search

commoncriteria / ssh

Functional Package for SSH
The Unlicense
5 stars 1 forks source link

IETF to address concerns in RFC 5647 #3

Closed bourdett closed 5 days ago

bourdett commented 8 years ago

Hopefully over time, concerns with RFC 5647 can be resolved.

For example, OpenSSH implements a Cipher of aes128-gcm@openssh.com or aes256-gcm@openssh.com which when selected IGNORES the MAC selected and then uses the wire-protocol for AEAD_AES_128_GCM and AEAD_AES_256_GCM. There is some talk in the ietf-ssh mailing list of fixing the general problem of AEAD ciphers,

jfisherbah commented 5 days ago

This is covered by the use of implicit MAC in FCS_SSH_EXT.1.5