[Bug 3696] ssh client does not respect the "-oMACs" flag
bugzilla-daemon at mindrot.org
bugzilla-daemon at mindrot.org
Wed Sep 16 15:29:06 AEST 2026
https://bugzilla.mindrot.org/show_bug.cgi?id=3696
Damien Miller <djm at mindrot.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |WORKSFORME
Status|NEW |RESOLVED
CC| |djm at mindrot.org
--- Comment #2 from Damien Miller <djm at mindrot.org> ---
Yes, this is a natural consequence of how AEAD ciphers (AES GCM or
Chacha/poly) are negotiated. They don't use a separate MAC so
negotiation of this parameter is ignored.
See:
https://datatracker.ietf.org/doc/draft-miller-sshm-aes-gcm/
https://datatracker.ietf.org/doc/draft-ietf-sshm-chacha20-poly1305/
--
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
More information about the openssh-bugs
mailing list