News for hackers. Stuff that matters.

A comment on SSH Check – public SSH server testing tool.

Re:SSH Check – public SSH server testing tool by andreaso on Thursday June 15, 2017 @06:32AM (#14559173)
It appear to have problems with newer chiphers.

sshd[28670]: fatal: Unable to negotiate with 40.112.150.31 port 47286: no matching cipher found. Their offer: aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-ctr,3des-cbc,twofish256-ctr,twofish192-ctr,twofish128-ctr,twofish256-cbc,twofish192-cbc,twofish128-cbc,twofish-cbc [preauth]

[ Parent | on HN ]
Re:SSH Check – public SSH server testing tool by sajagi on Thursday June 15, 2017 @09:40AM (#14560225)
Hi andreaso, do you happen to have a list of encryption algs on your side? We don't support chacha20-poly1305 (yet) and afaik aes in gcm mode, but e.g. aes ctr are reliable so I find it strange these are not supported on your side.
[ Parent | on HN ]
Re:SSH Check – public SSH server testing tool by andreaso on Thursday June 15, 2017 @12:54PM (#14562098)
That sshd only supports the chacha20-poly1305 cipher.

Perfectly fine with that, since I'm the only one logging into that server.

[ Parent | on HN ]