Re: Some questions about "SSH Transport Layer Encryption Modes"

[pgut001%cs.auckland.ac.nz@localhost (Peter Gutmann)]

Markus Friedl <markus%openbsd.org@localhost> writes:
>On Sat, Oct 18, 2003 at 06:56:35PM +1300, Peter Gutmann wrote:
>>Markus Friedl <markus%openbsd.org@localhost> writes:
>>>i think this has been discussed before.
>>
>>Hmm, I think "debated without clear resolution" might be a better description,
>>if you're referring to the debate from about two years ago.  Specifically, the
>>exact message/data flow was never totally resolved.
>
>Hm, AFAIK we agreed, that after sending KEXINIT you MUST NOT send messages of
>type > 49 (i.e. only transport layer messages are allowed) until you send
>NEWKEYS.

I was under the impression that the debate had simply fizzled out.  The
specification certainly hasn't been clarified (it's remained unchanged since
the -02 draft of late 1997), and that would be the definitive reference.

Peter.