Re: Some questions about "SSH Transport Layer Encryption Modes"

[Markus Friedl <markus%openbsd.org@localhost>]

On Sat, Oct 18, 2003 at 06:56:35PM +1300, Peter Gutmann wrote:
> Markus Friedl <markus%openbsd.org@localhost> writes:
> 
> >i think this has been discussed before.
> 
> Hmm, I think "debated without clear resolution" might be a better description,
> if you're referring to the debate from about two years ago.  Specifically, the
> exact message/data flow was never totally resolved.

Hm, AFAIK we agreed, that after sending KEXINIT you MUST NOT send
messages of type > 49 (i.e. only transport layer messages are
allowed) until you send NEWKEYS.

As a consequence OpenSSH's implementation of rekeying was changed.

Changing this now again will very likely break interoperabitily.

-m