Re: applying AES-GCM to secure shell: proposed "tweak"

[Nicolas Williams <Nicolas.Williams%sun.com@localhost>]

On Thu, Apr 16, 2009 at 08:30:18PM +1000, Damien Miller wrote:
> On Thu, 16 Apr 2009, Peter Gutmann wrote:
> 
> > >http://tools.ietf.org/html/draft-miller-secsh-compression-delayed-00
> > 
> > Hmm, why not just apply it only to the data packets? The random
> > non-data- related messages exchanged (again, mostly high-entropy
> > binary blobs) aren't going to compress much (if at all), and will only
> > have the effect of messing up the compression by polluting the source
> > statistics. With data-payload-only compression it'd be much cleaner
> > and easier to handle, just run the compressor over the data-packet
> > payload and leave everything else as is.
> 
> Since we are expressing wishes for the transport protocol, mine is a
> per-packet compression flag :)

Oh!  I agree, that'd be nice.