi - if test "x$enableval" = xsha512 ; then DIGEST=sha512 ; fi - if test "x$enableval" = xsha256 ; then DIGEST=sha256 ; fi - if test "x$enableval" = xsha1 ; then DIGEST=sha1 ; fi - if test "x$enableval" = xripemd160; then DIGEST=ripemd160; fi + if test "x$enableval" = xwhirlpool; then HMAC=whirlpool; fi + if test "x$enableval" = xsha512 ; then HMAC=sha512 ; fi + if test "x$enableval" = xsha256 ; then HMAC=sha256 ; fi + if test "x$enableval" = xsha1 ; then HMAC=sha1 ; fi + if test "x$enableval" = xripemd160; then HMAC=ripemd160; fi ) -AC_DEFINE_UNQUOTED(ENABLE_DIGEST, EVP_${DIGEST}, [Select the digest algorithm to use.]) +AC_DEFINE_UNQUOTED(ENABLE_HMAC, EVP_${HMAC}, [Select the HMAC digest algorithm to use.]) AUTH=sha512 AC_ARG_ENABLE(auth-digest, @@ -452,14 +452,14 @@ echo "*** Enable options:" grep ENABLE_ config.h | sed -e 's/^/*** /' -if test "$HMAC" -lt 12; then +if test "$HMACSIZE" -lt 12; then echo "***" -echo "*** WARNING: The hmac length you have chosen ($HMAC) is quite insecure" +echo "*** WARNING: The hmac length you have chosen ($HMACSIZE) is quite insecure" fi -if test "$RAND" -lt 8; then +if test "$RANDSIZE" -lt 12; then echo "***" -echo "*** WARNING: The random prefix you have chosen ($RAND) is probably insecure" +echo "*** WARNING: The random prefix you have chosen ($RANDSIZE) is probably insecure" fi echo "***"