Weekly Edition
Return to the Security page
| |||||||||||||
|
| |||||||||||||
Paper on SSH insecurity
From: "Tadayoshi Kohno" <tkohno@cs.ucsd.edu>
As Wei Dai recently pointed out, the current SSH protocol is insecure (because of problems with way CBC mode is used). In the paper http://eprint.iacr.org/2002/078/ Mihir Bellare, Chanathip Namprempre, and I show how to provably fix the SSH protocol. We have placed a summary of our recommendations at http://www-cse.ucsd.edu/users/tkohno/papers/SSH/sshadvice.html We hope that our provable security results will be of use to the IETF SSH Working Group. Yoshi (Log in to post comments)
Paper on SSH insecurity Posted Jun 22, 2002 12:38 UTC (Sat) by DeletedUser2205 ((unknown), #2205) [Link] There are 2 versions of the SSH protocol.Does this apply to SSHv1 or SSHv2 or both ?
|
|
||||||||||||