RE: AEAD in ssh
Peter Gutmann <[email protected]>
| Newsgroups | gmane.ietf.secsh |
|---|---|
| Message-ID | <9A043F3CF02CD34C8E74AC1594475C73F4BFF51D@uxcn10-5.UoA.auckland.ac.nz> |
denis bider <[email protected]> writes: >That implementation, with unencrypted packet lengths, sabotages any hope of >thwarting traffic analysis, even through high-overhead SSH_MSG_IGNORE padding. With encrypted packet lengths and padding you're still not thwarting traffic analysis, you're just making the job a lot more difficult for the implementer. See my previous message. Peter.