3des cipher and DH group size

Hubert Kario hkario at redhat.com
Tue Feb 18 00:30:16 EST 2014


----- Original Message -----
> From: "Damien Miller" <djm at mindrot.org>
> To: "Hubert Kario" <hkario at redhat.com>
> Cc: "Scott Neugroschl" <scott_n at xypro.com>, "mancha" <mancha1 at hush.com>, openssh-unix-dev at mindrot.org
> Sent: Saturday, 15 February, 2014 12:33:44 AM
> Subject: Re: 3des cipher and DH group size
> 
> On Fri, 14 Feb 2014, Hubert Kario wrote:
> 
> > > Also KexAlgorithms=diffie-hellman-group14-sha1
> > 
> > not supported by the server
> 
> you tried diffie-hellman-group1-sha1 too? It's mandated by the spec

It supported, but it is not secure.

-- 
Regards,
Hubert Kario
Quality Engineer, QE BaseOS Security team
http://wiki.brq.redhat.com/hkario
Email: hkario at redhat.com
Web: www.cz.redhat.com
Red Hat Czech s.r.o., Purkyňova 99/71, 612 45, Brno, Czech Republic


More information about the openssh-unix-dev mailing list