[re: http://marc.info/?l=openssh-unix-dev&m=138920224702016&w=2 and previous discussion] On 01/08/2014 12:30 PM, mikep at noc.utoronto.ca wrote: > On Wed, 8 Jan 2014, Loganaden Velvindron <loganaden at gmail.com> wrote: >> On Tue, Dec 24, 2013 at 12:52 AM, <mikep at noc.utoronto.ca> wrote: >>> It turns out the Cisco SSH server only supports a limited set of >>> ciphers (this is documented sort-of by Cisco, and is displayed when >>> you try to force a non-supported cipher). >> >> That's short-sighted coming from them. >> >> I have tested and I have the same problem with the latest snapshot. >> This is very annoying. >> >> Do you have a ticket number where I can also chip in ? > > I have no access to open Cisco tickets, and our local router person who > does is still away (like most universities, we've been closed for the > past few weeks). > > I'll talk to him when he gets back, but agree this is very annoying. fwiw, one of the co-chairs of the IRTF's Crypto Forum Research Group is David McGrew, who works for Cisco: https://www.irtf.org/cfrg I'm cc'ing David here, because i figure he would be interested in hearing this concern about cryptographic choices in Cisco's products, though i don't know whether his position within Cisco gives him the ability to address the situation. At the very least, i figure he'd want to be aware of it. Regards, --dkg -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 1027 bytes Desc: OpenPGP digital signature URL: <http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20140108/0f59587c/attachment.bin>
