fpoirotte / pssht

SSH server written in PHP
https://pssht.readthedocs.io
MIT License
43 stars 9 forks source link

Fix UMAC #20

Closed fpoirotte closed 9 years ago

fpoirotte commented 9 years ago

The UMAC code generates invalid authentication tags in some (hard to reproduce) circumstances. The issue is pretty much random, making it hard to debug.

This is a critical bug for interoperability since OpenSSH 6.4+ has a preference for UMAC-64 over other algorithms by default.