Re: applying AES-GCM to secure shell: proposed "tweak"

[Nicolas Williams <Nicolas.Williams%sun.com@localhost>]

On Wed, Apr 15, 2009 at 11:05:52PM +0200, Niels Möller wrote:
> der Mouse <mouse%Rodents-Montreal.ORG@localhost> writes:
> 
> >> It doesn't need to be ignored, but the order does matter.  AEAD-*
> >> algorithms must appear first in the order list.
> >
> > That's completely unextendable; what happens when another algorithm is
> > added that also "must appear first"?
> 
> Agreed. That's not acceptable.
> 
> And besides that, it should be possible to express old-fashioned
> preferences, like "I really like triple-DES, but if you don't support
> it, I'll go with AEAD as a fallback".

Right.  My proposal (MAC algs nego irrelvant when AEAD cipher chosen)
allows that.