Re: des-cbc cipher

[RJ Atkinson <rja%inet.org@localhost>]

At 11:25 29/11/01, Markus Friedl wrote:
>so implementations using "des-cbc" -- i only know of ssh.com's software
>and their author says it was accidentially assigned the name "des-cbc"
>-- will not interoperate, since there was never any specification.

There are several actually.  They interoperate using the token "des-cbc"
just fine today.

>not adding "des-cbc" does not change them to "non-compliant", since
>they have not been "compliant" before.  

Not so.  The spec didn't strictly prohibit the use of "des-cbc" 
(as different from "des-cbc@domain" all along.  That's the part 
that makes the deployed implementations non-compliant.

>i really don't understand what all this is about.  

Interoperability of deployed SSHv2 clients is the topic;
or at least its my topic...

Ran
rja%inet.org@localhost