News for hackers. Stuff that matters.

A comment on Terrapin Attack for prefix truncation in SSH. Parent comment

Re:Terrapin Attack for prefix truncation in SSH by lambdafu on Monday December 18, 2023 @01:49PM (#38686549)
ChaPoly was added in 2013, but the weird KEX is even older, dating back all the way to 1998 in SSHv2. And surprisingly, the attack only works with the "better" symmetric ciphers that do INT-CTXT instead of INT-PTXT.
[ Parent | on HN ]

There are no comments on this comment yet.