Re: Terrapin

Peter Gutmann <[email protected]> Thu, 28 Dec 2023 14:53:02 +0000
Newsgroups gmane.ietf.secsh
Message-ID <SY4PR01MB6251558BE593520CF6EF49C0EE9EA@SY4PR01MB6251.ausprd01.prod.outlook.com>
Simon Tatham <[email protected]> writes:=0A=0A>I certainly agree that it wou=
ld be nice not to send packet lengths in the=0A>clear.=0A=0AWhy *does* EtM-=
OpenSSH send packet lengths in the clear?  I had to add a pile=0Aof special=
-snowflake processing for that, no other mode needs this meaning=0Athere's =
extra code paths to test and potentially have vulnerabilities in.=0A=0APete=
r.