Re: applying AES-GCM to secure shell: proposed "tweak"

[Damien Miller <djm%mindrot.org@localhost>]

On Wed, 15 Apr 2009, der Mouse wrote:

> >    Maybe it's easier to say that if an AEAD-algorithm is chosen for
> >    encryption, the lists of mac algorithms (for that direction) are
> >    ignored).
> 
> That would be a rather unpleasant violation of the existing definition.
> I'd much rather just re-kex if using a none MAC is that important.

Without offering a solution to the initial negotiation (all that I have
seen so far a ugly), I would observe that rekex is far to expensive to
be a good solution to this problem.

-d