Paper on SSH

["Tadayoshi Kohno" <tkohno%cs.ucsd.edu@localhost>]

As Wei Dai recently pointed out, the current SSH protocol is insecure
(because of problems with way CBC mode is used).

In the paper
        http://eprint.iacr.org/2002/078/
Mihir Bellare, Chanathip Namprempre, and I show how to provably fix
the SSH protocol.  We have placed a summary of our recommendations at
        http://www-cse.ucsd.edu/users/tkohno/papers/SSH/sshadvice.html

We hope that our provable security results will be of use to the IETF
SSH Working Group.

Yoshi