[Bug 3696] ssh client does not respect the "-oMACs" flag

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Wed Sep 16 15:29:06 AEST 2026


https://bugzilla.mindrot.org/show_bug.cgi?id=3696

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |WORKSFORME
             Status|NEW                         |RESOLVED
                 CC|                            |djm at mindrot.org

--- Comment #2 from Damien Miller <djm at mindrot.org> ---
Yes, this is a natural consequence of how AEAD ciphers (AES GCM or
Chacha/poly) are negotiated. They don't use a separate MAC so
negotiation of this parameter is ignored.

See:

https://datatracker.ietf.org/doc/draft-miller-sshm-aes-gcm/
https://datatracker.ietf.org/doc/draft-ietf-sshm-chacha20-poly1305/

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list