openssh bugs - Jul 2007 - [Bug 1341] New: Support multiple blowfish key lengths

http://bugzilla.mindrot.org/show_bug.cgi?id=1341

           Summary: Support multiple blowfish key lengths
           Product: Portable OpenSSH
           Version: 4.6p1
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: Miscellaneous
        AssignedTo: bitbucket at mindrot.org
        ReportedBy: jimis at mailinator.com


Blowfish is a very secure and fast block cipher. By design it supports
key lengths of anywhere from 32 bits to 448 bits. Currently OpenSSH
implements only 128 bits.

So the feature request is: Implement the use of more key lenghts,
including the minimum of 32 bits (for speed) and the maximum of 448
bits (for extreme cases).


-- 
Configure bugmail: http://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1341


Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX
                 CC|                            |djm at mindrot.org




--- Comment #1 from Damien Miller <djm at mindrot.org>  2008-06-12
17:44:08 ---
The key length for blowfish is specified in the SSH protocol RFC. We
could change it by supporting a new cipher mode, but it would be a
non-standard extension. There isn't much point either: blowfish is
quite a bit slower than AES, AES has had far more cryptanalytic review,
and it supports up to 256-bit keys (which should be good enough for a
long, long time).

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=1341


Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED




--- Comment #2 from Damien Miller <djm at mindrot.org>  2008-07-22
12:19:15 ---
Mass update RESOLVED->CLOSED after release of openssh-5.1

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.