Re: [Bug 2302] with DH-GEX, ssh (and sshd) should not fall back to unconfigured DH groups or at least document this behaviour and use a stronger group

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

 



On Fri, Jul 10, 2015 at 8:01 PM, aixtools <aixtools@xxxxxxxxx> wrote:

> On 2015-06-02 5:31 AM, bugzilla-daemon@xxxxxxxxxxx wrote:

[...]

> Do any such clients actually exist?  RFC4419 says DH-GEX
>> implementations SHOULD have a max group size of 8k.
>>
>>  Yes I expect. I have a ssh client from 2002 era that has worked very
> well for me (from ssh.com before they renamed it tectia) - and I would
> buy it again today - but they only to B2B these days.
>

Wait, so the ssh.com client of that era *did* do
diffie-hellman-group-exchange-sha1 (as opposed
to  diffie-hellman-group1-sha1 or diffie-hellman-group14-sha1) but *didn't*
support 8k groups?

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@xxxxxxxxxxx
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev



[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux