[Bug 1340] Support for Camellia block cipher to OpenSSH-portable.

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Fri Nov 30 20:31:31 EST 2007


https://bugzilla.mindrot.org/show_bug.cgi?id=1340


Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at zip.com.au




--- Comment #2 from Darren Tucker <dtucker at zip.com.au>  2007-11-30 20:31:28 ---
What is the reason another cipher is needed?  Is it faster or stronger
than the existing ciphers?  What advantage does it provide to offset
the risk of additional code (which is exposed to unauthenticated
users)?

Regarding the patch itself:

 * it makes the camellia cipher mandatory for the software to build.  A
considerable effort has been made to make openssh work with older
versions of the openssl library and this is negated by making camellia
mandatory.

 * you use the standard namespace for the cipher, and the cipher is not
listed in either RFC4253 or RFC4344.  Non-standard ciphers must use the
vendor extension mechanism (ie ciphername at yourdomain.com).

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list