diff options
| author | Alex Wilson <[email protected]> | 2014-06-10 15:39:01 +1000 |
|---|---|---|
| committer | Alex Wilson <[email protected]> | 2014-06-10 15:39:01 +1000 |
| commit | 8f4da4c7695bf00ebf94e111b0c7d08baa32405a (patch) | |
| tree | 4985e9d58e5fbcd54c02bd4539a15df88258b324 /bootstrap | |
| parent | c9e36ab16034bb7fe71f772df6bba22070976bbf (diff) | |
| download | otp-8f4da4c7695bf00ebf94e111b0c7d08baa32405a.tar.gz otp-8f4da4c7695bf00ebf94e111b0c7d08baa32405a.tar.bz2 otp-8f4da4c7695bf00ebf94e111b0c7d08baa32405a.zip | |
SSH: add support for aes128-ctr and hmac-sha2-256
This cipher and hmac are RECOMMENDED as per RFC4344 and
RFC6668. RFC4344 notes that aes128-ctr is likely to be
promoted to REQUIRED in the near future.
Some distros of Linux and Illumos are already shipping with
aes128-cbc and 3des-cbc disabled by default due to security
concerns around chosen-plaintext attacks and other information
leaks. Without this patch, OTP SSH cannot connect to these
SSH servers in their default configuration.
Diffstat (limited to 'bootstrap')
0 files changed, 0 insertions, 0 deletions