Slow connection performance with ssh2

Markus Friedl markus at openbsd.org
Tue Nov 6 00:03:46 EST 2001


On Mon, Nov 05, 2001 at 08:49:45AM +1100, Damien Miller wrote:
> On Sun, 4 Nov 2001 mouring at etoh.eviladmin.org wrote:
> 
> > It would be intersting to benchmark SSH Corp and vshell on slow boxes to
> > see where we stand, but I suspect they will be the same or we will be
> > slightly faster. (We do have the best crypto people in OpenBSD, right
> > Theo? =)
> 
> We will be slower than some other implementations because we support
> draft-ietf-secsh-dh-group-exchange-01.txt, which requires a fair bit 
> of computation.
> 
> You can trade connect speed for security by disabling this - delete
> or rename $sysconfdir/{primes,moduli}

i don't think dh-group-exchange causes more computation.
it adds one additional round-trip. hm, ok, if a larger group
is chosen, the computation time increases.

-m



More information about the openssh-unix-dev mailing list