[Bug 3691] Connection to localhost succeeds with disabled MAC

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Fri May 17 14:59:55 AEST 2024


https://bugzilla.mindrot.org/show_bug.cgi?id=3691

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org
         Resolution|---                         |WORKSFORME
             Status|NEW                         |RESOLVED

--- Comment #1 from Damien Miller <djm at mindrot.org> ---
This is expected:

> debug1: kex: server->client cipher: aes128-gcm at openssh.com MAC: <implicit> compression: none
> debug1: kex: client->server cipher: aes128-gcm at openssh.com MAC: <implicit> compression: none

MACs are not used for AEAD ciphers like AES-GCM as these provide
message integrity in the cipher itself.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list