RE: Curve25519/448 key agreement for SSH

Peter Gutmann <[email protected]> Thu, 19 Nov 2015 04:57:05 +0000

Newsgroups	gmane.ietf.secsh
Message-ID	<9A043F3CF02CD34C8E74AC1594475C73F4B6932A@uxcn10-5.UoA.auckland.ac.nz>

Simon Josefsson <[email protected]> writes:

>A discussion on CFRG came up recently about checking for the all-zero
>shared secret.  Does anyone know if libssh or OpenSSH (or anyone else)
>performs this check? 

I check for too-small values (too many leading zeroes), of which all-zero
is a special case, as well as a few other oddball things.

Peter.