News for hackers. Stuff that matters.

A comment on Terrapin Attack for prefix truncation in SSH.

Re:Terrapin Attack for prefix truncation in SSH by notherhack on Monday December 18, 2023 @05:58PM (#38689593)
Netgate is providing a pfsense patch that disables ETM MACs but leaves chacha20 enabled. The vuln announcement is arguably vague because of the way is uses "and" and "or" but from the vuln scanner source chacha20 is clearly not okay even without ETM.

    https://forum.netgate.com/topic/184941/terrapin-ssh-attack
Shame they won't let me post a reply to let them know.
[ Parent | on HN ]
Re:Terrapin Attack for prefix truncation in SSH by Skrillor on Monday December 18, 2023 @07:25PM (#38690260)
Yes, I commented this over at netgate as well. If you'd like to work around the vulnerability, you will need to disable both, [email protected] encryption and [email protected] MACs. Keeping either of them enabled still allows for exploitation.
[ Parent | on HN ]