search for: stribika

...assigned-bugs at mindrot.org Reporter: thorsten.sick at email.de Warn the user when the SSH client or server are using weak ciphers. This can be done by default, when using -v or on a specific test-security parameter. Client and Server settings should be tested. According to https://stribika.github.io/2015/01/04/secure-secure-shell.html Many ciphers (but not all) are either weak or broken. By having an automatic test in the tools we can improve the settings of the currently used servers and clients. That would improve the average security level in a simple anbd efficient way. -- You...

...openssh.com,aes256-ctr,aes192-ctr,aes128-ctr MACs hmac-sha2-512-etm at openssh.com,hmac-sha2-256-etm at openssh.com,hmac-ripemd160-etm at openssh.com,umac-128-etm at openssh.com,hmac-sha2-512,hmac-sha2-256,hmac-ripemd160,hmac-ripemd160 at openssh.com These are my sources of information: https://stribika.github.io/2015/01/04/secure-secure-shell.html https://bettercrypto.org/static/applied-crypto-hardening.pdf -- You are receiving this mail because: You are watching the assignee of the bug.