CTR mode

Aris Adamantiadis aris at 0xbadc0de.be
Thu Apr 3 22:00:14 EST 2014


FYI, Openssl 0.9.7<= x <0.9.7c implement is but the implementation was
broken. It gave me my share of headaches on a particular version of
CentOS/RHEL 4.8 that was using 0.9.7a.

More details on https://blog.0xbadc0de.be/archives/15


Aris

Le 31/03/14 18:11, mancha a écrit :
> On Mon, Mar 31, 2014 at 08:40:26AM -0700, no_spam_98 at yahoo.com
> wrote:
>> OpenSSH uses its own CTR mode implementation, correct?  I seem
>> to recall some discussion about why it hasn't/won't switch over
>> to using OpenSSL's implementation, but I can't find the thread
>> anymore.
>> 
>> So... why doesn't OpenSSH use OpenSSL's CTR mode implementation?
> 
> I believe as of 6.2, OpenSSH defaults to using OpenSSL's
> EVP_aes_*_ctr.
> 
> I'm unaware of the history (hopefully one of the devs can jump in
> and help us there). What I do know is OpenSSL introduced AES-CTR
> support with 0.9.7.
> 
> --mancha
> 
> 
> 
> _______________________________________________ openssh-unix-dev
> mailing list openssh-unix-dev at mindrot.org 
> https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
> 


More information about the openssh-unix-dev mailing list