Re: OpenSSH and SSHv2

[Charles M. Hannum]

"Robert O'Callahan" <[EMAIL PROTECTED]> writes:

> However, there are some real issues with 1.x:
> [...]

I think you missed what is perhaps the biggest one.  It uses 3DES in
what Applied Crypto refers to as `inner feedback' mode.  This is
significantly weaker than `outer feedback' mode.  (I may have
Schneier's terminology switched there.  The point being that SSH codes
3DES as effectively 3 independent passes through 1DES.)