encrypt authentication credentials with payload in the clear?

Markus Friedl markus at openbsd.org
Sun Mar 2 01:09:01 EST 2003


On Sat, Mar 01, 2003 at 07:25:23AM -0600, Scott Bolte wrote:
> 	Is it possible to use encryption only for authenticate and
> 	then switch to no encryption? I've looked at the code for
> 	OpenSSH 3.5p1, cipher.c, and it looks like the answer is
> 	no, at least for protocol 1. However, I cannot tell if that
> 	is a deliberate design limitation of the implementation or
> 	if it is inherent in ssh protocol 2.

you could hack openssh to do rekeying for none-encryption.

would be about ~20 lines of code.




More information about the openssh-unix-dev mailing list