[Bug 877] ssh 3.8.1p1 client cannot disable encryption with "-c none"

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Mon Jun 7 10:22:46 EST 2004


http://bugzilla.mindrot.org/show_bug.cgi?id=877





------- Additional Comments From djm at mindrot.org  2004-06-07 10:22 -------
You aren't listening. The symmetric crypto is not the bottleneck:

type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
rc4              72846.67k    82979.15k    87698.53k    91231.05k    88004.03k
hmac(md5)         2272.39k     8280.19k    28745.41k    71355.13k   120523.95k

See: the per-packet MAC is an order of magnitude slower than the symmetric crypto.
The MAC is always included, even with Cipher=none.

There is no point in supporting Cipher=none if all you are doing is introducing
new risks without improving performance.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




More information about the openssh-bugs mailing list