Re: AEAD in ssh

[nisse%lysator.liu.se@localhost (Niels Möller)]

Watson Ladd <watsonbladd%gmail.com@localhost> writes:

> There already is a widely used SSH implementation with AEAD support. Copy
> what they do.

I'm aware of three different ways:

1. aes-gcm, according to 5647, implemented by some.

2. aes-gcm, according to openssh (with simpler negotiation rules, which
   I *do* copy).

3. chacha20-poly1305 according to openssh.

I think the time is right to try to document a recommended way to do it.

Regards,
/Niels

-- 
Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26.
Internet email is subject to wholesale government surveillance.