sftp/scp performance testing

Markus Friedl markus at openbsd.org
Tue Jan 8 10:11:51 EST 2002


On Mon, Jan 07, 2002 at 12:03:55PM -0800, Dan Kaminsky wrote:
> What should make a difference is whether the SSH1 or SSH2 protocols are
> used -- SSH1 implicitly authenticates packets,

that's not true. SSH1 does not really authenticate packets,
it just uses CRC, while SSH2 uses a true MAC (e.g. hmac-md5
or hmac-sha1).

> for what cannot be decrypted
> cannot be modified, while SSH2 uses a separate layer to guarantee that
> packets are not modified in transit.

-m



More information about the openssh-unix-dev mailing list