News for hackers. Stuff that matters.

A comment on Terrapin Attack for prefix truncation in SSH. Parent comment

Re:Terrapin Attack for prefix truncation in SSH by upofadown on Monday December 18, 2023 @06:38PM (#38689906)
Then what does the MDC thing have to do with any of this?
[ Parent | on HN ]
Re:Terrapin Attack for prefix truncation in SSH by tptacek on Monday December 18, 2023 @08:22PM (#38690640)
It's an archaic premodern construction that cryptographers hate but that hasn't been demolished in a paper yet, in part because lots of people use SSH and very few people seriously use PGP. I'm confused, though: what would it have to do with you?
[ Parent | on HN ]
Re:Terrapin Attack for prefix truncation in SSH by upofadown on Monday December 18, 2023 @09:40PM (#38691141)
>...hasn't been demolished in a paper yet...

OpenPGP gets a fair amount of academic scrutiny. What is going to change that would allow someone to find a weakness in OCFB-MDC at this late date?

Also, why do you care so much that you bring it up out of nowhere in unrelated contexts?

[ Parent | on HN ]
Re:Terrapin Attack for prefix truncation in SSH by tptacek on Monday December 18, 2023 @10:18PM (#38691385)
Not really, no, it doesn't.

I don't understand your second question.

[ Parent | on HN ]