RE: applying AES-GCM to secure shell: proposed "tweak"

[Damien Miller <djm%mindrot.org@localhost>]

On Wed, 15 Apr 2009, James Blaisdell wrote:

> It doesn't need to be ignored, but the order does matter. AEAD-*
> algorithms must appear first in the order list. And AEAD-* algos must
> match cipher and MAC in order as well. It's easy to detect, if there
> is a mismatch between cipher and hmac.

-1

That has the nasty side effect of specifying Cipher/MAC policy to server
operators.