LWN.net Logo

if CPU time is the bottleneck ...

if CPU time is the bottleneck ...

Posted Feb 13, 2008 18:56 UTC (Wed) by tialaramex (subscriber, #21167)
In reply to: if CPU time is the bottleneck ... by JoeBuck
Parent article: Multi-threaded OpenSSH

Triple DES aka 3DES is only the default for SSH protocol version 1. You should not still be
using version 1 unless you are somehow unable to upgrade (e.g. device is physically
inaccessible, and has no firmware upgrade capability). Version 2 fixes important design
mistakes which have potential security implications.

When using version 2 clients and servers do negotiate, and the default between two OpenSSH
implementations is AES. AES was chosen because it is standard, and it became standard because
it is fast yet strong - Rijndael was the product of an experienced cryptographic team whose
earlier ciphers had proved well designed. During the main AES process all the participating
teams did extensive cryptanalysis of their own and each others ciphers, no serious problems
were identified in any cipher. Rijndael was eventually chosen over Twofish (a blowfish
successor) and three other contenders to become AES.

Blowfish is probably (I haven't tested) faster than AES, at least on some hardware, but not
enough to justify the small yet not at all imaginary uncertainty concerning its strength. Why
risk using something other than AES if you're going to bother using all those CPU cycles to
encrypt something at all ?


(Log in to post comments)

if CPU time is the bottleneck ...

Posted Feb 13, 2008 20:01 UTC (Wed) by jengelh (subscriber, #33263) [Link]

“If we all act the same, we be predictable.”

Variety is good :-)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds
Powered by Rackspace Managed Hosting.