Re: [Cfrg] Call for Review on draft-kanno-secsh-camellia-00

[Simon Wilkinson <sxw%inf.ed.ac.uk@localhost>]

On 26 Apr 2010, at 22:19, Henry B. Hotz wrote:

> I also note that if ssh implements gssapi-keyex then ssh can use Camellia if Kerberos implements Camellia.  In other words, this draft is not strictly necessary (though it may be desirable).

gssapi-keyex only authenticates the initial connection handshake. It isn't involved at all in encryption of the ssh session.

S.