IETF Logo Mail Archive

Re: DH group exchange (Re: SSH key algorithm updates)

Matt Johnston <matt@ucc.asn.au> Fri, 11 December 2015 15:55 UTC

Return-Path: <bounces-ietf-ssh-owner-secsh-tyoxbijeg7-archive=lists.ietf.org@NetBSD.org>
X-Original-To: ietfarch-secsh-tyoxbijeg7-archive@ietfa.amsl.com
Delivered-To: ietfarch-secsh-tyoxbijeg7-archive@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE7F41B2B32 for <ietfarch-secsh-tyoxbijeg7-archive@ietfa.amsl.com>; Fri, 11 Dec 2015 07:55:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.31
X-Spam-Level:
X-Spam-Status: No, score=-1.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_21=0.6, T_RP_MATCHES_RCVD=-0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uKUsR_gl6w3g for <ietfarch-secsh-tyoxbijeg7-archive@ietfa.amsl.com>; Fri, 11 Dec 2015 07:55:43 -0800 (PST)
Received: from mail.netbsd.org (mail.NetBSD.org [199.233.217.200]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 725681B2AC8 for <secsh-tyoxbijeg7-archive@lists.ietf.org>; Fri, 11 Dec 2015 07:55:43 -0800 (PST)
Received: by mail.netbsd.org (Postfix, from userid 605) id B1F7085EDD; Fri, 11 Dec 2015 15:55:42 +0000 (UTC)
Delivered-To: ietf-ssh@netbsd.org
Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id B8C9485E5E for <ietf-ssh@netbsd.org>; Fri, 11 Dec 2015 15:55:40 +0000 (UTC)
X-Virus-Scanned: amavisd-new at netbsd.org
Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id YULD_sjaRfsr for <ietf-ssh@netbsd.org>; Fri, 11 Dec 2015 15:55:40 +0000 (UTC)
Received: from mail-ext-sout1.uwa.edu.au (mail-ext-sout1.uwa.edu.au [130.95.128.72]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.netbsd.org (Postfix) with ESMTPS id 927D485E59 for <ietf-ssh@netbsd.org>; Fri, 11 Dec 2015 15:55:39 +0000 (UTC)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A2CqBAAz2mpW/8+AX4JehA1ugmK8PSGFbgKBewEBAQEBAYELhDQBAQEDATo/BQsLDgouPBsGE4gnCA2+bQEBAQEBBQEBAQEBAQEYBIhlgm6EWYNNgRoFjiiISoU1iGx+hEWWcGOEETE0AYVWAQEB
X-IPAS-Result: A2CqBAAz2mpW/8+AX4JehA1ugmK8PSGFbgKBewEBAQEBAYELhDQBAQEDATo/BQsLDgouPBsGE4gnCA2+bQEBAQEBBQEBAQEBAQEYBIhlgm6EWYNNgRoFjiiISoU1iGx+hEWWcGOEETE0AYVWAQEB
X-IronPort-AV: E=Sophos;i="5.20,413,1444665600"; d="scan'208";a="187347000"
Received: from f5-new.net.uwa.edu.au (HELO mooneye.ucc.gu.uwa.edu.au) ([130.95.128.207]) by mail-ext-out1.uwa.edu.au with ESMTP/TLS/ADH-AES256-SHA; 11 Dec 2015 22:19:54 +0800
Received: from smtp by mooneye (authenticated submission) with ESMTPSA id 5849466001; Fri, 11 Dec 2015 22:19:54 +0800 (AWST)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 9.2 \(3112\))
Subject: Re: DH group exchange (Re: SSH key algorithm updates)
From: Matt Johnston <matt@ucc.asn.au>
In-Reply-To: <CALDDTe0B+Bf-3m2HTwweUUDnkkdOPacF0Lp9azCPjnwM5gX9Rw@mail.gmail.com>
Date: Fri, 11 Dec 2015 22:20:04 +0800
Cc: "Mark D. Baushke" <mdb@juniper.net>, =?utf-8?Q?Niels_M=C3=B6ller?= <nisse@lysator.liu.se>, Damien Miller <djm@mindrot.org>, Peter Gutmann <pgut001@cs.auckland.ac.nz>, denis bider <ietf-ssh3@denisbider.com>, Jeffrey Hutzelman <jhutz@cmu.edu>, "ietf-ssh@NetBSD.org" <ietf-ssh@netbsd.org>, "stephen.farrell@cs.tcd.ie" <stephen.farrell@cs.tcd.ie>, "jon@siliconcircus.com" <jon@siliconcircus.com>
Content-Transfer-Encoding: quoted-printable
Message-Id: <52B062CA-0159-4ED9-AF58-BBED122D6F09@ucc.asn.au>
References: <9A043F3CF02CD34C8E74AC1594475C73F4B5993D@uxcn10-5.UoA.auckland.ac.nz> <2096379125-720@skroderider.denisbider.com> <9A043F3CF02CD34C8E74AC1594475C73F4B599ED@uxcn10-5.UoA.auckland.ac.nz> <55190.1447001241@eng-mail01.juniper.net> <9A043F3CF02CD34C8E74AC1594475C73F4B5A9BC@uxcn10-5.UoA.auckland.ac.nz> <nnziyn2ft7.fsf@armitage.lysator.liu.se> <65113.1447107876@eng-mail01.juniper.net> <nn37we320r.fsf@armitage.lysator.liu.se> <alpine.BSO.2.20.1511101829460.8324@natsu.mindrot.org> <90378.1447145301@eng-mail01.juniper.net> <nnbnb11utb.fsf@armitage.lysator.liu.se> <41119.1447226323@eng-mail01.juniper.net> <nnfv0az4dl.fsf@armitage.lysator.liu.se> <67048.1447534953@eng-mail01.juniper.net> <nnpozbybp8.fsf@armitage.lysator.liu.se> <26466.1447573713@eng-mail01.juniper.net> <nnlh9zy912.fsf@armitage.lysator.liu.se> <29562.1449755093@eng-mail01.juniper.net> <nn37vamk6e.fsf@armitage.lysator.liu.se> <83020.1449762143@eng-mail01.juniper.net> <CALDDTe0B+Bf-3m2HTwweUUDnkkdOPacF0Lp9azCPjnwM5gX9R w@mail.gmail.com>
To: Darren Tucker <dtucker@zip.com.au>
X-Mailer: Apple Mail (2.3112)
Sender: ietf-ssh-owner@NetBSD.org
List-Id: ietf-ssh.NetBSD.org
Precedence: list

I've added preliminary diffie-hellman-group14-sha256 to Dropbear, https://secure.ucc.asn.au/hg/dropbear/rev/d2f9ef67af15

The OpenSSH patch seems to have problems, I've replied in bugzilla.

Cheers,
Matt

> On Fri 11/12/2015, at 12:34 pm, Darren Tucker <dtucker@zip.com.au> wrote:
> 
> On Fri, Dec 11, 2015 at 2:42 AM, Mark D. Baushke <mdb@juniper.net> wrote:
>> I have posted draft-baushke-ssh-dh-group-sha2-00
> 
> I've implemented this for OpenSSH (against -current, but the diff will
> also apply to 7.1p1 with some fuzz) if anyone would like to try it.
> Patch is at https://bugzilla.mindrot.org/show_bug.cgi?id=2515.  Please
> let me know if you have any comments or you can report success or
> failure with it.
> 
> Thanks.
> 
> -- 
> Darren Tucker (dtucker at zip.com.au)
> GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
>    Good judgement comes with experience. Unfortunately, the experience
> usually comes from bad judgement.
>

v2.8.7 | Report a Bug | By Email