Re: Some questions about "SSH Transport Layer Encryption Modes"

[Bill Sommerfeld <sommerfeld%east.sun.com@localhost>]

> So one would have:
> 
> NONBLOCK_REKEY(response=FALSE), KEXINIT, ...
> 
> and expect back one of:
> 
> NONBLOCK_REKEY(response=TRUE),  NEWKEYS, ...
> UNIMPLEMENTED, NEWKEYS, ...
> NEWKEYS, ...
> 
> Thoughts?

Can this be done asynchronously, early during connection negotiation
(or perhaps well before the rekey is needed)?  That way, you won't
hang waiting for a response which might never arrive...

					- Bill