The default OpenSSH key encryption is worse than plaintext

Re:The default OpenSSH key encryption is worse than plaintext by lvh on Friday August 03, 2018 @07:18PM (#17684352)

Oxy is trying: https://github.com/oxy-secure/oxy

But it’s important to remember that SSH is a lot less fucked overall than the VPN situation was. People mostly grok SSH. SSH mostly doesn’t negotiate BF-CBC.

[ Parent | on HN ]

Re:The default OpenSSH key encryption is worse than plaintext by tptacek on Friday August 03, 2018 @07:31PM (#17684403)

I disagree! SSH is not great! Because it doesn't need to support every browser on the Internet, new crypto percolates through the ecosystem much faster than it does in TLS. But it's still a janky protocol with dumb options, and a Noise-based no-negotiation alternative that fulfilled the same interface would indeed be super useful.

[ Parent | on HN ]

Re:The default OpenSSH key encryption is worse than plaintext by lvh on Friday August 03, 2018 @07:48PM (#17684491)

I don’t think we actually disagree; I said “a lot less fucked” not “great” :) you can get real AEADs with Ed25529 in SSH easily; and some of the dumb options problems may still apply with Oxy, depending on what you’re taking about.

[ Parent | on HN ]