Re: Terrapin

[Peter Gutmann <pgut001%cs.auckland.ac.nz@localhost>]

Damien Miller <djm%mindrot.org@localhost> writes:

>OpenSSH has never disabled support for non-EtM MACs and I'm not aware of any
>major distributions that have configured it to do so either.

I don't know what or who done it, but something or someone has disabled MTI
algorithms because I fingerprint the affected versions in order to provide
better diagnostics to users:

	OpenSSH:

		Doesn't support MTI encryption algorithms as of 7.4 or 7.6 (the
		release notes are vague on when they were removed from client vs.
		server, in some cases it's been seen as early as 7.1).

Peter.