Re: New version of rsa-sha2-256 draft: Back to PKCS#1 v1.5
denis bider <[email protected]>
| Newsgroups | gmane.ietf.secsh |
|---|---|
| Message-ID | <[email protected]> |
Alright - I have enabled CBC mode algorithms to make testing easier. We default to CTR mode only now, given that OpenSSH disabled CBC last year, and our customers want to follow external recommendations, which are to disable CBC. Our implementation actually implements a defense for the CBC problem - but that only works for incoming data, not outgoing. And folks who still only have CBC probably do not implement a defense... ----- Original Message ----- From: Peter Gutmann Sent: Thursday, November 12, 2015 09:51 To: denis bider ; [email protected] Cc: [email protected] ; [email protected] ; [email protected] Subject: RE: New version of rsa-sha2-256 draft: Back to PKCS#1 v1.5 denis bider <[email protected]> writes: >I have posted a new version of the draft, which switches back to PKCS#1 v1.5: Phew, thanks, that makes things much easier to deal with. >I have also updated the experimental server so it implements the latest draft >version (with PKCS#1 v1.5): > >experiment.bitvise.com:10712 > >To test host authentication, set the list of host key algorithms in your >KEXINIT to "rsa-sha2-256" or "rsa-sha2-512". You will need at least one of >these for successful key exchange - the server doesn't offer anything else