Re: How to handle incorrectly-encoded public keys

Peter Gutmann <[email protected]> Mon, 21 Nov 2022 09:36:56 +0000
Newsgroups gmane.ietf.secsh
Message-ID <SY4PR01MB6251DF7EA5FF7D85B569EFB3EE0A9@SY4PR01MB6251.ausprd01.prod.outlook.com>
[Redirected back to the list due to some addressing confusion]

Simon Tatham <[email protected]> writes:

>It's especially surprising since it's such an outdated value of e, so you'd
>most likely expect to see it coming from an SSH implementation that was
>outdated in other respects as well, such as not having even noticed rsa-
>sha2-256! The combination of e=3 with an up-to-date RSA variant (even if done
>wrong) is more surprising than either on its own.

It's a really strange mix, alongside the above it disconnects unless you send
the old-format GEX message (so SSH_MSG_KEX_DH_GEX_REQUEST_OLD instead of
SSH_MSG_KEX_DH_GEX_REQUEST) but then it also implements the -etm modes and
other stuff.  I'm waiting to hear back on whether any widely-use SSH
implementation will actually connect to it.

Peter.