Terrapin Attack for prefix truncation in SSH

Re:Terrapin Attack for prefix truncation in SSH by tptacek on Monday December 18, 2023 @04:16PM (#38688419)

The MDC thing has nothing to do with you. It's a perennial complaint among cryptographers about how PGP's design has escaped modernity. It's weird that you think HN is somehow the center of that phenomenon.

[ Parent | on HN ]

Re:Terrapin Attack for prefix truncation in SSH by upofadown on Monday December 18, 2023 @06:38PM (#38689906)

Then what does the MDC thing have to do with any of this?

[ Parent | on HN ]

Re:Terrapin Attack for prefix truncation in SSH by tptacek on Monday December 18, 2023 @08:22PM (#38690640)

It's an archaic premodern construction that cryptographers hate but that hasn't been demolished in a paper yet, in part because lots of people use SSH and very few people seriously use PGP. I'm confused, though: what would it have to do with you?

[ Parent | on HN ]

Re:Terrapin Attack for prefix truncation in SSH by upofadown on Monday December 18, 2023 @09:40PM (#38691141)

>...hasn't been demolished in a paper yet...

OpenPGP gets a fair amount of academic scrutiny. What is going to change that would allow someone to find a weakness in OCFB-MDC at this late date?

Also, why do you care so much that you bring it up out of nowhere in unrelated contexts?

[ Parent | on HN ]

Re:Terrapin Attack for prefix truncation in SSH by tptacek on Monday December 18, 2023 @10:18PM (#38691385)

Not really, no, it doesn't.

I don't understand your second question.

[ Parent | on HN ]