Re: AEAD in ssh

[email protected] (Niels Möller) Wed, 24 Feb 2016 07:00:28 +0100

Newsgroups	gmane.ietf.secsh
Message-ID	<[email protected]>

Watson Ladd <[email protected]> writes:

> There already is a widely used SSH implementation with AEAD support. Copy
> what they do.

I'm aware of three different ways:

1. aes-gcm, according to 5647, implemented by some.

2. aes-gcm, according to openssh (with simpler negotiation rules, which
   I *do* copy).

3. chacha20-poly1305 according to openssh.

I think the time is right to try to document a recommended way to do it.

Regards,
/Niels

-- 
Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26.
Internet email is subject to wholesale government surveillance.