Re: applying AES-GCM to secure shell: proposed "tweak"

[Nicolas Williams <Nicolas.Williams%sun.com@localhost>]

On Thu, Apr 09, 2009 at 03:27:30PM +1200, Peter Gutmann wrote:
> Nicolas Williams <Nicolas.Williams%sun.com@localhost> writes:
> 
> >The fact that SSHv2 encrypts the packet length has been a cause of a
> >significant protocol security vulnerability.  Let's kill this encrypt- the-
> >packet-length notion.
> 
> If we're going to make this change, could we also consider moving *all*
> ciphers to nonencrypted lengths?  This currently requires horribly complex

Not with a flag day.  Implementors will have to keep implementing the
old thing for a long time.

Nico
--