News for hackers. Stuff that matters.

A comment on Terrapin Attack for prefix truncation in SSH. Parent comment

Re:Terrapin Attack for prefix truncation in SSH by Aloisius on Monday December 18, 2023 @03:31PM (#38687773)
What about aes-ctr?
[ Parent | on HN ]
Re:Terrapin Attack for prefix truncation in SSH by lambdafu on Monday December 18, 2023 @04:58PM (#38688941)
Depends a bit on the MAC. CTR-EtM is technically vulnerable (i.e. cryptographically broken), but due to key stream desynchronization the attack will quickly lead to application errors, defeating the attacker. See Sect. 4.3.3.
[ Parent | on HN ]