The default OpenSSH key encryption is worse than plaintext

Re:The default OpenSSH key encryption is worse than plaintext by tedunangst on Friday August 03, 2018 @05:17PM (#17683704)

It has a time space difficulty curve that's more complex, but some people like that. I will stipulate scrypt is "better" if I don't have to argue about it. :)

[ Parent | on HN ]

Re:The default OpenSSH key encryption is worse than plaintext by willvarfar on Saturday August 04, 2018 @04:40AM (#17685965)

As an aside about scrypt since I saw it mentioned here:

How does scrypt fair against the recent TLBleed etc? Iirc intels claim was that TLBleed only affected poorly implemented crypto. But is not the memory access pattern of scrypt vulnerable to TLBleed and hard to make constant access?

[ Parent | on HN ]

Re:The default OpenSSH key encryption is worse than plaintext by viraptor on Saturday August 04, 2018 @06:56AM (#17686325)

OT: This is why I still come to HN. At some point the top comment chain is by tptacek (Matasano), cperciva (Tarsnap founder), lvh (Latacora), tedunangst (OpenBSD dev), willvarfar (Mill CPU). And that's a great thread!

[ Parent | on HN ]

Re:The default OpenSSH key encryption is worse than plaintext by tptacek on Saturday August 04, 2018 @04:24PM (#17688306)

LVH and I are Latacora. Matasano is long gone; our joking nickname for Latacora is Matwosano.

[ Parent | on HN ]

Re:The default OpenSSH key encryption is worse than plaintext by viraptor on Saturday August 04, 2018 @05:40PM (#17688546)

Thanks. I'll have to update my tags.

[ Parent | on HN ]

Re:The default OpenSSH key encryption is worse than plaintext by cperciva on Saturday August 04, 2018 @02:20PM (#17687896)

Kind of. If you can sniff the memory access pattern of scrypt, its strength drops to being the same as bcrypt.

[ Parent | on HN ]