search for: dh_new_group16

Displaying 3 results from an estimated 3 matches for "dh_new_group16".

Did you mean: dh_new_group14
2017 Sep 22
6
DH Group Exchange Fallback
On 09/22/2017 03:22 PM, Daniel Kahn Gillmor wrote: > On Thu 2017-09-21 18:12:44 -0400, Joseph S Testa II wrote: >> I gotta say... having a fallback mechanism here seems pretty >> strange. The entire point of the group exchange is to use a dynamic >> group and not a static one. > > fwiw, i think dynamic groups for DHE key exchange is intrinsically > problematic
2017 Sep 23
2
DH Group Exchange Fallback
..._, max); > if (max <= 2048) { > debug3("using 2k bit group 14"); > return dh_new_group14(); > } else if (max <= 4096) { > debug3("using 4k bit group 16"); > return dh_new_group16(); > } > debug3("using 8k bit group 18"); > return dh_new_group18(); > } This wouldn't fix the underlying issue. I'm interested in having the code respect the admin's wishes. If the admin edits out entries in /etc/ssh/moduli, the...
2017 Sep 24
3
DH Group Exchange Fallback
On 09/24/2017 12:21 AM, Mark D. Baushke wrote: > I suggest you upgrade to a more recent edition of the OpenSSH software. > The most recent release is OpenSSH 7.5 and OpenSSH 7.6 will be released > very soon. This problem is in v7.5 and v7.6. See dh.c:436. > OpenSSH 6.6 was first released on October 6, 2014. I brought up v6.6 to give an example that older clients wouldn't be