draft-harris-ssh-rsa-kex-03

[Ben Harris <bjh21%bjh21.me.uk@localhost>]

Yet another RSA KEX draft has made it into the repository.  I hope this 
represents the final version of the protocol (apart from moving its name 
into the IETF namespace if it becomes an RFC), though probably not of the 
document.  This version:

1: goes back to using SHA-256 with 2048-bit RSA keys, since SHA-512 is
   ludicrously slow.

2: has the server send its host key to the client in SSH_MSG_KEXRSA_PUBKEY
   rather than in SSH_MSG_KEXRSA_DONE.  This prevents the server
   manipulating the exchange hash input by changing its public key.

I hope you like it.

<http://www.ietf.org/internet-drafts/draft-harris-ssh-rsa-kex-03.txt>

--
Ben Harris