Re: applying AES-GCM to secure shell: proposed "tweak"

[nisse%lysator.liu.se@localhost (Niels Möller)]

der Mouse <mouse%Rodents-Montreal.ORG@localhost> writes:

>> It doesn't need to be ignored, but the order does matter.  AEAD-*
>> algorithms must appear first in the order list.
>
> That's completely unextendable; what happens when another algorithm is
> added that also "must appear first"?

Agreed. That's not acceptable.

And besides that, it should be possible to express old-fashioned
preferences, like "I really like triple-DES, but if you don't support
it, I'll go with AEAD as a fallback".

Regards,
/Niels