Rekey regression test: How is GCM magical?

Christian Weisgerber naddy at mips.inka.de
Sun Nov 17 03:43:19 EST 2013


Revision 1.10 of regress/usr.bin/ssh/rekey.sh has added this:

# GCM is magical so test with all KexAlgorithms
[...]

How is GCM magical?
Is chacha20-poly1305 equally magical and needs testing with all
KexAlgorithms as well?

(chacha20-poly1305 doesn't work with diffie-hellman-group1-sha1
because the latter can't provide the required 512 bits of key
material.)

-- 
Christian "naddy" Weisgerber                          naddy at mips.inka.de


More information about the openssh-unix-dev mailing list