Import release 0.1.6

[secnet] / TODO

Makefile.in: autodep stuff

dh.c: change format to binary from decimal string (without introducing
endianness problems)

netlink.c: investigate why 'default' routes don't appear to work
(reported by JDA).

slip.c: detect failure of userv-ipif to start. Restart userv-ipif to
cope with soft routes? Restart it if it fails in use?

tun.c: jdamery reports tun-old code works on Linux-2.2.
Unresolved problem with ioctl(TUNSETIFF) sometimes returning EINVAL, seems
to be related to early 2.4.x (x<=5) series kernels. 2.4.9 and above seem ok;
2.4.[678] untested.

random.c: test

rsa.c: check padding type, change format to binary from decimal string
(without introducing endianness problems)

site.c: the site_incoming() routing could be implemented much more
cleanly using a table. There's still quite a lot of redundancy in this
file. Abandon key exchanges when a bad packet is received. Modify
protocol to include version fields, as described in the NOTES file.

transform.c: see below

sha1.c: test

General: separate the transforms in transform.c into multiple parts,
which can then be combined in the configuration file.  Will allow the
user to plug in different block ciphers, invent an authenticity-only
mode, etc.

Signal handling! Really just cope with SIGCHLD and SIGTERM. Possibly
use SIGUSR1/2 for prodding things. Manage child processes properly.