[Cryptography] [FORGED] Re: Oracle discovers the 1990s in crypto

Peter Gutmann pgut001 at cs.auckland.ac.nz
Sun Jan 22 21:35:58 EST 2017


Harald Koch <chk at pobox.com> writes:

>SSH is also going through this problem, as the default implementations first 
>disable and then remove older ciphers that are often the only ones implemented 
>on older systems (like the aforementioned disk arrays :). 

That also cuts both ways, some distros are shipping versions of OpenSSH 
configured to use a bunch of fashion-statement algorithms 
(chacha20-poly1305 at openssh.com and the like) but with the mandatory-to-
implement ones disabled... you can imagine what that does for 
interoperability with standard implementations.

Peter.


More information about the cryptography mailing list