Re: DH group exchange (Re: SSH key algorithm updates)

[email protected] (Niels Möller)
Newsgroups gmane.ietf.secsh
Message-ID <[email protected]>
"Mark D. Baushke" <[email protected]> writes:

> See also:
>
>   http://csrc.nist.gov/publications/nistpubs/800-107-rev1/sp800-107-rev1.pdf
>   Section 4.2 table 1.

It's not clear to me why the "collision resistance strength" rather
than "preimage resistance strength" or "second preimage strength" apply
when using sha2 for generating session keys and the exchange hash.

Regards,
/Niels

-- 
Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26.
Internet email is subject to wholesale government surveillance.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.