2006-03-19 Kyle Rose * Version 1.1 * Zero-out all unused bits of the plaintext, removing the potential for secret data to exist in the uninitialized bits. Note that a subliminal channel is still possible because we don't verify that those bits are zeroes on the receiving end. * Fix -Wall warnings in printf/syslog statements. 2006-03-11 Kyle Rose * Version 1.0.6 * Type mismatch fixes for newer GCC's * Fuck OpenSSL! Why don't partial blocks work anymore with AES_cbc_encrypt? * Fix comment about GPL license filename 2005-03-08 Kyle Rose * Version 1.0.5 * Open /dev/null over stdin/stdout/stderr when daemonizing. Duh. 2005-02-04 Kyle Rose * Version 1.0.3 * Uh, make sure that the keys have more than 8 bits of security. :) * Version 1.0.2 * Make vpnfd and tunfd explicitly non-blocking, because recvfrom was occasionally blocking even after select reported the socket was available for reading. * Version 1.0.1 * Fixed MTU calculation. I think. Perhaps larger packets are actually acceptable, but I'll probably wait until someone else tells me the right way to calculate optimal MTU.