From brian at minton.name  Thu Dec 11 16:31:01 2008
From: brian at minton.name (Brian Minton)
Date: Thu, 11 Dec 2008 16:31:01 -0500
Subject: [pssh-users] CPNI-957037
Message-ID: <81aa6b5a0812111331l372a7c60g1167f5e4ea081a43@mail.gmail.com>

Has anyone looked at the code to see how hard it would be to implement
aes128-ctr mode?  Since this
<http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt>announcement
came out, I have switched my server to use counter mode, which is not
vulnerable.  I may look at the code and see if it is hard, and try to hack
it myself, but I was just wondering if anyone had already done something
like this.

thanks,
Brian
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://six.pairlist.net/pipermail/pssh-users/attachments/20081211/760bf390/attachment.html>

From darkuncle at gmail.com  Mon Dec 15 19:14:07 2008
From: darkuncle at gmail.com (Scott Francis)
Date: Mon, 15 Dec 2008 16:14:07 -0800
Subject: [pssh-users] CPNI-957037
In-Reply-To: <81aa6b5a0812111331l372a7c60g1167f5e4ea081a43@mail.gmail.com>
References: <81aa6b5a0812111331l372a7c60g1167f5e4ea081a43@mail.gmail.com>
Message-ID: <171423de0812151614s167ada4j9b97aa64e410bf01@mail.gmail.com>

see also: http://www.openssh.com/txt/cbc.adv

On Thu, Dec 11, 2008 at 1:31 PM, Brian Minton <brian at minton.name> wrote:
> Has anyone looked at the code to see how hard it would be to implement
> aes128-ctr mode?  Since this announcement came out, I have switched my
> server to use counter mode, which is not vulnerable.  I may look at the code
> and see if it is hard, and try to hack it myself, but I was just wondering
> if anyone had already done something like this.
>
> thanks,
> Brian
>
> _______________________________________________
> pssh-users mailing list
> pssh-users at sealiesoftware.com
> http://six.pairlist.net/mailman/listinfo/pssh-users
>
>



-- 
darkuncle@{gmail.com,darkuncle.net} || 0x5537F527
  http://darkuncle.net/pubkey.asc for public key