Re: applying AES-GCM to secure shell: proposed "tweak"

[Damien Miller <djm%mindrot.org@localhost>]

On Wed, 15 Apr 2009, der Mouse wrote:

> >  - negotiation of compression only post-authentication (a very useful
> >    and awesome OpenSSH extension)
> 
> (a) What's so useful about it?  (I don't offhand see any reason why it
> would be better than starting compression at kex time, and I'm
> wondering what I've missed.)

Avoiding the attack surface presented by compression libraries before
authentication of the user.

> (b) Got a pointer to the spec?  I'd like to read up on it and see if I
> want to implement it.

http://tools.ietf.org/html/draft-miller-secsh-compression-delayed-00

-d