rsync - May 2012 - rsync over ssh with no cipher

>From what I can gather from googling, using rsync over ssh without a cipher
is not possible since some changes to the openssh package. ?Is this true? ?I
have been using a CPU friendly cipher but feel that it is best to use no cipher
at all (secured network).
rsync -avxu --progress -e 'ssh -c arcfour128' /path/to/source/ user at
server:/path/to/destination/


Thanks in advance!

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It is true that OpenSSH no longer supports the none cipher. I believe
it is possible to enable it within the source code but I wouldn't
recommend that.

Depending on your CPU you can get a big benefit from using either -c
arcfour or by using the hpn patch set.

Also, if you are certain enough about the security of your network
that you don't need encryption you don't really need ssh. Rsync can
use any network transport that is command line compatible with rsh
which of course includes rsh. Rsync also has its own daemon that you
can configure and run.

On 05/19/12 16:27, John wrote:
>> From what I can gather from googling, using rsync over ssh
>> without a cipher is not possible since some changes to the
>> openssh package.  Is this true?  I have been using a CPU friendly
>> cipher but feel that it is best to use no cipher at all (secured
>> network).
> 
> rsync -avxu --progress -e 'ssh -c arcfour128' /path/to/source/
> user at server:/path/to/destination/
> 
> 
> Thanks in advance!
- -- 
~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~
	Kevin Korb			Phone:    (407) 252-6853
	Systems Administrator		Internet:
	FutureQuest, Inc.		Kevin at FutureQuest.net  (work)
	Orlando, Florida		kmk at sanitarium.net (personal)
	Web page:			http://www.sanitarium.net/
	PGP public key available on web site.
~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk+4BfIACgkQVKC1jlbQAQf/XwCgmEn8BEPqTeBvRMPF5sQc9Xc/
DHoAn37sMc74ZT1jkNzyD/0asKyRpzNt
=UsEh
-----END PGP SIGNATURE-----

Some sshs support the cipher 'none' (-c none). I believe the HPN patches
for ssh have the 'none' cipher patch as well.

Using ssh instead of rsh is still nice since (I believe) even with the 
-none cipher you still get an encrypted negotiated username + pass.

Eric Bambach | Discover
Senior Assoc. Programmer, Warehouse Infrastructure and Tools
2500 Lake Cook Road, Riverwoods IL 60015
P: 224.405.2896 ericbambach1 at discover.com




From:   John <da_audiophile at yahoo.com>
To:     "rsync at lists.samba.org" <rsync at lists.samba.org>
Date:   05/19/2012 03:26 PM
Subject:        rsync over ssh with no cipher
Sent by:        <rsync-bounces at lists.samba.org>


>From what I can gather from googling, using rsync over ssh without a 
cipher is not possible since some changes to the openssh package.  Is this 
true?  I have been using a CPU friendly cipher but feel that it is best to 
use no cipher at all (secured network).

rsync -avxu --progress -e 'ssh -c arcfour128' /path/to/source/ 
user at server:/path/to/destination/


Thanks in advance!
-- 
Please use reply-all for most replies to avoid omitting the mailing list.
To unsubscribe or change options: 
https://lists.samba.org/mailman/listinfo/rsync
Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html




Please consider the environment before printing this email.