IETF-SSH archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Terrapin

To: Simon Tatham <anakin%pobox.com@localhost>, ietf-ssh <ietf-ssh%netbsd.org@localhost>
Subject: Re: Terrapin
From: Peter Gutmann <pgut001%cs.auckland.ac.nz@localhost>
Date: Thu, 28 Dec 2023 14:53:02 +0000

Simon Tatham <anakin%pobox.com@localhost> writes:

>I certainly agree that it would be nice not to send packet lengths in the
>clear.

Why *does* EtM-OpenSSH send packet lengths in the clear?  I had to add a pile
of special-snowflake processing for that, no other mode needs this meaning
there's extra code paths to test and potentially have vulnerabilities in.

Peter.

Follow-Ups:
- Re: Terrapin
  - From: Alexandre Becoulet

References:
- Re: Terrapin
  - From: Mouse
- Re: Terrapin
  - From: Simon Tatham

Prev by Date: Re: Terrapin
Next by Date: Re: Terrapin
Previous by Thread: Re: Terrapin
Next by Thread: Re: Terrapin
Indexes:

Home | Main Index | Thread Index | Old Index