[Bug 2023] New: MACs hmac-sha2-256-96 and hmac-sha2-512-96 rejected from new RFC

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Thu Jun 28 07:35:58 EST 2012


https://bugzilla.mindrot.org/show_bug.cgi?id=2023

             Bug #: 2023
           Summary: MACs hmac-sha2-256-96 and hmac-sha2-512-96 rejected
                    from new RFC
    Classification: Unclassified
           Product: Portable OpenSSH
           Version: 6.0p1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: sshd
        AssignedTo: unassigned-bugs at mindrot.org
        ReportedBy: mdb at juniper.net


Created attachment 2169
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2169
Patches to OpenSSH and OpenSSH portable to remove hmac-sha2-*-96 MACs

draft-dbider-sha2-mac-for-ssh-06.txt (soon to be RFC 6668) does not
include the hmac-sha2-256-96 and hmac-sha2-512-96 variants. The IESG
felt they were not appropriate.

As they are not registered names, it is neeful to either remove them,
or add @openssh.com to them. I suggest removal is the better way to go.

See also http://www.iana.org/assignments/ssh-parameters for the
officially registered MAC Algorithm Names.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list