Re: applying AES-GCM to secure shell: proposed "tweak"

[Damien Miller <djm%mindrot.org@localhost>]

On Wed, 8 Apr 2009, der Mouse wrote:

> I would suggest creating new packet type for negotiating options like
> this.  As a strawman:
> 
>       byte         SSH_MSG_OPTION (value = 7)
>       string       option name
>       ...          option-specific data

I think any option that changes the binary packet format would need
to be included in the kex hash to prevent downgrade/upgrade attacks.
This is somewhat annoying implementation-wise if it is a separate packet.

-d