the SilcSocketConnection reference counter at all. This must be
fixed.
+ o When receiving client's public key with GETKEY or in key agreement
+ protoocl it probably should be saved using the nickname and the real
+ name of the client instead of the host name of the client.
+
o Add client library parameters or options that handle what kind of
messages the library should print out (using `say' client operation,
for example) and what is left for the application to print. The
TODO/bugs In SILC Server
========================
+ o Send SILC_NOTIFY_TYPE_CUMODE_CHANGE when received announced channels
+ and channel users and we (router) already has a channel founder on the
+ channel.
+
o When server quits and all clients of that server are removed from all
channels the channel keys are re-generated for all clients. This is
a bug and should be done only once per channel after all clients of
the server has been removed.
- o Acceptance of incoming connections (client and server connections)
- should be checked before key exchange protocol. Currently it is
- checked at the authentication phase after KE, that is ok, but it should
- be checked before starting KE, as well. This should be done so that
- is first checks denied connections, then client connections and then
- server connections. There is no use to execute the SKE if the connection
- will not be allowed.
-
o DNS/IP lookup blocks the server. This must be fixed. Check the
resolver stuff (resolver(3), resolver(5)). Either we have to do the
own resolver stuff (through scheduler, if possible without writing
too much own stuff) or use threads.
+ o The ID List must be optimized. When the lists grow the searching
+ becomes a lot slower and is some cases the lists are searched many
+ times, like with channel messages (twice at least). Some sort of
+ hash tables should replace the lists. Thus, the ID cache should be
+ rewritten to use hash tables internally.
+
+ o [DenyConnection] config section is not implemented.
+
+ o The backup router support described in the protocol specification
+ should be done at some point.
+
o Server says that it is able to listen on multiple ports but currently
that is bogus. It can, but internals are for single server.
TODO/bugs In SILC Libraries
===========================
- o Implement PFS (Perfect Forward Secrecy) flag in SKE (and in client and
- server, actually). If PFS is set, re-key must cause new key exchange.
- This is required by the SILC protocol.
-
- o Re-key in general is actually missing (from everywhere) and must be done.
+ o Remove the static lists from SILC ciphers, PKCS and hash functions
+ in the crypto library. The currently acceptable code is used in the
+ HMAC library, look from there. The config file must decide the order
+ of the algorithms, not the static lists, as they are doing now.
+ Actually the way to do this is to keep the static lists, but register
+ the algorithms to the dynamic list and make the alloc routines to
+ check only the dynamic list. Also, replace the lists used by these
+ routines with SilcList. Also, for applications it might be nice
+ to export a function that registers default algorithms, if application
+ does not want to register them one by one (if for example SILC client
+ is run without config files at all).
o Compression routines are missing. The protocol supports packet
compression thus it must be implemented. SILC Comp API must be
not in distribution), but it is not used yet, and it requires some
tweaking on the Makefiles (we want static lib not shared).
- o Random Number Generator needs some tweaking. Reading /dev/random may
- block resulting slow initialization of RNG. Some other things in the
- RNG may block as well. Also, I have some pending changes to the RNG
- that needs to be commited (from Schneier's Yarrow-160 paper). They
- should make the RNG even better.
+ o Some of the ciphers in lib/silccrypt does not implement the SILC
+ Crypto API correctly.
+
+ o IPv6 support for ID's and into the code.
o SIM support for SILC PKCS API needs to made so that they could be
used as SIM's. At the same time some work is required on prime
more (silcpkcs.h).
-TODO in the protocol before SILC 0.x
-====================================
-
- o New commands and features in the commands
- (draft-riikonen-silc-spec-xx.txt):
-
- o Define GETKEY command to fetch the public key of a server
- and/or a client in the SILC Network.
- o Define SENDKEY command to send your public key to a client
- in the network. Sending to the server must not be done due
- to various security reasons (the server must not trust the
- public keys blindly without third party verification; that's
- why SENDKEY is not for servers).
-
-
TODO After 1.0
==============
projects / silc.git / blobdiff